last executing test programs:

1.350097267s ago: executing program 1 (id=16452):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r1, 0x1)
connect$rds(r1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@mcast2, @empty, 0x10, 0x14}})
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

1.278260967s ago: executing program 1 (id=16453):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x16}) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000080))

1.27787912s ago: executing program 0 (id=16454):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) (async)

1.209689832s ago: executing program 1 (id=16455):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000009c0)={{<r1=>r0, &(0x7f00000002c0)='\"\x00', 0x20000, &(0x7f0000000880)={@_ha_fsid={[0x5, 0x5]}, {0x8, 0x8, 0x6, 0x6}}, 0x40, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)=0x513b}, {[0x6, 0x0, 0x3ff, 0x1]}, 0x100, 0x7e, &(0x7f0000000940)=""/126})
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000a40))
recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000040)=@pppol2tpv3, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000003c0)=""/226, 0xe2}], 0x5, &(0x7f0000000540)=""/15, 0xf}, 0x8}, {{&(0x7f0000000580)=@caif=@rfm, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/128, 0x80}, {&(0x7f0000000680)=""/6, 0x6}], 0x2, &(0x7f0000000700)=""/175, 0xaf}, 0x1}], 0x2, 0x0, &(0x7f0000000840))
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x688}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r3)

1.207818491s ago: executing program 0 (id=16456):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1_to_bridge\x00', <r4=>0x0})
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4, 0x0, r3}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=<r5=>0x0)
bind$nfc_llcp(r0, &(0x7f0000001740)={0x27, r5, 0x0, 0x3, 0x20, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3d}, 0x60)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x1000007c, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x1f, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(r2)
r6 = socket(0x10, 0x803, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r7, &(0x7f0000000540)}, 0x20)
recvmsg$can_raw(r6, &(0x7f0000001c80)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000440)=""/254, 0xfe}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f00000005c0)=""/3, 0x3}, {&(0x7f0000001680)=""/75, 0x4b}, {&(0x7f0000001700)=""/49, 0x31}, {&(0x7f0000001880)=""/179, 0xb3}, {&(0x7f0000001940)=""/138, 0x8a}, {&(0x7f0000001a00)=""/188, 0xbc}, {&(0x7f0000001ac0)=""/12, 0xc}], 0x9, &(0x7f0000001bc0)=""/163, 0xa3}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, r11, 0x1, 0x70bd26, 0x4000, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x994}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x40}}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x3, 0x0, {0x0, 0x0, 0x0, r8, 0x53c03}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf4bd, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000600)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x8, '\x00', r4, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x3, 0xef5, 0xfffffffc}, 0x10, 0x19372, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000002040)=[{0x1, 0x1, 0x5, 0x8}, {0x0, 0x1, 0xb, 0xa}, {0x0, 0x5, 0xd, 0x5}, {0x0, 0x3, 0x1, 0x5}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0xc}, 0x94)

1.114430746s ago: executing program 2 (id=16457):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003900"/19, @ANYRES32=0x0, @ANYBLOB="0000000000080100300012800b00010062726964676500002000028008001500000000000a0014000180c200000000000500070009000000"], 0x50}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000300)={0xffffffff}, 0x4)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0x6, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic=',']}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1, 0x9, r4, 0x9}, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x20000000, 0x10001, 0x8}, 0x4b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2)
close(r7)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c001400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x400}, 0x3548, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

