last executing test programs:

2.008788004s ago: executing program 1 (id=4324):
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x8}) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x8})
ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)=@default)
socket$xdp(0x2c, 0x3, 0x0) (async)
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0)
socket$inet6(0xa, 0x3, 0x2) (async)
r1 = socket$inet6(0xa, 0x3, 0x2)
sendto$inet6(r1, &(0x7f0000000080)="3c31864ef33945fbaa4dd0ee08b1c047af236f807ab3fc3c7a122bf0e159bee8285cf5e6e32e9684437b1c4793e6118ca654bd6833935bd28abb5c56da983285ef0281e9461a5bc7efdf60789c38e012e972fc7dbb0e73040ecfb77380463e", 0x5f, 0x20000000, &(0x7f0000000100)={0xa, 0x4e20, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) (async)
sendto$inet6(r1, &(0x7f0000000080)="3c31864ef33945fbaa4dd0ee08b1c047af236f807ab3fc3c7a122bf0e159bee8285cf5e6e32e9684437b1c4793e6118ca654bd6833935bd28abb5c56da983285ef0281e9461a5bc7efdf60789c38e012e972fc7dbb0e73040ecfb77380463e", 0x5f, 0x20000000, &(0x7f0000000100)={0xa, 0x4e20, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000180), 0x4)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8880}, 0x30000080)
accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10, 0x80800) (async)
r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10, 0x80800)
bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e22, @local}, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000044)
r5 = accept4(r0, &(0x7f0000000540)=@xdp, &(0x7f00000005c0)=0x80, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
r8 = accept4$bt_l2cap(r5, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x80000)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000800)={{<r9=>0x0, 0x2, 0x9, 0x1, 0xb3, 0x3, 0xe, 0x718, 0x4, 0x8, 0x80, 0x4, 0xc, 0x0, 0xc}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f00000008c0)={{r9, 0xf91, 0xc12, 0xe39c, 0x9, 0x8, 0x8, 0x4, 0xff, 0x0, 0x800, 0x4, 0x9, 0x80000001, 0x2}, 0x18, [0x0, 0x0, 0x0]}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f00000008c0)={{r9, 0xf91, 0xc12, 0xe39c, 0x9, 0x8, 0x8, 0x4, 0xff, 0x0, 0x800, 0x4, 0x9, 0x80000001, 0x2}, 0x18, [0x0, 0x0, 0x0]})
setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000980), 0x4) (async)
setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000980), 0x4)
setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f00000009c0), 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%-5lx  \x00'}, 0x20)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0), 0x4)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, r10, 0x0, '\x00', r3, r11, 0x0, 0x4, 0x1}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r5)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r12)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r13, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0xaa, 0xb9, &(0x7f0000000fc0)="2676fba9b4212d58831de838e7fe36d1f8152b8b4641797fa2203ff17492be077fea84f5a0fe787086f6f980eb575f0f34f8ce15102c8b532f67a405e4284e8b760c4375bd5df1bdfb1b486172073b406777ce0b920b9b1e03d63aabc6c5a8eb57ac080cbd602ae4636810121455e472178a1e3111443fc1c1a01f57088189d75ee5ed7035497256281aa4371c502392b4588c15a197552964d02ffa2b9378067eb165609253649acd1e", &(0x7f0000001080)=""/185, 0x80, 0x0, 0xfe, 0xf2, &(0x7f0000001140)="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", &(0x7f0000001240)="2b88696480261d2c1a78b0e5626e7bb93238d9ef2b3d18c48253bfb04f3fabf98d0715df703f3e51538be394a1ad06e6363c83017eccd9c25d52b5dbe122f4bcb2e9d6c6d6b0c3d0a10ebf5547afe6e9838837c8cc15779c8319d081be2cb621804ffb2bab8e8a6bb91a9c005f0e6b9458be85c82fb5b024a678bb0d816fd03cc5f3860eeec56da4841cf76dde75dd6aad006a895099d55cc2bb99068a9e96d1702359735abe980488a2548b99f8f598c4b655704b60384b2937074e07fe600b178c0e1a5ade6257fc0e4bf1a93058352f6b5e063d9c8494fdcfc329329061efa07c57b23f84266e7ef51f549150f323b518", 0x2, 0x0, 0xa}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0xaa, 0xb9, &(0x7f0000000fc0)="2676fba9b4212d58831de838e7fe36d1f8152b8b4641797fa2203ff17492be077fea84f5a0fe787086f6f980eb575f0f34f8ce15102c8b532f67a405e4284e8b760c4375bd5df1bdfb1b486172073b406777ce0b920b9b1e03d63aabc6c5a8eb57ac080cbd602ae4636810121455e472178a1e3111443fc1c1a01f57088189d75ee5ed7035497256281aa4371c502392b4588c15a197552964d02ffa2b9378067eb165609253649acd1e", &(0x7f0000001080)=""/185, 0x80, 0x0, 0xfe, 0xf2, &(0x7f0000001140)="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", &(0x7f0000001240)="2b88696480261d2c1a78b0e5626e7bb93238d9ef2b3d18c48253bfb04f3fabf98d0715df703f3e51538be394a1ad06e6363c83017eccd9c25d52b5dbe122f4bcb2e9d6c6d6b0c3d0a10ebf5547afe6e9838837c8cc15779c8319d081be2cb621804ffb2bab8e8a6bb91a9c005f0e6b9458be85c82fb5b024a678bb0d816fd03cc5f3860eeec56da4841cf76dde75dd6aad006a895099d55cc2bb99068a9e96d1702359735abe980488a2548b99f8f598c4b655704b60384b2937074e07fe600b178c0e1a5ade6257fc0e4bf1a93058352f6b5e063d9c8494fdcfc329329061efa07c57b23f84266e7ef51f549150f323b518", 0x2, 0x0, 0xa}, 0x50)

2.008431282s ago: executing program 1 (id=4325):
socket$netlink(0x10, 0x3, 0x0)
socket(0x2a, 0x80000, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xe0000000}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="022a00000200"/16], 0x10}}, 0x0)
recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x80000000)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x40}, 0x24004800)
listen(r1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0)
recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0)
shutdown(r1, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2501000000000000000009000000040003800400018050000380060007004e22000008000300040000001400020077673000000000000000000000000000080001000000000008000100020000000600040005"], 0x6c}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x318, 0x10, 0x713, 0x70bd28, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd25, 0x34ff, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018495cc121927a9bca207141b9a451c00aa"}}, @replay_thresh={0x8, 0xb, 0xa7}, @coaddr={0x14, 0xe, @in=@multicast2}, @tfcpad={0x8, 0x16, 0x4}, @encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e21, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, @migrate={0x180, 0x11, [{@in=@rand_addr=0x64010102, @in6=@mcast1, @in6=@mcast1, @in6=@mcast1, 0x33, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@multicast1, @in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x18, 0x4, 0x0, 0x3503, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x2b, 0x2, 0x0, 0x3505, 0x2, 0x2}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in=@multicast2, @in6=@empty, 0x33, 0x4, 0x0, 0x0, 0x2, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@private=0xa010100, @in=@broadcast, 0x32, 0x2, 0x0, 0x3506, 0xa, 0xa}]}]}, 0x318}, 0x1, 0x0, 0x0, 0xc010}, 0x0)

1.755942014s ago: executing program 1 (id=4333):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@deltclass={0x38, 0x29, 0x8, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff1, 0xb}, {0xffff, 0xffe0}, {0x6, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xf0, 0x4}}, @tclass_kind_options=@c_prio={0x9}]}, 0x38}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061103800000000005e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newtfilter={0x814, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0x0, 0x10}, {0xffff, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x7e4, 0x2, [@TCA_BASIC_ACT={0x620, 0x3, [@m_ct={0x15c, 0xc, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x24}, @TCA_CT_MARK={0x8, 0x5, 0x2000005}, @TCA_CT_LABELS_MASK={0x14, 0x8, "9db8ba5cdb72b1032b829f1187f9aa52"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "f8eefa6a1014af92df2d9e002882ef55"}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x5, 0x1, 0x1, 0x200}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}]}, {0xdc, 0x6, "2d90a6f31834f6fdd26c8926602357411552bc4dae2b7f884d585ad829842cb937ed31eebf298ab1c8bbb070b6e59bf3936c7197fa24ba51feb370d6d919b6e888c6976188493a9c4c35dea83beb1106eb2c440578e8a89c7f3fe1f31a1e8043e60b588ec8ea0aace818981472536fc976b554aac2cbf58a177bf1fb504e5603e1389e360b6844d261f1e7753d358739679a43d69e706221d9deed40844f921a03a190442de652a24aaf97fe8c311372990eddcf48d116ada3e7ed8759d64e3b42af1aba4efc2e79dbfa31a33dad028e85fd6b742b18001f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x130, 0x10, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0xc8, 0x10, 0x3fc}, {0x3, 0x9, 0x4, 0x2}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}]}, {0xb9, 0x6, "4c75cfff810e0e52f13526c96907a9ae1a1c6c7d4bbd60bc3c1ebfc022da91480a7b895bb47033a15d3bd5eb690a882d7330c72598cc3da7f50eb2c45e3262f0e0c628d53b11ceff379abbdb8d43294df4ad3543ff4180ac14a328f7b5927ad9984ebc162a9d5050cede6ed9aea234e9ed2cfb6a1233fcb7bdf5551d232d13ad9012495ee864368ed90fec515256ca57a77c847033be112c39269ee96323c19dee32303f94c9ee20e0da57c2d47b08e08305156926"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x168, 0x8, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1ff, 0x7, 0xffffffffffffffff, 0xfffffffa, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5f4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xed, 0x6, "d7bc49cb20e7de1ea72773221b60f2d789f5efac2f7263501667b9fdc54ab7cae6cf70ba390e01c9c82d59a0eec2009757aeb313b65fedfb7e2c59d0b7c7d57da24466a40154af8d13c59f85079b279b8a15a06d1b80a800fcef6cedda74440986e23922c1c7dc897bc769448f450e698316f36726901636341e7d3b082a6274a48d913dd779985d69d7f82ccc5c2e043183a46140cdf7de2636259e0f9bca3a6016e8bccceacbe07196d05987b497fe6a3d52552acf32ec8f45eb83346fe3af50ff46a8d6c0953c198e5919dddebd4389e28d504aeb86bd232f57e6312b2fe982dcc5c2bdbd897c14"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0xfc, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0xd2, 0x6, "c2eca3bfa2ab694c5b4bc8e15471f134d96588b48644e88ffb156f810d990f0673eb46279066cec3fdd69ce39fa5b63c838d4019bae287a98808c763e63764f0d43f0d4143dcdd0124942066443604feefe4d65366293425cc86d88949fbcdcfb58197eaa5bcdfa58cec96ba323a50ba49317c007c458c203a6d1f2815f5f288b54495586d47b9e4d793332c72360526f4c00b4dcc0639854dd627dbbd10ccdaa37e4b32a662d1ebf5ffc3304368e879de136ff3ed2bc1d2ac9a0f7e2b7576c0a527bdd7cbb7c94a35ccf1f50333"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x12c, 0x2, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x16e, 0xb6, 0xb, 0x2, 0x200}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x20000006, 0x198, 0x3, 0x7, 0x200}, 0x8eaf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb7, 0x5, 0xffffffffffffffff, 0x7, 0x5}}}]}, {0xa6, 0x6, "8d03d6b3e350b7389d69daf18a95a61da642eaddd27c047caddae7b2562367ee869b52024c3b5a133d4656f669ae29da6765b337a82a437a7677fe0291d51d79a424711160c69f14380e0389f6fc33c383cb4b154157323bf7175e7f4fc8b4721e471fd2655bfc0775131d717edd366b0a4eb18c84b09f0c6c39b45541c6620b2e7ffee6c3ac257fc87c266cb8a2425baad9ae48f71ad3d682bf321dc794b27fb6f5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x7}}, @TCA_BASIC_ACT={0x1a8, 0x3, [@m_tunnel_key={0x48, 0x8, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffa}]}, {0xf, 0x6, "282834282d0976274d0c1e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xd8, 0x12, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x9c, 0x6, "3fb193425225352f5de5b52a6a17f01d82b37d85a954c0eef693390d4efebd726df6587e585ed970d26e3ce547227eef4d0bdbebd8cbf7585c1858d9c04fb7098a411183e29586f0a6dd24504f1095d67694b9a2734aa27b17b53ccc15e184f193ca61536d594dac38830520a61bc3fa0006a8aaa3a5613d152d5b5eb06a4aad8449adffb6f8a3753f9ee47228c01e25eb917d3cd93aa90c"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x84, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80000000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x4, 0x7, 0x10000000, 0x5}}]}, {0x36, 0x6, "a377934338b62b12849316d04ea9951b662e69b9c2266535ca1ffd0feae755b350d48bf018b31e5df1bd691345af98e16a90"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x2}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x814}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004044)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r10, 0x7800, 0x7800, 0x6, 0x6, {{0x26, 0x4, 0x3, 0xd, 0x98, 0x64, 0x0, 0xc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0xb, "91c6a38b8e39dea2b3"}, @timestamp_addr={0x44, 0x54, 0x52, 0x1, 0x8, [{@remote, 0x40}, {@remote, 0xc}, {@empty}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xa}, {@multicast1}, {@private=0xa010101, 0xb}, {@empty, 0xe8c}, {@rand_addr=0x64010101, 0x3}]}, @generic={0x89, 0xb, "2c28ebc234b6b12dc0"}, @end, @lsrr={0x83, 0x13, 0x5c, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}, @generic={0x0, 0x2}, @lsrr={0x83, 0x3, 0x5b}]}}}}})
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r13, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000d658fd0d455d82b186cfc45f854807b563d409fdd7890a1035637eb02ef7656bc2608f1f0c2b7ae083dae387385592cc9332797863fcf72430b53c97e131f3e8eeafe1373454391ae709834292daa704d25685e4eea6214222d805696351a960efcef6a4387f7e8fbbf44d41388ca202cc81fe7a60853753a26effa36d6dc6901862cfe809090950e7d40389110d27df31eff036c04cf948481975d52326de4c628ecfe327bfae8539bf599bcbe31413bab46149362d72d96f38bed8963ec96c5dc1dd809ff188e4b5e4f7", @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b0000000000"], 0x28}}, 0x0)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200010024000480200001800700010063740000140002800800014000000002080002400000000d090001020073797a3200000068020000000000010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d77b9d5c006deb0d8f193c435c908e2d67045597686e490f2e8144bc63f6fc667ef236b6a13449e3bbaca892e8ab8b878a9084226a6bef4bb282ee6d7549157edcf4c62f7cfd5ae400008677f3177e3527ff56b9929ccfa51149e07e6467176a7e4ca262b5420d6b80e1398eb4b9d32a23b54f5cd1c6a80f5a200744271c7d967bd4d8d8e074bde98c67706498a8e7e84c0aec06710c7ded694df015a8769ded94bdf53f78455a44a589c3af9cf3dc41caad3d5a3d5ede1e3a2aa1e6246fcb9fdf9d4505fb2ff156d16f940d1d45d62f3ab718a8599e", @ANYRES16=r2, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)

1.68254389s ago: executing program 1 (id=4335):
socketpair(0x11, 0x1, 0x100, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYRES16=r1], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000062)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="12a7bacb1c7908ccb4cb27a8787f7b76ea2670ae7c442005fd975006fbacc53421827bddd24223437fe5fecd6dce95925a362d4b600bc9ee5acdac8e3c19ba8a617b79cb448130ee17d35b93a96a1d46baf16510f881b1be7c68ab", @ANYRES32=r9, @ANYBLOB="0b000080976b640868603000"], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)={0x18c, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xb9, 0x9c, 0x0, 0x1, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @generic="46e16f7519cabb74e75f5284a7644ee2669cf260d7ee8a72b1d2136dd2cf8f62ab5e0a5db5c620d94653ffcf494387a7cace4f6db5809d7bfd444c39f08538cf4ab4867900a34e58819453bee4b96fc4da12184791474d35fe57ec181883bcd4803ca788a4adfedaaf47763633fea932df1a5ecc8e402f4288d8b2085e457fcdfcac92fab90e27f24d8a1494fb4e35fe93ff248cd58762e1ca3a5ba1c5"]}, @generic="b7b86d126d136b69478a408c8a3294c0ebf12eb1653e0d0ce38a7973dbf1402bbd1ead61ed55bb641efcc2b6acfe736059f4a4c569c1615b4cbeb079c76fb51ea210b0c65fb642d65472f7e83c0b95c09a5d5b117d1d4fb22e7edf06d7d2a08895ecab5f99e105c5f99b4a057929e21baa5217459a3cc534049033c023a0cc90f3ed876af56bfc32d8fa72e6b8d8c31b88a255ad43853ac796750fc27cf67e738f4aa69974a655d7b30d992d5d0aa6e2c4cc40eabdc6751c3b404610a2597a23"]}, 0x18c}], 0x1}, 0x0)
r10 = socket$inet6(0xa, 0x1000080002, 0x100000000000088)
bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c)
recvfrom$inet6(r10, &(0x7f0000000600)=""/232, 0xe8, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00'})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x4e23, 0xed5e, 0x4e23, 0x3, 0x2, 0x0, 0x80, 0x62, 0x0, r9}, {0xf, 0x71, 0x4, 0x5, 0x1, 0x2, 0x9328, 0x9}, {0x9, 0x40000000000000, 0x3, 0x6}, 0x4, 0x6e6bb7, 0x2, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d3, 0x2b}, 0xa, @in6=@empty, 0x3500, 0x4, 0x1, 0xdc, 0x5, 0x9, 0x7}}, 0xe8)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000041c0), 0x8)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
socket(0x10, 0x803, 0x0)

