last executing test programs:

971.023808ms ago: executing program 0 (id=3525):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f0000000240)=@xdp={0x2c, 0x0, 0x0, 0x100000}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0x38}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="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", 0xfb}], 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1148}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000000c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112c5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x46ac0fd079242c24}], 0x1}, 0x0)
syz_emit_ethernet(0xa6, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78c000000008080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c40dd3be27df3e340623c8ca0a5c15b37adac15084dbaf636b41e5af18020056005ff9297d00001392000100"], 0x0)
sendmsg$inet(r4, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={<r6=>0x0, 0x64, &(0x7f00000019c0)=[@in6={0xa, 0x4e25, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}, @in6={0xa, 0x4e21, 0x4000, @loopback, 0x9}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x1000, @empty, 0x5}]}, &(0x7f00000002c0)=0x10)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r7, 0x541b, &(0x7f0000000000)={0x29, 0xabe, 0x8, 0xa, 0xffffff80})
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f0000000000)={0x1d, r9}, 0x10)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_EDIT(r10, 0x0, 0x483, &(0x7f0000001b80)={0xff, @local, 0x4e20, 0x2, 'wrr\x00', 0x29, 0x3, 0xc}, 0x2c)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000017c0)=0x1, 0x4)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001bc0)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], 0xce)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a40)='./cgroup.net/syz1\x00', 0x200002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280060027000000000080cc145f738d3f30b9885947b3864e1eb5bc1fe5bba2007b061e0dc61c"], 0x3c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x57, 0x57, 0x3, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xa, 0x4}, {0x2, 0x3}, {0x4, 0x2}, {0x3, 0x2}, {0x2, 0x2}, {0x10, 0x2}]}, @datasec={0xa, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x8, 0xcbd}], "cd99fe"}]}, {0x0, [0x0]}}, &(0x7f0000001880)=""/229, 0x73, 0xe5, 0x0, 0x3e, 0x10000}, 0x28)

629.881324ms ago: executing program 1 (id=3534):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24004811}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a0004af0180c20000020000"], 0x40}}, 0x4000840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="006b0100200068c76c0005000000010070cd5a38f07070"], 0x40}}, 0x0) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

611.130204ms ago: executing program 1 (id=3535):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
close(0x3)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r3, 0x80)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000006800000125bd7000fcdbdf25000003000200000014000880100001000000000000000000000000000c0002000000f60a00140006007f0000010000000000000000000000001c00020000000000050000000000000005000000000000000100000004000400"], 0x70}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)

328.859268ms ago: executing program 1 (id=3541):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
sendmsg$inet_sctp(r1, &(0x7f0000001700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000100)="dc", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bba7bc00001800000000000000840000000000000007000400fefffbff20"], 0x50}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', <r3=>0x0, 0x7, 0x20, 0x101, 0x1, {{0x13, 0x4, 0x1, 0x2, 0x4c, 0x64, 0x0, 0xff, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@end, @timestamp_addr={0x44, 0x1c, 0xbc, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@empty, 0x21da}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @lsrr={0x83, 0x1b, 0xf6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @local, @multicast2, @remote]}]}}}}})
r4 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=@deltclass={0x50c, 0x29, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xe}, {0xa, 0x7}, {0xb, 0xb}}, [@c_atm={{0x8}, {0x74, 0x2, [@TCA_ATM_HDR={0x30, 0x3, "31d031b6f5b713c2a0cfe9d4d134e093b5521e55d630d15f334c2a7383677500b72246b952ccbccfd146d669"}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0x38, 0x3, "ea230dcf7729d2ae8d47bdbabf50708ffab298a0b1c6f399c80103fca8913a6fc86b7093f486f2d3f878f11d9193e5da41828af5"}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_HDR={0xf, 0x3, "ee942c4831e5a267a0a545"}]}}, @c_cbq={{0x8}, {0x448, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0x9}, 0x5, 0xffffffff}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0xe}, 0x9, 0xffffffff}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7c, 0x676, 0x9, 0x2, 0x8001, 0x2, 0x4, 0x4, 0x9, 0x9, 0x7f, 0x0, 0x5b9b, 0x1ff, 0x0, 0x4, 0xc, 0x9, 0x1ff, 0x7fffffff, 0x80000000, 0xfffffff7, 0x80, 0x6, 0x80000000, 0x4, 0x51, 0x1, 0x8000, 0x9, 0xd, 0x200, 0xe, 0xf, 0x1, 0x3ff, 0xff, 0x54cb, 0x467, 0xfe1b, 0x2, 0x1, 0x9, 0x2, 0x5eb1, 0x4, 0xb, 0x2, 0x8, 0x7, 0x405c032d, 0x80000001, 0x2, 0xf920, 0xbb2, 0x400, 0x9, 0x1, 0xfbb7, 0x630b, 0x792b, 0x2, 0x869, 0x3, 0x36, 0x0, 0x1, 0x6, 0x5, 0x3, 0x0, 0x622, 0x8, 0x2, 0x7, 0xfffffffe, 0x7, 0x1, 0x7, 0x6, 0xfffffffa, 0xa8a, 0x2, 0x81, 0x0, 0x8001, 0xe68, 0x5, 0x4, 0xfff, 0x9, 0x6, 0xf, 0xe, 0x101, 0x9, 0x8, 0xfffffff2, 0xfffffff7, 0x3, 0x4, 0x9, 0x8, 0x3, 0xfffffffa, 0x81, 0x4, 0x5, 0x8, 0x6, 0xff, 0xd, 0x0, 0xed96, 0x4, 0x3, 0xfffffffb, 0xfffffff6, 0xffffffff, 0x8, 0x6, 0x7, 0xe, 0x5, 0x7, 0x1, 0x1000, 0x5, 0x8000, 0x8, 0x9, 0x70, 0xc, 0xa66, 0x2, 0x6, 0x100, 0x1000, 0x3, 0x7, 0xaa, 0x8, 0xf, 0x1, 0x0, 0x4, 0x0, 0x200, 0xffff, 0x0, 0xffffffff, 0x4dc0, 0xffffff20, 0x6, 0x400, 0x371, 0x4, 0x80000001, 0x6, 0x4, 0x5, 0xa, 0x4, 0xfffffff8, 0x9, 0x64ee, 0x7, 0x3, 0x2, 0x2, 0x7, 0x5, 0x8, 0x3, 0x759, 0x8, 0x401, 0x2, 0xab, 0x1a6f, 0x42e, 0xb, 0x6, 0xfffffffd, 0x7, 0x2, 0x4, 0xfc, 0x0, 0x63, 0x8000, 0x6, 0x682dfee2, 0x8000, 0x9, 0x7edefa9d, 0x3, 0x8, 0x5, 0x10001, 0x1400000, 0x5, 0x1000, 0x3, 0x5, 0x1, 0x7fff, 0x8, 0x9d0, 0x8, 0x40, 0x100, 0x4, 0x9, 0x8, 0x1, 0x2, 0x6, 0x7, 0x3, 0x9, 0x5, 0x1, 0x3, 0x9, 0x3, 0x7, 0x800, 0x9, 0x20, 0x10001, 0x0, 0x2, 0x2, 0x7, 0x89c, 0xcd0, 0x8, 0x4, 0x2, 0x8001, 0x100, 0x5, 0x1, 0x7, 0x2, 0xe3, 0x9, 0x0, 0x7, 0x25, 0xea, 0x5bf, 0x4, 0x0, 0xc52]}, @TCA_CBQ_RATE={0x10, 0x5, {0xa, 0x1, 0x800, 0x8, 0xe, 0x400}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf8, 0x2, 0x9, 0x5, 0x3, 0x8}}]}}]}, 0x50c}, 0x1, 0x0, 0x0, 0x40800}, 0x4048050)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="810927bd7000fbdbdf253500000008000300", @ANYRES32=r7, @ANYBLOB="080006005050505050500000"], 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x2044840)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0x3, &(0x7f00000002c0)=0x10001, 0x4)

327.726294ms ago: executing program 2 (id=3542):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c280)={&(0x7f000000b300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f000000c240)={&(0x7f000000b340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x13c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xd6, 0x6, "9cf25839866efce2a275695fd32ba8a3b6b5ce0122a599aea77c124188e4cae3adb8432dac6877a27fff7dc0c824020f481c76a1adfda096126be52c0f2f4ea2c84fcc7badfda998ab388100e197dd869fa30fbed29e19b3cc047ba66da5a7f2496c983ba6223dbd9d9ab136114ff52cf16b7d76cfb2709e67870174bb39983620df2fc9a1e85ba758771d912b962cdc1b64adf1d14640b6a1821f9a41caa3b14c3e47b1287bfa2b92569041237cc0e318d3ae9967064f146738e4bf9409448ea62cef7e9634bf2d5d9efc0c35e3de498952"}]}, @NFT_MSG_DELOBJ={0x138, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xde, 0x8, "bf6c8c3cba57ab5720d0092dbab6b907d14b4e842debc4da4fa3d6edffa77f68528e69efb03a80583b6b411b9e68bd26efe42ee9661112dd6307ec58ec7f8dec341b1e8a016d6eb045d1b9ff6c75d981e775b2c695c9a90e49100f473a4730d75bad92798eb35616772e6a8ba2df8f1479bae280d95a80ee8ba85431c1afce761c78a5845a9402b377126334ce94b6122d6eccd840e72add60fcbe6d8dc7404abbbbacd89300ca046fef945c7d0fef98f29e67b3a76b30dcf2c3fc2f1f6cfb9ed14272f1459f17ab2450a7f70d40ad2ec7bcc39640e148db148f"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x9d0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x9bc, 0x3, 0x0, 0x1, [{0x544, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "a0c17e3db93c8b15a69b1368889b10695c32ed616e733b5542ab91cf181bbbd54a03f1cb1f319fc658b6d3dbfd89c52d1cc06cf7f3b7fdd65e0faff3dbdba280bef2fb0ae6e341167a421b6565da65978530b0b302ac98cdf476aea1accb6f06c102d03b804448478688"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x368, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x260, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x250, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x118, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "ffe3e425745c0ca667357ece09dabde8b6ce0bd99f1a5dfbbedaa729044ac25ba000f206c5a695f629fff5ba05e337cfb25893091d5594321b48f8a23926b0dc2f7f4ea000df474138db30a4e460dfdd2e87e681a8ec1ada22f9772bc25fc4d65a1719080a06f975793c3da5d62dad0011f855f60d46ed89a2c15df67f96f3f9f96b9b16bd8d3040cf452e26ce1be75ab551754b15d182d34296dc94a704843f344aeb48cef1032b46f5a2ffdafe7c91927455c050d0c0b6aa6095d329a0e7257c82a5fbb4adc5d59a7408edd44aac7ad51f51312769"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x15, 0x1, "d79f2a19f759d9f907975677e6388bcb92"}]}, @NFTA_BITWISE_MASK={0x8c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "f9ff0af7eb69c40752a2467121d8367c199e555c83ecf9f1db86c79884f2a2a412a4b3b7bc651280"}]}, @NFTA_BITWISE_MASK={0xa8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd, 0x1, "278cd0d590b705643b"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VALUE={0xd, 0x1, "915cb017d562c2540a"}]}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd7, 0x1, "d0760e2559edc53e3ff2b1eed909a3a12b760eaf1e656d0cc29ce49bb6a6e602f866cedf3d76dbc01bbfbc485bd6bc1e5ea80990818db6e90856922c8e110fcc882160f2c90dceceac992f42e6696c7e183b4fcbd9aa325f362283546383c6eeb949a4ac8063d10bbaf36cf6bdf2dfb192ba2654f59550c2620e7fd076d25c0013705d775cc3d9bb3fb7f09d972525ba92090d8ebfe03b08e87a2df101ace632d979755bbd730274d59fa311a0970f0656745b29c6d2f694bd1bba3aef5fade607c7be2729dd805aa0ae10ae1ec7378c560f0c"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x18}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x454, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x84b}, @NFTA_SET_ELEM_DATA={0x2b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "2a8ca179cd4a71d7545b888a6f09c09eb35d7723d8c51b665b39c54484aaacd78c42c31bf9c7938296b6f7f6bd69dfc2a7d8fd0a1c8b820aaea0508f0ab05647d3035c21d6631989b245874843b8314213dfc2099166be3fc652e30ad20bd448643629a9e44622076e7a26a23a1902d3ae6b9b5a6ffaf161a78b6c4de2d6cb25de71443e9d7d6073070d193b15b2d1dd4f67e77b7818977f906d257332c95e5485d05472db622ca042a0c8dcbe7ed2ff5210aab78e8f79aceda774240634ce42efc31162c3ee6b601b8b13bc97"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "3ea4b5fb4a32791f500c1c3e9053d7ee1203ca6938a8d477cc604f4212d97fab1e5fc107a481fa856cf24cff0b76cf84b1e13fbf87774a1fc8cafd6b2a992e9a4e93cf004258177e25f36d339e0740d097a2ee955221eeeb90783562176c142dadf90ff68f8b35dcdf0258a32067d626d39a28a07b97cf69c535bdeb6bd04157f27417e9e4a9a6b087659561e2d5c2a21b05111ba8faf6eddac6c995d87d24ffc9590ae38130a5cbd22924736612737133f6b7fcf1a3917467bd6ecae5a7ee3c5fb3b5669b4ee4b429"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8a, 0x1, "f25c964a5289d0d7687a956d30ec2a53cd35ed8b3d36bc82b2b0a0a1ecca063715c27cd7196267d2aef6697e426b57e593e221d1f23567e6fddcfb473c7189b92014ce030dd286d8eb8a806edb8c96f905d83d94db40361be7d0779fb177e93c9ed3fa0402da3bb8a88d9d6ae4a9b295e701e9781724f22a78045ce18c9feef0583add887a88"}, @NFTA_DATA_VALUE={0x3b, 0x1, "0d6922c5749ce8fa59bc89911e5ee47692109e33c808f6524c0592c5a6f39400ed848ac1b63846ee4c55608d595f612b3801ba88d3263f"}]}, @NFTA_SET_ELEM_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf, 0x1, "5bc467382ade30a7b9e46f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x48, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xc94}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xfffe}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x200}, @NFTA_LOG_SNAPLEN={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}]}]}, @NFT_MSG_NEWTABLE={0x1d0, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xef, 0x6, "1a65d7dfee6086a24e781f5187d9eeab16715726083ff3d10c0a22a32c114d311ca0ad1cf3038de94067ecbd613ceb23b19f25a738a9b4ce48a911cc1900b3b194742026aa7a3e2d6d59482812d759d3470ccb0df302ed395e69154537a60f44d135c85b2db23579e443504b3af9bbfa0e7f47ade256e31990365a7c2899acdc58663a6bdc997d20a569f0bcd776d8bf4936903b7819bcfa3c5cdaebaaa18f577dc8b5f5d01c298d06d8f8d207b5fe485c30878f92a726ac7d67988509cda8c7bbebc83c1d89a1c89aabdca62b30de3450a081355d939780da8cdcc9265de4fa29ef8cb360c70e89a6c6b9"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x9d, 0x6, "04e5bfc6347de0876691980ff19a90a34616a0d118b3b4443917a20a1cf0df8b42468cb7b5e2a8d46fba374746e718d8508569516db3b78cec5a319a8c637bac551425098454e7b7678ce80a19cceba1ec0eacc512c95f74a0a00c2b659f6459f47f9d5d3035b47a3a6928bccfe27ffb6faffffeeb3e9349221917b149e31caae1fb139c59266325e282c89c139820c1ab2ad57cded2100ac7"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

327.258665ms ago: executing program 1 (id=3543):
r0 = socket(0x22, 0x2, 0x4)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "ac999713262bf40c", "a388898a32be315e125d700b69d3650bdd21c2593d2fc0deef31bb4d0f3d48c8", "42d54895", "b1a9db91d042c886"}, 0x38)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000004ddcd230955b276cf979fc058b4bd228e10bc720b94248546f2a31133aa32826706ad65c34ad00895dd304509b2cf611bb5fb1c6514d81b60b45a2d00427aaf30b1cc00add82cd041facc392c2f871e47765c7fabb53439765f32bc552b99f095bc82f1fcacfbfb82b9de484279170a5c2226fa8992ef6a25066d8e072fa5d17d7e2cfe5b15fdc81a9432e6f9182f5be6918f149b166387012f23c55ade32f5ef4ae1aebed863ec050550ca9e5c33a98", @ANYRES16=r2, @ANYBLOB="040027bd7000fddbdf2506000000140020000000000000000000000000000000000106001d000100000005002200010000000500220001000000050007000200000008000a0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x48810}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

326.567511ms ago: executing program 2 (id=3544):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r0, 0xfffff000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x700)

271.308849ms ago: executing program 1 (id=3545):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000002301040028bd7000ffdbdf251600000008004200", @ANYRES32=r0, @ANYBLOB="00507fbd730b45335bdc6403724f09faae30aae834657d5a64ac1c8531c149d1821c2992bd2a4f15a0fe12444c681fdd97ea8c785b822b2c8df670140164430fba299bc612a0757f584813aa071774b03158e4153edb80643f6ab4a0a9fb8cbe830954b6406985cdb72a8744d2e3dddb2521a3f7c34702cfbc17aa94d9e296f37713d8c0ca752ba8be6ff1fe3e870d1bc15fcb95f4a5693dff253b314fcc50a5a27d4fa2997f4094171a794155e3b1faecafdc77ebb631dfbf4cb2087e41269e2e278915d558"], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x22020600)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002000000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r2, 0x2, 0x0}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000001000000040000000500040001000000", @ANYRES8=r2, @ANYBLOB="0000b5d95c4900000000000001db2f4edb8ce349f752d426c4b13b44e6f56e0eec6195a30ad8cc3505cca2e51c6d0ea85a03987a5c9e5f382c20c5b1f48e9261638c8b253907705ffdefcb2e4372c23542437d0ca1c4358e047e493905ed1132f593b3ec27999dec9c75b1641f39d824d45f7a27da90705ac941e1ef2e542a662875bc9ca9a601059e979508cfbb", @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES64=r1], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
socket$packet(0x11, 0x2, 0x300)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r9=>0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000)=0xf3c, 0x4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e"], 0x6c}}, 0x0)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r8, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x2a, &(0x7f0000001700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev, {[@cipso={0x86, 0x6}]}}}}}}, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xb, '\x00', r13, r14, 0x1, 0x3, 0x1}, 0x50)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)