1.018307346s ago: executing program 2 (id=16458):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xf3, 0x1bc, 0x3, 0x3, 0xa, 0x5, 0x40}, 0xc)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) (async)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x5, @loopback, 0xa}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000840000000700eb4e188111407f8b37d5"], 0x18, 0x1000c005}, 0x24000852) (async)
recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40000101, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
close(r3) (async, rerun: 64)
sendfile(r3, r2, 0x0, 0x1) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001140)=0x18)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) (async, rerun: 32)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}, {0x6, 0xfc}]}) (async, rerun: 32)
ioctl$PPPIOCSDEBUG(r4, 0x40047440, 0x0) (async)
write$ppp(r4, &(0x7f0000000480)="1e08", 0x2)
syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@multicast, @remote, @void, {@can={0xc, {{0x2, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "c4b67af7f0d2a896"}}}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async)
recvmmsg(r6, &(0x7f0000002f40)=[{{&(0x7f0000000480)=@sco={0x1f, @none}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/137, 0x89}], 0x1, &(0x7f0000000780)=""/94, 0x5e}}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/102, 0x66}, {&(0x7f0000000900)=""/94, 0x5e}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000b00)=""/7, 0x7}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/155, 0x9b}], 0x6, &(0x7f0000003100)=""/250, 0xfa}, 0x800}, {{&(0x7f0000000e80)=@ax25={{0x3, @rose}, [@netrom, @netrom, @netrom, @bcast, @rose, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/48, 0x30}], 0x1, &(0x7f0000000f80)=""/20, 0x14}, 0x1}, {{&(0x7f0000000fc0)=@nfc_llcp, 0x80, &(0x7f0000002480)=[{&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/48, 0x30}, {&(0x7f0000002100)=""/166, 0xa6}, {&(0x7f00000021c0)=""/44, 0x2c}, {&(0x7f0000000d80)=""/249, 0xf9}, {&(0x7f0000002300)=""/175, 0xaf}, {&(0x7f00000023c0)=""/149, 0x95}], 0x8, &(0x7f0000002500)=""/118, 0x76}, 0x9}, {{&(0x7f0000002580)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002600)=""/181, 0xb5}, {&(0x7f00000026c0)=""/159, 0x9f}, {&(0x7f0000002780)=""/48, 0x30}], 0x3, &(0x7f0000002800)=""/132, 0x84}, 0xfffffff9}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002940)=""/223, 0xdf}, {&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002b40)=""/195, 0xc3}], 0x3, &(0x7f0000002c80)=""/71, 0x47}, 0x8}], 0x6, 0x12020, 0x0) (async)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800007242743e0e39cd9eaa0000000000100000001000190005000000090000000000ff0e01000000"], &(0x7f0000002200)=""/135, 0x2d, 0x87, 0x0, 0x3}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000003200)=@base={0x20, 0x80, 0x3, 0x40, 0x1400, 0xffffffffffffffff, 0x6, '\x00', 0x0, r7, 0x5, 0x0, 0x3}, 0x50) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000540)={'veth0_vlan\x00', 0x200}) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r8, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000004240)=@delneigh={0x28, 0x1d, 0x1, 0x70bd25, 0x7, {0xa, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x8)

900.490386ms ago: executing program 2 (id=16459):
r0 = socket$inet6(0xa, 0x1, 0x100)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280))
syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaa2aaa6cf6", @ANYRES32=0x41424344], 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000300)={@loopback}, 0x14)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000340)={@mcast2}, &(0x7f0000000500)=0x14)
r4 = accept4(r3, 0x0, 0x0, 0x800)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
accept4(r5, 0x0, 0x0, 0x80000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

840.981837ms ago: executing program 2 (id=16460):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x587}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x70}}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001e00)={'macvtap0\x00', 0x0})
syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x66, 0x0, 0x0, 0x84, 0x0, @empty, @multicast1, {[@generic={0x0, 0x2}]}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x5, 0xfffffff7}, 0x21, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000480)={@local, @private0, @mcast2, 0x9, 0x9, 0xf08, 0x500, 0x9, 0x100006, r1})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fdfffefe000000000300000085000000110000008500000011000000950000000000000082f1374954dbf4ff8932db8fe53205f6e5a8a19842d48fe8"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x4101, 0xd40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r13, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r12, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000fcdbdf250100000005000600af000000080003000600000005000500000000002084"], 0x2c}}, 0x24000806)
bind$alg(r10, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4)
accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)