1.046701169s ago: executing program 0 (id=4345):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x101}, {{0x0, 0x1a000, 0x0, 0x0, 0x0, 0xfffffffffffffe5d}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000001a00)=""/4104, 0x100d}, {0x0}, {&(0x7f00000004c0)=""/121, 0x79}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x7, 0x40000020, 0x0)

1.045212263s ago: executing program 0 (id=4346):
socket$kcm(0x29, 0x2, 0x0) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7) (async)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
sendfile(r0, r1, 0x0, 0x1)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0) (async, rerun: 64)
r3 = socket$inet6(0xa, 0x3, 0x6) (rerun: 64)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8) (rerun: 32)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r7, 0x800000, 0x5}, &(0x7f0000000180)=0xc) (async)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) (async)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="5e00000000000000d9ab3dd19924e6bacc25d6cbe6505cb45794cd9604f6c901993aa4331482c380f5ea13b6f5cb8c812b44d74a8041130bb74ec956210ecd5cccfe9aecc64aa0df111c92bb892adb5666f5ed5d1b6fa9089de3279fe69546c41cc0e57e3b1fbfa05b25e56e8f17fb1f4552e24cf50f0fd3a8a3b52af7336a55fa3b7402"], 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)={0x32}, 0x8) (async)
sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64)
r9 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x8c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)

987.04344ms ago: executing program 0 (id=4347):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xffffffffffffffff, 0x70bd2c, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9b0}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1, 0xe, 0xe3, 0x90}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x48100)

985.84086ms ago: executing program 0 (id=4353):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r1=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000043c0)={@empty, 0xe, r1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x7, 0xa, 0x506, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x4004840)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x23, &(0x7f0000000080)="d75eb06acc26218679e832d6afbffde503a8ab86d068aac3b564645fd6b54aad54dee32e4b7e8982cb60ce1c1d448121940c6b16f5d7a32c356a92dc5b212da20c3901868900a5112ddbf4597602ce509d7f79b8ceebad9d8d0f6a27db2d85d390fb76fbd5259de40db7825c90076ece9e9f6da320db92ab67b6001683ed3277ad3653d8b92f35c30f7e94551a438b4555bf01ffab5ed5830a5e0acf0e7183b64a8fbc8ada011f47ecb5450791f411157d907b8bf8507227003e5f31d036829585f1f8d66208b442375535c9a0dd729415794efbea6b2a804634", 0xda)

846.662376ms ago: executing program 1 (id=4348):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe)
poll(&(0x7f0000000080)=[{r0, 0x46a8}], 0x1, 0x400)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
socket(0x2b, 0x1, 0xfffffffc)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x64}}, 0x40080)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18852d3568675822433a7b047b1500000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100040000000000000007000000", @ANYRES32=r10, @ANYBLOB="5d5b0000000000001c001a8018000a80140007002001000000000000000000ee178504001400350077"], 0x50}}, 0x0)
connect$inet(r9, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)

845.107231ms ago: executing program 0 (id=4355):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r1)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00')
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9b00000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1af}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x48800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000011c0)={'batadv0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan1\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)=ANY=[@ANYBLOB="005ed970", @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250f0000000500290001000000080032000c00000008000300", @ANYRES32=r5, @ANYBLOB="0500300000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000000)

766.792567ms ago: executing program 0 (id=4349):
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r4, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x88b6, 0x80}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x84}}, 0x8004) (async)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r4, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x88b6, 0x80}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x84}}, 0x8004)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x432, 0xfff, 0x9, 0x20008, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x432, 0xfff, 0x9, 0x20008, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', <r7=>0x0})
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r7}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001a0001002bbd70000000000002148e00fc00ff060000000008000600000000000c0009000d001408", @ANYRES32=r7, @ANYBLOB="a500bc98aaa7a12c8b5cf8b8e5aa569badac3c7d4eac80d835fd5351925c2ddd481e23c8cb37735169f220beab4a11e82bca379fc7fc6f62e9d5f2cbfc73476446b898bbbf61150d80c8d094f6ead469189b490f093f36aa9bb04de374d98822d49b0efeeff9b8"], 0x30}, 0x1, 0x0, 0x0, 0x20001040}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
socket$netlink(0x10, 0x3, 0x4) (async)
r8 = socket$netlink(0x10, 0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async)
connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r10, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a0002000082b0356d000000000000000800090002000004"], 0x30}}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a0002000082b0356d000000000000000800090002000004"], 0x30}}, 0x0)
pipe(&(0x7f0000000540)={<r12=>0xffffffffffffffff})
write$cgroup_devices(r12, &(0x7f00000005c0)=ANY=[@ANYBLOB="62202a3a2a20f8ae4c4cb2c8ffb6439b776d00"], 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e6572000000480002800800024000000084080003400000000a080004400000000f080001400004000024000580090001006d6574610000000014000280020001400000000e08000240000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xb0}}, 0x0)
writev(r8, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)

456.861115ms ago: executing program 2 (id=4356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x41f, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0xfffffff4}}, 0x7c}}, 0x0)

456.633966ms ago: executing program 2 (id=4357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d00)=ANY=[@ANYBLOB="54020000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf250200000088000180380004001400010002004e20ffffffff0000000000000000200002000a004e2200000005fe8800000000000000000000000001010400000044000400200001000a004e2200001000fc00000000000000000000000000000107000000200002000a004e2400000006fc020000000000000000000000000000ffffffff08"], 0x254}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001dc0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2, @ANYBLOB="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", @ANYBLOB="32a67faf0c4669ff0a9212fe94927eb3d542064fd344ec5bc7b14f23d5b6b292dbc2744f1a4ae24b8bbac94dd07600411d76252a4c5845c37dfda2f62f2f4248b8362c55fbcb8ec32c5e67f8ff17cafa45203971110e322bc7ffca384b8d9d5acaf8ea9119d9079eb7655477fa2eb9fcdc98b97019f7f2efb7bc3ae22937bc4eaa36a0e7db8a28b08becd3842f2244c1565fbc2696043371d0158c6f77fe4eae8f3c29256df1a7c29a1e7de3db76f78c2a6ce32dda66031e9655cef256b9aa48a8", @ANYRESDEC=r0, @ANYRES16=r1, @ANYRESOCT=r2], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$kcm(0x29, 0x7, 0x0)
r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcdfa, 0x0, 0x0, 0x0, 0xd70}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@s}, @alu={0x7, 0x0, 0x1, 0x6, 0xe, 0x1}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x0, 0x91b, 0x81}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x2, 0x1, 0x6, 0x1}], 0x10, 0x3ff}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000240)={r4, r5})
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000002c0004800100666962001c000280080001400000000c08000240000000010800034000000032140000001100010000000000000000000000000a000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800)
write(r0, &(0x7f0000000500)="00f51b0a0fd2fd54c249f53235583c2e1cf423dcc09d945a80e347b221a2c1db7e9f899e0d772181e09dd5b026983460bdc361233dbb8648e2ac01a8cc21ad7e6418df0faaa14bebc534dda9ec9955c1af12901d31e04aaa099d50f60b39002ffd643e0c222d4acd10ca8a11e4fd8c89c021c528bf202d349e36c3def4af965df04c78ccdda33da279406aebc3344efcb318764651312805f113d9bcff30e6e458cb3f8b38f64e48cda9a346f8909be9ec37989abde5fa275b001e99d9b47cc6be0c3f400018b2400111449c301d", 0xce)

453.073132ms ago: executing program 2 (id=4358):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x300}]}}}]}, 0x3c}}, 0x4020000)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x18000000)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x25}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

346.768845ms ago: executing program 2 (id=4359):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
readv(r2, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5e54d5", 0x3}], 0x1}, 0x1)
r7 = socket(0x10, 0x803, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6)
sendto(0xffffffffffffffff, &(0x7f0000000540)="120000100000a1faffffff3e00000b4f3c97af04c2b22ee5d4a3894bee9b55ee966cc9037a8541f5c50344412a788d22f7592ec9bc9a9f280a3b1ae2bb62e67d0f2dd0a5c1018ed81d07ab2e9a8a150384f494b64477340a0834b71d055cab4abb79fed2b86a7156a9d490c21f71f8f32269dbcafed83318f674b04bbab1927573887691755461805e84e5455776dc6424bc96f79bea798fcf9a94c41a145c77cc94f89c4abbc97199e9319073a18b04b5583f4bd3e0e746", 0xb8, 0x814, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7}}], 0x1, 0x2040000, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xa}, {0x8, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0)
recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r4, 0x0, 0x8010)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r12 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r12, 0x0, 0x15, &(0x7f0000000040), 0x4)
syz_emit_ethernet(0x1d2, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0)

201.626301ms ago: executing program 2 (id=4360):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1400000004000000040000000000000008036f8b16f6dc03d753266cc4da818f234b8c0b4bc948554a2028e91a997a379ce31fc4fbcdf5f636dcc1ef86014ee474efb5f7b6e043c1972858cdaa868299f9590c827c96602de779", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = socket(0x15, 0x80005, 0x0)
getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000a00)={0x0, 0x8, 0x30}, 0xc)
r4 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000))
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x2e8, 0x0, 0x2e8, 0x0, 0x2e8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], '\x00', 'tunl0\x00', {0xff}, {0xff}, 0x36, 0x4, 0xf, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xff, 0x91ea20fa44f294db, 0x0, 0xff000000], 'syzkaller1\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0xc, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @mcast2, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xffffff], 'ip6gre0\x00', 'vxcan1\x00', {}, {}, 0x1d, 0x8, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6c, 0x2, 0xe772453f5b41c059, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630)
r5 = openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r7, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)
unshare(0x6a040000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}, 0x1, 0x0, 0x0, 0x4044051}, 0x0)

36.723042ms ago: executing program 2 (id=4361):
socket$kcm(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000380)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x24}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000280)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100"], 0x36)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0)
readv(r3, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000500)=""/148, 0x94}, {0x0}], 0x3)
pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
writev(r8, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r9, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r9, &(0x7f0000000000), 0xffffff98)
splice(r7, 0x0, r9, 0x0, 0x80, 0x8)
write(0xffffffffffffffff, 0x0, 0x0)
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0xcb, 0x72, 0x401, 0x3, 0x7, 0x1, 0x7, 'syz1\x00'})

0s ago: executing program 1 (id=4362):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x101}, {{0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffffffffe5d}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000001a00)=""/4104, 0x100d}, {0x0}, {&(0x7f00000004c0)=""/121, 0x79}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x7, 0x40000020, 0x0)

kernel console output (not intermixed with test programs):