270.741637ms ago: executing program 2 (id=3546):
syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x1f}]}}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000000000001c0000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x0)

270.585514ms ago: executing program 2 (id=3547):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609", 0x2}], 0x1) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x0) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2c060000) (async)
unshare(0x2c020400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) (async, rerun: 64)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) (async)
pipe(&(0x7f0000002740)) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (rerun: 32)
r6 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) (async)
sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) (async, rerun: 32)
read$alg(r6, &(0x7f00000009c0)=""/75, 0x4b) (async, rerun: 32)
write$tun(r2, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYBLOB="41bf0359dedeb1c9a2af5381a5e01b0749a78b97f0047d6f64b166f1c4bdd43a558ca6ce35d71616429ddc0de0190ec6fa84fffe5aff637d197bfbc63394a4dc076cb4b826235b5953a530060efd532bd1f87fde32bd", @ANYRESHEX, @ANYRESHEX=r2, @ANYRESOCT=r2], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r7, 0x952de000) (rerun: 64)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

165.628342ms ago: executing program 1 (id=3548):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x80000005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
unshare(0x28000600)
recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xdc}, 0x2000)
socket$inet6(0xa, 0x805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000009b000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0xfeff, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket(0x11, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0)
socket$netlink(0x10, 0x3, 0x10)

165.442355ms ago: executing program 2 (id=3549):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000100)=0xf, 0x8) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1, @ANYBLOB='\x00'/20, @ANYRESOCT=r3, @ANYBLOB="ffffffffff1fffff08", @ANYRES16=r2], 0x1b)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

165.049501ms ago: executing program 2 (id=3550):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x80000005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
unshare(0x28000600)
recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xdc}, 0x2000)
r2 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x1f, 0x1f, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
socket$inet6(0xa, 0x805, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000009b000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0xfeff, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket(0x11, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0)
socket$netlink(0x10, 0x3, 0x10)

121.530473ms ago: executing program 0 (id=3551):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x17, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}, @cf={0x4, 0x6, {0x7, 0x1, 0x1}}, @tim={0x5, 0x3, {0x1, 0x46, 0x3e}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x400c844) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x8045) (async)
r4 = socket$igmp(0x2, 0x3, 0x2) (async)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0xd, 0x0, @vifc_lcl_ifindex=r5, @private}, 0x10) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
write(0xffffffffffffffff, &(0x7f0000000680), 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a40)={'team_slave_1\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x60, r10, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) (async)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000002180))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) (async)
socket$inet6(0xa, 0x6, 0x7) (async)
openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0)

71.45093ms ago: executing program 0 (id=3552):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7b18ae000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

71.026267ms ago: executing program 0 (id=3553):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001d80)={'erspan0\x00', &(0x7f0000001d40)=@ethtool_cmd={0x1f, 0x2, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1000]}}) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x25c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "91eebaf2c15001d816114a1ff7e6fcfc83975a3f8c645b53528ff037"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x421}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x16c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56ca50ec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0e0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x42009}, 0x40005)

1.33376ms ago: executing program 0 (id=3554):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r0, 0xfffff000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x900)

0s ago: executing program 0 (id=3555):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x7, 0x6}, {0x0, 0x2}, {0x10, 0xfff2}}}, 0x24}}, 0x40004)
socket$kcm(0x29, 0x2, 0x0)

kernel console output (not intermixed with test programs):