720.944788ms ago: executing program 2 (id=16461):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x587}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x70}}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000010000000000000002000000850000002f000900000000000000000051e0c2c3170ca133459500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001e00)={'macvtap0\x00', 0x0})
syz_emit_ethernet(0x26, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002fcba37ce15959cdc00000084907800000000e0000001008200006d525eb23c94736b090efdd47187d53f15b6302ad02def4595cff4c20d1c650360fc190a04eee838a3a25ab0870d60e1ed0b76afd9f1a269823295ce0a0df188605d2ff81702062f985cf05127622f8db7f93c6600000000000000"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newtaction={0xa8, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x94, 0x1, [@m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x5, 0xfffffff7}, 0x21, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x2c, 0x8, 0x3, 0x4}, 0x3, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008880}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000480)={@local, @private0, @mcast2, 0x9, 0x9, 0xf08, 0x500, 0x9, 0x100006, r1})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fdfffefe000000000300000085000000110000008500000011000000950000000000000082f1374954dbf4ff8932db8fe53205f6e5a8a19842d48fe8"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01410000400d0000281f0012800b000100697036ca9ce46c746e6c00001800028014000200fc0100000000000000000000000000fc7dafb6ece8cb171cdf5403f469c385f90983623ba163ab20c2c6d45ea903ef5ba2635cc36825fe9de142161656993b71dab455e0bdc1f484b2c28e9d23b10dba199e1d49cec75cc3010aab9219b3bd6c2772c594758ef8824da046a253985e8cb56fb85e1ef5e944311783ad46cb1c3171e945145559cfec22a4c7cfbb33f1b0a1cc"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r13, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r12, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000fcdbdf250100000005000600af000000080003000600000005000500000000002084"], 0x2c}}, 0x24000806)
bind$alg(r10, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4)
accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)

591.184969ms ago: executing program 2 (id=16462):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', <r1=>0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10)
recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x10002, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000000214010027bd7000fcdbdf2508004400", @ANYRES32, @ANYBLOB="050054000100000008250001000200000008000100010000000800010002000000777e3fd10dbf01c70081d49b3e5b74a455e7c33000e3fcb3f562d71df04f2bbfe675529a10e94094c3830d47f189378f3d5625c41e8afbed4f86f1e332973ff4c9898763760bfad5bb3d3ba0f2f8cad427"], 0x38}, 0x1, 0x0, 0x0, 0x44018}, 0x4000044)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = gettid()
r5 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x10001, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000010000304fdfffffffbdbdf2500003bbce4ab3e22c735a2780a3f7400", @ANYRES32=r1, @ANYBLOB="089805000752050008001300", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r9, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x80000)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
getpeername(r6, 0x0, &(0x7f0000000180))
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)

296.607924ms ago: executing program 1 (id=16463):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008040)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4000000)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448c9, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

295.667461ms ago: executing program 0 (id=16464):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r4, 0xfffffffc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r11)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000640)={0x4, {{0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}}, {{0xa, 0x4e23, 0x5, @mcast2, 0x5}}}, 0x108)
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r12, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x4443fde33fec5456, 0x0)

294.934568ms ago: executing program 1 (id=16465):
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000380))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, &(0x7f0000000180), r3, 0x0, 0x2000000000004, 0xa) (async)
splice(r2, &(0x7f0000000180), r3, 0x0, 0x2000000000004, 0xa)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000c, 0x20010, r4, 0xffffe000)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x8, 0x2) (async)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x8, 0x2)

218.302293ms ago: executing program 1 (id=16466):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r1 = socket$inet(0x2, 0x2, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r3, 0x0) (async)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) (async)
setsockopt$inet_buf(r4, 0x0, 0x30, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x2, 0x1, 0x1, 0x4, 0x0, 0x1}, 0x20) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000040)={'veth0_to_bond\x00', @random="013501320400"})
bind$bt_hci(r6, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) (async)
shutdown(r1, 0x0)