ed on ipvlan1
[  154.142688][T12978] netlink: 'syz.1.2124': attribute type 4 has an invalid length.
[  154.147444][T12978] netlink: 'syz.1.2124': attribute type 4 has an invalid length.
[  154.206322][T12976] batadv4: entered promiscuous mode
[  154.210438][T12976] batadv4: entered allmulticast mode
[  154.216706][T12985] netlink: 'syz.1.2126': attribute type 4 has an invalid length.
[  154.222991][T12985] netlink: 'syz.1.2126': attribute type 4 has an invalid length.
[  154.410659][T12999] netlink: 'syz.2.2131': attribute type 1 has an invalid length.
[  154.509696][T13003] netlink: 'syz.1.2132': attribute type 10 has an invalid length.
[  154.648593][T13029] 8021q: adding VLAN 0 to HW filter on device bond21
[  154.675153][T13029] 8021q: adding VLAN 0 to HW filter on device bond21
[  154.678655][T13029] bond21: (slave vxcan13): The slave device specified does not support setting the MAC address
[  154.686695][T13029] bond21: (slave vxcan13): Error -95 calling set_mac_address
[  154.835976][T13056] openvswitch: netlink: EtherType 0 is less than min 600
[  154.966239][T13070] lo speed is unknown, defaulting to 1000
[  155.060186][T13070] hsr0 speed is unknown, defaulting to 1000
[  155.279610][T13081] batman_adv: batadv0: Interface deactivated: team0
[  155.281853][T13081] batman_adv: batadv0: Removing interface: team0
[  155.284863][T13081] veth0_to_bridge: left allmulticast mode
[  155.287106][T13081] veth0_to_bridge: left promiscuous mode
[  155.289153][T13081] bridge0: port 3(veth0_to_bridge) entered disabled state
[  155.292877][T13081] bridge_slave_0: left allmulticast mode
[  155.294701][T13081] bridge_slave_0: left promiscuous mode
[  155.296648][T13081] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.300308][T13081] bridge_slave_1: left allmulticast mode
[  155.302106][T13081] bridge_slave_1: left promiscuous mode
[  155.303984][T13081] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.311645][T13081] team0: Port device team_slave_0 removed
[  155.314576][T13081] team0: Port device team_slave_1 removed
[  155.316939][T13081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.320325][T13081] bond1: (slave gretap1): Releasing active interface
[  155.324086][T13081] bond13: (slave batadv1): Releasing active interface
[  155.327776][T13081] batman_adv: batadv0: Removing interface: ipvlan2
[  155.334098][T13081] bond16: (slave geneve3): Releasing active interface
[  155.338915][T13081] bond17: (slave batadv2): Releasing active interface
[  155.342998][T13081] bond18: (slave batadv3): Releasing active interface
[  155.350546][T13081] bond20: (slave ip6gretap1): Removing an active aggregator
[  155.354052][T13081] bond20: (slave ip6gretap1): Releasing backup interface
[  155.356419][T13081] bond20: (slave ip6gretap1): the permanent HWaddr of slave - b6:8a:20:4f:f4:f2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  155.365194][T13081] bond20: (slave veth5): Releasing backup interface
[  155.604635][T13090] lo speed is unknown, defaulting to 1000
[  155.649140][T13091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.691488][T13090] hsr0 speed is unknown, defaulting to 1000
[  155.898754][T13096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.044925][T13098] lo speed is unknown, defaulting to 1000
[  156.142546][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.186322][T13098] hsr0 speed is unknown, defaulting to 1000
[  156.210880][    T9] lo speed is unknown, defaulting to 1000
[  156.215343][    T9] syz0: Port: 1 Link DOWN
[  156.238259][    T9] lo speed is unknown, defaulting to 1000
[  156.246856][    T9] syz0: Port: 1 Link ACTIVE
[  156.254026][ T1271] lo speed is unknown, defaulting to 1000
[  156.263804][T13097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.514508][T13118] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  156.610880][T13122] lo speed is unknown, defaulting to 1000
[  156.689946][T13122] hsr0 speed is unknown, defaulting to 1000
[  157.030514][T13131] 8021q: adding VLAN 0 to HW filter on device bond15
[  157.033933][T13131] bond0: (slave bond15): making interface the new active one
[  157.038059][T13131] bond0: (slave bond15): Enslaving as an active interface with an up link
[  157.140743][T13141] __nla_validate_parse: 26 callbacks suppressed
[  157.140755][T13141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2173'.
[  157.148375][T13141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2173'.
[  157.152422][T13141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2173'.
[  157.155995][T13141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2173'.
[  157.165225][T13141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2173'.
[  157.169876][T13141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2173'.
[  157.173424][T13141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2173'.
[  157.177145][T13141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2173'.
[  157.180772][T13141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2173'.
[  157.184305][T13141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2173'.
[  157.346696][T13156] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  157.493494][T13165] veth7: entered promiscuous mode
[  157.642059][T13170] openvswitch: netlink: Flow key attr not present in new flow.
[  157.934507][   T24] lo speed is unknown, defaulting to 1000
[  157.936625][   T24] syz0: Port: 1 Link DOWN
[  157.939649][   T24] lo speed is unknown, defaulting to 1000
[  157.943913][  T790] lo speed is unknown, defaulting to 1000
[  157.945968][  T790] syz0: Port: 1 Link ACTIVE
[  157.950630][   T24] lo speed is unknown, defaulting to 1000
[  157.988695][T13224] bond22: entered promiscuous mode
[  157.990584][T13224] bond22: entered allmulticast mode
[  158.001689][T13224] bridge9: the hash_elasticity option has been deprecated and is always 16
[  158.010314][T13224] bond22: (slave bridge9): making interface the new active one
[  158.012851][T13224] bridge9: entered promiscuous mode
[  158.014700][T13224] bridge9: entered allmulticast mode
[  158.017448][T13224] bond22: (slave bridge9): Enslaving as an active interface with an up link
[  158.194956][T13243] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002
[  158.224628][T13245] tipc: Enabled bearer <ib:veth0_to_bond>, priority 10
[  158.396101][  T790] lo speed is unknown, defaulting to 1000
[  158.399704][ T5547] lo speed is unknown, defaulting to 1000
[  158.402279][  T790] lo speed is unknown, defaulting to 1000
[  158.527710][T13267] tipc: Resetting bearer <eth:gre0>
[  158.572704][T13267] wg2: left promiscuous mode
[  158.574334][T13267] wg2: left allmulticast mode
[  158.580528][T13267] sit5: left promiscuous mode
[  158.582194][T13267] bond13: left promiscuous mode
[  158.583950][T13267] batadv1: left promiscuous mode
[  158.585658][T13267] batadv1: left allmulticast mode
[  158.588572][T13267] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  158.591286][T13267] macsec0: left allmulticast mode
[  158.595084][T13267] bond18: left promiscuous mode
[  158.599312][T13267] batadv3: left promiscuous mode
[  158.600977][T13267] batadv3: left allmulticast mode
[  158.606421][T13267] veth5: left promiscuous mode
[  158.611812][T13267] veth7: left promiscuous mode
[  158.613554][T13267] bond22: left promiscuous mode
[  158.615199][T13267] bridge9: left promiscuous mode
[  158.617176][T13267] bond22: left allmulticast mode
[  158.618842][T13267] bridge9: left allmulticast mode
[  158.622476][ T5547] lo speed is unknown, defaulting to 1000
[  158.622514][T13268] @: renamed from veth0_vlan
[  158.624403][ T5547] syz0: Port: 1 Link DOWN
[  158.632051][ T5547] lo speed is unknown, defaulting to 1000
[  158.724025][T13280] validate_nla: 20 callbacks suppressed
[  158.724039][T13280] netlink: 'syz.2.2219': attribute type 4 has an invalid length.
[  158.729741][T13280] netlink: 'syz.2.2219': attribute type 4 has an invalid length.
[  158.733738][  T790] lo speed is unknown, defaulting to 1000
[  158.735785][  T790] syz0: Port: 1 Link ACTIVE
[  158.741087][  T790] lo speed is unknown, defaulting to 1000
[  158.779238][T13282] lo speed is unknown, defaulting to 1000
[  158.936082][T13282] hsr0 speed is unknown, defaulting to 1000
[  158.959605][T13300] netlink: 'syz.2.2224': attribute type 10 has an invalid length.
[  158.980671][T13300] team0: Port device 0! added
[  158.989635][T13300] netlink: 'syz.2.2224': attribute type 10 has an invalid length.
[  159.028309][T13300] team0: Port device 0! removed
[  159.089846][T13308] netlink: 'syz.1.2227': attribute type 4 has an invalid length.
[  159.094887][T13308] netlink: 'syz.1.2227': attribute type 4 has an invalid length.
[  159.515588][T13331] netlink: 'syz.1.2235': attribute type 4 has an invalid length.
[  159.522221][T13331] netlink: 'syz.1.2235': attribute type 4 has an invalid length.
[  159.773141][T13341] netlink: 'syz.2.2238': attribute type 3 has an invalid length.
[  159.847193][T13345] lo speed is unknown, defaulting to 1000
[  159.934809][T13345] hsr0 speed is unknown, defaulting to 1000
[  160.417859][T13366] netlink: 'syz.2.2247': attribute type 13 has an invalid length.
[  160.439066][T13366] 8021q: adding VLAN 0 to HW filter on device team0
[  160.443208][T13366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.453461][T13368] bridge_slave_0: invalid flags given to default FDB implementation
[  160.638659][T13393] lo speed is unknown, defaulting to 1000
[  160.792514][T13393] hsr0 speed is unknown, defaulting to 1000
[  160.863304][T13416] veth1_to_batadv: entered promiscuous mode
[  160.865524][T13416] veth1_to_batadv: entered allmulticast mode
[  160.981496][T13422] lo speed is unknown, defaulting to 1000
[  161.117217][ T1115] block nbd1: Possible stuck request ffff8880224a0000: control (read@0,4096B). Runtime 60 seconds
[  161.129339][T13422] hsr0 speed is unknown, defaulting to 1000
[  161.129559][T13428] lo speed is unknown, defaulting to 1000
[  161.288219][T13428] hsr0 speed is unknown, defaulting to 1000
[  161.704190][T13438] bond0: entered promiscuous mode
[  161.709767][T13438] bond0: left promiscuous mode
[  161.719529][T13439] bond0: entered promiscuous mode
[  161.722010][T13439] bond0: left promiscuous mode
[  162.024911][T13452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.163480][T13456] veth0_to_team: entered promiscuous mode
[  162.165616][T13456] veth0_to_team: entered allmulticast mode
[  162.304258][T13463] lo speed is unknown, defaulting to 1000
[  162.346396][T13464] __nla_validate_parse: 56 callbacks suppressed
[  162.346411][T13464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2279'.
[  162.384922][T13463] hsr0 speed is unknown, defaulting to 1000
[  162.710661][T13467] lo speed is unknown, defaulting to 1000
[  162.800709][T13467] hsr0 speed is unknown, defaulting to 1000
[  162.855576][  T790] IPVS: starting estimator thread 0...
[  162.921968][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'.
[  162.947559][T13471] IPVS: using max 78 ests per chain, 187200 per kthread
[  162.996669][T13479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2283'.
[  163.001638][T13479] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.006341][T13475] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2282'.
[  163.145788][ T5857] IPVS: stop unused estimator thread 0...
[  163.148405][  T790] lo speed is unknown, defaulting to 1000
[  163.153139][  T790] lo speed is unknown, defaulting to 1000
[  163.169665][  T790] lo speed is unknown, defaulting to 1000
[  163.248287][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'.
[  163.251510][T13493] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  163.254052][T13493] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.409122][T13508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.455560][T13511] lo speed is unknown, defaulting to 1000
[  163.492129][T13516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2291'.
[  163.557080][T13511] hsr0 speed is unknown, defaulting to 1000
[  163.629176][T13521] syzkaller1: entered allmulticast mode
[  163.675467][T13521] syzkaller1: left allmulticast mode
[  164.219167][T13529] validate_nla: 16 callbacks suppressed
[  164.219178][T13529] netlink: 'syz.0.2299': attribute type 5 has an invalid length.
[  164.263816][T13532] tap0: tun_chr_ioctl cmd 1074025678
[  164.265750][T13532] tap0: group set to 0
[  164.388799][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'.
[  164.393062][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'.
[  164.401608][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2304'.
[  164.452705][T13549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2306'.
[  164.455956][T13549] netlink: 'syz.0.2306': attribute type 5 has an invalid length.
[  164.503645][T13549] lo speed is unknown, defaulting to 1000
[  164.608267][T13549] hsr0 speed is unknown, defaulting to 1000
[  164.609539][T13554] lo speed is unknown, defaulting to 1000
[  164.653910][T13564] bridge4: entered promiscuous mode
[  164.687052][T13567] netlink: 'syz.0.2310': attribute type 1 has an invalid length.
[  164.760309][T13554] hsr0 speed is unknown, defaulting to 1000
[  164.807837][T13576] macvlan2: entered allmulticast mode
[  164.809647][T13576] hsr0: entered allmulticast mode
[  164.811363][T13576] hsr_slave_0: entered allmulticast mode
[  164.813256][T13576] hsr_slave_1: entered allmulticast mode
[  164.819513][T13576] hsr0: left allmulticast mode
[  164.821305][T13576] hsr_slave_0: left allmulticast mode
[  164.823196][T13576] hsr_slave_1: left allmulticast mode
[  164.924436][T13582] netlink: 'syz.0.2314': attribute type 5 has an invalid length.
[  164.953605][T13583] netlink: 'syz.1.2313': attribute type 1 has an invalid length.
[  164.982992][T13587] netlink: 'syz.0.2316': attribute type 4 has an invalid length.
[  164.992314][T13587] netlink: 'syz.0.2316': attribute type 4 has an invalid length.
[  165.265165][T13611] netlink: 'syz.0.2324': attribute type 4 has an invalid length.
[  165.272604][T13611] netlink: 'syz.0.2324': attribute type 4 has an invalid length.
[  165.318599][T13615] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  165.509389][T13631] netlink: 'syz.2.2331': attribute type 4 has an invalid length.
[  165.516227][  T790] lo speed is unknown, defaulting to 1000
[  165.519736][  T790] syz0: Port: 1 Link DOWN
[  165.521325][  T790] lo speed is unknown, defaulting to 1000
[  165.531846][ T5547] lo speed is unknown, defaulting to 1000
[  165.535121][ T5547] syz0: Port: 1 Link ACTIVE
[  165.549962][T13628] sctp: [Deprecated]: syz.0.2330 (pid 13628) Use of int in max_burst socket option.
[  165.549962][T13628] Use struct sctp_assoc_value instead
[  165.625565][T13639] lo speed is unknown, defaulting to 1000
[  165.727524][T13639] hsr0 speed is unknown, defaulting to 1000
[  165.738990][T13652] bond0: option use_carrier: invalid value (2)
[  165.881578][T13666] vlan5: entered promiscuous mode
[  165.884677][T13666] vlan5: entered allmulticast mode
[  165.892177][T13666] hsr_slave_1: entered allmulticast mode
[  165.901255][T13670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  166.242311][T13701] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  166.462782][ T1271] lo speed is unknown, defaulting to 1000
[  166.464829][ T1271] syz0: Port: 1 Link DOWN
[  166.470505][  T790] lo speed is unknown, defaulting to 1000
[  166.473040][  T790] syz0: Port: 1 Link ACTIVE
[  166.477251][ T1271] lo speed is unknown, defaulting to 1000
[  166.589860][T13727] vxcan1 (unregistering): left allmulticast mode
[  166.626073][T13736] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  166.816030][T13751] netlink: del zone limit has 4 unknown bytes
[  166.936913][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  166.939447][T13764] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.025244][T13771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.039797][T13768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.111743][T13765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.289821][T13788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.350174][T13792] __nla_validate_parse: 34 callbacks suppressed
[  167.350186][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'.
[  167.407055][T13797] siw: device registration error -23
[  167.579662][T13800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2384'.
[  167.582893][T13800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2384'.
[  167.655129][T13805] bridge11: the hash_elasticity option has been deprecated and is always 16
[  167.660423][T13805] bridge11: entered allmulticast mode
[  167.688703][T13809] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2388'.
[  167.723127][T13812] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2387'.
[  167.793439][T13813] IPVS: Scheduler module ip_vs_ not found
[  168.025841][T13820] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2392'.
[  168.091548][T13832] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2395'.
[  168.120345][T13834] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2396'.
[  168.183357][T13836] netlink: set zone limit has 8 unknown bytes
[  168.186966][T13836] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2398'.
[  168.237445][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'.
[  168.244764][T13847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  168.272483][T13847] lo speed is unknown, defaulting to 1000
[  168.351523][T13847] hsr0 speed is unknown, defaulting to 1000
[  170.217209][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  173.225740][ T5270] udevd[5270]: worker [5826] /devices/virtual/block/nbd1 is taking a long time
[  190.077727][T13863] validate_nla: 21 callbacks suppressed
[  190.077739][T13863] netlink: 'syz.0.2408': attribute type 10 has an invalid length.
[  190.168152][T13869] veth1: left promiscuous mode
[  190.169939][T13869] veth0_to_team: left promiscuous mode
[  190.171771][T13869] veth0_to_team: left allmulticast mode
[  190.174519][T13869] veth1_to_batadv: left promiscuous mode
[  190.176432][T13869] veth1_to_batadv: left allmulticast mode
[  190.183612][ T5827] Bluetooth: hci2: link tx timeout
[  190.185546][T13869] batadv_slave_1: left promiscuous mode
[  190.186228][ T5827] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  190.195963][T13869] bond12: left promiscuous mode
[  190.207019][T13869] tipc: Resetting bearer <eth:syzkaller0>
[  190.209244][T13869] syzkaller0: left promiscuous mode
[  190.211168][T13869] syzkaller0: left allmulticast mode
[  190.215678][T13869] geneve6: left promiscuous mode
[  190.217616][T13869] geneve6: left allmulticast mode
[  190.228107][T13869] bond13: left promiscuous mode
[  190.233217][T13869] batadv3: left promiscuous mode
[  190.234959][T13869] batadv3: left allmulticast mode
[  190.255600][T13869] vlan5: left promiscuous mode
[  190.257511][T13869] vlan5: left allmulticast mode
[  190.259279][T13869] hsr_slave_1: left allmulticast mode
[  190.272872][T13872] netlink: 'syz.2.2409': attribute type 12 has an invalid length.
[  190.279133][T13874] @: renamed from veth0_vlan
[  190.286157][ T5856] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.289279][ T5856] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  190.292167][ T5856] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.295108][ T5856] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  190.298424][ T5856] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.301330][ T5856] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  190.304152][ T5856] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.307543][ T5856] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  190.413365][T13883] sctp: [Deprecated]: syz.0.2413 (pid 13883) Use of int in maxseg socket option.
[  190.413365][T13883] Use struct sctp_assoc_value instead
[  190.484442][T13889] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  190.490374][T13887] IPVS: stopping backup sync thread 13889 ...
[  190.529059][T13887] netlink: 'syz.0.2414': attribute type 39 has an invalid length.
[  190.994211][T13901] __nla_validate_parse: 1 callbacks suppressed
[  190.994222][T13901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2417'.
[  191.041380][T13908] netlink: 'syz.1.2420': attribute type 10 has an invalid length.