valid length.
[  105.108074][ T8993] netlink: 'syz.0.998': attribute type 21 has an invalid length.
[  105.308383][ T9022] netlink: 'syz.0.1008': attribute type 1 has an invalid length.
[  106.389943][ T9049] netlink: 'syz.2.1021': attribute type 2 has an invalid length.
[  106.437332][ T9051] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.453760][ T9053] syz.1.1023 (9053) used obsolete PPPIOCDETACH ioctl
[  106.522252][ T9051] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.570915][ T9057] 8021q: adding VLAN 0 to HW filter on device bond25
[  106.575650][ T9057] bond25: entered allmulticast mode
[  106.577614][ T9057] bond0: (slave bond25): Enslaving as an active interface with an up link
[  107.391492][ T9051] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.479877][ T9051] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.540399][ T9083] __nla_validate_parse: 14 callbacks suppressed
[  107.540414][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'.
[  107.557061][ T9083] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  107.559476][ T9083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.573597][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.582682][ T5887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.602056][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.614123][ T5872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.625526][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1029'.
[  107.697749][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1034'.
[  107.725739][ T9102] syzkaller1: entered promiscuous mode
[  107.727538][ T9102] syzkaller1: entered allmulticast mode
[  107.736574][ T9102] validate_nla: 2 callbacks suppressed
[  107.736585][ T9102] netlink: 'syz.2.1035': attribute type 10 has an invalid length.
[  107.742785][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'.
[  108.353808][ T9107] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000
[  108.360425][ T9107] netlink: 'syz.0.1037': attribute type 30 has an invalid length.
[  108.439715][  T789] IPVS: starting estimator thread 0...
[  108.443459][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.447780][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.460141][ T9113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.555245][ T9115] IPVS: using max 77 ests per chain, 184800 per kthread
[  108.589773][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.592391][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.879423][ T9141] netlink: 'syz.1.1050': attribute type 12 has an invalid length.
[  108.882087][ T9141] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1050'.
[  109.747459][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'.
[  109.752787][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'.
[  110.131679][ T9176] tap0: tun_chr_ioctl cmd 1074025677
[  110.133661][ T9176] tap0: linktype set to 0
[  110.373120][ T9182] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  110.698614][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'.
[  110.706709][ T9190] vlan3: entered promiscuous mode
[  110.802847][ T9195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.813138][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'.
[  110.826676][ T9194] tipc: Disabling bearer <eth:syzkaller0>
[  111.038362][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'.
[  111.041341][ T9202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.471259][ T9214] netlink: 'syz.1.1077': attribute type 2 has an invalid length.
[  111.683212][ T9219] netlink: 'syz.0.1079': attribute type 1 has an invalid length.
[  111.820344][ T9237] netlink: 'syz.2.1085': attribute type 1 has an invalid length.
[  111.836152][ T9237] bond19 (unregistering): Released all slaves
[  112.015339][ T9257] netlink: 'syz.0.1091': attribute type 2 has an invalid length.
[  112.163345][ T4499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.167907][ T4499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.319366][ T9290] sctp: [Deprecated]: syz.2.1102 (pid 9290) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.319366][ T9290] Use struct sctp_sack_info instead
[  112.434181][   T33] audit: type=1800 audit(1753626289.877:2): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1097" name=33FFFF dev="tmpfs" ino=1925 res=0 errno=0
[  112.517461][ T9326] netlink: 'syz.1.1112': attribute type 1 has an invalid length.
[  112.569411][ T9328] __nla_validate_parse: 13 callbacks suppressed
[  112.569424][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'.
[  112.588097][ T9339] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1115'.
[  112.594537][ T9339] netlink: 'syz.1.1115': attribute type 1 has an invalid length.
[  112.613345][ T9339] 8021q: adding VLAN 0 to HW filter on device bond26
[  112.633776][ T9339] bond26: (slave veth5): Enslaving as an active interface with a down link
[  112.639795][ T9342] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1116'.
[  112.648421][ T9339] vlan1: entered allmulticast mode
[  112.651106][ T9339] bond26: (slave vlan1): Opening slave failed
[  112.697819][ T9338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.706977][ T9346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1118'.
[  112.814650][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'.
[  112.828781][ T9352] netlink: 'syz.2.1121': attribute type 2 has an invalid length.
[  113.116003][ T9369] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1129'.
[  113.180158][ T9381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1134'.
[  113.183180][ T9381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1134'.
[  113.248588][ T9389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1137'.
[  113.287882][ T9394] netlink: 'syz.0.1140': attribute type 3 has an invalid length.
[  113.342497][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'.
[  113.399858][ T9405] netlink: 'syz.0.1144': attribute type 10 has an invalid length.
[  113.402598][ T9405] dummy0: left allmulticast mode
[  113.409391][ T9405] dummy0: entered promiscuous mode
[  113.412524][ T9405] team0: Port device dummy0 added
[  113.542855][ T9418] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  113.595472][ T9426] RDS: rds_bind could not find a transport for fe80::c, load rds_tcp or rds_rdma?
[  114.202175][ T9462] sch_tbf: burst 2 is lower than device bridge6 mtu (1514) !
[  114.322076][ T9470] netlink: 'syz.2.1164': attribute type 9 has an invalid length.
[  114.462213][ T9482] tc_dump_action: action bad kind
[  115.624716][ T1116] block nbd3: Possible stuck request ffff8880229b8000: control (read@0,1024B). Runtime 60 seconds
[  115.628137][ T1116] block nbd3: Possible stuck request ffff8880229b8200: control (read@1024,1024B). Runtime 60 seconds
[  115.631539][ T1116] block nbd3: Possible stuck request ffff8880229b8400: control (read@2048,1024B). Runtime 60 seconds
[  115.634524][   T61] block nbd2: Possible stuck request ffff888022980000: control (read@0,1024B). Runtime 60 seconds
[  115.635344][ T1116] block nbd3: Possible stuck request ffff8880229b8600: control (read@3072,1024B). Runtime 60 seconds
[  115.638462][   T61] block nbd2: Possible stuck request ffff888022980200: control (read@1024,1024B). Runtime 60 seconds
[  115.645666][   T61] block nbd2: Possible stuck request ffff888022980400: control (read@2048,1024B). Runtime 60 seconds
[  115.649315][   T61] block nbd2: Possible stuck request ffff888022980600: control (read@3072,1024B). Runtime 60 seconds
[  115.979419][ T9552] netlink: 'syz.0.1190': attribute type 1 has an invalid length.
[  115.982707][ T9552] NCSI netlink: No device for ifindex 813332851
[  116.037889][ T9557] netlink: 'syz.0.1192': attribute type 20 has an invalid length.
[  116.274485][   T61] block nbd4: Possible stuck request ffff8880229e8000: control (read@0,1024B). Runtime 60 seconds
[  116.278061][   T61] block nbd4: Possible stuck request ffff8880229e8200: control (read@1024,1024B). Runtime 60 seconds
[  116.281637][   T61] block nbd4: Possible stuck request ffff8880229e8400: control (read@2048,1024B). Runtime 60 seconds
[  116.285355][   T61] block nbd4: Possible stuck request ffff8880229e8600: control (read@3072,1024B). Runtime 60 seconds
[  116.547832][ T9598] netlink: 'syz.1.1207': attribute type 10 has an invalid length.
[  116.548550][ T9597] netlink: 'syz.1.1207': attribute type 10 has an invalid length.
[  116.550461][ T9598] team0: left allmulticast mode
[  116.559600][ T9598] team0: Cannot enslave team device to itself
[  116.564338][ T9597] team0: Cannot enslave team device to itself
[  117.768734][ T9669] __nla_validate_parse: 21 callbacks suppressed
[  117.768746][ T9669] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1232'.
[  117.826835][ T9680] veth1_to_bond: entered allmulticast mode
[  118.656933][ T9679] veth1_to_bond: left allmulticast mode
[  118.671202][ T9698] netlink: 'syz.1.1240': attribute type 7 has an invalid length.
[  118.673789][ T9698] netlink: 'syz.1.1240': attribute type 3 has an invalid length.
[  118.676826][ T9698] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1240'.
[  118.690526][ T9700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1241'.
[  118.809012][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'.
[  118.811923][ T9712] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  118.822860][ T9712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.941156][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'.
[  118.944341][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'.
[  118.946658][ T9741] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1256'.
[  118.947994][ T9733] netlink: 'syz.2.1254': attribute type 18 has an invalid length.
[  119.001475][ T9746] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  119.053562][ T9747] vti0: entered promiscuous mode
[  119.831374][ T9767] netlink: 'syz.1.1264': attribute type 13 has an invalid length.
[  119.836027][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1264'.
[  119.839898][ T9767] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  119.856417][ T9767] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  119.916457][ T9772] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1267'.
[  119.919639][ T9772] netlink: 'syz.0.1267': attribute type 3 has an invalid length.
[  119.999865][ T9784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.002577][ T9784] syzkaller0: entered promiscuous mode
[  120.005393][ T9784] syzkaller0: entered allmulticast mode
[  120.053789][ T9783] tipc: Disabling bearer <eth:syzkaller0>
[  120.173590][ T9798] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1274'.
[  120.229757][ T9803] netem: invalid attributes len -16
[  120.231888][ T9803] netem: change failed
[  120.431335][ T9818] macsec1: entered allmulticast mode
[  120.433242][ T9818] macsec0: entered allmulticast mode
[  120.785860][ T9830] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  120.937319][ T9836] netlink: 'syz.2.1288': attribute type 1 has an invalid length.
[  120.955623][ T9836] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  121.212630][ T9870] openvswitch: netlink: Duplicate or invalid key (type 0).
[  121.218419][ T9870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.249643][ T9872] netlink: 'syz.1.1297': attribute type 1 has an invalid length.
[  121.266986][ T9872] bond27: entered promiscuous mode
[  121.269266][ T9872] bond27: entered allmulticast mode
[  121.946465][ T9899] lo speed is unknown, defaulting to 1000
[  121.948838][ T9899] lo speed is unknown, defaulting to 1000
[  121.953374][ T9899] lo speed is unknown, defaulting to 1000
[  121.959321][ T9899] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.969781][ T9899] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  121.995274][ T9899] lo speed is unknown, defaulting to 1000
[  122.002783][ T9899] lo speed is unknown, defaulting to 1000
[  122.007265][ T9899] lo speed is unknown, defaulting to 1000
[  122.143985][ T9914] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  122.156391][ T9914] netlink: 'syz.2.1310': attribute type 5 has an invalid length.
[  122.163012][ T9914] ip6erspan0: entered promiscuous mode
[  122.171264][ T9912] delete_channel: no stack
[  122.478834][ T9927] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  122.482660][ T9927] macsec2: entered promiscuous mode
[  122.485796][ T9927] macsec2: entered allmulticast mode
[  123.143620][ T9950] syzkaller0: entered promiscuous mode
[  123.145981][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  123.148296][ T9950] syzkaller0: entered allmulticast mode
[  123.352876][ T9955] __nla_validate_parse: 7 callbacks suppressed
[  123.352917][ T9955] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1324'.
[  123.687473][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1329'.
[  123.792440][ T9979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  123.796738][   T95] IPVS: starting estimator thread 0...
[  123.871198][ T9982] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1332'.
[  123.885021][ T9980] IPVS: using max 77 ests per chain, 184800 per kthread
[  123.925927][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1334'.
[  124.849446][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'.
[  125.050576][ T9999] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  125.095090][ T9999] macsec0: left allmulticast mode
[  125.103532][ T5872] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.115105][ T5872] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.121144][ T5872] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.123993][ T5872] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.141120][T10011] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1342'.
[  125.169428][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'.
[  125.222654][T10022] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1347'.
[  125.248986][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1348'.
[  125.311657][T10029] sctp: [Deprecated]: syz.2.1350 (pid 10029) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.311657][T10029] Use struct sctp_sack_info instead
[  125.347389][T10036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1352'.
[  125.604919][T10057] netlink: 'syz.0.1358': attribute type 10 has an invalid length.
[  125.627458][T10059] netlink: 'syz.2.1360': attribute type 5 has an invalid length.
[  125.633789][T10059] geneve2: entered promiscuous mode
[  125.636460][T10059] geneve2: entered allmulticast mode
[  125.638811][ T5887] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  125.645977][ T5887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  125.652042][ T5887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  125.656161][ T5887] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  125.781900][T10075] netem: incorrect ge model size
[  125.783735][T10075] netem: change failed
[  126.077573][T10111] macvlan5: entered promiscuous mode
[  126.079467][T10111] macvlan5: entered allmulticast mode
[  126.081817][T10111] bond29: entered promiscuous mode
[  126.083942][T10111] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  126.088748][T10111] bond29: left promiscuous mode
[  127.269308][T10151] lo speed is unknown, defaulting to 1000
[  127.298614][T10160] netlink: 'syz.0.1403': attribute type 2 has an invalid length.
[  127.301221][T10160] netlink: 'syz.0.1403': attribute type 1 has an invalid length.
[  127.309197][T10160] netlink: 'syz.0.1403': attribute type 1 has an invalid length.
[  127.382598][T10164] lo speed is unknown, defaulting to 1000
[  128.435220][T10217] raw_sendmsg: syz.0.1420 forgot to set AF_INET. Fix it!
[  128.476698][T10220] __nla_validate_parse: 16 callbacks suppressed
[  128.476712][T10220] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1421'.
[  128.496872][T10220] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1421'.
[  128.503509][T10220] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1421'.
[  128.511448][T10220] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1421'.
[  128.517061][T10220] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1421'.
[  128.556714][T10225] netlink: 'syz.1.1422': attribute type 1 has an invalid length.
[  128.591892][T10229] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1424'.
[  128.631706][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1426'.
[  128.656191][T10236] macvlan0: entered promiscuous mode
[  128.658064][T10236] macvlan0: entered allmulticast mode
[  128.660437][T10236] bond28: entered promiscuous mode
[  128.662427][T10236] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  128.668533][T10236] bond28: left promiscuous mode
[  128.769523][T10243] netlink: 'syz.1.1429': attribute type 30 has an invalid length.
[  128.863978][T10256] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1433'.
[  128.881813][T10256] IPVS: Unknown mcast interface: veth0_macvtap
[  128.895398][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'.
[  128.987784][T10270] syzkaller1: entered promiscuous mode
[  128.989732][T10270] syzkaller1: entered allmulticast mode
[  128.992583][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1438'.
[  129.000167][T10275] netlink: 'syz.1.1440': attribute type 1 has an invalid length.
[  129.002783][T10275] netlink: 'syz.1.1440': attribute type 1 has an invalid length.
[  129.345843][T10323] netlink: 'syz.0.1454': attribute type 8 has an invalid length.
[  129.383933][T10323] bond30: entered promiscuous mode
[  129.390770][T10323] bond30: entered allmulticast mode
[  129.394273][T10323] 8021q: adding VLAN 0 to HW filter on device bond30
[  129.607077][T10355] dvmrp8: entered allmulticast mode
[  129.861264][T10383] sctp: [Deprecated]: syz.0.1475 (pid 10383) Use of int in max_burst socket option.
[  129.861264][T10383] Use struct sctp_assoc_value instead
[  130.234645][T10406] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  130.535340][T10428] pim6reg: entered allmulticast mode
[  130.537919][T10428] pim6reg: left allmulticast mode
[  130.640937][T10439] validate_nla: 5 callbacks suppressed
[  130.640953][T10439] netlink: 'syz.0.1494': attribute type 30 has an invalid length.
[  130.703335][T10447] sctp: [Deprecated]: syz.0.1496 (pid 10447) Use of int in maxseg socket option.
[  130.703335][T10447] Use struct sctp_assoc_value instead
[  130.748062][T10451] netlink: 'syz.0.1497': attribute type 25 has an invalid length.
[  130.751165][T10451] netlink: 'syz.0.1497': attribute type 1 has an invalid length.
[  131.255682][T10489] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  131.619786][T10516] batadv_slave_1: entered promiscuous mode
[  131.855439][T10546] netlink: 'syz.1.1525': attribute type 2 has an invalid length.
[  131.975223][T10563] netlink: 'syz.0.1529': attribute type 1 has an invalid length.
[  131.980040][T10563] NCSI netlink: No device for ifindex 0
[  132.175039][T10576] block nbd18: server does not support multiple connections per device.
[  132.178348][T10576] block nbd18: shutting down sockets
[  132.722437][T10591] macvlan0: entered promiscuous mode
[  132.724474][T10591] macvlan0: entered allmulticast mode
[  132.726954][T10591] bond19: entered promiscuous mode
[  132.729124][T10591] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  132.733292][T10591] bond19: left promiscuous mode
[  133.021262][T10604] c: entered allmulticast mode
[  133.263858][T10627] bridge0: port 1(erspan0) entered blocking state
[  133.266826][T10627] bridge0: port 1(erspan0) entered disabled state
[  133.270313][T10627] erspan0: entered promiscuous mode
[  133.277217][T10627] erspan0: left promiscuous mode
[  133.279827][T10627] bridge0: port 1(erspan0) entered disabled state
[  133.397436][   T33] audit: type=1800 audit(1753626310.847:3): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1555" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2656 res=0 errno=0
[  133.862123][T10646] __nla_validate_parse: 21 callbacks suppressed
[  133.862136][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'.
[  133.908487][T10650] C: renamed from team_slave_0
[  133.911713][T10650] netlink: 'syz.1.1560': attribute type 1 has an invalid length.
[  133.916444][T10650] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1560'.
[  133.919643][T10650] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  134.033611][T10654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1562'.
[  134.044502][T10654] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1562'.
[  134.052646][T10654] netlink: 'syz.1.1562': attribute type 5 has an invalid length.
[  134.056621][T10654] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1562'.
[  134.185907][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1568'.
[  134.201818][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'.
[  134.256971][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'.
[  134.277234][T10673] 8021q: adding VLAN 0 to HW filter on device bond32
[  134.303376][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'.
[  134.307343][T10673] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  134.312120][T10673] bond32: (slave macvlan5): Enslaving as an active interface with an up link
[  135.104964][T10676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.120160][T10691] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  135.227110][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1576'.
[  135.319941][T10716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.322911][T10716] syzkaller0: entered promiscuous mode
[  135.325669][T10716] syzkaller0: entered allmulticast mode
[  135.337417][T10716] tipc: Resetting bearer <eth:syzkaller0>
[  135.343295][T10715] tipc: Resetting bearer <eth:syzkaller0>
[  135.356393][T10715] tipc: Disabling bearer <eth:syzkaller0>
[  135.394961][T10727] vlan3: entered promiscuous mode
[  135.396688][T10727] bond0: entered promiscuous mode
[  135.398442][T10727] vlan3: entered allmulticast mode
[  136.166879][T10780] tun0: tun_chr_ioctl cmd 2147767520
[  136.557458][T10803] netlink: 'syz.1.1610': attribute type 6 has an invalid length.
[  136.560043][T10803] netlink: 'syz.1.1610': attribute type 5 has an invalid length.
[  137.607336][T10865] lo speed is unknown, defaulting to 1000
[  137.723032][T10881] veth9: entered promiscuous mode
[  137.726226][T10881] veth9: entered allmulticast mode
[  137.728451][T10881] bond0: (slave veth9): Enslaving as an active interface with an up link
[  137.949126][T10905] lo speed is unknown, defaulting to 1000
[  137.972957][T10912] delete_channel: no stack
[  138.070269][T10924] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  138.286347][T10942] bridge0: mtu less than device minimum
[  138.753147][   T47] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  138.911260][T10952] __nla_validate_parse: 28 callbacks suppressed
[  138.911269][T10952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1656'.
[  138.919032][T10952] netlink: 'syz.2.1656': attribute type 7 has an invalid length.
[  138.921697][T10952] netlink: 'syz.2.1656': attribute type 8 has an invalid length.
[  138.926847][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'.