51.056605ms ago: executing program 0 (id=16467):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000540)}, 0x20) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1)
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r4=>0x0}) (rerun: 64)
sendto$packet(r3, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
unshare(0x400) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000080), 0x2, 0x0)
sendfile(r8, r8, &(0x7f00000000c0)=0x4, 0x38c6) (async)
recvmsg$unix(r5, &(0x7f0000001180)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000140)=""/61, 0x3d}], 0x1}, 0x10200) (async)
sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async)
recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000025c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x10}, 0x94) (async, rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x3, 0x0, {0x0, 0x0, 0x0, r9, 0x53c03}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) (async, rerun: 64)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r10, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
connect$bt_sco(r10, &(0x7f0000000000)={0x1f, @none}, 0x8)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

663.484µs ago: executing program 0 (id=16468):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)

0s ago: executing program 0 (id=16469):
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000540)}, 0x20)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r4 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94)
getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async)
getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61141400000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x3, 0x0, {0x0, 0x0, 0x0, r3, 0x53c03}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) (async)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x3, 0x0, {0x0, 0x0, 0x0, r3, 0x53c03}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r5, r2}, 0xc)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r6, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @none}, 0x8)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

kernel console output (not intermixed with test programs):

1334.509418][T27076] netlink: 'syz.2.13854': attribute type 4 has an invalid length.
[ 1334.723742][T27086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13855'.
[ 1335.345801][T27094] netlink: 'syz.0.13857': attribute type 4 has an invalid length.
[ 1335.721007][T27118] IPVS: persistence engine module ip_vs_pe_ not found
[ 1335.944560][T27128] netlink: 'syz.1.13865': attribute type 9 has an invalid length.
[ 1336.022870][T27132] netlink: 'syz.1.13866': attribute type 13 has an invalid length.
[ 1336.113845][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13867'.
[ 1336.266725][T27139] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1336.430056][T27142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13869'.
[ 1336.462374][T27149] netlink: 'syz.2.13871': attribute type 4 has an invalid length.
[ 1336.497717][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13872'.
[ 1336.526545][T27154] netlink: 'syz.2.13873': attribute type 4 has an invalid length.
[ 1336.528931][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13873'.
[ 1336.557972][   T33] audit: type=1800 audit(1778616651.024:121): pid=27152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13872" name="memory.events" dev="tmpfs" ino=23345 res=0 errno=0
[ 1337.212765][T27178] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1337.338557][T27184] netlink: 'syz.1.13881': attribute type 1 has an invalid length.
[ 1337.846696][T27217] netlink: 'syz.0.13889': attribute type 4 has an invalid length.
[ 1337.857409][T27216] netlink: 'syz.0.13889': attribute type 4 has an invalid length.
[ 1338.064967][   T33] audit: type=1800 audit(1778616652.534:122): pid=27218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13890" name="memory.events" dev="tmpfs" ino=23395 res=0 errno=0
[ 1338.134094][T27230] lo speed is unknown, defaulting to 1000
[ 1338.243630][T27230]  speed is unknown, defaulting to 1000
[ 1338.247453][T27230] hsr0 speed is unknown, defaulting to 1000
[ 1338.793279][T27249] __nla_validate_parse: 4 callbacks suppressed
[ 1338.793289][T27249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13899'.
[ 1338.842687][T27254] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1339.084339][T27259] xt_hashlimit: size too large, truncated to 1048576
[ 1339.295141][T27264] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13903'.
[ 1340.178877][T27289] sctp: [Deprecated]: syz.0.13911 (pid 27289) Use of int in max_burst socket option.
[ 1340.178877][T27289] Use struct sctp_assoc_value instead