[  191.046974][T13908] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  191.057958][T13909] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2420'.
[  191.061379][T13912] netlink: 'syz.0.2421': attribute type 10 has an invalid length.
[  191.064462][T13908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2420'.
[  191.068177][T13912] batman_adv: batadv0: Adding interface: team0
[  191.070230][T13912] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.080475][T13909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.085619][T13912] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  191.093133][T13912] netlink: 'syz.0.2421': attribute type 10 has an invalid length.
[  191.095704][T13912] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2421'.
[  191.101127][T13912] team0: entered promiscuous mode
[  191.103487][T13912] 8021q: adding VLAN 0 to HW filter on device team0
[  191.106363][T13912] batman_adv: batadv0: Interface activated: team0
[  191.108692][T13912] batman_adv: batadv0: Interface deactivated: team0
[  191.111057][T13912] batman_adv: batadv0: Removing interface: team0
[  191.155773][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'.
[  191.163347][T13922] netlink: 'syz.2.2422': attribute type 30 has an invalid length.
[  191.163991][T13920] lo speed is unknown, defaulting to 1000
[  191.166057][T13922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2422'.
[  191.172238][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2425'.
[  191.182585][T13922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2422'.
[  191.185577][T13922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2422'.
[  191.198188][ T1115] block nbd1: Possible stuck request ffff8880224a0000: control (read@0,4096B). Runtime 90 seconds
[  191.206636][T13925] pim6reg: entered allmulticast mode
[  191.209273][T13926] pim6reg: left allmulticast mode
[  191.243088][T13925] pim6reg: entered allmulticast mode
[  191.282455][T13920] hsr0 speed is unknown, defaulting to 1000
[  191.286306][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2427'.
[  192.203619][T13985] openvswitch: netlink: Missing key (keys=40, expected=80)
[  192.209821][T13987] netlink: 'syz.2.2439': attribute type 22 has an invalid length.
[  192.212738][T13987] netlink: 'syz.2.2439': attribute type 22 has an invalid length.
[  192.218383][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  192.352128][T14008] netlink: 'syz.1.2447': attribute type 9 has an invalid length.
[  192.794283][T14050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.850065][T14050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.906372][T14050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.098689][T14083] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  193.101965][T14083] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  193.228277][T14087] syzkaller1: entered allmulticast mode
[  193.593977][T14103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.723133][T14117] bond22: (slave bridge9): Releasing active interface
[  194.134087][T14139] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20000
[  194.205123][T14146] team0: left promiscuous mode
[  194.451039][T14170] bridge0: port 1(macvlan0) entered blocking state
[  194.453489][T14170] bridge0: port 1(macvlan0) entered disabled state
[  194.456148][T14170] macvlan0: entered allmulticast mode
[  194.459685][T14170] bridge0: entered allmulticast mode
[  194.463189][T14170] macvlan0: left allmulticast mode
[  194.464930][T14170] bridge0: left allmulticast mode
[  194.480917][T14173] bridge0: entered promiscuous mode
[  194.604918][T14183] IPVS: set_ctl: invalid protocol: 59 172.30.1.2:20003
[  194.703570][T14190] k*]: entered promiscuous mode
[  194.718380][T14195] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  194.731238][T14190] 8021q: adding VLAN 0 to HW filter on device team0
[  194.736667][T14190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.752601][T14190] rdma_op ffff88810f2021f0 conn xmit_rdma 0000000000000000
[  194.803414][T14195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.968180][T14220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.023394][T14221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.113041][T14242] validate_nla: 9 callbacks suppressed
[  195.113052][T14242] netlink: 'syz.1.2517': attribute type 5 has an invalid length.
[  195.139079][T14244] netlink: 'syz.0.2518': attribute type 1 has an invalid length.
[  195.160091][T14244] 8021q: adding VLAN 0 to HW filter on device bond17
[  195.173036][T14244] 8021q: adding VLAN 0 to HW filter on device batadv4
[  195.176644][T14244] bond17: (slave batadv4): making interface the new active one
[  195.181198][T14244] bond17: (slave batadv4): Enslaving as an active interface with an up link
[  195.235686][T14257] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.242711][T14257] syzkaller0: entered promiscuous mode
[  195.244656][T14257] syzkaller0: entered allmulticast mode
[  195.270939][T14251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.286298][T14251] siw: device registration error -23
[  195.317627][T14261] tipc: Resetting bearer <eth:syzkaller0>
[  195.320647][T14261] syzkaller0: left promiscuous mode
[  195.322536][T14261] syzkaller0: left allmulticast mode
[  195.326223][T14261] bridge0: left promiscuous mode
[  195.570897][T14266] sctp: [Deprecated]: syz.0.2525 (pid 14266) Use of int in maxseg socket option.
[  195.570897][T14266] Use struct sctp_assoc_value instead
[  195.597555][T14268] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20003
[  195.764574][T14281] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  195.796128][T14285] netlink: 'syz.0.2532': attribute type 1 has an invalid length.
[  195.799635][T14286] batadv5: entered promiscuous mode
[  195.801385][T14286] batadv5: entered allmulticast mode
[  195.816532][T14285] bond18: entered promiscuous mode
[  195.822768][T14285] 8021q: adding VLAN 0 to HW filter on device bond18
[  196.021328][T14299] : entered promiscuous mode
[  196.069763][T14309] bridge7: the hash_elasticity option has been deprecated and is always 16
[  196.072732][T14309] bridge7: entered allmulticast mode
[  196.079560][T14311] __nla_validate_parse: 120 callbacks suppressed
[  196.079571][T14311] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2541'.
[  196.106358][T14317] netlink: 'syz.2.2538': attribute type 10 has an invalid length.
[  196.118488][T14317] team0: Port device 0! added
[  196.146174][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'.
[  196.160538][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2544'.
[  196.233002][T14336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.236698][T14336] batadv_slave_1: entered promiscuous mode
[  196.244976][T14336] batadv_slave_1: entered allmulticast mode
[  196.280352][T14333] tipc: Disabling bearer <eth:syzkaller0>
[  196.389016][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'.
[  196.442858][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'.
[  196.959888][T14370] netlink: 'syz.1.2552': attribute type 10 has an invalid length.
[  197.008678][T14377] netlink: 'syz.1.2554': attribute type 1 has an invalid length.
[  197.060426][T14381] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2555'.
[  197.063669][T14381] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  197.196223][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2558'.
[  197.212931][T14401] netlink: 'syz.1.2558': attribute type 10 has an invalid length.
[  197.218289][T14401] netlink: 'syz.1.2558': attribute type 10 has an invalid length.
[  197.288502][T14410] netlink: 'syz.1.2560': attribute type 10 has an invalid length.
[  197.291126][T14410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2560'.
[  197.320423][T14412] netlink: 'syz.1.2561': attribute type 10 has an invalid length.
[  197.324809][T14412] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  197.329639][T14412] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  197.389735][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'.
[  197.424367][T14421] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2564'.
[  197.475291][T14427] sit0: entered promiscuous mode
[  197.590943][T14439] bond0: entered promiscuous mode
[  197.594437][T14439] bond0: left promiscuous mode
[  197.857845][T14463] geneve4: entered promiscuous mode
[  197.860103][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.864221][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.872519][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.875814][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.930557][T14473] lo speed is unknown, defaulting to 1000
[  198.031253][T14473] hsr0 speed is unknown, defaulting to 1000
[  198.057635][T14482] pim6reg1: entered promiscuous mode
[  198.059473][T14482] pim6reg1: entered allmulticast mode
[  198.393874][T14507] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  198.397306][T14507] bond0: option all_slaves_active: invalid value (7)
[  198.430779][T14509] NCSI netlink: No device for ifindex 813332851
[  198.448465][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.451605][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.544129][T14518] veth9: entered promiscuous mode
[  198.548021][T14518] bond23: (slave veth9): Enslaving as a backup interface with a down link
[  198.551012][T14521] syz_tun: left allmulticast mode
[  198.564285][T14521] rdma_rxe: rxe_newlink: failed to add lo
[  198.570139][T14521] sit0: left promiscuous mode
[  198.581022][T14521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.654383][T14533] IPVS: persistence engine module ip_vs_pe_ not found
[  198.851559][T14560] tipc: Resetting bearer <eth:gre0>
[  198.951633][   T24] lo speed is unknown, defaulting to 1000
[  198.953701][   T24] syz0: Port: 1 Link DOWN
[  198.958825][   T24] lo speed is unknown, defaulting to 1000
[  198.964314][ T1271] IPVS: starting estimator thread 0...
[  199.028294][T14581] bond18: left promiscuous mode
[  199.084615][T14576] IPVS: using max 79 ests per chain, 189600 per kthread
[  199.527070][T14601] syzkaller0: entered promiscuous mode
[  199.528984][T14601] syzkaller0: entered allmulticast mode
[  200.127898][T14647] validate_nla: 4 callbacks suppressed
[  200.127908][T14647] netlink: 'syz.1.2629': attribute type 5 has an invalid length.
[  200.334073][T14676] unknown channel width for channel at 909000KHz?
[  200.384438][T14682] netlink: 'syz.2.2639': attribute type 3 has an invalid length.
[  201.469961][T14739] netlink: 'syz.1.2656': attribute type 1 has an invalid length.
[  201.483836][T14739] 8021q: adding VLAN 0 to HW filter on device bond20
[  201.489876][T14739] __nla_validate_parse: 31 callbacks suppressed
[  201.489886][T14739] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2656'.
[  201.517572][T14739] veth12: entered promiscuous mode
[  201.521331][T14739] bond20: (slave veth12): Enslaving as an active interface with a down link
[  201.527634][T14739] erspan0: entered allmulticast mode
[  201.533906][T14739] bond20: (slave erspan0): making interface the new active one
[  201.537978][T14739] erspan0: entered promiscuous mode
[  201.539921][T14739] bond20: (slave erspan0): Enslaving as an active interface with an up link
[  201.573438][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'.
[  202.242048][T14767] xt_socket: unknown flags 0xd0
[  202.428849][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2663'.
[  202.463060][T14784] nftables ruleset with unbound chain
[  202.472927][T14784] macvlan1: entered promiscuous mode
[  202.478550][T14784] macvlan1: left promiscuous mode
[  203.271960][T14791] netlink: 'syz.2.2666': attribute type 4 has an invalid length.
[  203.276695][T14791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2666'.
[  203.281184][T14791] IPVS: set_ctl: invalid protocol: 59 172.30.1.3:20002
[  203.443979][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'.
[  203.506008][T14812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2672'.
[  203.557619][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2673'.
[  203.560628][T14815] netlink: 'syz.1.2673': attribute type 7 has an invalid length.
[  203.563198][T14815] netlink: 'syz.1.2673': attribute type 8 has an invalid length.
[  203.570725][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2673'.
[  203.650300][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2675'.
[  204.235410][T14846] netlink: 'syz.2.2682': attribute type 21 has an invalid length.
[  204.239090][T14846] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.2682'.
[  204.289840][T14851] netlink: 'syz.2.2684': attribute type 20 has an invalid length.
[  204.294337][T14851] netlink: 'syz.2.2684': attribute type 20 has an invalid length.
[  204.611445][T14867] netlink: 'syz.1.2688': attribute type 1 has an invalid length.
[  204.631305][T14867] bond21: (slave bridge9): making interface the new active one
[  204.634262][T14867] bond21: (slave bridge9): Enslaving as an active interface with an up link
[  204.738646][T14873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.901248][T14883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.401870][T14910] netlink: 'syz.2.2700': attribute type 83 has an invalid length.
[  205.570413][T14923] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  205.686617][T14943] netlink: 'syz.2.2710': attribute type 7 has an invalid length.
[  205.898887][T14955] netlink: 'syz.2.2714': attribute type 1 has an invalid length.
[  205.910974][T14955] 8021q: adding VLAN 0 to HW filter on device bond25
[  205.965780][T14961] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  205.975426][T14963] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  205.998896][T14969] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  207.039953][T15003] __nla_validate_parse: 18 callbacks suppressed
[  207.039964][T15003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2726'.
[  207.045032][T15003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2726'.
[  207.048253][T15003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2726'.
[  207.057348][T15003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2726'.
[  207.109329][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'.
[  207.154415][T15015] netlink: 'syz.1.2732': attribute type 1 has an invalid length.
[  207.158181][T15016] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2731'.
[  207.163440][T15015] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR
[  207.298866][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2734'.
[  208.043625][T15029] netlink: 'syz.1.2735': attribute type 1 has an invalid length.
[  208.047124][T15029] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2735'.
[  208.124148][T15036] netlink: 'syz.1.2737': attribute type 1 has an invalid length.
[  211.212284][T15054] gretap0: entered allmulticast mode
[  211.273755][T15065] tipc: Resetting bearer <eth:gre0>
[  211.279488][T15065] tipc: Resetting bearer <ib:veth0_to_bond>
[  211.302225][T15069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2748'.
[  211.321089][T15070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  211.323518][T15070] IPv6: NLM_F_CREATE should be set when creating new route
[  211.326006][T15070] IPv6: NLM_F_CREATE should be set when creating new route
[  211.328482][T15070] IPv6: NLM_F_CREATE should be set when creating new route
[  211.333115][T15070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  211.374939][T15076] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2750'.
[  211.385721][T15076] xfrm3: entered allmulticast mode
[  211.414742][T15078] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.472674][T15074] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  211.475495][T15084] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  212.023095][T15126] IPVS: Scheduler module ip_vs_sip not found
[  212.069230][T15133] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  212.118072][T15133] lo speed is unknown, defaulting to 1000
[  212.162002][T15142] netlink: 'syz.0.2770': attribute type 1 has an invalid length.
[  212.165638][T15142] __nla_validate_parse: 4 callbacks suppressed
[  212.165652][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2770'.
[  212.170827][T15142] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2770'.
[  212.218404][T15148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2771'.
[  212.225164][T15133] hsr0 speed is unknown, defaulting to 1000
[  212.256670][T15155] batadv_slave_1: entered promiscuous mode
[  212.318692][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2775'.
[  212.324420][T15163] xfrm4: entered promiscuous mode
[  212.326109][T15163] xfrm4: entered allmulticast mode
[  212.342911][T15166] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2773'.
[  212.372136][T15154] batadv_slave_1: left promiscuous mode
[  212.398555][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'.
[  212.401775][T15167] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2776'.
[  212.414645][T15169] netlink: 'syz.1.2777': attribute type 27 has an invalid length.
[  212.423123][T15167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2776'.
[  212.467282][ T1271] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  212.499552][T15177] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2779'.
[  212.502423][T15177] netlink: 14940 bytes leftover after parsing attributes in process `syz.0.2779'.
[  212.548298][T15190] openvswitch: netlink: Flow actions attr not present in new flow.
[  212.578420][ T7358] erspan0: left promiscuous mode
[  212.587406][ T7358] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  212.601664][T15195] sctp: [Deprecated]: syz.2.2785 (pid 15195) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.601664][T15195] Use struct sctp_sack_info instead
[  212.737644][T15211] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.814479][T15214] bridge_slave_1: default FDB implementation only supports local addresses
[  212.824373][T15214] sctp: [Deprecated]: syz.2.2788 (pid 15214) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.824373][T15214] Use struct sctp_sack_info instead
[  212.890005][T15222] bond13: (slave batadv3): Releasing active interface
[  212.893378][T15222] bond0: (slave bond15): Releasing active interface
[  212.896576][T15222] bond17: (slave batadv4): Releasing active interface
[  212.913255][T15224] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  213.087058][ T7358] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.095999][ T7358] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.099771][ T7358] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.102402][ T7358] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.171416][T15255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.187765][ T5890] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  213.661508][ T7358] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  213.665837][ T7358] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  213.780339][T15281] netlink: 'syz.0.2805': attribute type 1 has an invalid length.
[  213.807253][T15281] bond19: entered promiscuous mode
[  213.809520][T15281] 8021q: adding VLAN 0 to HW filter on device bond19
[  213.819040][T15281] bond19: (slave bridge7): making interface the new active one
[  213.821943][T15281] bridge7: entered promiscuous mode
[  213.824419][T15281] bond19: (slave bridge7): Enslaving as an active interface with an up link
[  213.841313][T15293] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20001
[  213.854140][T15295] netlink: 'syz.0.2808': attribute type 5 has an invalid length.
[  213.866582][T15295] netlink: 'syz.0.2808': attribute type 5 has an invalid length.
[  213.895537][T15301] netlink: 'syz.0.2810': attribute type 1 has an invalid length.
[  213.911223][T15301] 8021q: adding VLAN 0 to HW filter on device bond20
[  213.921888][T15301] vlan6: entered allmulticast mode
[  213.923578][T15301] veth1: entered allmulticast mode
[  213.925793][T15300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.049655][T15313] netlink: 'syz.2.2812': attribute type 10 has an invalid length.