[  139.009862][T10960] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1660'.
[  139.015611][T10961] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1660'.
[  139.249180][T10977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'.
[  139.590785][T10986] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1668'.
[  139.660352][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.663757][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.860014][T11003] netlink: 'syz.1.1674': attribute type 5 has an invalid length.
[  139.865034][T11005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1674'.
[  139.967462][T11017] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1677'.
[  140.070950][T11025] netlink: 'syz.1.1681': attribute type 10 has an invalid length.
[  140.073557][T11025] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  140.105712][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  140.153843][T11032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.220083][T11032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.267832][T11032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.328142][T11032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.409114][ T5887] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.421861][ T5887] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.429915][ T5887] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.441610][ T5887] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.117371][T11080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1699'.
[  141.169642][T11095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1702'.
[  141.228269][T11091] macsec1: entered promiscuous mode
[  141.230051][T11091] macsec1: entered allmulticast mode
[  141.386345][T11116] pim6reg9: entered allmulticast mode
[  141.421046][T11122] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.469298][T11125] 8021q: adding VLAN 0 to HW filter on device batadv1
[  141.471935][T11125] batadv1: entered promiscuous mode
[  141.474012][T11125] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  141.479339][T11125] team0: Failed to send options change via netlink (err -105)
[  141.481806][T11125] team0: Port device batadv1 added
[  141.487736][T11122] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.569456][T11122] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.607453][T11122] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.840284][ T9687] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.849175][ T9687] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.857437][ T9687] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.869813][ T9687] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.203625][T11165] IPVS: Scheduler module ip_vs_ not found
[  142.540530][T11142] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  142.570335][T11181] !: renamed from dummy0
[  142.739172][T11190] lo speed is unknown, defaulting to 1000
[  143.123574][T11223] lo speed is unknown, defaulting to 1000
[  143.236303][T11235] netlink: 'syz.0.1732': attribute type 1 has an invalid length.
[  143.299772][T11235] veth3: entered promiscuous mode
[  143.326817][T11243] netlink: 'syz.1.1733': attribute type 1 has an invalid length.
[  143.354004][T11243] 8021q: adding VLAN 0 to HW filter on device bond30
[  143.371769][T11243] bond30: (slave veth11): Enslaving as an active interface with a down link
[  143.446255][T11250] (unnamed net_device) (uninitialized): option use_carrier: invalid value (216)
[  143.807338][T11280] netlink: 'syz.0.1744': attribute type 1 has an invalid length.
[  143.846229][T11280] 8021q: adding VLAN 0 to HW filter on device bond33
[  143.872372][T11280] vlan4: entered allmulticast mode
[  143.875624][T11280] bond33: (slave vlan4): Opening slave failed
[  143.878845][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  143.993390][T11285] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.997569][T11285] syzkaller0: entered promiscuous mode
[  143.999602][T11285] syzkaller0: entered allmulticast mode
[  144.050664][T11285] tipc: Resetting bearer <eth:syzkaller0>
[  144.060685][T11285] tipc: Disabling bearer <eth:syzkaller0>
[  144.304870][T11292] nbd18: detected capacity change from 0 to 127
[  144.324004][   T56] block nbd18: Receive control failed (result -32)
[  144.362506][T11298] netlink: 'syz.0.1751': attribute type 1 has an invalid length.
[  144.474905][T11305] __nla_validate_parse: 15 callbacks suppressed
[  144.474914][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'.
[  144.528293][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1753'.
[  144.532412][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'.
[  144.537980][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'.
[  144.572620][T11308] @: renamed from veth0_vlan
[  144.791586][T11330] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  144.799105][T11330] netlink: 'syz.1.1760': attribute type 21 has an invalid length.
[  144.802325][T11330] IPv6: NLM_F_CREATE should be specified when creating new route
[  144.806035][T11330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.808399][T11330] IPv6: NLM_F_CREATE should be set when creating new route
[  144.810718][T11330] IPv6: NLM_F_CREATE should be set when creating new route
[  144.813301][T11330] IPv6: NLM_F_CREATE should be set when creating new route
[  144.896211][T11340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.898897][T11340] syzkaller0: entered promiscuous mode
[  144.900824][T11340] syzkaller0: entered allmulticast mode
[  144.912514][T11340] netlink: 'syz.1.1765': attribute type 4 has an invalid length.
[  144.918362][T11340] tipc: Resetting bearer <eth:syzkaller0>
[  144.921557][T11338] tipc: Resetting bearer <eth:syzkaller0>
[  144.930691][T11338] tipc: Disabling bearer <eth:syzkaller0>
[  144.990859][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'.
[  145.049152][T11358] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1770'.
[  145.290764][T11378] pimreg: entered allmulticast mode
[  145.296094][T11378] pimreg: left allmulticast mode
[  145.407047][T11388] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  145.422603][T11392] tipc: Enabled bearer <eth:gre0>, priority 10
[  145.705064][ T1116] block nbd3: Possible stuck request ffff8880229b8000: control (read@0,1024B). Runtime 90 seconds
[  145.709457][ T1116] block nbd3: Possible stuck request ffff8880229b8200: control (read@1024,1024B). Runtime 90 seconds
[  145.712480][   T61] block nbd2: Possible stuck request ffff888022980000: control (read@0,1024B). Runtime 90 seconds
[  145.714375][ T1116] block nbd3: Possible stuck request ffff8880229b8400: control (read@2048,1024B). Runtime 90 seconds
[  145.717338][   T61] block nbd2: Possible stuck request ffff888022980200: control (read@1024,1024B). Runtime 90 seconds
[  145.721824][ T1116] block nbd3: Possible stuck request ffff8880229b8600: control (read@3072,1024B). Runtime 90 seconds
[  145.726463][   T61] block nbd2: Possible stuck request ffff888022980400: control (read@2048,1024B). Runtime 90 seconds
[  145.733542][   T61] block nbd2: Possible stuck request ffff888022980600: control (read@3072,1024B). Runtime 90 seconds
[  145.960855][T11421] syzkaller0: entered promiscuous mode
[  145.962857][T11421] syzkaller0: entered allmulticast mode
[  146.354294][   T61] block nbd4: Possible stuck request ffff8880229e8000: control (read@0,1024B). Runtime 90 seconds
[  146.358382][   T61] block nbd4: Possible stuck request ffff8880229e8200: control (read@1024,1024B). Runtime 90 seconds
[  146.361900][   T61] block nbd4: Possible stuck request ffff8880229e8400: control (read@2048,1024B). Runtime 90 seconds
[  146.366050][   T61] block nbd4: Possible stuck request ffff8880229e8600: control (read@3072,1024B). Runtime 90 seconds
[  146.423939][T11424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1792'.
[  146.875600][T11429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.898554][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'.
[  146.906383][T11430] syzkaller0: entered promiscuous mode
[  146.908271][T11430] syzkaller0: entered allmulticast mode
[  146.910429][T11430] tipc: Resetting bearer <eth:syzkaller0>
[  146.912794][T11435] batadv_slave_1: left allmulticast mode
[  146.918012][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'.
[  146.927721][T11426] tipc: Resetting bearer <eth:syzkaller0>
[  147.062020][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'.
[  147.851097][T11426] tipc: Disabling bearer <eth:syzkaller0>
[  147.969080][T11455] netlink: 'syz.1.1801': attribute type 1 has an invalid length.
[  147.981496][T11455] bridge4: the hash_elasticity option has been deprecated and is always 16
[  148.213016][T11489] netlink: 'syz.1.1813': attribute type 3 has an invalid length.
[  148.360132][T11511] netlink: 'syz.2.1821': attribute type 1 has an invalid length.
[  148.387292][T11511] bond21: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  148.391802][T11511] 8021q: adding VLAN 0 to HW filter on device bond21
[  148.396406][ T5660] bond21: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  148.505993][ T5660] bond21: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  148.552331][T11530] nbd: nbd2 already in use
[  148.648652][T11538] netlink: 'syz.2.1831': attribute type 9 has an invalid length.
[  149.345972][T11560] netlink: zone id is out of range
[  149.347842][T11560] netlink: zone id is out of range
[  149.349641][T11560] netlink: zone id is out of range
[  149.351429][T11560] netlink: zone id is out of range
[  149.353196][T11560] netlink: zone id is out of range
[  149.355744][T11560] netlink: zone id is out of range
[  149.357442][T11560] netlink: zone id is out of range
[  149.359201][T11560] netlink: zone id is out of range
[  149.361265][T11560] netlink: 'syz.1.1837': attribute type 72 has an invalid length.
[  151.960730][T11567] __nla_validate_parse: 14 callbacks suppressed
[  151.960741][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'.
[  152.059166][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1846'.
[  152.062439][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'.
[  152.116776][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'.
[  152.120938][T11591] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1849'.
[  152.125082][T11591] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1849'.
[  152.997343][T11606] netlink: 'syz.1.1854': attribute type 21 has an invalid length.
[  153.000060][T11606] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1854'.
[  153.006199][T11606] netlink: 'syz.1.1854': attribute type 21 has an invalid length.
[  153.008690][T11606] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1854'.
[  153.043613][T11611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.047448][T11611] syzkaller0: entered promiscuous mode
[  153.049234][T11611] syzkaller0: entered allmulticast mode
[  153.066723][T11611] tipc: Resetting bearer <eth:syzkaller0>
[  153.070359][T11610] tipc: Resetting bearer <eth:syzkaller0>
[  153.087181][T11610] tipc: Disabling bearer <eth:syzkaller0>
[  153.108356][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1857'.
[  153.138958][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1858'.
[  153.271432][T11631] netlink: 'syz.0.1860': attribute type 83 has an invalid length.
[  153.615748][T11649] netlink: 'syz.0.1865': attribute type 58 has an invalid length.
[  156.320072][T11679] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  159.337026][T11705] __nla_validate_parse: 7 callbacks suppressed
[  159.337039][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1880'.
[  159.343527][T11705] syzkaller1: entered promiscuous mode
[  159.346789][T11705] syzkaller1: entered allmulticast mode
[  159.385641][T11707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1881'.
[  159.388492][T11707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1881'.
[  159.391944][T11707] netlink: 'syz.2.1881': attribute type 10 has an invalid length.
[  159.396313][T11707] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.399046][T11707] team0: Port device bond0 added
[  159.470326][T11719] net_ratelimit: 7 callbacks suppressed
[  159.470337][T11719] openvswitch: netlink: IPv6 tunnel dst address is zero
[  159.479972][T11719] netlink: 'syz.0.1887': attribute type 3 has an invalid length.
[  159.513442][T11723] netlink: 'syz.0.1889': attribute type 1 has an invalid length.
[  159.549697][T11730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.581600][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'.
[  159.586144][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'.
[  159.592566][T11733] sit1: entered promiscuous mode
[  159.659906][T11742] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1893'.
[  159.702886][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'.
[  160.086144][T11763] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1899'.
[  160.492391][T11786] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  160.659078][T11797] syzkaller0: entered promiscuous mode
[  160.660861][T11797] syzkaller0: entered allmulticast mode
[  160.671624][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1910'.
[  160.684540][T11799] delete_channel: no stack
[  161.798827][T11809] netlink: 'syz.1.1913': attribute type 20 has an invalid length.
[  162.143670][T11813] netlink: 'syz.2.1914': attribute type 21 has an invalid length.
[  162.146297][T11813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1914'.
[  162.275891][T11828] netlink: 'syz.1.1919': attribute type 4 has an invalid length.
[  162.346500][T11838] netlink: 'syz.0.1924': attribute type 2 has an invalid length.
[  162.361265][T11838] lo speed is unknown, defaulting to 1000
[  162.388156][T11843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.399545][T11843] syzkaller0: entered promiscuous mode
[  162.401593][T11843] syzkaller0: entered allmulticast mode
[  162.420407][T11843] tipc: Resetting bearer <eth:syzkaller0>
[  162.429097][T11842] tipc: Resetting bearer <eth:syzkaller0>
[  162.450017][T11842] tipc: Disabling bearer <eth:syzkaller0>
[  162.545562][T11851] netlink: 'syz.0.1926': attribute type 8 has an invalid length.
[  162.579227][T11858] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  162.581710][T11858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.652965][T11844] vlan0: entered promiscuous mode
[  162.655533][T11844] bond0: entered promiscuous mode
[  162.657136][T11844] bond25: entered promiscuous mode
[  162.658948][T11844] vlan0: left allmulticast mode
[  162.680030][T11866] lo speed is unknown, defaulting to 1000
[  163.033889][T11896] netlink: 'syz.0.1938': attribute type 2 has an invalid length.
[  163.316068][ T5851] Bluetooth: hci2: link tx timeout
[  163.317950][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.767694][T11981] netlink: 'syz.2.1963': attribute type 1 has an invalid length.
[  164.040046][T12018] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  164.148566][T12029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.323776][ T5851] Bluetooth: hci2: link tx timeout
[  164.325722][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.468795][T12048] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.475516][T12048] bond0: (slave rose0): Enslaving as an active interface with an up link
[  164.581284][T12060] __nla_validate_parse: 52 callbacks suppressed
[  164.581297][T12060] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1981'.
[  164.811920][T12076] bridge4: entered allmulticast mode
[  165.195061][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1994'.
[  165.242774][T12108] geneve2: entered promiscuous mode
[  165.246148][ T9687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.249892][ T9687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.256899][ T9687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.259903][ T9687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.288983][T12099] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1992'.
[  165.291973][ T9687] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.295083][ T9687] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.295109][T12101] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1992'.
[  165.297921][ T9687] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.307281][T12114] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1998'.
[  165.344233][ T9687] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.385056][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  165.565723][T12131] tap0: tun_chr_ioctl cmd 1074025677
[  165.568684][T12131] tap0: linktype set to 825
[  166.085004][T12164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2014'.
[  166.474443][T12174] nbd19: detected capacity change from 0 to 127
[  166.476753][T12175] nbd: nbd1 already in use
[  166.479782][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'.
[  166.483954][T12174] netlink: 'syz.1.2018': attribute type 1 has an invalid length.
[  166.487171][T12175] netlink: 'syz.1.2018': attribute type 1 has an invalid length.
[  166.490930][   T57] block nbd19: Receive control failed (result -32)
[  166.543162][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2020'.
[  166.625873][T12191] netlink: 336 bytes leftover after parsing attributes in process `syz.1.2022'.
[  166.650275][T12195] sctp: [Deprecated]: syz.1.2023 (pid 12195) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.650275][T12195] Use struct sctp_sack_info instead
[  166.891081][T12207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2027'.
[  166.908546][T12207] bond31: entered promiscuous mode
[  166.910436][T12207] 8021q: adding VLAN 0 to HW filter on device bond31
[  166.974575][T12207] bond31 (unregistering): Released all slaves
[  166.996582][T12212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.999553][T12212] syzkaller0: entered promiscuous mode
[  167.001691][T12212] syzkaller0: entered allmulticast mode
[  167.012620][T12212] tipc: Resetting bearer <eth:syzkaller0>
[  167.027259][T12211] tipc: Resetting bearer <eth:syzkaller0>
[  167.039990][T12211] tipc: Disabling bearer <eth:syzkaller0>
[  167.171965][T12229] netlink: 'syz.1.2033': attribute type 9 has an invalid length.
[  167.586248][T12262] netlink: 'syz.2.2046': attribute type 1 has an invalid length.
[  167.631352][ T5660] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  167.635478][ T5660] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  167.638156][ T5660] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  167.640851][ T5660] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  167.703789][T12272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.708292][T12272] syzkaller0: entered promiscuous mode
[  167.710285][T12272] syzkaller0: entered allmulticast mode
[  167.731509][T12272] tipc: Resetting bearer <eth:syzkaller0>
[  167.750142][T12271] tipc: Resetting bearer <eth:syzkaller0>
[  167.758612][T12271] tipc: Disabling bearer <eth:syzkaller0>
[  168.138090][T12298] netlink: 'syz.2.2057': attribute type 1 has an invalid length.
[  168.151830][T12298] 8021q: adding VLAN 0 to HW filter on device bond22
[  168.181791][T12298] bond22: (slave veth9): Enslaving as an active interface with a down link
[  168.200022][T12298] vlan0: entered allmulticast mode
[  168.202032][T12298] veth1: entered allmulticast mode
[  168.205786][T12298] bond22: (slave vlan0): Opening slave failed
[  168.312679][ T9687] syzkaller0: tun_net_xmit 76
[  168.314690][ T9687] syzkaller0: tun_net_xmit 48
[  169.153576][T12317] netlink: 'syz.2.2065': attribute type 22 has an invalid length.
[  169.166608][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.166647][T12317] netlink: 'syz.2.2065': attribute type 22 has an invalid length.
[  169.169320][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.169360][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.169380][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  169.575186][T12363] netlink: 'syz.1.2080': attribute type 1 has an invalid length.
[  169.580629][T12363] netlink: 'syz.1.2080': attribute type 2 has an invalid length.
[  169.584273][T12363] __nla_validate_parse: 16 callbacks suppressed
[  169.584281][T12363] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2080'.
[  169.601158][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2081'.
[  169.606583][T12363] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  169.612447][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'.
[  169.615622][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2080'.
[  169.627235][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2082'.
[  170.185103][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  172.847269][T12392] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2089'.
[  172.850503][T12392] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2089'.
[  172.860548][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2090'.
[  172.889004][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2091'.
[  174.228865][T12421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.231248][T12422] syzkaller0: entered promiscuous mode
[  174.233071][T12422] syzkaller0: entered allmulticast mode
[  174.238973][T12419] tipc: Resetting bearer <eth:syzkaller0>
[  174.242509][T12421] tipc: Resetting bearer <eth:syzkaller0>
[  174.264205][T12421] tipc: Disabling bearer <eth:syzkaller0>
[  174.288569][T12437] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  174.292175][T12437] netlink: ct family unspecified
[  174.293847][T12437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.319108][T12439] netlink: 364 bytes leftover after parsing attributes in process `syz.0.2102'.
[  174.322002][T12439] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  174.397687][ T5887] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.405543][ T5887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.412816][ T5887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.415660][ T5887] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.635784][T12470] netlink: 'syz.2.2115': attribute type 29 has an invalid length.
[  174.639029][T12470] __nla_validate_parse: 8 callbacks suppressed
[  174.639037][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2115'.
[  174.817087][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2121'.
[  174.955006][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'.
[  174.958838][T12506] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2124'.
[  175.785983][ T1116] block nbd3: Possible stuck request ffff8880229b8000: control (read@0,1024B). Runtime 120 seconds
[  175.787829][   T61] block nbd2: Possible stuck request ffff888022980000: control (read@0,1024B). Runtime 120 seconds
[  175.790708][ T1116] block nbd3: Possible stuck request ffff8880229b8200: control (read@1024,1024B). Runtime 120 seconds
[  175.793491][   T61] block nbd2: Possible stuck request ffff888022980200: control (read@1024,1024B). Runtime 120 seconds
[  175.800930][   T61] block nbd2: Possible stuck request ffff888022980400: control (read@2048,1024B). Runtime 120 seconds
[  175.801038][ T1116] block nbd3: Possible stuck request ffff8880229b8400: control (read@2048,1024B). Runtime 120 seconds
[  175.804693][   T61] block nbd2: Possible stuck request ffff888022980600: control (read@3072,1024B). Runtime 120 seconds
[  175.809252][ T1116] block nbd3: Possible stuck request ffff8880229b8600: control (read@3072,1024B). Runtime 120 seconds
[  175.872110][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'.
[  175.876937][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'.
[  175.880222][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'.
[  175.883247][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'.
[  175.886893][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'.
[  175.889864][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'.
[  176.099235][T12585] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  176.140769][T12587] bridge10: entered allmulticast mode
[  176.147703][T12587] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  176.199868][T12590] gtp0: entered promiscuous mode
[  176.201623][T12590] gtp0: entered allmulticast mode
[  176.218219][T12590] netlink: 'syz.0.2148': attribute type 10 has an invalid length.
[  176.221161][T12590] bond0: (slave wlan1): refused to change device type
[  176.248574][T12592] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  176.318055][T12600] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  176.425121][   T61] block nbd4: Possible stuck request ffff8880229e8000: control (read@0,1024B). Runtime 120 seconds
[  176.431502][   T61] block nbd4: Possible stuck request ffff8880229e8200: control (read@1024,1024B). Runtime 120 seconds
[  176.435201][   T61] block nbd4: Possible stuck request ffff8880229e8400: control (read@2048,1024B). Runtime 120 seconds
[  176.438974][   T61] block nbd4: Possible stuck request ffff8880229e8600: control (read@3072,1024B). Runtime 120 seconds
[  176.736794][T12625] openvswitch: netlink: Unknown nsh attribute 0
[  176.739105][T12625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.294622][T12676] netlink: 'syz.2.2170': attribute type 4 has an invalid length.
[  177.305239][T12676] netlink: 'syz.2.2170': attribute type 1 has an invalid length.
[  177.309775][T12671] netlink: 'syz.2.2170': attribute type 4 has an invalid length.
[  178.037641][T12715] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  178.097905][T12720] netlink: 'syz.0.2180': attribute type 1 has an invalid length.
[  178.112472][T12720] 8021q: adding VLAN 0 to HW filter on device bond34
[  178.116630][T12720] bridge0: port 1(bond34) entered blocking state
[  178.118829][T12720] bridge0: port 1(bond34) entered disabled state
[  178.121066][T12720] bond34: entered allmulticast mode
[  178.123912][T12720] bond34: entered promiscuous mode
[  178.333865][T12747] xfrm0: left allmulticast mode
[  178.390296][T12756] netlink: 'syz.1.2194': attribute type 12 has an invalid length.
[  178.600977][T12783] pim6reg1: entered allmulticast mode
[  178.687837][T12791] sctp: [Deprecated]: syz.1.2200 (pid 12791) Use of int in max_burst socket option deprecated.
[  178.687837][T12791] Use struct sctp_assoc_value instead
[  178.697539][T12794] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  178.697553][T12791] IPVS: stopping backup sync thread 12794 ...
[  178.858449][T12809] netlink: 'syz.2.2208': attribute type 12 has an invalid length.
[  178.893411][T12811] x9`.Ā*|: renamed from bridge_slave_0
[  179.305362][ T1004] wlan1: Trigger new scan to find an IBSS to join
[  179.349306][T12835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  179.460778][T12846] lo: left allmulticast mode
[  179.462522][T12846] tunl0: left allmulticast mode
[  179.464929][T12846] gre0: left allmulticast mode
[  179.475938][T12846] gretap0: left allmulticast mode
[  179.477734][T12846] erspan0: left allmulticast mode
[  179.479464][T12846] ip_vti0: left allmulticast mode
[  179.481265][T12846] ip6_vti0: left allmulticast mode
[  179.483016][T12846] sit0: left allmulticast mode
[  179.494956][T12846] ip6tnl0: left allmulticast mode
[  179.496780][T12846] ip6gre0: left allmulticast mode
[  179.498548][T12846] syz_tun: left allmulticast mode
[  179.500627][T12846] ip6gretap0: left allmulticast mode
[  179.502669][T12846] bridge0: left allmulticast mode
[  179.512296][T12846] vcan0: left allmulticast mode
[  179.530679][T12846] nlmon0: left allmulticast mode
[  179.532529][T12846] caif0: left allmulticast mode
[  179.548408][T12846] vxcan0: left allmulticast mode
[  179.555755][T12846] vxcan1: left allmulticast mode
[  179.557570][T12846] veth0: left allmulticast mode
[  179.559298][T12846] veth1: left allmulticast mode
[  179.560998][T12846] wg0: left allmulticast mode
[  179.562657][T12846] wg1: left allmulticast mode
[  179.566583][T12846] wg2: left allmulticast mode
[  179.568441][T12846] bridge_slave_0: left allmulticast mode
[  179.570373][T12846] veth1_to_bridge: left allmulticast mode
[  179.572320][T12846] bridge_slave_1: left allmulticast mode
[  179.574699][T12846] veth0_to_bond: left allmulticast mode
[  179.576805][T12846] bond_slave_0: left allmulticast mode
[  179.578696][T12846] veth0_to_team: left allmulticast mode
[  179.580649][T12846] team_slave_0: left allmulticast mode
[  179.582549][T12846] veth1_to_team: left allmulticast mode
[  179.584597][T12846] team_slave_1: left allmulticast mode
[  179.586579][T12846] veth0_to_batadv: left allmulticast mode
[  179.588806][T12846] batadv_slave_0: left allmulticast mode
[  179.590746][T12846] veth1_to_batadv: left allmulticast mode
[  179.592835][T12846] batadv_slave_1: left promiscuous mode
[  179.595770][T12846] xfrm0: left allmulticast mode
[  179.597816][T12846] veth0_to_hsr: left allmulticast mode
[  179.599850][T12846] hsr0: left allmulticast mode
[  179.601427][T12846] hsr_slave_0: left allmulticast mode
[  179.603255][T12846] veth1_virt_wifi: left allmulticast mode
[  179.605844][T12846] veth0_virt_wifi: left allmulticast mode
[  179.607942][T12846] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  179.610435][T12846] veth1_vlan: left allmulticast mode
[  179.612283][T12846] vlan0: left allmulticast mode
[  179.614394][T12846] vlan1: left allmulticast mode
[  179.616188][T12846] macvlan0: left allmulticast mode
[  179.617991][T12846] macvlan1: left allmulticast mode
[  179.620173][T12846] ipvlan0: left allmulticast mode
[  179.622257][T12846] @: left allmulticast mode
[  179.627086][T12846] veth1_macvtap: left allmulticast mode
[  179.628952][T12846] veth0_macvtap: left allmulticast mode
[  179.630860][T12846] macvtap0: left allmulticast mode
[  179.632727][T12846] macsec0: left allmulticast mode
[  179.634781][T12846] geneve1: left allmulticast mode
[  179.638618][T12846] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  179.641897][T12846] macvlan2: left allmulticast mode
[  179.643789][T12846] ip6tnl1: left allmulticast mode
[  179.645945][T12846] bond1: left allmulticast mode
[  179.647645][T12846] bond2: left allmulticast mode
[  179.649293][T12846] bond3: left allmulticast mode
[  179.650875][T12846] bond4: left allmulticast mode
[  179.652510][T12846] bond5: left allmulticast mode
[  179.654768][T12846] bond6: left allmulticast mode
[  179.656588][T12846] bond7: left allmulticast mode
[  179.658207][T12846] bond8: left allmulticast mode
[  179.659899][T12846] bond9: left allmulticast mode
[  179.661525][T12846] bridge1: left allmulticast mode
[  179.663278][T12846] macvlan3: left allmulticast mode
[  179.665403][T12846] ip6gretap1: left allmulticast mode
[  179.667242][T12846] bond10: left allmulticast mode
[  179.668935][T12846] bond11: left allmulticast mode
[  179.670644][T12846] macvlan4: left allmulticast mode
[  179.672360][T12846] bond12: left allmulticast mode
[  179.674816][T12846] bond13: left allmulticast mode
[  179.676473][T12846] gretap1: left allmulticast mode
[  179.678139][T12846] bond14: left allmulticast mode
[  179.679821][T12846] bond15: left allmulticast mode
[  179.681537][T12846] bond16: left allmulticast mode
[  179.683252][T12846] bond17: left allmulticast mode
[  179.689253][T12846] gretap2: left promiscuous mode
[  179.690835][T12846] gretap2: left allmulticast mode
[  179.697778][T12846] bond24: left promiscuous mode
[  179.699440][T12846] bridge4: left promiscuous mode
[  179.701184][T12846] bond24: left allmulticast mode
[  179.702845][T12846] bridge4: left allmulticast mode
[  179.714597][T12846] bond30: left promiscuous mode
[  179.716260][T12846] bond30: left allmulticast mode
[  179.727457][T12846] vlan3: left promiscuous mode
[  179.729079][T12846] bond0: left promiscuous mode
[  179.730725][T12846] vlan3: left allmulticast mode
[  179.732343][T12846] bond0: left allmulticast mode
[  179.737025][T12846] macsec1: left promiscuous mode
[  179.738696][T12846] macsec1: left allmulticast mode
[  179.751166][T12846] sit1: left promiscuous mode
[  179.760836][T12846] bridge10: left allmulticast mode
[  179.763650][T12846] gtp0: left promiscuous mode
[  179.766723][T12846] gtp0: left allmulticast mode
[  179.784961][ T5887] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.797737][ T5887] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.800503][ T5887] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.803247][ T5887] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.880443][T12856] __nla_validate_parse: 39 callbacks suppressed
[  179.880454][T12856] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2226'.
[  179.889052][T12866] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  179.893232][T12866] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  179.908677][T12854] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2226'.
[  180.018194][T12885] netlink: 'syz.1.2234': attribute type 58 has an invalid length.
[  180.021291][T12885] sit0: left allmulticast mode
[  180.047785][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2236'.
[  180.122308][T12896] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2238'.
[  180.140126][T12896] netlink: 'syz.1.2238': attribute type 13 has an invalid length.
[  180.147528][T12896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2238'.
[  180.156980][T12896] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  180.211641][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'.
[  180.855012][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2251'.
[  180.857976][T12931] openvswitch: netlink: Missing key (keys=40, expected=100)
[  180.954812][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2253'.
[  180.967733][T12939] team0: Mode changed to "activebackup"
[  181.022726][T12945] netlink: 410 bytes leftover after parsing attributes in process `syz.2.2256'.
[  181.057956][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2257'.
[  181.390720][T12994] netlink: 'syz.1.2262': attribute type 1 has an invalid length.
[  181.408472][T12995] bond32 (unregistering): Released all slaves
[  181.600714][   T33] audit: type=1107 audit(1753626359.047:4): pid=13007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='WN7Ηh.WIMu1xtؾ[P`K|iܙzm$TU2b!9YgviZM_vY m3@4Ϭ!m:eHc݋'
[  181.657086][T13015] netlink: 'syz.0.2270': attribute type 5 has an invalid length.
[  181.686917][T13017] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  181.755433][T13022] netlink: 'syz.0.2273': attribute type 21 has an invalid length.
[  181.910912][T13040] pimreg: entered allmulticast mode
[  182.099601][T13058] netlink: 'syz.1.2282': attribute type 29 has an invalid length.
[  182.264461][T12988] wlan1: Trigger new scan to find an IBSS to join
[  182.633234][T13108] netlink: 'syz.2.2297': attribute type 29 has an invalid length.
[  182.800699][T13121] IPVS: Unknown mcast interface: bridge_slave_0
[  182.805531][T13121] netlink: 'syz.2.2301': attribute type 16 has an invalid length.
[  183.026270][T13133] netlink: 'syz.0.2308': attribute type 1 has an invalid length.
[  183.028986][T13133] netlink: 'syz.0.2308': attribute type 4 has an invalid length.
[  183.406704][T13154] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  183.999561][T13207] 8021q: adding VLAN 0 to HW filter on device bond36
[  184.008559][T13207] bond36: (slave gretap4): making interface the new active one
[  184.015108][T13207] bond36: (slave gretap4): Enslaving as an active interface with an up link
[  184.048296][T13214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.051851][T13214] syzkaller0: entered promiscuous mode
[  184.053999][T13214] syzkaller0: entered allmulticast mode
[  184.102370][T13214] tipc: Resetting bearer <eth:syzkaller0>
[  184.127033][T13214] tipc: Disabling bearer <eth:syzkaller0>
[  185.176288][T13266] __nla_validate_parse: 32 callbacks suppressed
[  185.176299][T13266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2352'.
[  185.181506][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'.
[  185.273404][T13272] bond23: entered promiscuous mode
[  185.275480][T13272] bond23: entered allmulticast mode
[  185.278184][T13272] 8021q: adding VLAN 0 to HW filter on device bond23
[  185.287502][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'.
[  185.304402][T12987] wlan1: Trigger new scan to find an IBSS to join
[  185.463190][T13295] validate_nla: 5 callbacks suppressed
[  185.463206][T13295] netlink: 'syz.1.2363': attribute type 1 has an invalid length.
[  185.481470][T13295] 8021q: adding VLAN 0 to HW filter on device bond34
[  185.501985][T13295] veth13: entered promiscuous mode
[  185.506549][T13295] bond34: (slave veth13): Enslaving as an active interface with a down link
[  185.550525][T13303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.635806][T13312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2370'.
[  185.682248][T13322] netlink: 'syz.1.2372': attribute type 1 has an invalid length.
[  185.782623][T13340] tipc: Cannot configure node identity twice
[  185.790774][T13342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.796882][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2375'.
[  185.808593][T13342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2378'.
[  185.841131][T13346] geneve1: entered promiscuous mode
[  185.842902][T13346] geneve1: entered allmulticast mode
[  185.848653][ T5887] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.852168][ T5887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.861977][ T5887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.867603][ T5887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.885329][T13348] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2382'.
[  185.897383][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'.
[  186.121718][T13390] netlink: 'syz.0.2394': attribute type 1 has an invalid length.
[  186.126207][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'.
[  186.203362][T10873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.223833][T13383] netlink: 'syz.2.2393': attribute type 1 has an invalid length.
[  186.226775][T13383] NCSI netlink: No device for ifindex 0
[  186.266851][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'.
[  186.283087][T13401] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.286703][T13401] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.332383][T13401] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.336022][T13401] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.348892][T13407] ip6gretap1: entered allmulticast mode
[  186.382750][T13410] siw: device registration error -23
[  186.385431][T13401] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.389297][T13401] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.443899][T13414] netlink: 'syz.1.2404': attribute type 1 has an invalid length.
[  186.446505][T13401] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.446546][T13401] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.470218][T13414] netlink: 'syz.1.2404': attribute type 1 has an invalid length.
[  186.510212][T13418] netlink: 'syz.1.2406': attribute type 1 has an invalid length.
[  186.512985][T13418] netlink: 'syz.1.2406': attribute type 1 has an invalid length.
[  186.517040][T13419] netlink: 'syz.1.2406': attribute type 1 has an invalid length.
[  186.539824][T13419] bond35: entered promiscuous mode
[  186.542966][T13419] bond35: entered allmulticast mode
[  186.546330][ T9687] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.548997][ T9687] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.572033][T13419] bridge7: the hash_elasticity option has been deprecated and is always 16
[  186.579566][T13419] bond35: (slave bridge7): making interface the new active one
[  186.582199][T13419] bridge7: entered promiscuous mode
[  186.584174][T13419] bridge7: entered allmulticast mode
[  186.586675][T13419] bond35: (slave bridge7): Enslaving as an active interface with an up link
[  186.589724][ T9687] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.592734][ T9687] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.601304][ T9687] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.614542][ T9687] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.629060][ T5660] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.634278][ T5660] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.681254][T13433] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  186.687179][T13431] netlink: 'syz.1.2411': attribute type 21 has an invalid length.
[  187.255874][T13518] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  187.873405][T13537] tipc: Cannot configure node identity twice
[  187.950207][T13539] lo speed is unknown, defaulting to 1000
[  189.978529][T13585] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  193.097018][T13611] __nla_validate_parse: 85 callbacks suppressed
[  193.097032][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2465'.
[  193.119461][T13611] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  193.121868][T13611] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  193.133546][T13611] tipc: Enabled bearer <udp:syz2>, priority 9
[  193.145959][T13611] 8021q: VLANs not supported on vcan0
[  193.292934][T13642] sctp: [Deprecated]: syz.0.2475 (pid 13642) Use of int in max_burst socket option.
[  193.292934][T13642] Use struct sctp_assoc_value instead
[  193.311509][T13636] tipc: New replicast peer: 255.255.255.255
[  193.318202][T13636] tipc: Enabled bearer <udp:syz2>, priority 10
[  193.324979][T13636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2473'.
[  193.327910][T13636] tipc: Disabling bearer <udp:syz2>
[  193.344656][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2473'.
[  194.141747][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2480'.
[  194.176914][T13662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2481'.
[  194.270818][T13680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2489'.
[  194.273689][T13680] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2489'.
[  194.282243][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2489'.
[  194.842706][T13734] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2507'.
[  194.847584][T13734] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2507'.
[  195.249905][T13768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.255824][T13768] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  195.260328][T13768] nbd: nbd63 already in use
[  195.626179][  T789] page_pool_release_retry() stalled pool shutdown: id 27, 3329 inflight 60 sec
[  195.811562][T13842] vlan0: entered promiscuous mode
[  195.813430][T13842] vlan0: entered allmulticast mode
[  195.820545][T13842] hsr_slave_1: entered allmulticast mode
[  195.963080][T13857] gretap0: entered promiscuous mode
[  195.997950][T13860] validate_nla: 4 callbacks suppressed
[  195.997962][T13860] netlink: 'syz.0.2552': attribute type 10 has an invalid length.
[  196.003108][T13860] bond0: (slave wlan1): refused to change device type
[  196.017777][T13860] netlink: 'syz.0.2552': attribute type 12 has an invalid length.
[  196.140559][T13871] nbd: must specify a size in bytes for the device
[  196.243917][T13882] openvswitch: netlink: Flow actions attr not present in new flow.
[  196.248071][T13882] netlink: 'syz.1.2560': attribute type 1 has an invalid length.
[  196.262773][T13882] 8021q: adding VLAN 0 to HW filter on device bond36
[  196.273366][T13882] bond36: (slave geneve3): making interface the new active one
[  196.278826][T13882] bond36: (slave geneve3): Enslaving as an active interface with an up link
[  196.281894][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.292060][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.294984][T13882] syz.1.2560 (13882) used greatest stack depth: 18392 bytes left
[  196.298767][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.301677][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.391661][T13890] netem: invalid attributes len -16
[  196.393686][T13890] netem: change failed
[  196.445413][T13900] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  196.449155][ T4499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.454115][ T4499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.708374][T13918] bridge0: entered allmulticast mode
[  196.831131][T13934] gtp1: entered promiscuous mode
[  197.233763][T13980] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  197.761548][   T56] block nbd20: Receive control failed (result -104)
[  197.978870][T14013] netlink: 'syz.2.2602': attribute type 5 has an invalid length.
[  198.180769][T14026] __nla_validate_parse: 32 callbacks suppressed
[  198.180780][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'.
[  198.187209][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'.
[  198.190346][T14028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.193379][T14026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.199433][T14028] netlink: 'syz.0.2604': attribute type 21 has an invalid length.
[  198.201921][T14028] netlink: 'syz.0.2604': attribute type 22 has an invalid length.
[  198.205101][T14028] netlink: 'syz.0.2604': attribute type 23 has an invalid length.
[  198.215268][T14028] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2604'.
[  198.224569][T14029] netlink: 'syz.0.2604': attribute type 21 has an invalid length.
[  198.228530][T14029] netlink: 'syz.0.2604': attribute type 22 has an invalid length.
[  198.231043][T14029] netlink: 'syz.0.2604': attribute type 23 has an invalid length.
[  198.233980][T14029] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2604'.
[  198.326369][T14035] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.2605'.
[  198.817578][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'.
[  198.820545][T14063] tipc: Enabled bearer <eth:vlan0>, priority 18
[  199.341601][T14093] bond18: (slave 0!): Releasing active interface
[  199.346743][T14093] team0: Port device 0! added
[  199.396480][T14095] 8021q: adding VLAN 0 to HW filter on device bond24
[  199.403944][T14095] vlan1: entered allmulticast mode
[  199.407088][T14095] bond24: (slave vlan1): Opening slave failed
[  199.438460][T14098] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2627'.
[  199.443092][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'.
[  199.935543][  T789] tipc: Node number set to 3453560438
[  200.157683][T14115] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2634'.