[  214.053553][T15313] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  214.056735][T15313] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  214.187151][   T24] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  214.240548][T15317] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.245411][T15317] netlink: 'syz.1.2813': attribute type 1 has an invalid length.
[  214.472646][T15323] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  214.544156][T15328] sctp: [Deprecated]: syz.0.2816 (pid 15328) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.544156][T15328] Use struct sctp_sack_info instead
[  214.619908][T15336] netlink: 'syz.0.2817': attribute type 15 has an invalid length.
[  215.186240][T15356] lo speed is unknown, defaulting to 1000
[  215.266257][T15356] hsr0 speed is unknown, defaulting to 1000
[  215.640723][T15369] netlink: 'syz.1.2827': attribute type 14 has an invalid length.
[  215.848005][T15382] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  215.996135][T15405] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  215.999196][T15405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.037705][T15407] pim6reg1: entered promiscuous mode
[  216.039430][T15407] pim6reg1: entered allmulticast mode
[  216.122104][T15408] syzkaller0: left promiscuous mode
[  216.123971][T15408] syzkaller0: left allmulticast mode
[  216.142623][T15408] 8021q: adding VLAN 0 to HW filter on device bond21
[  216.146020][T15408] team0: Port device bond21 added
[  216.377016][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  216.745569][T15430] bond26: entered promiscuous mode
[  216.751816][T15430] 8021q: adding VLAN 0 to HW filter on device bond26
[  216.762677][T15430] 8021q: adding VLAN 0 to HW filter on device bond26
[  216.765452][T15430] bond26: (slave wireguard0): The slave device specified does not support setting the MAC address
[  216.769660][T15430] bond26: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  216.776033][T15430] bond26: (slave wireguard0): making interface the new active one
[  216.778874][T15430] wireguard0: entered promiscuous mode
[  216.781474][T15430] bond26: (slave wireguard0): Enslaving as an active interface with an up link
[  216.943438][T15437] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  217.092967][T15447] bond27: (slave bridge12): making interface the new active one
[  217.096691][T15447] bond27: (slave bridge12): Enslaving as an active interface with an up link
[  217.151633][T15445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  217.154773][T15453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  217.224463][T15473] __nla_validate_parse: 21 callbacks suppressed
[  217.224474][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2855'.
[  217.231907][T15471] validate_nla: 6 callbacks suppressed
[  217.231915][T15471] netlink: 'syz.2.2854': attribute type 3 has an invalid length.
[  217.312573][T15480] lo speed is unknown, defaulting to 1000
[  217.317684][T15482] veth0_to_team: entered promiscuous mode
[  217.323305][T15485] netlink: 'syz.2.2859': attribute type 1 has an invalid length.
[  217.360046][T15493] netlink: 'syz.0.2860': attribute type 1 has an invalid length.
[  217.404715][T15493] bond22: entered promiscuous mode
[  217.407388][T15493] 8021q: adding VLAN 0 to HW filter on device bond22
[  217.410116][T15492] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2860'.
[  217.428762][T15492] batadv5: entered promiscuous mode
[  217.430469][T15492] batadv5: entered allmulticast mode
[  217.432979][T15492] 8021q: adding VLAN 0 to HW filter on device batadv5
[  217.435999][T15492] bond22: (slave batadv5): making interface the new active one
[  217.448089][T15492] bond22: (slave batadv5): Enslaving as an active interface with an up link
[  217.514683][T15480] hsr0 speed is unknown, defaulting to 1000
[  217.564149][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'.
[  217.590606][T15517] sctp: [Deprecated]: syz.0.2866 (pid 15517) Use of struct sctp_assoc_value in delayed_ack socket option.
[  217.590606][T15517] Use struct sctp_sack_info instead
[  217.653728][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2866'.
[  217.702749][T15525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2868'.
[  217.736974][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  217.779766][T15533] netlink: 'syz.1.2872': attribute type 1 has an invalid length.
[  217.782971][T15535] xt_policy: too many policy elements
[  217.784542][T15533] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2872'.
[  217.843717][T15541] netlink: 'syz.1.2874': attribute type 3 has an invalid length.
[  217.848076][T15541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.854724][T15541] syzkaller1: entered promiscuous mode
[  217.856583][T15541] syzkaller1: entered allmulticast mode
[  217.880759][T15543] vlan3: entered promiscuous mode
[  217.882590][T15543] vlan3: entered allmulticast mode
[  217.884443][T15543] hsr_slave_1: entered allmulticast mode
[  217.990030][T15553] netlink: 'syz.1.2877': attribute type 1 has an invalid length.
[  217.994046][T15553] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2877'.
[  217.998245][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2877'.
[  218.437412][T15558] syzkaller0: entered promiscuous mode
[  218.439280][T15558] syzkaller0: entered allmulticast mode
[  218.443196][T15558] netlink: 'syz.0.2881': attribute type 1 has an invalid length.
[  218.456540][T15558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2881'.
[  218.462215][T15558] 8021q: adding VLAN 0 to HW filter on device bond23
[  218.551839][T15567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2883'.
[  218.790389][T15577] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4
[  218.793547][T15577] openvswitch: netlink: Flow actions attr not present in new flow.
[  218.851112][T15579] netlink: 'syz.2.2886': attribute type 1 has an invalid length.
[  218.876393][T15582] netlink: 'syz.2.2887': attribute type 2 has an invalid length.
[  218.879593][T15582] netlink: 'syz.2.2887': attribute type 1 has an invalid length.
[  219.541611][T15596] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  219.585120][T15613] sctp: [Deprecated]: syz.0.2895 (pid 15613) Use of struct sctp_assoc_value in delayed_ack socket option.
[  219.585120][T15613] Use struct sctp_sack_info instead
[  219.610903][T15617] tun0: tun_chr_ioctl cmd 2148045848
[  219.715666][T15626] 8021q: adding VLAN 0 to HW filter on device bond22
[  219.743248][T15626] 8021q: adding VLAN 0 to HW filter on device bond22
[  219.745669][T15626] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  219.755538][T15626] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  219.792154][T15641] batadv0: entered promiscuous mode
[  219.794741][T15641] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  219.798206][T15641] batadv0: left promiscuous mode
[  220.626701][T15656] gretap0: entered promiscuous mode
[  221.258224][ T1115] block nbd1: Possible stuck request ffff8880224a0000: control (read@0,4096B). Runtime 120 seconds
[  222.162571][T15770] hsr0: entered promiscuous mode
[  222.174115][T15770] hsr0: left promiscuous mode
[  222.263063][  T856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.266608][  T856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.343107][T15793] syzkaller1: entered promiscuous mode
[  222.346081][T15793] syzkaller1: entered allmulticast mode
[  222.353395][T15793] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  222.398356][T15797] validate_nla: 5 callbacks suppressed
[  222.398368][T15797] netlink: 'syz.2.2953': attribute type 1 has an invalid length.
[  222.412739][T15797] 8021q: adding VLAN 0 to HW filter on device bond30
[  222.429513][T15797] bond30: (slave veth11): Enslaving as an active interface with a down link
[  222.433900][T15797] __nla_validate_parse: 30 callbacks suppressed
[  222.433909][T15797] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2953'.
[  222.948845][T15797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.974133][T15811] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2954'.
[  222.978439][T15811] hsr_slave_0: left promiscuous mode
[  222.992872][T15812] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.2961'.
[  223.046990][T15818] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2956'.
[  223.079322][T15823] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2957'.
[  223.083924][T15823] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2957'.
[  223.088494][T15823] 0{X: renamed from gretap0
[  223.092623][T15823] 0{X: left promiscuous mode
[  223.094389][T15823] 0{X: entered allmulticast mode
[  223.097221][T15823] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  223.123339][T15823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.129435][T15821] tipc: Disabling bearer <eth:syzkaller0>
[  223.198601][T15829] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48428)
[  223.201831][T15829] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  223.261736][T15831] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.284104][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'.
[  223.292042][T15837] bridge_slave_1: default FDB implementation only supports local addresses
[  223.315239][T15831] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.328154][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2966'.
[  223.330876][T15845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2967'.
[  223.341366][T15845] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  223.364938][T15831] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.387813][T15852] : renamed from batadv_slave_1
[  223.411720][T15831] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.460244][T15862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2972'.
[  223.492902][ T5856] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.529646][ T5857] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.533403][ T5857] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.542613][ T5857] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.739996][T15899] netlink: 'syz.1.2982': attribute type 13 has an invalid length.
[  223.748846][T15899] netlink: 'syz.1.2982': attribute type 17 has an invalid length.
[  223.752894][T15901] netlink: 'syz.0.2984': attribute type 10 has an invalid length.
[  223.753749][T15899] erspan0: left allmulticast mode
[  223.763673][T15899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  223.803898][T15892] lo speed is unknown, defaulting to 1000
[  223.851083][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.909159][T15892] hsr0 speed is unknown, defaulting to 1000
[  223.912194][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.950317][T15908] netlink: 'syz.0.2987': attribute type 10 has an invalid length.
[  223.988080][T15914] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  224.225213][T15926] tipc: Enabled bearer <udp:syz2>, priority 10
[  224.227549][T15925] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  224.745307][T15972] syzkaller1: entered allmulticast mode
[  224.785264][T15976] netlink: 'syz.1.3000': attribute type 3 has an invalid length.
[  225.688823][T16019] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  225.912375][T16040] netlink: 'syz.0.3007': attribute type 13 has an invalid length.
[  225.916212][T16040] netlink: 'syz.0.3007': attribute type 17 has an invalid length.
[  225.932862][T16040] 8021q: adding VLAN 0 to HW filter on device team0
[  225.940787][T16040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.972743][T16040] lo speed is unknown, defaulting to 1000
[  226.024887][T16045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.063936][T16040] hsr0 speed is unknown, defaulting to 1000
[  226.113049][T16040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.376983][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  226.539731][T16049] bond0 (unregistering): Released all slaves
[  226.629370][T16054] syzkaller1: entered promiscuous mode
[  226.631366][T16054] syzkaller1: entered allmulticast mode
[  226.763596][T16060] batman_adv: batadv0: Adding interface: gretap0
[  226.765914][T16060] batman_adv: batadv0: The MTU of interface gretap0 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  226.775612][T16060] batman_adv: batadv0: Interface activated: gretap0
[  226.928304][T16079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.008806][T16088] netlink: 'syz.1.3025': attribute type 7 has an invalid length.
[  227.011429][T16088] netlink: 'syz.1.3025': attribute type 8 has an invalid length.
[  227.289627][T16136] xt_socket: unknown flags 0x50
[  227.293159][T16132] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  227.296427][T16132] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  227.353314][T16141] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  227.375033][T16138] syzkaller0: create flow: hash 3560109270 index 1
[  227.381171][T16141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.427127][T16138] syzkaller0: delete flow: hash 3560109270 index 1
[  228.624100][T16155] __nla_validate_parse: 34 callbacks suppressed
[  228.624110][T16155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3044'.
[  228.727189][T16155] nbd2: detected capacity change from 0 to 875674160
[  228.732318][T16156] validate_nla: 3 callbacks suppressed
[  228.732329][T16156] netlink: 'syz.0.3045': attribute type 6 has an invalid length.
[  228.738771][   T57] block nbd2: Receive control failed (result -32)
[  228.743445][T16156] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3045'.
[  228.744175][T11407] block nbd2: Dead connection, failed to find a fallback
[  228.750046][T11407] block nbd2: shutting down sockets
[  228.752592][T11407] blk_print_req_error: 24 callbacks suppressed
[  228.752602][T11407] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.757960][T11407] buffer_io_error: 23 callbacks suppressed
[  228.757967][T11407] Buffer I/O error on dev nbd2, logical block 0, async page read
[  228.762689][T11407] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.765695][T11407] Buffer I/O error on dev nbd2, logical block 0, async page read
[  228.769904][T11407] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.776043][T11407] Buffer I/O error on dev nbd2, logical block 0, async page read
[  228.780594][T11407] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.783542][T11407] Buffer I/O error on dev nbd2, logical block 0, async page read
[  228.786468][T11407] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.790011][T11407] Buffer I/O error on dev nbd2, logical block 0, async page read
[  228.793952][T16165] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  228.797113][T11407] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.801044][T11407] Buffer I/O error on dev nbd2, logical block 0, async page read
[  228.803693][T11407] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.806646][T11407] Buffer I/O error on dev nbd2, logical block 0, async page read
[  228.812639][T11407] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.815619][T11407] Buffer I/O error on dev nbd2, logical block 0, async page read
[  228.819347][T11407] ldm_validate_partition_table(): Disk read failed.
[  228.822850][T11407] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.825757][T11407] Buffer I/O error on dev nbd2, logical block 0, async page read
[  228.830472][T11407] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.834481][T11407] Buffer I/O error on dev nbd2, logical block 0, async page read
[  228.834999][T16171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3049'.
[  228.838202][T11407] Dev nbd2: unable to read RDB block 0
[  228.841132][T16172] batadv_slave_1: left allmulticast mode
[  228.844144][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'.
[  228.847431][T11407]  nbd2: unable to read partition table
[  228.850908][T11407] ldm_validate_partition_table(): Disk read failed.
[  228.851591][T16171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3049'.
[  228.853349][T11407] Dev nbd2: unable to read RDB block 0
[  228.870803][T11407]  nbd2: unable to read partition table
[  228.914378][T16176] ip6gre1: entered promiscuous mode
[  229.142604][T16203] netlink: 'syz.0.3056': attribute type 11 has an invalid length.
[  229.156668][T16199] netlink: 'syz.0.3056': attribute type 9 has an invalid length.
[  229.160585][T16199] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3056'.
[  229.199355][T16205] netlink: 'syz.1.3057': attribute type 1 has an invalid length.
[  229.333426][T16216] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  229.335293][T16218] netlink: 'syz.0.3061': attribute type 4 has an invalid length.
[  229.339387][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3061'.
[  229.383306][T16220] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3062'.
[  229.450627][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'.
[  229.604358][T16243] sctp: [Deprecated]: syz.0.3067 (pid 16243) Use of int in maxseg socket option.
[  229.604358][T16243] Use struct sctp_assoc_value instead
[  229.798943][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3069'.
[  229.823989][T16250] tun0: tun_chr_ioctl cmd 35111
[  229.834020][T16252] tun0: tun_chr_ioctl cmd 1074025673
[  229.994157][T16270] macsec0: entered allmulticast mode
[  229.998652][T16270] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  230.001719][T16270] macsec0: left allmulticast mode
[  230.003754][T16270] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  230.040305][T16275] openvswitch: netlink: Message has 4 unknown bytes.
[  230.170648][ T1271] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  230.236002][T16301] netlink: 'syz.2.3084': attribute type 21 has an invalid length.
[  230.245984][T16301] team0: No ports can be present during mode change
[  230.327192][ T1271] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  230.375276][T16317] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.422854][T16325] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.632299][T16349] netlink: 'syz.0.3102': attribute type 1 has an invalid length.
[  230.665746][T16349] 8021q: adding VLAN 0 to HW filter on device bond25
[  230.670713][T16349] bond24: (slave bond25): making interface the new active one
[  230.673975][T16349] bond24: (slave bond25): Enslaving as an active interface with an up link
[  230.680784][T16349] 8021q: adding VLAN 0 to HW filter on device bond24
[  230.733905][T16361] netlink: 'syz.0.3105': attribute type 1 has an invalid length.
[  230.773461][T16361] 8021q: adding VLAN 0 to HW filter on device bond27
[  230.778455][T16361] bond26: (slave bond27): making interface the new active one
[  230.781629][T16361] bond26: (slave bond27): Enslaving as an active interface with an up link
[  230.798430][T16361] 8021q: adding VLAN 0 to HW filter on device bond26
[  230.832433][T16369] netlink: 'syz.0.3108': attribute type 10 has an invalid length.
[  230.835905][T16367] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  230.839236][T16367] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  230.923296][T16374] syzkaller1: entered promiscuous mode
[  230.925169][T16374] syzkaller1: entered allmulticast mode
[  231.833884][T16406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  231.849137][T16404] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  232.092431][T16428] bridge0: port 1(ipvlan3) entered blocking state
[  232.094771][T16428] bridge0: port 1(ipvlan3) entered disabled state
[  232.097212][T16428] ipvlan3: entered allmulticast mode
[  232.098968][T16428] bridge0: entered allmulticast mode
[  232.101750][T16428] ipvlan3: left allmulticast mode
[  232.103416][T16428] bridge0: left allmulticast mode
[  232.324424][T16451] netlink: 'syz.1.3132': attribute type 10 has an invalid length.
[  232.330345][T16451] netlink: 'syz.1.3132': attribute type 10 has an invalid length.
[  232.361167][T16456] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  232.430799][T16469] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.451588][T16469] veth0_to_bridge: mtu less than device minimum
[  232.539806][T16483] 8021q: adding VLAN 0 to HW filter on device bond28
[  232.548390][T16483] vlan7: entered allmulticast mode