[  200.174467][T14115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2634'.
[  200.680150][T14131] workqueue: Failed to create a rescuer kthread for wq "bond37": -EINTR
[  200.866508][T14141] syzkaller0: entered promiscuous mode
[  200.870898][T14141] syzkaller0: entered allmulticast mode
[  201.829039][T14148] A link change request failed with some changes committed already. Interface gre5 may have been left with an inconsistent configuration, please check.
[  201.980560][T14172] validate_nla: 6 callbacks suppressed
[  201.980570][T14172] netlink: 'syz.1.2652': attribute type 1 has an invalid length.
[  201.984396][T14171] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  202.006226][T14172] 8021q: adding VLAN 0 to HW filter on device bond37
[  202.039360][T14182] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  202.042174][T14182] openvswitch: netlink: Duplicate key (type 0).
[  203.360347][T14247] __nla_validate_parse: 4 callbacks suppressed
[  203.360357][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'.
[  203.375005][T14249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.377804][T14249] syzkaller0: entered promiscuous mode
[  203.379561][T14249] syzkaller0: entered allmulticast mode
[  203.420458][T14249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2675'.
[  203.423407][T14249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2675'.
[  203.428445][T14249] netlink: 'syz.2.2675': attribute type 4 has an invalid length.
[  203.444830][T14249] tipc: Resetting bearer <eth:syzkaller0>
[  203.452889][T14248] tipc: Resetting bearer <eth:syzkaller0>
[  203.462988][T14248] tipc: Disabling bearer <eth:syzkaller0>
[  203.464299][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  203.513437][T14261] lo speed is unknown, defaulting to 1000
[  203.933674][T14305] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2694'.
[  204.412259][T14323] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  204.416911][T14323] syzkaller0: entered promiscuous mode
[  204.418690][T14323] syzkaller0: entered allmulticast mode
[  204.504236][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  204.530145][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2703'.
[  204.574636][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2704'.
[  204.711672][   T33] audit: type=1800 audit(1753626382.157:5): pid=14333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2705" name="memory.events" dev="tmpfs" ino=4928 res=0 errno=0
[  204.832359][T14341] netlink: 'syz.2.2709': attribute type 5 has an invalid length.
[  204.865016][T14343] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2710'.
[  204.890493][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2710'.
[  204.893562][T14343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.945988][T14350] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:0
[  205.101988][T14363] batadv_slave_0: entered promiscuous mode
[  205.105748][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'.
[  205.109201][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'.
[  205.125414][T14359] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  205.128550][T14359] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  205.328618][T14362] batadv_slave_0: left promiscuous mode
[  205.544334][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  205.887637][   T61] block nbd2: Possible stuck request ffff888022980000: control (read@0,1024B). Runtime 150 seconds
[  205.887649][ T1116] block nbd3: Possible stuck request ffff8880229b8000: control (read@0,1024B). Runtime 150 seconds
[  205.891198][   T61] block nbd2: Possible stuck request ffff888022980200: control (read@1024,1024B). Runtime 150 seconds
[  205.894920][ T1116] block nbd3: Possible stuck request ffff8880229b8200: control (read@1024,1024B). Runtime 150 seconds
[  205.894936][ T1116] block nbd3: Possible stuck request ffff8880229b8400: control (read@2048,1024B). Runtime 150 seconds
[  205.894947][ T1116] block nbd3: Possible stuck request ffff8880229b8600: control (read@3072,1024B). Runtime 150 seconds
[  205.909377][   T61] block nbd2: Possible stuck request ffff888022980400: control (read@2048,1024B). Runtime 150 seconds
[  205.912799][   T61] block nbd2: Possible stuck request ffff888022980600: control (read@3072,1024B). Runtime 150 seconds
[  206.132957][T14423] netlink: 'syz.2.2733': attribute type 1 has an invalid length.
[  206.151692][T14423] 8021q: adding VLAN 0 to HW filter on device bond25
[  206.169408][T14423] bond25: (slave veth11): Enslaving as an active interface with a down link
[  206.207292][T14426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.210096][T14426] syzkaller0: entered promiscuous mode
[  206.211806][T14426] syzkaller0: entered allmulticast mode
[  206.224581][T14426] tipc: Resetting bearer <eth:syzkaller0>
[  206.236373][T14425] tipc: Resetting bearer <eth:syzkaller0>
[  206.253918][T14425] tipc: Disabling bearer <eth:syzkaller0>
[  206.504667][   T61] block nbd4: Possible stuck request ffff8880229e8000: control (read@0,1024B). Runtime 150 seconds
[  206.508171][   T61] block nbd4: Possible stuck request ffff8880229e8200: control (read@1024,1024B). Runtime 150 seconds
[  206.511822][   T61] block nbd4: Possible stuck request ffff8880229e8400: control (read@2048,1024B). Runtime 150 seconds
[  206.515679][   T61] block nbd4: Possible stuck request ffff8880229e8600: control (read@3072,1024B). Runtime 150 seconds
[  206.584312][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  206.600459][T14453] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  206.913074][T14474] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  206.980744][T14482] openvswitch: netlink: IP tunnel dst address not specified
[  206.998717][T14482] netlink: 'syz.0.2744': attribute type 7 has an invalid length.
[  207.001415][T14482] netlink: 'syz.0.2744': attribute type 8 has an invalid length.
[  207.054872][T14492] openvswitch: netlink: Flow actions attr not present in new flow.
[  207.379037][T14519] can: request_module (can-proto-3) failed.
[  207.422289][T14523] syzkaller0: entered promiscuous mode
[  207.424222][T14523] syzkaller0: entered allmulticast mode
[  207.429672][T14523] netlink: 'syz.0.2754': attribute type 1 has an invalid length.
[  207.551733][T14531] lo: entered allmulticast mode
[  207.553570][T14531] tunl0: entered allmulticast mode
[  207.556673][T14531] gre0: entered allmulticast mode
[  207.558371][T14531] gretap0: left promiscuous mode
[  207.559949][T14531] gretap0: entered allmulticast mode
[  207.572170][T14531] erspan0: entered allmulticast mode
[  207.573952][T14531] ip_vti0: entered allmulticast mode
[  207.578456][T14531] ip6_vti0: entered allmulticast mode
[  207.580267][T14531] sit0: entered allmulticast mode
[  207.581998][T14531] ip6tnl0: entered allmulticast mode
[  207.585567][T14531] ip6gre0: entered allmulticast mode
[  207.594466][T14531] syz_tun: entered allmulticast mode
[  207.596273][T14531] ip6gretap0: entered allmulticast mode
[  207.598093][T14531] vcan0: entered allmulticast mode
[  207.599702][T14531] bond0: entered allmulticast mode
[  207.601681][T14531] team0: entered allmulticast mode
[  207.613212][T14534] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002
[  207.624339][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  207.628606][T14531] dummy0: entered allmulticast mode
[  207.630270][T14531] batadv1: entered allmulticast mode
[  207.632110][T14531] nlmon0: entered allmulticast mode
[  207.633753][T14531] caif0: entered allmulticast mode
[  207.635726][T14531] vxcan0: entered allmulticast mode
[  207.637419][T14531] vxcan1: entered allmulticast mode
[  207.639153][T14531] veth0: entered allmulticast mode
[  207.640787][T14531] veth1: entered allmulticast mode
[  207.642431][T14531] wg0: entered allmulticast mode
[  207.645594][T14531] wg1: entered allmulticast mode
[  207.647383][T14531] wg2: entered allmulticast mode
[  207.649283][T14531] bridge_slave_0: entered allmulticast mode
[  207.651315][T14531] veth1_to_bridge: entered allmulticast mode
[  207.653330][T14531] bridge_slave_1: entered allmulticast mode
[  207.660956][T14531] veth0_to_bond: entered allmulticast mode
[  207.662963][T14531] bond_slave_0: entered allmulticast mode
[  207.665331][T14531] veth0_to_team: entered allmulticast mode
[  207.667423][T14531] team_slave_0: entered allmulticast mode
[  207.669791][T14531] veth1_to_team: entered allmulticast mode
[  207.672164][T14531] team_slave_1: entered allmulticast mode
[  207.676708][T14531] veth0_to_batadv: entered allmulticast mode
[  207.678760][T14531] batadv_slave_0: entered allmulticast mode
[  207.680842][T14531] veth1_to_batadv: entered allmulticast mode
[  207.683037][T14531] batadv_slave_1: entered allmulticast mode
[  207.685597][T14531] xfrm0: entered allmulticast mode
[  207.687615][T14531] veth0_to_hsr: entered allmulticast mode
[  207.689594][T14531] hsr_slave_0: entered allmulticast mode
[  207.691509][T14531] hsr0: entered allmulticast mode
[  207.693301][T14531] veth1_vlan: entered allmulticast mode
[  207.696402][T14531] @: entered allmulticast mode
[  207.698202][T14531] vlan0: entered allmulticast mode
[  207.700005][T14531] vlan1: entered allmulticast mode
[  207.701711][T14531] macvlan0: entered allmulticast mode
[  207.703609][T14531] macvlan1: entered allmulticast mode
[  207.706634][T14531] ipvlan0: entered allmulticast mode
[  207.708553][T14531] ipvlan1: entered allmulticast mode
[  207.710368][T14531] veth1_macvtap: entered allmulticast mode
[  207.712319][T14531] veth0_macvtap: entered allmulticast mode
[  207.715759][T14531] macvtap0: entered allmulticast mode
[  207.718075][T14531] geneve1: left promiscuous mode
[  207.723626][T14531] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  207.726810][T14531] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  207.729145][T14531] macvlan2: entered allmulticast mode
[  207.731023][T14531] ip6tnl1: entered allmulticast mode
[  207.732770][T14531] bond1: entered allmulticast mode
[  207.735951][T14531] bond2: entered allmulticast mode
[  207.737728][T14531] bond3: entered allmulticast mode
[  207.739417][T14531] bond4: entered allmulticast mode
[  207.741251][T14531] bond5: entered allmulticast mode
[  207.742959][T14531] bond6: entered allmulticast mode
[  207.745842][T14531] bond7: entered allmulticast mode
[  207.747560][T14531] bond8: entered allmulticast mode
[  207.749382][T14531] bond9: entered allmulticast mode
[  207.751074][T14531] bridge1: entered allmulticast mode
[  207.752921][T14531] macvlan3: entered allmulticast mode
[  207.756296][T14531] ip6gretap1: entered allmulticast mode
[  207.758167][T14531] bond10: entered allmulticast mode
[  207.760043][T14531] bond11: entered allmulticast mode
[  207.761838][T14531] macvlan4: entered allmulticast mode
[  207.763705][T14531] bond12: entered allmulticast mode
[  207.766358][T14531] bond13: entered allmulticast mode
[  207.768096][T14531] gretap1: entered allmulticast mode
[  207.769831][T14531] bond14: entered allmulticast mode
[  207.771720][T14531] bond15: entered allmulticast mode
[  207.773486][T14531] bond16: entered allmulticast mode
[  207.778796][T14531] bond17: entered allmulticast mode
[  207.780667][T14531] bond18: entered allmulticast mode
[  207.782623][T14531] bridge2: entered allmulticast mode
[  207.785004][T14531] ip6tnl2: entered allmulticast mode
[  207.787149][T14531] bond19: entered allmulticast mode
[  207.789020][T14531] gretap2: entered allmulticast mode
[  207.790838][T14531] gre1: entered allmulticast mode
[  207.792727][T14531] ip6gretap2: entered allmulticast mode
[  207.796323][T14531] bond20: entered allmulticast mode
[  207.798212][T14531] bond21: entered allmulticast mode
[  207.800045][T14531] syztnl2: entered allmulticast mode
[  207.801917][T14531] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode
[  207.804912][T14531] bond22: entered allmulticast mode
[  207.806833][T14531] bridge3: entered allmulticast mode
[  207.808705][T14531] bond23: entered allmulticast mode
[  207.810546][T14531] bond24: entered allmulticast mode
[  207.812307][T14531] bridge4: entered allmulticast mode
[  207.814686][T14531] vlan2: entered allmulticast mode
[  207.816460][T14531] bond25: entered allmulticast mode
[  207.818268][T14531] ipvlan2: entered allmulticast mode
[  207.820067][T14531] bond26: entered allmulticast mode
[  207.821920][T14531] bond27: entered allmulticast mode
[  207.823676][T14531] @: entered allmulticast mode
[  207.827010][T14531] ip6tnl3: entered allmulticast mode
[  207.828846][T14531] gretap3: entered allmulticast mode
[  207.830675][T14531] bond28: entered allmulticast mode
[  207.832515][T14531] batadv0: entered allmulticast mode
[  207.834915][T14531] bond29: entered allmulticast mode
[  207.836781][T14531] bridge5: entered allmulticast mode
[  207.838596][T14531] bond30: entered allmulticast mode
[  207.840384][T14531] vxcan2: entered allmulticast mode
[  207.842189][T14531] vxcan3: entered allmulticast mode
[  207.844019][T14531] bridge6: entered allmulticast mode
[  207.847625][T14531] bond31: entered allmulticast mode
[  207.849499][T14531] bond32: entered allmulticast mode
[  207.851272][T14531] macvlan5: entered allmulticast mode
[  207.853163][T14531] vlan3: entered allmulticast mode
[  207.856147][T14531] erspan1: entered allmulticast mode
[  207.858137][T14531] netdevsim netdevsim0 eth0: entered allmulticast mode
[  207.860443][T14531] netdevsim netdevsim0 eth1: entered allmulticast mode
[  207.862752][T14531] netdevsim netdevsim0 eth2: entered allmulticast mode
[  207.866661][T14531] netdevsim netdevsim0 eth3: entered allmulticast mode
[  207.869024][T14531] bridge7: entered allmulticast mode
[  207.870838][T14531] bond33: entered allmulticast mode
[  207.872650][T14531] ip6tnl4: entered allmulticast mode
[  207.875007][T14531] wireguard0: entered allmulticast mode
[  207.876987][T14531] sit1: entered allmulticast mode
[  207.878728][T14531] bridge8: entered allmulticast mode
[  207.880619][T14531] bridge9: entered allmulticast mode
[  207.882450][T14531] bridge10: entered allmulticast mode
[  207.886049][T14531] gtp0: entered allmulticast mode
[  207.887992][T14531] bond35: entered allmulticast mode
[  207.889831][T14531] batadv0.5: entered allmulticast mode
[  207.893503][T14531] bond36: entered allmulticast mode
[  207.895870][T14531] gretap4: entered allmulticast mode
[  207.902536][T14531] sit2: entered allmulticast mode
[  207.906298][T14531] gtp1: entered allmulticast mode
[  207.909774][T14531] sit3: entered allmulticast mode
[  207.914668][T14531] wireguard1: entered allmulticast mode
[  207.917045][T14531] veth2: entered allmulticast mode
[  207.919669][T14531] veth3: entered allmulticast mode
[  207.921560][T14531] bridge11: entered allmulticast mode
[  207.923968][T14531] bridge12: entered allmulticast mode
[  207.930075][ T5872] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.935209][ T5872] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.941135][ T5872] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.952251][ T5872] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.099395][T14561] veth1_to_hsr: entered allmulticast mode
[  208.298611][T14581] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  208.369968][T14590] netlink: 'syz.0.2777': attribute type 11 has an invalid length.
[  208.372605][T14590] netlink: 'syz.0.2777': attribute type 11 has an invalid length.
[  208.377201][T14590] __nla_validate_parse: 19 callbacks suppressed
[  208.377209][T14590] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2777'.
[  208.481468][T14594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2778'.
[  208.486217][T14599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2778'.
[  208.664332][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  208.773800][T14622] netlink: 'syz.2.2785': attribute type 1 has an invalid length.
[  208.777144][T14622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'.
[  208.812273][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'.
[  208.841631][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'.
[  208.845577][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'.
[  208.947898][T14637] netlink: 'syz.0.2788': attribute type 21 has an invalid length.
[  208.950529][T14637] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2788'.
[  209.628672][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2806'.
[  209.631726][T14689] netlink: 'syz.0.2806': attribute type 7 has an invalid length.
[  209.635480][T14689] netlink: 'syz.0.2806': attribute type 8 has an invalid length.
[  209.638163][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'.
[  209.704351][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  209.726383][T14694] netlink: del zone limit has 4 unknown bytes
[  209.887921][T14706] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  209.892143][T14706] syzkaller0: entered promiscuous mode
[  209.895824][T14706] syzkaller0: entered allmulticast mode
[  209.900124][T14706] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  210.029101][T14713] bond0: Device is already in use.
[  210.113531][T14719] lo speed is unknown, defaulting to 1000
[  210.381392][T14738] infiniband syz!: set down
[  210.383079][T14738] infiniband syz!: added team_slave_0
[  210.411019][T14738] RDS/IB: syz!: added
[  210.412730][T14738] smc: adding ib device syz! with port count 1
[  210.415657][T14738] smc:    ib device syz! port 1 has pnetid 
[  210.419647][T14747] syz_tun: entered promiscuous mode
[  210.744295][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  210.922510][T14763] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  210.925664][T14763] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  210.931537][T14763] netlink: 'syz.1.2831': attribute type 1 has an invalid length.
[  211.207255][T14786] netlink: 'syz.0.2840': attribute type 5 has an invalid length.
[  211.386154][T14811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.424590][T14816] netlink: 'syz.2.2850': attribute type 29 has an invalid length.
[  211.454967][T14811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.518294][T14811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.563659][T14811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.637353][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.648769][ T5872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.659006][ T5872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.671498][ T5872] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.784297][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  211.797697][T14841] 8021q: adding VLAN 0 to HW filter on device team0
[  212.230262][T14875] pim6reg1: entered promiscuous mode
[  212.232151][T14875] pim6reg1: entered allmulticast mode
[  212.253715][T14879] validate_nla: 4 callbacks suppressed
[  212.253727][T14879] netlink: 'syz.2.2871': attribute type 1 has an invalid length.
[  212.396318][T14888] netlink: 'syz.2.2874': attribute type 1 has an invalid length.
[  212.409792][T14888] 8021q: adding VLAN 0 to HW filter on device bond26
[  212.428635][T14888] bond26: (slave bridge11): making interface the new active one
[  212.431862][T14888] bond26: (slave bridge11): Enslaving as an active interface with an up link
[  212.578321][T14894] syzkaller1: entered promiscuous mode
[  212.580340][T14894] syzkaller1: entered allmulticast mode
[  212.824313][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  213.286937][T14928] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  213.434361][ T4499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.444636][ T4499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.573132][T14959] __nla_validate_parse: 13 callbacks suppressed
[  213.573143][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2897'.
[  213.606526][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2897'.
[  213.609333][T14959] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2897'.
[  213.625773][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  213.662000][T14975] netlink: 'syz.2.2901': attribute type 4 has an invalid length.
[  213.665572][T14974] netlink: 'syz.2.2901': attribute type 4 has an invalid length.
[  213.700857][T14977] sit: Src spoofed 0.0.0.0/6b1f:5cc:9015:8a3a:e95:d2c5:c5ee:9572 -> 255.255.255.255/4f67:2f12:c7e:e6ae:2b21:4d48:b2b3:6c76
[  213.758271][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'.
[  213.761337][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'.
[  213.849488][T14989] netlink: 'syz.1.2907': attribute type 11 has an invalid length.
[  213.864286][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  214.043874][T15007] netlink: 'syz.2.2913': attribute type 1 has an invalid length.
[  214.047542][T15007] NCSI netlink: No device for ifindex 0
[  214.057084][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2913'.
[  214.078926][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'.
[  214.085190][T15007] vlan1: entered allmulticast mode
[  214.087172][T15007] bond27: entered allmulticast mode
[  214.190628][T15014] 8021q: adding VLAN 0 to HW filter on device batadv3
[  214.198191][T15014] batadv3: entered promiscuous mode
[  214.202409][T15014] batadv3: entered allmulticast mode
[  214.205392][T15014] team0: Failed to send port change of device batadv3 via netlink (err -105)
[  214.208716][T15014] team0: Failed to send options change via netlink (err -105)
[  214.211370][T15014] team0: Port device batadv3 added
[  214.430834][T15024] vlan1: entered promiscuous mode
[  214.432609][T15024] bridge0: entered promiscuous mode
[  214.548688][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'.
[  214.552305][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'.
[  214.897919][T15072] sctp: [Deprecated]: syz.1.2934 (pid 15072) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.897919][T15072] Use struct sctp_sack_info instead
[  214.904257][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  215.169129][T15082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2938'.
[  215.730422][T15121] syzkaller0: entered promiscuous mode
[  215.732363][T15121] syzkaller0: entered allmulticast mode
[  215.751067][T15125] sctp: [Deprecated]: syz.1.2949 (pid 15125) Use of int in maxseg socket option.
[  215.751067][T15125] Use struct sctp_assoc_value instead
[  215.821457][T15129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  215.944229][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  216.349869][T15139] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  216.532627][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  216.558704][T15152] netlink: 'syz.0.2961': attribute type 7 has an invalid length.
[  216.984379][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  217.649220][T15184] netlink: 'syz.1.2971': attribute type 20 has an invalid length.
[  217.651795][T15184] netlink: 'syz.1.2971': attribute type 20 has an invalid length.
[  217.743748][T15198] netlink: 'syz.1.2975': attribute type 1 has an invalid length.
[  217.753866][T15198] bridge9: the hash_elasticity option has been deprecated and is always 16
[  217.863654][T15207] bond12: (slave gretap1): Releasing active interface
[  217.869107][T15207] bond0: (slave bond25): Releasing backup interface
[  217.871307][T15207] bond0: (slave bond25): the permanent HWaddr of slave - 42:e1:31:7e:45:c1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  217.877298][T15207] bond25: left promiscuous mode
[  217.879064][T15207] bond25: left allmulticast mode
[  217.881599][T15207] bond26: (slave veth5): Releasing active interface
[  217.886804][T15207] bond0: (slave veth9): Releasing backup interface
[  217.889944][T15207] veth9: left allmulticast mode
[  217.892618][T15207] bond30: (slave veth11): Releasing active interface
[  217.896794][T15207] bond34: (slave veth13): Releasing active interface
[  217.906092][T15207] bond35: (slave bridge7): Releasing active interface
[  217.908405][T15207] bridge7: left promiscuous mode
[  217.910275][T15207] bridge7: left allmulticast mode
[  217.919954][T15207] bond36: (slave geneve3): Releasing active interface
[  217.929227][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.934615][ T5872] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.937999][ T5872] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.941429][ T5872] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.034192][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  218.501303][T15262] vlan1: entered promiscuous mode
[  218.503366][T15262] gretap0: entered promiscuous mode
[  218.640414][T15271] __nla_validate_parse: 25 callbacks suppressed
[  218.640427][T15271] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2995'.
[  218.761049][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2998'.
[  218.822208][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3001'.
[  219.056229][T15324] lo speed is unknown, defaulting to 1000
[  219.074440][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  219.183584][T15329] netlink: 'syz.2.3008': attribute type 1 has an invalid length.
[  219.257259][T15332] syzkaller1: entered promiscuous mode
[  219.259328][T15332] syzkaller1: entered allmulticast mode
[  219.286440][T15324] netlink: 'syz.0.3007': attribute type 13 has an invalid length.
[  219.296288][T15324] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  219.368339][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'.
[  219.371351][T15341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3011'.
[  219.632711][T15368] netlink: 'syz.2.3018': attribute type 21 has an invalid length.
[  219.637554][T15368] netlink: 'syz.2.3018': attribute type 6 has an invalid length.
[  219.642316][T15368] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3018'.
[  219.708539][T15376] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  219.710929][T15376] macsec1: entered promiscuous mode
[  219.712804][T15376] macsec1: entered allmulticast mode
[  219.776667][T15386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3025'.
[  219.826651][T15339] syzkaller0: tun_net_xmit 76
[  219.829624][T15339] syzkaller0: tun_net_xmit 48
[  219.829941][T15388] syzkaller0: create flow: hash 3528647764 index 1
[  219.854507][   T10] syzkaller0: tun_net_xmit 76
[  219.861669][T15388] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  219.867885][T15388] syzkaller0: delete flow: hash 3528647764 index 1
[  220.107201][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  221.079715][   T33] audit: type=1800 audit(1753626398.527:6): pid=15412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3031" name="memory.events" dev="tmpfs" ino=5467 res=0 errno=0
[  221.119660][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'.
[  221.122802][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'.
[  221.127535][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'.
[  221.144390][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  222.194236][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  222.322302][T15515] netlink: 'syz.2.3068': attribute type 1 has an invalid length.
[  222.359649][T15515] netlink: 'syz.2.3068': attribute type 1 has an invalid length.
[  222.403381][T15523] dvmrp0: entered allmulticast mode
[  222.974992][T15586] syzkaller0: entered promiscuous mode
[  222.977769][T15586] syzkaller0: entered allmulticast mode
[  222.996435][T15591] netlink: 'syz.0.3096': attribute type 1 has an invalid length.
[  223.016628][T15591] bond37: (slave geneve0): Opening slave failed
[  223.058380][T15591] 8021q: adding VLAN 0 to HW filter on device bond37
[  223.061732][T15591] openvswitch: netlink: nsh attr 1024 is out of range max 3
[  223.064259][T15591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.146188][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  223.165071][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  223.175518][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  223.222409][T15608] batadv_slave_1: entered promiscuous mode
[  223.234259][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  223.243906][T15607] batadv_slave_1: left promiscuous mode
[  223.262963][T15606] macsec0: entered allmulticast mode
[  223.267750][T15606] batadv2: entered allmulticast mode
[  223.272360][T15606] netdevsim netdevsim0 eth0: entered allmulticast mode
[  223.275755][T15606] netdevsim netdevsim0 eth1: entered allmulticast mode
[  223.278059][T15606] netdevsim netdevsim0 eth2: entered allmulticast mode
[  223.283378][T15606] netdevsim netdevsim0 eth3: entered allmulticast mode
[  223.287536][T15606] mac80211_hwsim hwsim23 wlan3: entered allmulticast mode
[  223.290367][T15606] macsec1: left promiscuous mode
[  223.295200][T15606] gretap5: entered allmulticast mode
[  223.297357][T15606] ip6gre1: entered allmulticast mode
[  223.303398][T15606] bond37: entered allmulticast mode
[  223.397444][T15616] IPVS: stopping backup sync thread 8201 ...
[  224.274274][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  224.384928][T15648] __nla_validate_parse: 70 callbacks suppressed
[  224.384940][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3117'.
[  224.411403][T15653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3118'.
[  224.497832][T15660] netlink: 1360 bytes leftover after parsing attributes in process `syz.2.3119'.
[  224.506358][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'.
[  224.636219][T15673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3126'.
[  224.646437][T15675] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  224.913703][T15693] netlink: 'syz.0.3130': attribute type 1 has an invalid length.
[  224.924154][T15693] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3130'.
[  225.304276][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  225.433588][T15723] netlink: 'syz.0.3140': attribute type 12 has an invalid length.
[  225.531761][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'.
[  225.572315][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'.
[  225.580293][T15743] netlink: 'syz.2.3145': attribute type 1 has an invalid length.
[  225.614922][T15743] 8021q: adding VLAN 0 to HW filter on device bond29
[  225.647512][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3147'.
[  225.649382][T15752] netlink: 'syz.0.3150': attribute type 6 has an invalid length.
[  225.655210][T15750] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  225.779644][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3154'.
[  225.983153][T15784] pim6reg1: entered promiscuous mode
[  225.985336][T15784] pim6reg1: entered allmulticast mode
[  226.257207][T15817] syzkaller0: entered promiscuous mode
[  226.259009][T15817] syzkaller0: entered allmulticast mode
[  226.344526][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  227.394231][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  227.500030][T15835] bridge12: entered promiscuous mode
[  227.501756][T15835] bridge12: entered allmulticast mode
[  227.696939][T15862] bond0: (slave gtp2): refused to change device type
[  227.766880][T15868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.162262][T15912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.213339][T15912] syzkaller0: entered promiscuous mode
[  228.217754][T15912] syzkaller0: entered allmulticast mode
[  228.219904][T15912] tipc: Resetting bearer <eth:syzkaller0>
[  228.239960][T15911] tipc: Resetting bearer <eth:syzkaller0>
[  228.424248][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  229.224250][   T47] tipc: Node number set to 818956816
[  229.464274][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  229.544331][ T4373] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  230.504255][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  231.554278][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  232.205119][T15911] tipc: Disabling bearer <eth:syzkaller0>
[  232.208911][T15927] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  232.236101][T15938] netlink: 'syz.1.3214': attribute type 1 has an invalid length.
[  232.249547][T15938] 8021q: adding VLAN 0 to HW filter on device bond38
[  232.269053][T15938] vlan2: entered allmulticast mode
[  232.271429][T15938] bond38: (slave vlan2): Opening slave failed
[  232.306368][T15944] __nla_validate_parse: 11 callbacks suppressed
[  232.306380][T15944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3214'.
[  232.312257][T15944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3214'.
[  232.410713][T15949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3218'.
[  232.413638][T15949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3218'.
[  232.509704][T15963] dvmrp1: tun_chr_ioctl cmd 1074025677
[  232.515063][T15963] dvmrp1: linktype set to 513
[  232.594229][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  232.703939][T15987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3228'.
[  232.713139][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3228'.
[  232.788310][T15992] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  233.357177][T16028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.360110][T16028] syzkaller0: entered promiscuous mode
[  233.362053][T16028] syzkaller0: entered allmulticast mode
[  233.370601][T16028] tipc: Resetting bearer <eth:syzkaller0>
[  233.377151][T16027] tipc: Resetting bearer <eth:syzkaller0>
[  233.395092][T16027] tipc: Disabling bearer <eth:syzkaller0>
[  233.527921][T16039] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  233.538363][T16042] netlink: 'syz.1.3245': attribute type 1 has an invalid length.
[  233.541075][T16042] netlink: 'syz.1.3245': attribute type 10 has an invalid length.
[  233.543667][T16042] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3245'.
[  233.605427][T16051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3249'.
[  233.634273][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  233.821343][T16065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3255'.
[  233.900934][T16073] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3258'.
[  234.389073][T16127] macsec2: entered promiscuous mode
[  234.391193][T16127] macsec2: entered allmulticast mode
[  234.396308][T16128] openvswitch: netlink: Flow actions attr not present in new flow.
[  234.399232][T16127] openvswitch: netlink: Flow actions attr not present in new flow.
[  234.471245][T16139] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  234.540976][T16145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.553785][T16145] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  234.563335][T16145] syzkaller0: entered promiscuous mode
[  234.567164][T16145] syzkaller0: entered allmulticast mode
[  234.579186][T16145] tipc: Resetting bearer <eth:syzkaller0>
[  234.582333][T16153] netlink: 'syz.2.3286': attribute type 11 has an invalid length.
[  234.600589][T16145] tipc: Disabling bearer <eth:syzkaller0>
[  234.664297][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  234.920038][T16201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  234.922524][T16201] IPv6: NLM_F_CREATE should be set when creating new route
[  235.020807][T16210] netlink: 'syz.1.3302': attribute type 4 has an invalid length.
[  235.024644][T16210] netlink: 'syz.1.3302': attribute type 4 has an invalid length.
[  235.031437][T16209] netlink: 'syz.1.3302': attribute type 178 has an invalid length.
[  235.047922][T16212] batadv_slave_0: entered promiscuous mode
[  235.051328][T16212] netlink: 'syz.0.3303': attribute type 2 has an invalid length.
[  235.053810][T16212] netlink: 'syz.0.3303': attribute type 1 has an invalid length.
[  235.057142][T16211] batadv_slave_0: left promiscuous mode
[  235.082732][T16214] netlink: 'syz.0.3304': attribute type 15 has an invalid length.
[  235.140583][T16219] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  235.146024][T16219] syzkaller0: entered promiscuous mode
[  235.148072][T16219] syzkaller0: entered allmulticast mode
[  235.158819][T16219] netlink: 'syz.0.3306': attribute type 4 has an invalid length.
[  235.247407][T16221] lo speed is unknown, defaulting to 1000
[  235.598897][T16227] batadv_slave_1: entered promiscuous mode
[  235.608124][T16226] batadv_slave_1: left promiscuous mode
[  235.704254][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  235.906870][T16251] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  235.924801][T16254] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 1, id = 0
[  235.948652][ T1116] block nbd3: Possible stuck request ffff8880229b8000: control (read@0,1024B). Runtime 180 seconds
[  235.952007][ T1116] block nbd3: Possible stuck request ffff8880229b8200: control (read@1024,1024B). Runtime 180 seconds
[  235.955953][ T1116] block nbd3: Possible stuck request ffff8880229b8400: control (read@2048,1024B). Runtime 180 seconds
[  235.959515][ T1116] block nbd3: Possible stuck request ffff8880229b8600: control (read@3072,1024B). Runtime 180 seconds
[  235.967862][   T61] block nbd2: Possible stuck request ffff888022980000: control (read@0,1024B). Runtime 180 seconds
[  235.971415][   T61] block nbd2: Possible stuck request ffff888022980200: control (read@1024,1024B). Runtime 180 seconds
[  235.977613][   T61] block nbd2: Possible stuck request ffff888022980400: control (read@2048,1024B). Runtime 180 seconds
[  235.981190][   T61] block nbd2: Possible stuck request ffff888022980600: control (read@3072,1024B). Runtime 180 seconds
[  236.055683][T16268] sctp: [Deprecated]: syz.1.3322 (pid 16268) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.055683][T16268] Use struct sctp_sack_info instead
[  236.178513][T16281] lo: left allmulticast mode
[  236.180489][T16281] tunl0: left allmulticast mode
[  236.182707][T16281] gre0: left allmulticast mode
[  236.188167][T16281] gretap0: left allmulticast mode
[  236.193002][T16281] erspan0: left allmulticast mode
[  236.197016][T16281] ip_vti0: left allmulticast mode
[  236.199392][T16281] ip6_vti0: left allmulticast mode
[  236.202097][T16281] ip6tnl0: left allmulticast mode
[  236.205119][T16281] ip6gre0: left allmulticast mode
[  236.208184][T16281] syz_tun: left promiscuous mode
[  236.209777][T16281] syz_tun: left allmulticast mode
[  236.211847][T16281] ip6gretap0: left allmulticast mode
[  236.215910][T16281] bridge0: left allmulticast mode
[  236.220247][T16281] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.222579][T16281] tipc: Resetting bearer <eth:vlan0>
[  236.226224][T16281] dummy0: left allmulticast mode
[  236.229345][T16281] nlmon0: left allmulticast mode
[  236.231848][T16281] caif0: left allmulticast mode
[  236.233393][T16281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.555829][T16321] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  236.584425][ T5221] Bluetooth: hci0: command tx timeout
[  236.585001][   T61] block nbd4: Possible stuck request ffff8880229e8000: control (read@0,1024B). Runtime 180 seconds
[  236.589893][   T61] block nbd4: Possible stuck request ffff8880229e8200: control (read@1024,1024B). Runtime 180 seconds
[  236.593379][   T61] block nbd4: Possible stuck request ffff8880229e8400: control (read@2048,1024B). Runtime 180 seconds
[  236.600691][   T61] block nbd4: Possible stuck request ffff8880229e8600: control (read@3072,1024B). Runtime 180 seconds
[  236.754394][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  236.902933][T16359] 8021q: adding VLAN 0 to HW filter on device bond31
[  236.906915][T16359] bond30: (slave bond31): making interface the new active one
[  236.909835][T16359] bond30: (slave bond31): Enslaving as an active interface with an up link
[  236.920487][T16359] bond30: (slave gretap3): Enslaving as a backup interface with an up link
[  236.925396][T16359] 8021q: adding VLAN 0 to HW filter on device bond30
[  237.027198][T16373] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  237.292953][T16397] lo speed is unknown, defaulting to 1000
[  237.784228][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  237.812659][T16407] validate_nla: 6 callbacks suppressed
[  237.812669][T16407] netlink: 'syz.2.3368': attribute type 29 has an invalid length.
[  237.817573][T16407] __nla_validate_parse: 36 callbacks suppressed
[  237.817581][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3368'.
[  237.913198][T16413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.918090][T16413] syzkaller0: entered promiscuous mode
[  237.920456][T16413] syzkaller0: entered allmulticast mode
[  237.933081][T16413] tipc: Resetting bearer <eth:syzkaller0>
[  237.952967][T16413] tipc: Disabling bearer <eth:syzkaller0>
[  238.076680][T16426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3375'.
[  238.082270][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.085417][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.246963][T16460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3385'.
[  238.824218][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  239.172563][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3391'.
[  239.204490][T16487] tipc: MTU too low for tipc bearer
[  239.206898][T16490] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  239.391446][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3403'.
[  239.509982][T16536] tipc: Invalid UDP bearer configuration
[  239.510011][T16536] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  239.563008][T16536] pimreg3: entered allmulticast mode
[  239.864241][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  239.875014][T15339] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  239.931261][T16556] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3410'.
[  240.625411][T16567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3413'.
[  240.662334][T16570] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3414'.
[  240.680015][T16575] syzkaller0: entered promiscuous mode
[  240.684358][T16575] syzkaller0: entered allmulticast mode
[  240.801749][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3423'.
[  240.842057][T16594] lo speed is unknown, defaulting to 1000
[  240.904286][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  240.910765][T16601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3427'.
[  241.131193][T16626] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  241.219302][T16633] siw: device registration error -23
[  241.524520][T16661] nbd21: detected capacity change from 0 to 127
[  241.531182][   T56] block nbd21: Receive control failed (result -32)
[  241.771993][T16692] syz_tun: entered promiscuous mode
[  241.773922][T16692] vlan2: entered promiscuous mode
[  241.842777][T16699] nbd: nbd2 already in use
[  241.844889][T16699] block nbd2: NBD_DISCONNECT
[  241.846539][T16699] block nbd2: Send disconnect failed -32
[  241.849913][T16699] block nbd2: shutting down sockets
[  241.875971][    C0] blk_print_req_error: 286 callbacks suppressed
[  241.875987][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.880902][    C0] buffer_io_error: 286 callbacks suppressed
[  241.880909][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.885261][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.888106][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  241.890527][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.893374][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  241.896004][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.898836][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  241.902636][ T5847] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.909518][ T5847] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.912043][ T5847] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.917719][ T5847] Buffer I/O error on dev nbd2, logical block 1, async page read
[  241.920237][ T5847] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.923050][ T5847] Buffer I/O error on dev nbd2, logical block 2, async page read
[  241.931601][ T5847] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.944311][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  241.945265][ T5847] Buffer I/O error on dev nbd2, logical block 3, async page read
[  241.949367][ T5847] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.952715][ T5847] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.956668][ T5847] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.960409][ T5847] Buffer I/O error on dev nbd2, logical block 1, async page read
[  241.979261][ T5847] ldm_validate_partition_table(): Disk read failed.
[  242.012733][ T5847] Dev nbd2: unable to read RDB block 0
[  242.035602][ T5847]  nbd2: unable to read partition table
[  242.051186][ T5847] ldm_validate_partition_table(): Disk read failed.
[  242.070720][ T5847] Dev nbd2: unable to read RDB block 0
[  242.076245][ T5847]  nbd2: unable to read partition table
[  242.126632][ T5847] udevd[5847]: failed to send result of seq 10373 to main daemon: Connection refused
[  242.250029][T16740] macvlan0: entered promiscuous mode
[  242.251958][T16740] macvlan0: entered allmulticast mode
[  242.254734][T16740] bond39: entered promiscuous mode
[  242.257389][T16740] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  242.260918][T16740] bond39: left promiscuous mode
[  242.532525][T16764] netlink: 'syz.2.3476': attribute type 2 has an invalid length.
[  242.589591][T16784] netlink: 'syz.1.3482': attribute type 1 has an invalid length.
[  242.619619][T16784] 8021q: adding VLAN 0 to HW filter on device bond40
[  242.730408][T16793] sock: sock_timestamping_bind_phc: sock not bind to device
[  242.762443][T16806] netlink: 'syz.0.3488': attribute type 3 has an invalid length.
[  242.767535][T16806] netlink: 'syz.0.3488': attribute type 3 has an invalid length.
[  242.937277][ T5221] Bluetooth: hci2: link tx timeout
[  242.938977][ T5221] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  242.984288][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  242.999728][T16844] __nla_validate_parse: 15 callbacks suppressed
[  242.999737][T16844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3501'.
[  243.088274][T16847] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3500'.
[  243.210309][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3506'.
[  243.220648][T16866] netlink: 'syz.1.3506': attribute type 1 has an invalid length.
[  243.223257][T16866] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3506'.