[  232.947684][T16523] lo speed is unknown, defaulting to 1000
[  233.027247][T16523] hsr0 speed is unknown, defaulting to 1000
[  233.443417][T16545] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  234.041935][T16577] lo speed is unknown, defaulting to 1000
[  234.121215][T16577] hsr0 speed is unknown, defaulting to 1000
[  234.232160][T16585] __nla_validate_parse: 75 callbacks suppressed
[  234.232171][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3173'.
[  234.435531][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'.
[  234.507998][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3175'.
[  234.518467][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'.
[  234.549366][T16602] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3178'.
[  234.569945][T16606] validate_nla: 3 callbacks suppressed
[  234.569957][T16606] netlink: 'syz.1.3179': attribute type 5 has an invalid length.
[  234.609733][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3182'.
[  234.631221][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'.
[  234.637021][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'.
[  234.688805][T16614] batman_adv: batadv0: Interface deactivated: gretap0
[  234.692967][T16621] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3183'.
[  234.699887][ T5857] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.704541][ T5857] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.708360][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'.
[  234.711744][ T5857] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.714556][ T5857] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.816263][T16635] netlink: 'syz.2.3189': attribute type 2 has an invalid length.
[  235.471646][T16644] pim6reg: entered allmulticast mode
[  235.490299][T16644] pim6reg: left allmulticast mode
[  235.666067][T16661] delete_channel: no stack
[  235.668581][T16661] delete_channel: no stack
[  235.792202][T16680] bond19: (slave bridge7): Releasing backup interface
[  235.794594][T16680] bridge7: left promiscuous mode
[  235.803589][T16680] team0: Port device bond21 removed
[  235.806560][T16680] bond22: (slave batadv5): Releasing active interface
[  235.810778][T16683] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  235.825155][T16680] bond24: (slave bond25): Releasing backup interface
[  235.837886][T16680] bond26: (slave bond27): Releasing backup interface
[  235.863458][T16689] batadv_slave_1: entered promiscuous mode
[  235.892736][T16679] batadv_slave_1: left promiscuous mode
[  236.054495][T16700] tipc: Resetting bearer <eth:syzkaller0>
[  236.159715][T16714] openvswitch: netlink: Flow actions attr not present in new flow.
[  236.196746][T16718] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.204162][T16719] syzkaller0: Caught tx_queue_len zero misconfig
[  236.226455][T16716] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  236.612549][T16753] netlink: 'syz.2.3224': attribute type 8 has an invalid length.
[  236.656759][T16758] netlink: 'syz.2.3226': attribute type 12 has an invalid length.
[  236.792085][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.795105][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.810336][T16771] netlink: 'syz.2.3229': attribute type 13 has an invalid length.
[  237.089970][T16783] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  237.093860][T16783] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  237.170859][T16792] netlink: 'syz.0.3236': attribute type 11 has an invalid length.
[  237.181048][T16788] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  237.198953][T16794] ip6_vti0: Master is either lo or non-ether device
[  237.396645][T16819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.403385][T16819] syzkaller0: entered promiscuous mode
[  237.405322][T16819] syzkaller0: entered allmulticast mode
[  237.443864][T16815] tipc: Resetting bearer <eth:syzkaller0>
[  237.455865][T16815] tipc: Disabling bearer <eth:syzkaller0>
[  237.657244][T16832] netlink: 'syz.2.3246': attribute type 13 has an invalid length.
[  237.659810][T16832] netlink: 'syz.2.3246': attribute type 17 has an invalid length.
[  237.666011][T16832] 0{X: left allmulticast mode
[  237.683357][T16832] 8021q: adding VLAN 0 to HW filter on device team0
[  237.691800][T16832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  237.705165][   T24] lo speed is unknown, defaulting to 1000
[  237.710199][   T24] syz0: Port: 1 Link ACTIVE
[  237.712958][   T24] lo speed is unknown, defaulting to 1000
[  237.821197][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.823990][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.836586][T16842] syzkaller1: entered promiscuous mode
[  237.840635][T16842] syzkaller1: entered allmulticast mode
[  237.941862][T16850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.977751][T16853] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  237.994768][T16853] bond20: (slave erspan0): Releasing active interface
[  238.005799][T16853] bond20: (slave veth12): Releasing active interface
[  238.011810][T16853] bond21: (slave bridge9): Releasing active interface
[  238.029161][T16854] netlink: 'syz.1.3254': attribute type 10 has an invalid length.
[  238.031734][T16854] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  238.035999][T16855] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  238.037400][T16853] netlink: 'syz.1.3254': attribute type 10 has an invalid length.
[  238.044315][T16855] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  238.489557][T16830] syz.0.3248 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  238.493405][T16830] CPU: 1 UID: 0 PID: 16830 Comm: syz.0.3248 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  238.493420][T16830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.493425][T16830] Call Trace:
[  238.493430][T16830]  <TASK>
[  238.493435][T16830]  dump_stack_lvl+0x189/0x250
[  238.493450][T16830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.493458][T16830]  ? __pfx__printk+0x10/0x10
[  238.493474][T16830]  dump_header+0xd3/0x480
[  238.493486][T16830]  oom_kill_process+0x387/0x920
[  238.493501][T16830]  out_of_memory+0xf09/0x12a0
[  238.493514][T16830]  ? __pfx_out_of_memory+0x10/0x10
[  238.493526][T16830]  mem_cgroup_out_of_memory+0x145/0x240
[  238.493535][T16830]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  238.493548][T16830]  ? _raw_spin_unlock+0x28/0x50
[  238.493557][T16830]  ? memcg1_oom_prepare+0x37f/0x450
[  238.493569][T16830]  try_charge_memcg+0xdff/0x1290
[  238.493583][T16830]  ? __pfx_try_charge_memcg+0x10/0x10
[  238.493598][T16830]  charge_memcg+0x9f/0x180
[  238.493609][T16830]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  238.493620][T16830]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  238.493633][T16830]  __read_swap_cache_async+0x28c/0x510
[  238.493648][T16830]  swap_cluster_readahead+0x4cf/0x5f0
[  238.493659][T16830]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  238.493695][T16830]  ? get_vma_policy+0x27c/0x3c0
[  238.493709][T16830]  swapin_readahead+0x17d/0xb50
[  238.493718][T16830]  ? __pfx_filemap_get_entry+0x10/0x10
[  238.493730][T16830]  ? __pfx_swapin_readahead+0x10/0x10
[  238.493740][T16830]  ? __filemap_get_folio+0x9a6/0xaf0
[  238.493751][T16830]  ? swap_cache_get_folio+0xae/0x3b0
[  238.493762][T16830]  do_swap_page+0x525/0x5ac0
[  238.493775][T16830]  ? __lock_acquire+0xab9/0xd20
[  238.493791][T16830]  ? do_swap_page+0x184/0x5ac0
[  238.493800][T16830]  ? __pfx_do_swap_page+0x10/0x10
[  238.493810][T16830]  ? __pfx_default_wake_function+0x10/0x10
[  238.493822][T16830]  ? ___pte_offset_map+0x21f/0x2c0
[  238.493834][T16830]  ? pte_offset_map_rw_nolock+0xea/0x160
[  238.493846][T16830]  __handle_mm_fault+0xf3e/0x5620
[  238.493855][T16830]  ? __lock_acquire+0xab9/0xd20
[  238.493872][T16830]  ? __pfx___handle_mm_fault+0x10/0x10
[  238.493882][T16830]  ? lock_vma_under_rcu+0xf8/0x710
[  238.493893][T16830]  ? lock_vma_under_rcu+0xf8/0x710
[  238.493900][T16830]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  238.493909][T16830]  handle_mm_fault+0x40a/0x8e0
[  238.493924][T16830]  do_user_addr_fault+0xa81/0x1390
[  238.493938][T16830]  ? rcu_is_watching+0x15/0xb0
[  238.493949][T16830]  ? trace_page_fault_user+0x84/0x1e0
[  238.493960][T16830]  exc_page_fault+0x76/0xf0
[  238.493972][T16830]  asm_exc_page_fault+0x26/0x30
[  238.493979][T16830] RIP: 0033:0x7f2559e6563c
[  238.493988][T16830] Code: 66 0f 1f 44 00 00 69 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  238.493995][T16830] RSP: 002b:00007ffe1ecf6520 EFLAGS: 00010287
[  238.494003][T16830] RAX: 0000000000000000 RBX: 00007f255a1b6090 RCX: 0000000000000000
[  238.494008][T16830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555594e06808
[  238.494012][T16830] RBP: 00007f255a1b7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  238.494017][T16830] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003a306
[  238.494021][T16830] R13: 00007f255a1b6090 R14: ffffffffffffffff R15: 00007ffe1ecf6630
[  238.494034][T16830]  </TASK>
[  238.494038][T16830] memory: usage 307200kB, limit 307200kB, failcnt 300
[  238.609430][T16830] memory+swap: usage 261880kB, limit 9007199254740988kB, failcnt 0
[  238.612103][T16830] kmem: usage 259880kB, limit 9007199254740988kB, failcnt 0
[  238.614546][T16830] Memory cgroup stats for /syz0:
[  238.614714][T16830] cache 0
[  238.617597][T16830] rss 0
[  238.618570][T16830] rss_huge 0
[  238.619696][T16830] shmem 0
[  238.620731][T16830] mapped_file 0
[  238.621949][T16830] dirty 0
[  238.622976][T16830] writeback 0
[  238.624132][T16830] workingset_refault_anon 10
[  238.625714][T16830] workingset_refault_file 0
[  238.627364][T16830] swap 184320
[  238.628535][T16830] swapcached 28672
[  238.629820][T16830] pgpgin 122203
[  238.631016][T16830] pgpgout 122196
[  238.632230][T16830] pgfault 219227
[  238.633443][T16830] pgmajfault 21
[  238.634691][T16830] inactive_anon 28672
[  238.636049][T16830] active_anon 0
[  238.637507][T16830] inactive_file 0
[  238.638906][T16830] active_file 0
[  238.640119][T16830] unevictable 0
[  238.641307][T16830] hierarchical_memory_limit 314572800
[  238.643115][T16830] hierarchical_memsw_limit 9223372036854771712
[  238.645161][T16830] total_cache 0
[  238.646345][T16830] total_rss 0
[  238.647590][T16830] total_rss_huge 0
[  238.648813][T16830] total_shmem 0
[  238.649985][T16830] total_mapped_file 0
[  238.651310][T16830] total_dirty 0
[  238.652440][T16830] total_writeback 0
[  238.653699][T16830] total_workingset_refault_anon 10
[  238.655316][T16830] total_workingset_refault_file 0
[  238.657108][T16830] total_swap 184320
[  238.658411][T16830] total_swapcached 28672
[  238.659805][T16830] total_pgpgin 122205
[  238.661178][T16830] total_pgpgout 122198
[  238.662572][T16830] total_pgfault 219231
[  238.663951][T16830] total_pgmajfault 21
[  238.665301][T16830] total_inactive_anon 28672
[  238.666947][T16830] total_active_anon 0
[  238.668294][T16830] total_inactive_file 0
[  238.669719][T16830] total_active_file 0
[  238.671067][T16830] total_unevictable 0
[  238.672422][T16830] anon_cost 0
[  238.673524][T16830] file_cost 0
[  238.674656][T16830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3248,pid=16830,uid=0
[  238.680588][T16830] Memory cgroup out of memory: Killed process 16830 (syz.0.3248) total-vm:101888kB, anon-rss:948kB, file-rss:22884kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  238.861230][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.091327][T16886] lo speed is unknown, defaulting to 1000
[  239.194872][T16886] hsr0 speed is unknown, defaulting to 1000
[  239.411891][T16900] lo speed is unknown, defaulting to 1000
[  239.520850][T16900] hsr0 speed is unknown, defaulting to 1000
[  239.656151][T16915] __nla_validate_parse: 32 callbacks suppressed
[  239.656161][T16915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3273'.
[  239.727420][T16922] netlink: 'syz.2.3275': attribute type 10 has an invalid length.
[  239.734721][T16922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3275'.
[  239.742933][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3277'.
[  239.744554][T16922] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3275'.
[  239.800143][T16921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3276'.
[  239.803148][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3276'.
[  239.806371][T16920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3276'.
[  239.809735][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3276'.
[  239.851588][T16933] netlink: 'syz.0.3279': attribute type 1 has an invalid length.
[  239.854189][T16933] netlink: 'syz.0.3279': attribute type 2 has an invalid length.
[  239.858096][T16931] netlink: 'syz.0.3279': attribute type 1 has an invalid length.
[  239.860588][T16931] netlink: 'syz.0.3279': attribute type 2 has an invalid length.
[  239.900413][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3282'.
[  239.903459][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.980004][T16947] netlink: 'syz.0.3285': attribute type 10 has an invalid length.
[  239.984716][T16947] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.012933][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3283'.
[  240.095977][T16959] netlink: 'syz.1.3289': attribute type 12 has an invalid length.
[  240.230290][T16978] vlan0: entered promiscuous mode
[  240.285013][T16978] syzkaller1: entered promiscuous mode
[  240.290642][T16978] syzkaller1: entered allmulticast mode
[  240.294022][T16983] netlink: 'syz.2.3298': attribute type 1 has an invalid length.
[  240.348408][T16988] netlink: 'syz.2.3299': attribute type 8 has an invalid length.
[  240.354874][T16990] netlink: 'syz.0.3300': attribute type 13 has an invalid length.
[  240.361810][T16990] gretap0: refused to change device tx_queue_len
[  240.426584][T16995] 8021q: adding VLAN 0 to HW filter on device bond23
[  240.437774][T16995] bond23: (slave gretap2): making interface the new active one
[  240.441088][T16995] bond23: (slave gretap2): Enslaving as an active interface with an up link
[  240.475385][T17005] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  240.479247][T17005] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  240.586029][T17005] bond0 (unregistering): Released all slaves
[  240.756754][ T5692] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  240.762981][ T5692] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  240.766370][ T5692] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  240.769395][ T5692] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  241.056051][T17038] IPVS: Unknown mcast interface: bond0
[  241.059411][T17038] IPVS: stopping backup sync thread 6115 ...
[  241.212890][T17041] 8021q: adding VLAN 0 to HW filter on device bond29
[  241.239996][T17041] bond29: (slave bridge11): making interface the new active one
[  241.243270][T17041] bond29: (slave bridge11): Enslaving as an active interface with an up link
[  241.255003][T17041] bond29: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  241.504407][T17062] 8021q: adding VLAN 0 to HW filter on device bond32
[  241.509902][T17062] bond31: (slave bond32): making interface the new active one
[  241.512630][T17062] bond31: (slave bond32): Enslaving as an active interface with an up link
[  241.530748][T17062] bond31: (slave gretap3): Enslaving as a backup interface with an up link
[  241.542785][T17062] 8021q: adding VLAN 0 to HW filter on device bond31
[  241.634217][T17085] lo: entered allmulticast mode
[  241.636119][T17085] lo: left allmulticast mode
[  242.039561][T17109] lo speed is unknown, defaulting to 1000
[  242.123064][T17109] hsr0 speed is unknown, defaulting to 1000
[  242.712682][T17148] lo speed is unknown, defaulting to 1000
[  242.805781][T17148] hsr0 speed is unknown, defaulting to 1000
[  242.806122][T17143] lo speed is unknown, defaulting to 1000
[  242.951623][T17143] hsr0 speed is unknown, defaulting to 1000
[  243.138310][T17170] tipc: Resetting bearer <eth:syzkaller0>
[  243.283956][T17178] lo speed is unknown, defaulting to 1000
[  243.440746][T17178] hsr0 speed is unknown, defaulting to 1000
[  244.891011][T17227] __nla_validate_parse: 32 callbacks suppressed
[  244.891026][T17227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3371'.
[  244.895306][T17229] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3372'.
[  244.933913][T17231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3373'.
[  245.083759][T17246] hsr0: entered promiscuous mode
[  245.085727][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3378'.
[  245.090896][T17246] 0{X: left promiscuous mode
[  245.094051][T17246] : left promiscuous mode
[  245.105269][T17246] hsr0 (unregistering): left promiscuous mode
[  245.218685][T17253] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3380'.
[  245.285995][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3385'.
[  245.320231][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'.
[  245.332643][T17271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3386'.
[  245.403862][T17277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3389'.
[  245.407875][T17277] net_ratelimit: 3 callbacks suppressed
[  245.407887][T17277] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  245.422215][T17281] ip6gre2: entered allmulticast mode
[  245.454653][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3391'.
[  245.639228][T17299] validate_nla: 13 callbacks suppressed
[  245.639239][T17299] netlink: 'syz.1.3397': attribute type 1 has an invalid length.
[  245.988985][T17310] netlink: 'syz.2.3399': attribute type 39 has an invalid length.
[  246.576045][T17329] netlink: 'syz.2.3405': attribute type 10 has an invalid length.
[  246.593605][T17329] macvlan0: entered promiscuous mode
[  247.034554][T17358] sock: sock_set_timeout: `syz.0.3417' (pid 17358) tries to set negative timeout
[  247.285656][T17389] bond23: (slave gretap2): Releasing active interface
[  247.323356][T17391] x_tables: ip_tables: udp match: only valid for protocol 17
[  247.638658][T17419] netlink: 'syz.1.3436': attribute type 2 has an invalid length.
[  248.264723][T17467] netlink: 'syz.0.3453': attribute type 1 has an invalid length.
[  248.267544][T17467] netlink: 'syz.0.3453': attribute type 2 has an invalid length.
[  248.324701][T17475] netlink: 'syz.0.3455': attribute type 10 has an invalid length.
[  248.806760][T17503] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.811488][T17503] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  248.857803][T17505] bridge0: entered allmulticast mode
[  249.051533][T17518] netlink: 'syz.1.3470': attribute type 25 has an invalid length.
[  249.330492][T17553] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  249.333714][T17553] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  249.535677][T17575] netlink: 'syz.1.3488': attribute type 5 has an invalid length.
[  249.654143][T17587] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0
[  250.173629][T17600] __nla_validate_parse: 41 callbacks suppressed
[  250.173642][T17600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3495'.
[  250.251690][T17615] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.254308][T17614] syzkaller0: entered promiscuous mode
[  250.256144][T17614] syzkaller0: entered allmulticast mode
[  250.263847][T17613] tipc: Resetting bearer <eth:syzkaller0>
[  250.277690][T17613] tipc: Disabling bearer <eth:syzkaller0>
[  250.339402][T17617] siw: device registration error -23
[  250.342744][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'.
[  250.356605][T17617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3500'.
[  250.383173][T17619] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3501'.
[  250.408855][T17619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'.
[  250.411884][T17619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3501'.
[  250.418123][T17619] gtp2: entered promiscuous mode
[  250.420422][T17619] gtp2: entered allmulticast mode
[  250.503070][T17621] pim6reg1: entered promiscuous mode
[  250.505440][T17621] pim6reg1: entered allmulticast mode
[  250.563903][T17622] netlink: 'syz.2.3502': attribute type 4 has an invalid length.
[  250.566755][T17622] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3502'.
[  251.141835][T17627] netlink: 'syz.0.3503': attribute type 13 has an invalid length.
[  251.144492][T17627] netlink: 'syz.0.3503': attribute type 17 has an invalid length.
[  251.162375][T17627] 8021q: adding VLAN 0 to HW filter on device team0
[  251.168183][T17627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.340434][ T1115] block nbd1: Possible stuck request ffff8880224a0000: control (read@0,4096B). Runtime 150 seconds
[  251.409742][T17629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3504'.
[  251.464405][T17636] syzkaller1: entered promiscuous mode
[  251.466720][T17636] syzkaller1: entered allmulticast mode
[  251.862000][T17661] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3513'.
[  251.885116][T17666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.921099][T17669] batadv6: entered promiscuous mode
[  252.596018][T17672] netlink: 'syz.2.3516': attribute type 17 has an invalid length.
[  252.633721][T17683] netlink: 'syz.1.3517': attribute type 39 has an invalid length.
[  252.643532][T17683] tipc: Enabling of bearer <eth:macvtap0> rejected, failed to enable media
[  252.691062][T17688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.693880][T17688] syzkaller0: entered promiscuous mode
[  252.695987][T17688] syzkaller0: entered allmulticast mode
[  252.715108][T17688] tipc: Resetting bearer <eth:syzkaller0>
[  252.718989][T17685] tipc: Resetting bearer <eth:syzkaller0>
[  252.722744][T17690] netlink: 'syz.1.3520': attribute type 32 has an invalid length.
[  252.726967][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'.
[  252.732397][T17685] tipc: Disabling bearer <eth:syzkaller0>
[  252.743362][T17690] (unnamed net_device) (uninitialized): option coupled_control: invalid value (6)
[  252.844038][T17698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  252.899321][T17707] netlink: 'syz.2.3524': attribute type 21 has an invalid length.
[  252.927846][T17710] syzkaller1: entered promiscuous mode
[  252.933146][T17710] syzkaller1: entered allmulticast mode
[  253.113940][T17731] tipc: Resetting bearer <eth:gre0>
[  253.212592][   T24] lo speed is unknown, defaulting to 1000
[  253.214484][   T24] syz0: Port: 1 Link DOWN
[  253.215998][   T24] lo speed is unknown, defaulting to 1000
[  253.326072][T17752] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  253.548717][T17778] syzkaller1: entered promiscuous mode
[  253.550485][T17778] syzkaller1: entered allmulticast mode
[  253.642102][T17786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.860539][T17793] tc_dump_action: action bad kind
[  254.282039][T17805] ip6tnl6: entered promiscuous mode
[  254.283836][T17805] ip6tnl6: entered allmulticast mode
[  254.371987][T17811] lo speed is unknown, defaulting to 1000
[  254.482912][T17811] hsr0 speed is unknown, defaulting to 1000
[  254.674189][T17840] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  254.812892][T17845] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.937046][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.011800][T17860] netlink: 'syz.2.3576': attribute type 2 has an invalid length.
[  255.048511][T17865] sctp: [Deprecated]: syz.1.3577 (pid 17865) Use of struct sctp_assoc_value in delayed_ack socket option.
[  255.048511][T17865] Use struct sctp_sack_info instead
[  255.052711][T17861] lo speed is unknown, defaulting to 1000
[  255.134037][T17861] hsr0 speed is unknown, defaulting to 1000
[  255.216260][T17873] __nla_validate_parse: 26 callbacks suppressed
[  255.216271][T17873] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3581'.
[  255.282340][T17876] geneve0: entered promiscuous mode
[  255.317164][ T5857] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.320013][ T5857] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.324715][ T5857] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.333027][ T5857] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.383091][T17890] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  255.394034][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'.
[  255.398017][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3586'.
[  255.406333][T17892] netlink: 'syz.0.3587': attribute type 7 has an invalid length.
[  255.411320][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3587'.
[  255.422040][T17892] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3587'.
[  255.452701][T17896] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3589'.
[  255.489436][T17894] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  255.514726][T17894] netlink: 'syz.2.3588': attribute type 4 has an invalid length.
[  255.535091][T17900] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  255.539394][T17900] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  255.650368][T17908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3593'.
[  255.657107][ T1271] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.702047][T17916] lo speed is unknown, defaulting to 1000
[  255.770008][T17921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  255.772465][T17921] IPv6: NLM_F_CREATE should be set when creating new route
[  255.774912][T17921] IPv6: NLM_F_CREATE should be set when creating new route
[  255.790788][T17921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  255.823745][T17916] hsr0 speed is unknown, defaulting to 1000
[  255.933284][T17920] team0: No ports can be present during mode change
[  255.972849][T17931] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3597'.
[  256.011272][T17932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3598'.
[  256.018777][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3598'.
[  256.254117][T17956] netlink: 'syz.2.3605': attribute type 5 has an invalid length.
[  256.284391][T17960] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  256.319495][T17962] netlink: 'syz.1.3608': attribute type 16 has an invalid length.
[  256.322136][T17962] netlink: 'syz.1.3608': attribute type 17 has an invalid length.
[  256.385738][T17962] tipc: Resetting bearer <eth:syzkaller0>
[  256.449435][ T5857] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.455318][ T5857] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.462235][ T5857] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.465125][ T5857] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.469493][ T5857] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.477193][ T5857] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.480101][ T5857] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.482788][ T5857] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.698425][T18008] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  256.725490][T18010] netlink: 'syz.0.3623': attribute type 1 has an invalid length.
[  256.811798][T18012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  256.852221][T18012] lo speed is unknown, defaulting to 1000
[  256.969987][T18012] hsr0 speed is unknown, defaulting to 1000
[  256.971494][T18034] netlink: 'syz.0.3630': attribute type 10 has an invalid length.
[  256.982570][T18034] team0: Port device 0! added
[  256.984839][T18034] netlink: 'syz.0.3630': attribute type 10 has an invalid length.
[  257.001684][T18034] team0: Port device 0! removed
[  257.005242][T18034] netlink: 'syz.0.3630': attribute type 10 has an invalid length.
[  257.011878][T18035] netlink: 'syz.0.3630': attribute type 10 has an invalid length.
[  257.019442][T18034] team0: Port device 0! added
[  257.024790][T18035] team0: Port device 0! removed
[  257.071644][T18043] netlink: 'syz.0.3632': attribute type 16 has an invalid length.
[  257.131381][T18047] netlink: 'syz.2.3634': attribute type 1 has an invalid length.
[  257.447041][T18065] lo speed is unknown, defaulting to 1000
[  257.574624][T18065] hsr0 speed is unknown, defaulting to 1000
[  257.641636][T18083] 1{X: renamed from 30{X
[  257.644834][T18083] 1{X: entered allmulticast mode
[  257.648834][T18083] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  257.813364][T18099] IPVS: Unknown mcast interface: bond0
[  257.978676][T18108] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  257.981248][T18108] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  258.066630][T18115] lo speed is unknown, defaulting to 1000
[  258.145917][T18115] hsr0 speed is unknown, defaulting to 1000
[  258.269443][T18115] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  258.595770][T18162] netlink: 'syz.0.3672': attribute type 11 has an invalid length.
[  258.948296][T18190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  258.972154][T18190] team0: No ports can be present during mode change
[  259.070706][T18214] openvswitch: netlink: Flow actions attr not present in new flow.
[  259.077466][T18213] openvswitch: netlink: Flow actions attr not present in new flow.
[  259.208680][T18228] unknown channel width for channel at 909000KHz?
[  259.306752][T18236] veth0_to_team: left promiscuous mode
[  259.315746][T18236] tipc: Resetting bearer <eth:syzkaller0>
[  259.318866][T18236] syzkaller0: left promiscuous mode
[  259.320569][T18236] syzkaller0: left allmulticast mode
[  259.325637][T18236] bond19: left promiscuous mode
[  259.327684][T18236] vlan6: left allmulticast mode
[  259.329470][T18236] bond22: left promiscuous mode
[  259.331217][T18236] batadv5: left promiscuous mode
[  259.332908][T18236] batadv5: left allmulticast mode
[  259.335328][T18236] vlan7: left allmulticast mode
[  259.337905][T18236] veth1: left allmulticast mode
[  259.340460][T18236] ip6gre2: left allmulticast mode
[  259.356230][T18236] geneve0: left promiscuous mode
[  259.376599][ T7358] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.380122][ T7358] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.383443][T18238] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  259.386049][T18238] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  259.389193][ T7358] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.400050][ T7358] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.415698][T18240] dvmrp31: entered allmulticast mode
[  259.497608][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  259.700237][T18295] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  259.740710][T18298] 8021q: adding VLAN 0 to HW filter on device team0
[  259.745762][T18298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.751101][ T1271] lo speed is unknown, defaulting to 1000
[  259.753024][ T1271] syz0: Port: 1 Link ACTIVE
[  259.754582][ T1271] lo speed is unknown, defaulting to 1000
[  259.800543][T18307] netlink: 'syz.1.3721': attribute type 11 has an invalid length.
[  259.808626][T18305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.811431][T18305] syzkaller0: entered promiscuous mode
[  259.813282][T18305] syzkaller0: entered allmulticast mode
[  259.823395][T18305] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  259.843951][T18305] tipc: Resetting bearer <eth:syzkaller0>
[  260.303400][T18350] can: request_module (can-proto-0) failed.
[  260.370307][T18361] __nla_validate_parse: 43 callbacks suppressed
[  260.370320][T18361] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3739'.
[  260.382032][T18361] vlan2: entered promiscuous mode
[  260.384450][T18361] vlan2: entered allmulticast mode
[  260.399813][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3738'.
[  260.422170][T18305] tipc: Resetting bearer <eth:syzkaller0>
[  260.436763][T18305] tipc: Disabling bearer <eth:syzkaller0>
[  260.449714][T18359] sch_tbf: burst 0 is lower than device bridge12 mtu (1514) !
[  260.476704][T18364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3740'.
[  260.521204][T18368] syzkaller1: entered promiscuous mode
[  260.523094][T18368] syzkaller1: entered allmulticast mode
[  260.645627][T18388] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  260.684908][T18393] IPVS: set_ctl: invalid protocol: 63 224.0.0.2:20001
[  260.687982][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3751'.
[  260.691671][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3751'.
[  260.975098][T18413] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.3756'.
[  261.042647][T18415] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3757'.
[  261.045864][T18415] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3757'.
[  261.050881][T18415] gretap0: left allmulticast mode
[  261.056434][T18415] rdma_rxe: rxe_newlink: failed to add lo
[  261.109804][T18418] lo speed is unknown, defaulting to 1000
[  261.201636][T18418] hsr0 speed is unknown, defaulting to 1000
[  261.452619][T18423] validate_nla: 9 callbacks suppressed
[  261.452631][T18423] netlink: 'syz.0.3759': attribute type 21 has an invalid length.
[  261.457922][T18423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3759'.
[  261.504735][T18425] netlink: 'syz.0.3760': attribute type 1 has an invalid length.
[  261.524964][T18425] 8021q: adding VLAN 0 to HW filter on device bond33
[  261.555031][T18425] bond33: (slave veth17): Enslaving as an active interface with a down link
[  261.574048][T18425] vlan8: entered allmulticast mode
[  261.575836][T18425] macvtap0: entered allmulticast mode
[  261.580780][T18425] bond33: (slave vlan8): Opening slave failed
[  261.586052][T18434] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3762'.
[  261.624027][T18440] ip6gretap0: entered promiscuous mode
[  261.626462][T18440] macsec1: entered promiscuous mode
[  261.628851][T18440] macsec1: entered allmulticast mode
[  261.630643][T18440] ip6gretap0: entered allmulticast mode
[  261.670474][T18444] netlink: 'syz.2.3766': attribute type 1 has an invalid length.
[  261.685185][T18444] 8021q: adding VLAN 0 to HW filter on device bond33
[  261.774011][T18459] siw: device registration error -23
[  262.071174][T18480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.195928][T18503] netlink: 'syz.0.3784': attribute type 18 has an invalid length.
[  263.233749][T18549] netlink: 'syz.1.3795': attribute type 1 has an invalid length.
[  263.259807][T18549] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.271673][T18549] bond0: (slave geneve5): making interface the new active one
[  263.275157][T18549] bond0: (slave geneve5): Enslaving as an active interface with an up link
[  263.282166][ T5856] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.285761][ T5856] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.293166][ T5856] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.295853][ T5856] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.503125][T18579] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002
[  263.547343][T18583] netlink: 'syz.1.3806': attribute type 20 has an invalid length.
[  263.606241][T18591] macsec0: entered promiscuous mode
[  263.608730][T18591] macsec0: left promiscuous mode
[  263.854063][T18602] netlink: 'syz.1.3814': attribute type 10 has an invalid length.
[  263.942999][T18610] lo speed is unknown, defaulting to 1000
[  264.051971][T18610] hsr0 speed is unknown, defaulting to 1000
[  264.169251][T18629] bond34 (unregistering): Released all slaves
[  264.485103][T18672] xfrm1: entered allmulticast mode
[  264.521657][T18678] team0: Port device 0! removed
[  264.525114][T18678] bond23: (slave veth9): Releasing backup interface
[  264.537367][T18678] bond26: (slave wireguard0): Releasing backup interface
[  264.540463][T18678] wireguard0: left promiscuous mode
[  264.544403][T18678] bond27: (slave bridge12): Releasing active interface
[  264.549588][T18678] bond30: (slave veth11): Releasing active interface
[  264.557297][T18678] batman_adv: batadv0: Removing interface: gretap0
[  264.560761][T18678] bond31: (slave bond32): Releasing backup interface
[  264.563108][T18678] bond31: (slave bond32): the permanent HWaddr of slave - ae:4a:31:56:e7:68 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  264.574962][T18678] bond31: (slave gretap3): making interface the new active one
[  264.585832][T18678] bond31: (slave gretap3): Releasing backup interface
[  264.597650][T18689] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.602240][T18689] syzkaller0: entered promiscuous mode
[  264.604710][T18678] netlink: 'syz.2.3834': attribute type 10 has an invalid length.
[  264.611565][T18689] syzkaller0: entered allmulticast mode
[  264.626407][T18678] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  264.630098][T18678] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  264.774787][T18707] netlink: 'syz.1.3845': attribute type 2 has an invalid length.
[  265.116690][T18732] openvswitch: netlink: nsh attribute has 31087 unknown bytes.
[  265.119648][T18732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.284875][T18740] netlink: 'syz.0.3858': attribute type 303 has an invalid length.
[  265.398464][T18746] __nla_validate_parse: 38 callbacks suppressed
[  265.398509][T18746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3861'.
[  265.404326][T18746] netlink: 4608 bytes leftover after parsing attributes in process `syz.2.3861'.
[  265.540027][T18750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3861'.
[  265.543087][T18750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3861'.
[  265.740535][T18761] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3864'.
[  265.821294][T18770] syzkaller0: entered promiscuous mode
[  265.823207][T18770] syzkaller0: entered allmulticast mode
[  265.828992][T18769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.846117][T18769] tipc: Resetting bearer <eth:syzkaller0>
[  265.891933][T18769] tipc: Disabling bearer <eth:syzkaller0>
[  266.577637][T18804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3873'.
[  266.609825][T18804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3873'.
[  266.666675][T18813] validate_nla: 3 callbacks suppressed
[  266.666687][T18813] netlink: 'syz.2.3876': attribute type 13 has an invalid length.
[  266.671274][T18813] netlink: 'syz.2.3876': attribute type 17 has an invalid length.
[  266.676557][T18813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  266.950595][T18835] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.953987][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'.
[  266.957233][T18835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3883'.
[  266.960327][T18835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3883'.
[  267.204105][T18861] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  267.207350][T18861] batadv_slave_0: entered promiscuous mode
[  267.210384][T18861] hsr0: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network
[  267.213596][T18861] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  267.217105][T18861] hsr0: entered promiscuous mode
[  267.351967][T18871] netlink: 'syz.1.3895': attribute type 1 has an invalid length.
[  267.421038][T18883] siw: device registration error -23
[  267.486586][T18878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.603725][T18889] siw: device registration error -23
[  268.571338][T18935] macvtap0: entered promiscuous mode
[  268.573179][T18935] erspan0: entered promiscuous mode
[  268.574993][T18935] macvtap0: entered allmulticast mode
[  268.578265][T18935] erspan0: entered allmulticast mode
[  268.699088][T18954] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  268.701441][T18954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.890966][T18981] netlink: 'syz.1.3932': attribute type 1 has an invalid length.
[  268.894561][T18981] netlink: 'syz.1.3932': attribute type 1 has an invalid length.
[  269.111340][T19010] lo speed is unknown, defaulting to 1000
[  269.172590][T19011] syzkaller1: entered promiscuous mode
[  269.174628][T19011] syzkaller1: entered allmulticast mode
[  269.207028][T19010] hsr0 speed is unknown, defaulting to 1000
[  269.903791][T19037] bridge0: entered allmulticast mode
[  269.910879][T19037] pim6reg: entered allmulticast mode
[  270.084525][T19056] lo speed is unknown, defaulting to 1000
[  270.206560][T19045] sock: sock_timestamping_bind_phc: sock not bind to device
[  270.212135][T19056] hsr0 speed is unknown, defaulting to 1000
[  270.376412][T19068] lo speed is unknown, defaulting to 1000
[  270.507459][T19081] __nla_validate_parse: 21 callbacks suppressed
[  270.507469][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'.