[  243.420722][T16886] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3512'.
[  243.424671][T16886] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3512'.
[  243.427796][T16886] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3512'.
[  243.430847][T16886] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3512'.
[  243.493810][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3514'.
[  243.509896][T16892] bridge0: port 1(gretap0) entered blocking state
[  243.512288][T16892] bridge0: port 1(gretap0) entered disabled state
[  243.517389][T16892] gretap0: entered allmulticast mode
[  243.519924][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'.
[  243.520961][T16892] gretap0: entered promiscuous mode
[  243.558024][T16901] macsec0: left allmulticast mode
[  243.687645][T16918] pim6reg1: entered promiscuous mode
[  243.689570][T16918] pim6reg1: entered allmulticast mode
[  244.024225][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  244.904334][    C1] ==================================================================
[  244.907259][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  244.909933][    C1] Read of size 2 at addr ffff88810858902a by task syz.0.3555/17017
[  244.913079][    C1] 
[  244.914156][    C1] CPU: 1 UID: 0 PID: 17017 Comm: syz.0.3555 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  244.914168][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  244.914173][    C1] Call Trace:
[  244.914178][    C1]  <IRQ>
[  244.914182][    C1]  dump_stack_lvl+0x189/0x250
[  244.914194][    C1]  ? rcu_is_watching+0x15/0xb0
[  244.914202][    C1]  ? __kasan_check_byte+0x12/0x40
[  244.914212][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.914219][    C1]  ? rcu_is_watching+0x15/0xb0
[  244.914225][    C1]  ? lock_release+0x4b/0x3e0
[  244.914233][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  244.914242][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  244.914249][    C1]  print_report+0xca/0x230
[  244.914259][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  244.914269][    C1]  kasan_report+0x118/0x150
[  244.914278][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  244.914289][    C1]  rose_timer_expiry+0x471/0x4b0
[  244.914299][    C1]  call_timer_fn+0x17e/0x5f0
[  244.914306][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  244.914315][    C1]  ? call_timer_fn+0xbe/0x5f0
[  244.914321][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  244.914328][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  244.914338][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.914344][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  244.914354][    C1]  __run_timer_base+0x61a/0x860
[  244.914363][    C1]  ? ktime_get+0x3e/0x1f0
[  244.914373][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  244.914381][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  244.914392][    C1]  run_timer_softirq+0xb7/0x180
[  244.914401][    C1]  handle_softirqs+0x286/0x870
[  244.914414][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  244.914422][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  244.914453][    C1]  __irq_exit_rcu+0xca/0x1f0
[  244.914462][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  244.914470][    C1]  irq_exit_rcu+0x9/0x30
[  244.914476][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  244.914488][    C1]  </IRQ>
[  244.914490][    C1]  <TASK>
[  244.914493][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  244.914500][    C1] RIP: 0010:unwind_get_return_address+0x45/0x90
[  244.914509][    C1] Code: e8 03 42 0f b6 04 30 84 c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 9b 8e af 00 <48> 8b 3b e8 93 a3 1a 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df
[  244.914516][    C1] RSP: 0018:ffffc90004346ec8 EFLAGS: 00000246
[  244.914524][    C1] RAX: 0000000000000000 RBX: ffffc90004346f30 RCX: 00c9ab3893307c00
[  244.914530][    C1] RDX: 0000000000000001 RSI: ffffffff8db87667 RDI: ffffc90004346ee8
[  244.914534][    C1] RBP: ffffc90004346f70 R08: ffffc90004347208 R09: 0000000000000000
[  244.914539][    C1] R10: ffffc90004346f38 R11: fffff52000868de9 R12: ffff88812ae48000
[  244.914544][    C1] R13: 1ffff92000868e08 R14: dffffc0000000000 R15: 1ffff92000868de6
[  244.914553][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  244.914561][    C1]  arch_stack_walk+0xfc/0x150
[  244.914571][    C1]  ? post_alloc_hook+0x240/0x2a0
[  244.914581][    C1]  stack_trace_save+0x9c/0xe0
[  244.914589][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  244.914599][    C1]  save_stack+0xf5/0x1f0
[  244.914608][    C1]  ? __pfx_save_stack+0x10/0x10
[  244.914618][    C1]  ? seqcount_lockdep_reader_access+0x102/0x180
[  244.914628][    C1]  __set_page_owner+0x8d/0x4a0
[  244.914637][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  244.914647][    C1]  post_alloc_hook+0x240/0x2a0
[  244.914656][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  244.914669][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  244.914677][    C1]  ? kernel_text_address+0xa5/0xe0
[  244.914687][    C1]  ? __kernel_text_address+0xd/0x40
[  244.914695][    C1]  ? unwind_get_return_address+0x4d/0x90
[  244.914702][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  244.914709][    C1]  ? arch_stack_walk+0xfc/0x150
[  244.914718][    C1]  ? stack_trace_save+0x9c/0xe0
[  244.914726][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  244.914737][    C1]  ? prepare_alloc_pages+0x213/0x610
[  244.914747][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  244.914757][    C1]  ? qdisc_create_dflt+0x13b/0x4e0
[  244.914764][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  244.914776][    C1]  ? ___slab_alloc+0x240/0x1480
[  244.914786][    C1]  alloc_pages_mpol+0x232/0x4a0
[  244.914797][    C1]  allocate_slab+0x8a/0x3b0
[  244.914803][    C1]  ___slab_alloc+0xbfc/0x1480
[  244.914813][    C1]  ? pfifo_fast_init+0x363/0x6b0
[  244.914820][    C1]  __kvmalloc_node_noprof+0x429/0x5f0
[  244.914828][    C1]  ? pfifo_fast_init+0x363/0x6b0
[  244.914835][    C1]  pfifo_fast_init+0x363/0x6b0
[  244.914841][    C1]  qdisc_create_dflt+0x13b/0x4e0
[  244.914848][    C1]  mq_init+0x2dc/0x660
[  244.914857][    C1]  ? __pfx_mq_init+0x10/0x10
[  244.914864][    C1]  ? qdisc_alloc+0x7a1/0xaa0
[  244.914871][    C1]  qdisc_create_dflt+0x13b/0x4e0
[  244.914877][    C1]  ? dev_activate+0x1a9/0x1150
[  244.914883][    C1]  dev_activate+0x1ce/0x1150
[  244.914891][    C1]  __dev_open+0x69c/0x880
[  244.914899][    C1]  ? __pfx___dev_open+0x10/0x10
[  244.914906][    C1]  __dev_change_flags+0x1ea/0x6d0
[  244.914915][    C1]  ? __pfx___dev_change_flags+0x10/0x10
[  244.914922][    C1]  ? dev_ioctl+0x7a4/0x1150
[  244.914929][    C1]  ? full_name_hash+0x92/0xe0
[  244.914936][    C1]  netif_change_flags+0x88/0x1a0
[  244.914944][    C1]  dev_change_flags+0x130/0x260
[  244.914953][    C1]  dev_ioctl+0x7b4/0x1150
[  244.914960][    C1]  sock_do_ioctl+0x22c/0x300
[  244.914972][    C1]  ? __pfx_sock_do_ioctl+0x10/0x10
[  244.914980][    C1]  ? __lock_acquire+0xab9/0xd20
[  244.914988][    C1]  sock_ioctl+0x576/0x790
[  244.914997][    C1]  ? __pfx_sock_ioctl+0x10/0x10
[  244.915006][    C1]  ? __fget_files+0x2a/0x420
[  244.915015][    C1]  ? __fget_files+0x3a0/0x420
[  244.915024][    C1]  ? __fget_files+0x2a/0x420
[  244.915034][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[  244.915042][    C1]  ? __pfx_sock_ioctl+0x10/0x10
[  244.915050][    C1]  __se_sys_ioctl+0xfc/0x170
[  244.915058][    C1]  do_syscall_64+0xfa/0x3b0
[  244.915065][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.915071][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.915077][    C1]  ? exc_page_fault+0x9f/0xf0
[  244.915087][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.915093][    C1] RIP: 0033:0x7fc49a58e9a9
[  244.915100][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.915106][    C1] RSP: 002b:00007fc49b3b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  244.915113][    C1] RAX: ffffffffffffffda RBX: 00007fc49a7b5fa0 RCX: 00007fc49a58e9a9
[  244.915118][    C1] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000006
[  244.915122][    C1] RBP: 00007fc49a610d69 R08: 0000000000000000 R09: 0000000000000000
[  244.915126][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.915130][    C1] R13: 0000000000000000 R14: 00007fc49a7b5fa0 R15: 00007ffdf1bc68a8
[  244.915138][    C1]  </TASK>
[  244.915140][    C1] 
[  245.137634][    C1] Allocated by task 16870:
[  245.139295][    C1]  kasan_save_track+0x3e/0x80
[  245.141023][    C1]  __kasan_kmalloc+0x93/0xb0
[  245.142879][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  245.144603][    C1]  sctp_endpoint_new+0x86/0xa20
[  245.146219][    C1]  sctp_init_sock+0x960/0x11f0
[  245.147747][    C1]  sctp_v6_init_sock+0x16/0x70
[  245.149300][    C1]  inet6_create+0xef4/0x1260
[  245.150900][    C1]  __sock_create+0x4b3/0x9f0
[  245.152373][    C1]  __sys_socket+0xd7/0x1b0
[  245.153806][    C1]  __x64_sys_socket+0x7a/0x90
[  245.155396][    C1]  do_syscall_64+0xfa/0x3b0
[  245.156849][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.158921][    C1] 
[  245.159890][    C1] Freed by task 15:
[  245.161142][    C1]  kasan_save_track+0x3e/0x80
[  245.162658][    C1]  kasan_save_free_info+0x46/0x50
[  245.164323][    C1]  __kasan_slab_free+0x62/0x70
[  245.165817][    C1]  kfree+0x18e/0x440
[  245.167039][    C1]  rcu_core+0xca8/0x1710
[  245.168544][    C1]  handle_softirqs+0x286/0x870
[  245.170056][    C1]  run_ksoftirqd+0x9b/0x100
[  245.171505][    C1]  smpboot_thread_fn+0x542/0xa60
[  245.173197][    C1]  kthread+0x711/0x8a0
[  245.174511][    C1]  ret_from_fork+0x3fc/0x770
[  245.176005][    C1]  ret_from_fork_asm+0x1a/0x30
[  245.177634][    C1] 
[  245.178508][    C1] Last potentially related work creation:
[  245.180570][    C1]  kasan_save_stack+0x3e/0x60
[  245.182108][    C1]  kasan_record_aux_stack+0xbd/0xd0
[  245.183777][    C1]  call_rcu+0x157/0x9c0
[  245.185206][    C1]  sctp_destroy_sock+0x1ec/0x370
[  245.186799][    C1]  sk_common_release+0x75/0x2e0
[  245.188379][    C1]  sctp_close+0x783/0x900
[  245.189873][    C1]  inet_release+0x144/0x190
[  245.191315][    C1]  sock_close+0xc3/0x240
[  245.192684][    C1]  __fput+0x44c/0xa70
[  245.194034][    C1]  task_work_run+0x1d4/0x260
[  245.195498][    C1]  exit_to_user_mode_loop+0xec/0x110
[  245.197148][    C1]  do_syscall_64+0x2bd/0x3b0
[  245.198886][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.200869][    C1] 
[  245.201739][    C1] The buggy address belongs to the object at ffff888108589000
[  245.201739][    C1]  which belongs to the cache kmalloc-512 of size 512
[  245.206088][    C1] The buggy address is located 42 bytes inside of
[  245.206088][    C1]  freed 512-byte region [ffff888108589000, ffff888108589200)
[  245.210379][    C1] 
[  245.211175][    C1] The buggy address belongs to the physical page:
[  245.213170][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108588
[  245.215922][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  245.218668][    C1] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  245.221674][    C1] page_type: f5(slab)
[  245.222926][    C1] raw: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  245.225656][    C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  245.228481][    C1] head: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  245.231141][    C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  245.233956][    C1] head: 057ff00000000002 ffffea0004216201 00000000ffffffff 00000000ffffffff
[  245.236779][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  245.239830][    C1] page dumped because: kasan: bad access detected
[  245.241958][    C1] page_owner tracks the page as allocated
[  245.243768][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5962, tgid 5961 (syz.0.18), ts 52062480741, free_ts 47261215907
[  245.250682][    C1]  post_alloc_hook+0x240/0x2a0
[  245.252262][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  245.254009][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  245.255953][    C1]  alloc_pages_mpol+0x232/0x4a0
[  245.257536][    C1]  allocate_slab+0x8a/0x3b0
[  245.259287][    C1]  ___slab_alloc+0xbfc/0x1480
[  245.260982][    C1]  __kmalloc_noprof+0x305/0x4f0
[  245.262566][    C1]  copy_splice_read+0x143/0x9b0
[  245.264189][    C1]  splice_direct_to_actor+0x4d0/0xcc0
[  245.265980][    C1]  do_splice_direct+0x181/0x270
[  245.267568][    C1]  do_sendfile+0x4da/0x7e0
[  245.269143][    C1]  __se_sys_sendfile64+0x13e/0x190
[  245.270770][    C1]  do_syscall_64+0xfa/0x3b0
[  245.272192][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.274169][    C1] page last free pid 5902 tgid 5902 stack trace:
[  245.276176][    C1]  __free_frozen_pages+0xc71/0xe70
[  245.277902][    C1]  __put_partials+0x161/0x1c0
[  245.279685][    C1]  put_cpu_partial+0x17c/0x250
[  245.281267][    C1]  __slab_free+0x2f7/0x400
[  245.282804][    C1]  qlist_free_all+0x97/0x140
[  245.284281][    C1]  kasan_quarantine_reduce+0x148/0x160
[  245.286013][    C1]  __kasan_slab_alloc+0x22/0x80
[  245.287678][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  245.289452][    C1]  prepare_kernel_cred+0x31/0x500
[  245.291201][    C1]  call_usermodehelper_exec_async+0xd0/0x360
[  245.293160][    C1]  ret_from_fork+0x3fc/0x770
[  245.294680][    C1]  ret_from_fork_asm+0x1a/0x30
[  245.296344][    C1] 
[  245.297147][    C1] Memory state around the buggy address:
[  245.299217][    C1]  ffff888108588f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  245.301802][    C1]  ffff888108588f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  245.304319][    C1] >ffff888108589000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.306846][    C1]                                   ^
[  245.308646][    C1]  ffff888108589080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.311573][    C1]  ffff888108589100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.314177][    C1] ==================================================================
[  245.317079][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  245.319655][    C1] CPU: 1 UID: 0 PID: 17017 Comm: syz.0.3555 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  245.323618][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.326950][    C1] Call Trace:
[  245.328029][    C1]  <IRQ>
[  245.329104][    C1]  dump_stack_lvl+0x99/0x250
[  245.330589][    C1]  ? __asan_memcpy+0x40/0x70
[  245.332084][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.333817][    C1]  ? __pfx__printk+0x10/0x10
[  245.335293][    C1]  panic+0x2db/0x790
[  245.336549][    C1]  ? __pfx_panic+0x10/0x10
[  245.338071][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  245.340212][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  245.342173][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  245.344191][    C1]  ? print_memory_metadata+0x314/0x400
[  245.346001][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.347627][    C1]  check_panic_on_warn+0x89/0xb0
[  245.349278][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.350899][    C1]  end_report+0x78/0x160
[  245.352275][    C1]  kasan_report+0x129/0x150
[  245.353756][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.355413][    C1]  rose_timer_expiry+0x471/0x4b0
[  245.356973][    C1]  call_timer_fn+0x17e/0x5f0
[  245.358561][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.360870][    C1]  ? call_timer_fn+0xbe/0x5f0
[  245.362717][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  245.364694][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  245.366394][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.368091][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.370011][    C1]  __run_timer_base+0x61a/0x860
[  245.371591][    C1]  ? ktime_get+0x3e/0x1f0
[  245.373017][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  245.374798][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  245.376840][    C1]  run_timer_softirq+0xb7/0x180
[  245.378538][    C1]  handle_softirqs+0x286/0x870
[  245.380389][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  245.381951][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  245.383776][    C1]  __irq_exit_rcu+0xca/0x1f0
[  245.385267][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  245.386962][    C1]  irq_exit_rcu+0x9/0x30
[  245.388487][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  245.390278][    C1]  </IRQ>
[  245.391379][    C1]  <TASK>
[  245.392346][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  245.394269][    C1] RIP: 0010:unwind_get_return_address+0x45/0x90
[  245.396328][    C1] Code: e8 03 42 0f b6 04 30 84 c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 9b 8e af 00 <48> 8b 3b e8 93 a3 1a 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df
[  245.402759][    C1] RSP: 0018:ffffc90004346ec8 EFLAGS: 00000246
[  245.404821][    C1] RAX: 0000000000000000 RBX: ffffc90004346f30 RCX: 00c9ab3893307c00
[  245.407291][    C1] RDX: 0000000000000001 RSI: ffffffff8db87667 RDI: ffffc90004346ee8
[  245.409944][    C1] RBP: ffffc90004346f70 R08: ffffc90004347208 R09: 0000000000000000
[  245.412398][    C1] R10: ffffc90004346f38 R11: fffff52000868de9 R12: ffff88812ae48000
[  245.415030][    C1] R13: 1ffff92000868e08 R14: dffffc0000000000 R15: 1ffff92000868de6
[  245.417637][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  245.419915][    C1]  arch_stack_walk+0xfc/0x150
[  245.421565][    C1]  ? post_alloc_hook+0x240/0x2a0
[  245.423142][    C1]  stack_trace_save+0x9c/0xe0
[  245.424705][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  245.426553][    C1]  save_stack+0xf5/0x1f0
[  245.427922][    C1]  ? __pfx_save_stack+0x10/0x10
[  245.429723][    C1]  ? seqcount_lockdep_reader_access+0x102/0x180
[  245.431710][    C1]  __set_page_owner+0x8d/0x4a0
[  245.433263][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  245.435077][    C1]  post_alloc_hook+0x240/0x2a0
[  245.436639][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  245.438566][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  245.440453][    C1]  ? kernel_text_address+0xa5/0xe0
[  245.442168][    C1]  ? __kernel_text_address+0xd/0x40
[  245.443909][    C1]  ? unwind_get_return_address+0x4d/0x90
[  245.445674][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  245.447744][    C1]  ? arch_stack_walk+0xfc/0x150
[  245.449337][    C1]  ? stack_trace_save+0x9c/0xe0
[  245.451042][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  245.452939][    C1]  ? prepare_alloc_pages+0x213/0x610
[  245.454674][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  245.456632][    C1]  ? qdisc_create_dflt+0x13b/0x4e0
[  245.458297][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  245.460700][    C1]  ? ___slab_alloc+0x240/0x1480
[  245.462258][    C1]  alloc_pages_mpol+0x232/0x4a0
[  245.463944][    C1]  allocate_slab+0x8a/0x3b0
[  245.465385][    C1]  ___slab_alloc+0xbfc/0x1480
[  245.466926][    C1]  ? pfifo_fast_init+0x363/0x6b0
[  245.468725][    C1]  __kvmalloc_node_noprof+0x429/0x5f0
[  245.470727][    C1]  ? pfifo_fast_init+0x363/0x6b0
[  245.472560][    C1]  pfifo_fast_init+0x363/0x6b0
[  245.474100][    C1]  qdisc_create_dflt+0x13b/0x4e0
[  245.475778][    C1]  mq_init+0x2dc/0x660
[  245.477206][    C1]  ? __pfx_mq_init+0x10/0x10
[  245.478881][    C1]  ? qdisc_alloc+0x7a1/0xaa0
[  245.480639][    C1]  qdisc_create_dflt+0x13b/0x4e0
[  245.482204][    C1]  ? dev_activate+0x1a9/0x1150
[  245.483749][    C1]  dev_activate+0x1ce/0x1150
[  245.485273][    C1]  __dev_open+0x69c/0x880
[  245.486753][    C1]  ? __pfx___dev_open+0x10/0x10
[  245.488355][    C1]  __dev_change_flags+0x1ea/0x6d0
[  245.490145][    C1]  ? __pfx___dev_change_flags+0x10/0x10
[  245.491913][    C1]  ? dev_ioctl+0x7a4/0x1150
[  245.493408][    C1]  ? full_name_hash+0x92/0xe0
[  245.495011][    C1]  netif_change_flags+0x88/0x1a0
[  245.496588][    C1]  dev_change_flags+0x130/0x260
[  245.498195][    C1]  dev_ioctl+0x7b4/0x1150
[  245.500036][    C1]  sock_do_ioctl+0x22c/0x300
[  245.501567][    C1]  ? __pfx_sock_do_ioctl+0x10/0x10
[  245.503306][    C1]  ? __lock_acquire+0xab9/0xd20
[  245.504914][    C1]  sock_ioctl+0x576/0x790
[  245.506316][    C1]  ? __pfx_sock_ioctl+0x10/0x10
[  245.507902][    C1]  ? __fget_files+0x2a/0x420
[  245.509578][    C1]  ? __fget_files+0x3a0/0x420
[  245.511102][    C1]  ? __fget_files+0x2a/0x420
[  245.512642][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[  245.514264][    C1]  ? __pfx_sock_ioctl+0x10/0x10
[  245.515830][    C1]  __se_sys_ioctl+0xfc/0x170
[  245.517418][    C1]  do_syscall_64+0xfa/0x3b0
[  245.519108][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.520826][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.522822][    C1]  ? exc_page_fault+0x9f/0xf0
[  245.524303][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.526322][    C1] RIP: 0033:0x7fc49a58e9a9
[  245.527775][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.534020][    C1] RSP: 002b:00007fc49b3b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  245.536725][    C1] RAX: ffffffffffffffda RBX: 00007fc49a7b5fa0 RCX: 00007fc49a58e9a9
[  245.539550][    C1] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000006
[  245.542145][    C1] RBP: 00007fc49a610d69 R08: 0000000000000000 R09: 0000000000000000
[  245.544810][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.547381][    C1] R13: 0000000000000000 R14: 00007fc49a7b5fa0 R15: 00007ffdf1bc68a8
[  245.550074][    C1]  </TASK>
[  245.551723][    C1] Kernel Offset: disabled
[  245.553090][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:27:02  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8185b07e RCX=434c163388ed2d00 RDX=0000000000000003
RSI=ffffffff8d9ea81e RDI=ffffffff8be28d00 RBP=ffffc900048a79b0 RSP=ffffc900048a78b0
R8 =000000000001ffff R9 =0000000000400000 R10=0000000000400008 R11=fffff52000914f5d
R12=ffffffff89967a97 R13=ffffc900034e3030 R14=dffffc0000000000 R15=1ffff92000914f24
RIP=ffffffff8b6d4255 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f36018786c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc49b3b1fc8 CR3=000000002fcac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc49a611d4f
XMM06=0000000000000000 00007fc49a611d49 XMM07=0000000000000000 00007fc49a611d5d
XMM08=0000000000000000 00007fc49a611de3 XMM09=0000000000000000 00007fc49a611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0470
R8 =ffff888021920237 R9 =1ffff11004324046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af188b R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc49b3b26c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c366c25 CR3=00000000301bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000001 0000000000000406
XMM02=ffff88810f8c7d00 ffffffff8b6bb194 XMM03=0000000000000001 0000000000000402
XMM04=ffff88810f8c7d00 ffffffff8b6bb194 XMM05=0000000000000001 0000000000000406
XMM06=ffff88810f8c7d00 ffffffff8b6bb194 XMM07=0000000000000001 0000000000000402
XMM08=ffff88810f8c7d00 ffffffff8b6bb194 XMM09=0000000000000000 00007f3600a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