[  270.569718][T19068] hsr0 speed is unknown, defaulting to 1000
[  270.659799][T19080] Failed to register nexthop notifier
[  270.824026][T19107] netlink: 'syz.0.3956': attribute type 1 has an invalid length.
[  270.826661][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3956'.
[  270.960885][T19120] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3958'.
[  270.994334][T19123] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3960'.
[  271.035640][T19125] dvmrp0: entered allmulticast mode
[  271.115454][T19135] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3964'.
[  271.947392][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'.
[  271.951215][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'.
[  271.955136][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'.
[  271.959215][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'.
[  271.962587][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'.
[  272.723027][T19172] syzkaller1: entered promiscuous mode
[  272.724894][T19172] syzkaller1: entered allmulticast mode
[  272.945261][T19191] 8021q: adding VLAN 0 to HW filter on device bond24
[  272.971170][T19197] rdma_rxe: rxe_newlink: failed to add vxcan1
[  273.182584][T19222] netlink: 'syz.1.3988': attribute type 6 has an invalid length.
[  273.316521][T19241] netlink: 'syz.0.3998': attribute type 1 has an invalid length.
[  273.499618][T19271] netlink: 'syz.1.4009': attribute type 1 has an invalid length.
[  273.502352][T19271] netlink: 'syz.1.4009': attribute type 3 has an invalid length.
[  273.505305][T19271] netlink: 'syz.1.4009': attribute type 1 has an invalid length.
[  273.508160][T19271] NCSI netlink: No device for ifindex 0
[  273.643843][T19285] netlink: 'syz.1.4014': attribute type 1 has an invalid length.
[  273.693988][T19289] lo speed is unknown, defaulting to 1000
[  273.847048][T19289] hsr0 speed is unknown, defaulting to 1000
[  273.994329][T19312] netlink: 'syz.2.4019': attribute type 4 has an invalid length.
[  274.057188][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  274.097665][T19322] netlink: 'syz.1.4025': attribute type 1 has an invalid length.
[  274.456924][T19357] sch_fq: defrate 0 ignored.
[  274.570857][T19374] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  274.843940][T19405] bridge17: port 1(veth18) entered blocking state
[  274.846427][T19405] bridge17: port 1(veth18) entered disabled state
[  274.849022][T19405] veth18: entered allmulticast mode
[  274.853212][T19405] veth18: entered promiscuous mode
[  274.860863][T19405] bridge17: port 2(veth0_to_bond) entered blocking state
[  274.863434][T19405] bridge17: port 2(veth0_to_bond) entered disabled state
[  274.867120][T19405] veth0_to_bond: entered allmulticast mode
[  274.870073][T19405] veth0_to_bond: entered promiscuous mode
[  274.878061][T19405] vlan2: entered allmulticast mode
[  274.880575][T19405] veth1: entered allmulticast mode
[  274.882611][T19405] bridge17: port 3(vlan2) entered blocking state
[  274.885884][T19405] bridge17: port 3(vlan2) entered disabled state
[  274.889160][T19405] vlan2: entered promiscuous mode
[  274.890998][T19405] veth1: entered promiscuous mode
[  274.903741][T19410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  274.982091][T19424] netlink: 'syz.1.4052': attribute type 10 has an invalid length.
[  275.027390][T19429] bond29: (slave bridge11): Releasing active interface
[  275.032396][T19429] bond33: (slave veth17): Releasing active interface
[  275.082837][T19434] lo speed is unknown, defaulting to 1000
[  275.097051][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  275.203202][T19434] hsr0 speed is unknown, defaulting to 1000
[  275.376867][T19453] netlink: 'syz.0.4059': attribute type 13 has an invalid length.
[  275.385113][T19453] erspan0: entered promiscuous mode
[  275.394973][T19453] 8021q: adding VLAN 0 to HW filter on device team0
[  275.399622][T19453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  275.719977][T19467] __nla_validate_parse: 28 callbacks suppressed
[  275.719988][T19467] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4064'.
[  275.760104][T19471] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4065'.
[  275.805796][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4067'.
[  275.811886][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4067'.
[  276.397111][T19505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4077'.
[  276.424054][T19509] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4078'.
[  276.496720][T19513] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  276.502222][T19513] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  276.721120][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4082'.
[  276.915406][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4083'.
[  277.029116][T19533] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4087'.
[  277.033114][T19533] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4087'.
[  277.036206][T19533] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  277.222604][T19547] 8021q: adding VLAN 0 to HW filter on device bond35
[  277.226162][T19547] bond34: (slave bond35): making interface the new active one
[  277.229057][T19547] bond34: (slave bond35): Enslaving as an active interface with an up link
[  277.234759][T19547] 8021q: adding VLAN 0 to HW filter on device bond34
[  277.555506][T19576] rdma_rxe: rxe_newlink: failed to add veth1_to_bond
[  277.837743][T19607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.905006][ T5856] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  278.306294][T19620] bridge0: port 1(syz_tun) entered blocking state
[  278.309271][T19620] bridge0: port 1(syz_tun) entered disabled state
[  278.311533][T19620] syz_tun: entered allmulticast mode
[  278.314202][T19620] syz_tun: entered promiscuous mode
[  278.813495][T19634] syz0: rxe_newlink: already configured on lo
[  278.830971][T19640] team0: Mode changed to "activebackup"
[  278.899803][T19650] openvswitch: netlink: IP tunnel dst address not specified
[  279.316239][T19689] rdma_rxe: rxe_newlink: failed to add veth1_to_bond
[  279.412774][T19685] bridge_slave_0: entered allmulticast mode
[  279.520932][T19694] lo speed is unknown, defaulting to 1000
[  279.873410][T19694] hsr0 speed is unknown, defaulting to 1000
[  279.989904][T19695] 8021q: adding VLAN 0 to HW filter on device bond36
[  280.300220][T19715] lo speed is unknown, defaulting to 1000
[  280.516084][T19715] hsr0 speed is unknown, defaulting to 1000
[  280.965011][T19742] __nla_validate_parse: 26 callbacks suppressed
[  280.965020][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4159'.
[  280.970392][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4159'.
[  281.115785][T19747] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4161'.
[  281.336623][T19774] sock: sock_timestamping_bind_phc: sock not bind to device
[  281.380929][T19780] validate_nla: 7 callbacks suppressed
[  281.380946][T19780] netlink: 'syz.1.4172': attribute type 10 has an invalid length.
[  281.385294][T19780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4172'.
[  281.392496][T19780] dummy0: entered promiscuous mode
[  281.394422][T19780] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  281.431725][ T1115] block nbd1: Possible stuck request ffff8880224a0000: control (read@0,4096B). Runtime 180 seconds
[  281.440884][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4172'.
[  281.443692][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4172'.
[  281.492721][T19787] netlink: 'syz.2.4173': attribute type 5 has an invalid length.
[  281.520676][T19791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4175'.
[  281.523743][T19791] netlink: 'syz.2.4175': attribute type 15 has an invalid length.
[  281.527515][T19791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4175'.
[  281.531536][T19791] netlink: 'syz.2.4175': attribute type 15 has an invalid length.
[  281.663744][T19809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4182'.
[  281.711889][T19809] lo speed is unknown, defaulting to 1000
[  281.831891][T19809] hsr0 speed is unknown, defaulting to 1000
[  281.883161][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4185'.
[  283.382421][T19883] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.385282][T19882] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.524277][T19885] openvswitch: netlink: IP tunnel TTL not specified.
[  283.530238][T19893] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  283.640261][T19906] netlink: 'syz.1.4210': attribute type 10 has an invalid length.
[  283.642909][T19906] dummy0: left promiscuous mode
[  283.648980][T19906] netlink: 'syz.1.4210': attribute type 10 has an invalid length.
[  283.657105][T19906] netlink: 'syz.1.4210': attribute type 10 has an invalid length.
[  283.659798][T19909] netlink: 'syz.1.4210': attribute type 10 has an invalid length.
[  283.721965][T19912] netlink: 'syz.0.4211': attribute type 10 has an invalid length.
[  283.729120][T19912] team0: Port device 0! added
[  283.732025][T19914] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.748038][T19914] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  283.833870][T19919] lo speed is unknown, defaulting to 1000
[  283.925233][T19920] lo speed is unknown, defaulting to 1000
[  283.927563][T19919] hsr0 speed is unknown, defaulting to 1000
[  284.108404][T19920] hsr0 speed is unknown, defaulting to 1000
[  284.495128][T19950] syzkaller1: entered promiscuous mode
[  284.497481][T19950] syzkaller1: entered allmulticast mode
[  284.519283][T19953] ip6gretap0: entered promiscuous mode
[  284.521072][T19953] ip6gretap0: entered allmulticast mode
[  284.524006][ T7358] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.527202][ T7358] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.547159][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.747320][ T1271] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.815159][T19977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.836430][T19997] netlink: 'syz.2.4237': attribute type 1 has an invalid length.
[  285.184526][T20046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  285.278064][T20066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.357836][T20065] tipc: Disabling bearer <eth:syzkaller0>
[  285.435352][T20090] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  285.804429][T20134] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  285.808381][T20134] gretap4: entered promiscuous mode
[  285.810011][T20134] gretap4: entered allmulticast mode
[  285.902362][T20143] xfrm1: entered allmulticast mode
[  286.010709][T20149] bond34: (slave bond35): Releasing backup interface
[  286.067542][T20149] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  286.070506][T20149] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  286.115188][T20166] __nla_validate_parse: 41 callbacks suppressed
[  286.115198][T20166] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4292'.
[  286.163417][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4293'.
[  286.173063][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4293'.
[  286.310090][T20179] sctp: [Deprecated]: syz.0.4297 (pid 20179) Use of int in max_burst socket option.
[  286.310090][T20179] Use struct sctp_assoc_value instead
[  286.334380][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'.
[  286.384090][T20188] veth19: entered promiscuous mode
[  286.409054][T20188] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4300'.
[  286.478607][T20196] IPVS: Scheduler module ip_vs_sip not found
[  286.482045][T20196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4303'.
[  286.680537][T20217] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  286.821334][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4312'.
[  286.826708][T20225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4312'.
[  286.831020][T20225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4312'.
[  286.847549][T20228] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4313'.
[  286.854264][T20228] netlink: 'syz.2.4313': attribute type 11 has an invalid length.
[  286.861641][T20228] validate_nla: 6 callbacks suppressed
[  286.861653][T20228] netlink: 'syz.2.4313': attribute type 1 has an invalid length.
[  286.889051][T20228] 8021q: adding VLAN 0 to HW filter on device bond38
[  287.030808][T20246] netlink: 'syz.1.4321': attribute type 2 has an invalid length.
[  287.036590][T20246] k*]: entered promiscuous mode
[  287.040411][T20246] 1{X: left allmulticast mode
[  287.042882][T20246] ip6gretap0: left allmulticast mode
[  287.051981][T20246] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  287.060765][T20246] bridge7: left allmulticast mode
[  287.064618][T20246] xfrm3: left allmulticast mode
[  287.066646][T20246] xfrm4: left allmulticast mode
[  287.070461][T20246] ip6tnl6: left allmulticast mode
[  287.074923][T20246] macvtap0: left allmulticast mode
[  287.077151][T20246] erspan0: left allmulticast mode
[  287.090737][T20246] rdma_op ffff88803ae899f0 conn xmit_rdma 0000000000000000
[  287.930059][T20271] netlink: 'syz.0.4326': attribute type 9 has an invalid length.
[  287.932798][T20271] netlink: 'syz.0.4326': attribute type 9 has an invalid length.
[  288.073359][T20282] IPVS: Unknown mcast interface: wg0
[  288.334687][T20321] netlink: 'syz.2.4340': attribute type 1 has an invalid length.
[  288.347728][T20321] 8021q: adding VLAN 0 to HW filter on device bond39
[  288.943970][T20345] syzkaller1: entered promiscuous mode
[  288.946080][T20345] syzkaller1: entered allmulticast mode
[  289.160810][T20347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.172176][T20347] siw: device registration error -23
[  289.313571][T20357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.676026][T20377] netlink: 'syz.2.4360': attribute type 5 has an invalid length.
[  289.703202][T20377] lo speed is unknown, defaulting to 1000
[  289.782937][T20377] hsr0 speed is unknown, defaulting to 1000
[  289.856233][T15973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.859599][T15973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.945212][T20352] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI
[  289.949100][T20352] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  289.952248][T20352] CPU: 0 UID: 0 PID: 20352 Comm: syz.0.4349 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  289.956206][T20352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  289.959378][T20352] RIP: 0010:rose_transmit_link+0x32/0x740
[  289.961133][T20352] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 79 c1 5c f7 4c 8d 7d 32 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  289.967257][T20352] RSP: 0018:ffffc90009877910 EFLAGS: 00010206
[  289.969170][T20352] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff8881075eb980
[  289.971660][T20352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888023071b00
[  289.974188][T20352] RBP: 0000000000000000 R08: ffff8881075eb980 R09: 0000000000000008
[  289.976750][T20352] R10: 000000000000000f R11: 0000000000000000 R12: ffff888023071b00
[  289.979247][T20352] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000032
[  289.981794][T20352] FS:  00007f255ae576c0(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  289.984686][T20352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  289.986783][T20352] CR2: 000000110c24e7eb CR3: 000000010f31e000 CR4: 00000000000006f0
[  289.989426][T20352] Call Trace:
[  289.990521][T20352]  <TASK>
[  289.991461][T20352]  ? skb_put+0x11b/0x210
[  289.992801][T20352]  rose_write_internal+0x11dc/0x1ac0
[  289.994529][T20352]  ? __pfx_rose_write_internal+0x10/0x10
[  289.996418][T20352]  ? __timer_delete+0x5d/0x390
[  289.997956][T20352]  rose_release+0x24e/0x520
[  289.999456][T20352]  sock_close+0xc3/0x240
[  290.000815][T20352]  ? __pfx_sock_close+0x10/0x10
[  290.002383][T20352]  __fput+0x44c/0xa70
[  290.003644][T20352]  task_work_run+0x1d4/0x260
[  290.005199][T20352]  ? __pfx_task_work_run+0x10/0x10
[  290.006916][T20352]  ? task_work_add+0x377/0x420
[  290.008556][T20352]  ? __pfx_task_work_add+0x10/0x10
[  290.010247][T20352]  get_signal+0x11ed/0x1340
[  290.011789][T20352]  arch_do_signal_or_restart+0x9a/0x750
[  290.013659][T20352]  ? __pfx___sys_connect+0x10/0x10
[  290.015376][T20352]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  290.017449][T20352]  ? exit_to_user_mode_loop+0x40/0x110
[  290.019213][T20352]  exit_to_user_mode_loop+0x75/0x110
[  290.021011][T20352]  do_syscall_64+0x2bd/0x3b0
[  290.022540][T20352]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.024221][T20352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.026200][T20352]  ? exc_page_fault+0x9f/0xf0
[  290.027780][T20352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.029739][T20352] RIP: 0033:0x7f2559f8ebe9
[  290.031201][T20352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.037431][T20352] RSP: 002b:00007f255ae57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  290.040150][T20352] RAX: 0000000000000000 RBX: 00007f255a1b6090 RCX: 00007f2559f8ebe9
[  290.042788][T20352] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000f
[  290.045281][T20352] RBP: 00007f255a011e19 R08: 0000000000000000 R09: 0000000000000000
[  290.047941][T20352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.050559][T20352] R13: 00007f255a1b6128 R14: 00007f255a1b6090 R15: 00007ffe1ecf63b8
[  290.053073][T20352]  </TASK>
[  290.054137][T20352] Modules linked in:
[  290.055868][T20352] ---[ end trace 0000000000000000 ]---
[  290.060865][T20352] RIP: 0010:rose_transmit_link+0x32/0x740
[  290.062990][T20352] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 79 c1 5c f7 4c 8d 7d 32 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  290.069967][T20352] RSP: 0018:ffffc90009877910 EFLAGS: 00010206
[  290.072482][T20352] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff8881075eb980
[  290.075172][T20352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888023071b00
[  290.079412][T20352] RBP: 0000000000000000 R08: ffff8881075eb980 R09: 0000000000000008
[  290.082011][T20352] R10: 000000000000000f R11: 0000000000000000 R12: ffff888023071b00
[  290.084688][T20352] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000032
[  290.094261][T20352] FS:  00007f255ae576c0(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  290.098759][T20352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.100982][T20352] CR2: 00007fa717974c40 CR3: 000000010f31e000 CR4: 00000000000006f0
[  290.103526][T20352] Kernel panic - not syncing: Fatal exception
[  290.106222][T20352] Kernel Offset: disabled
[  290.107595][T20352] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:55:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90009877150
R8 =ffff888021a60237 R9 =1ffff1100434c046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9593c R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f255ae576c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c24e7eb CR3=000000010f31e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0156bca2204e0300 0f234e0b0047840a
XMM02=813f03319035d793 f3b7df194f00d719 XMM03=030ec005ff010100 000000000000007f
XMM04=01ffff0000000200 030ec005ff010100 XMM05=000000000000007f 813f03319035d793
XMM06=f3b7df194f00d719 0156bca2204e0300 XMM07=0f234e0b0047840a 02360dfdea4b0009
XMM08=400200080e000000 4001000280020014 XMM09=0000000000000000 00007f255a012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4451b RBX=1ffff11009608385 RCX=ffff8880239a8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000442f6c0 RSP=ffffc9000442f540
R8 =ffffffff8fa07bf7 R9 =1ffffffff1f40f7e R10=dffffc0000000000 R11=fffffbfff1f40f7f
R12=ffff88804b041c28 R13=dffffc0000000000 R14=ffff88813663b180 R15=0000000000000000
RIP=ffffffff81b44503 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555574440500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa7186e56c0 CR3=00000000289c6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff5ef212e53
XMM06=0000000000000000 00007ff5ef212e4d XMM07=0000000000000000 00007ff5ef212e61
XMM08=0000000000000000 00007ff5ef212ee7 XMM09=0000000000000000 00007ff5ef212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