[ 1340.229992][T27292] netlink: 'syz.0.13912': attribute type 13 has an invalid length.
[ 1340.248076][T27292] netlink: 'syz.0.13912': attribute type 13 has an invalid length.
[ 1341.707023][T27354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13928'.
[ 1341.724917][T27356] openvswitch: netlink: nsh attr 1647 is out of range max 3
[ 1341.814333][T27365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13931'.
[ 1341.817207][T27365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13931'.
[ 1341.821434][T27367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13932'.
[ 1341.886203][   T33] audit: type=1800 audit(1778616656.354:123): pid=27367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13932" name="memory.events" dev="tmpfs" ino=24515 res=0 errno=0
[ 1341.889869][T27373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13932'.
[ 1341.979911][T27379] netlink: 'syz.1.13936': attribute type 4 has an invalid length.
[ 1341.996110][T27385] netlink: 'syz.2.13937': attribute type 4 has an invalid length.
[ 1342.035161][T27389] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13939'.
[ 1342.133207][T27397] lo speed is unknown, defaulting to 1000
[ 1342.192665][T27401] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13943'.
[ 1342.316933][T27397]  speed is unknown, defaulting to 1000
[ 1342.320959][T27397] hsr0 speed is unknown, defaulting to 1000
[ 1342.439239][T27419] netlink: 277 bytes leftover after parsing attributes in process `syz.0.13947'.
[ 1344.506854][T27509] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1344.690352][T27518] __nla_validate_parse: 6 callbacks suppressed
[ 1344.695187][T27518] netlink: 277 bytes leftover after parsing attributes in process `syz.0.13973'.
[ 1344.887251][T27529] netlink: 'syz.0.13975': attribute type 4 has an invalid length.
[ 1345.069432][T27521] xt_hashlimit: size too large, truncated to 1048576
[ 1345.454652][T27557] xt_hashlimit: size too large, truncated to 1048576
[ 1345.467382][T27563] netlink: 'syz.2.13984': attribute type 10 has an invalid length.
[ 1345.475656][T27563] netlink: 2 bytes leftover after parsing attributes in process `syz.2.13984'.
[ 1345.569014][T27571] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1345.718325][   T33] audit: type=1800 audit(1778616660.184:124): pid=27573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13985" name="memory.events" dev="tmpfs" ino=23559 res=0 errno=0
[ 1345.779579][T27585] netlink: 6 bytes leftover after parsing attributes in process `syz.0.13989'.
[ 1345.798504][T27588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13986'.
[ 1345.806953][T27588] netlink: 'syz.1.13986': attribute type 1 has an invalid length.
[ 1345.877717][T27582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13988'.
[ 1345.901855][T27593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13990'.
[ 1345.918752][T27593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13990'.
[ 1345.995505][T27600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13992'.
[ 1346.388187][T27624] netlink: 'syz.2.13998': attribute type 4 has an invalid length.
[ 1346.464838][T27627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13999'.
[ 1346.468750][T27627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1346.479746][T27627] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1346.574641][T27635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14001'.
[ 1347.249986][T27704] netlink: 'syz.1.14018': attribute type 1 has an invalid length.
[ 1347.253733][T27704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1347.258014][T27704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1347.396702][T27720] netlink: 'syz.0.14023': attribute type 4 has an invalid length.
[ 1347.473169][T27728] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1347.475477][T27729] team0: Device bond26 is up. Set it down before adding it as a team port
[ 1347.777829][T27767] lo speed is unknown, defaulting to 1000
[ 1347.985542][T27767]  speed is unknown, defaulting to 1000
[ 1347.998475][T27767] hsr0 speed is unknown, defaulting to 1000
[ 1348.753408][T27788] tc_dump_action: action bad kind
[ 1348.964564][T27804] xt_hashlimit: size too large, truncated to 1048576
[ 1349.285697][T27814] netlink: 'syz.2.14048': attribute type 4 has an invalid length.
[ 1349.897645][T27832] __nla_validate_parse: 11 callbacks suppressed
[ 1349.897665][T27832] netlink: 277 bytes leftover after parsing attributes in process `syz.0.14053'.
[ 1350.286079][T27838] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.14054'.
[ 1350.388927][T27851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14058'.
[ 1350.397696][T27854] netlink: 9 bytes leftover after parsing attributes in process `syz.2.14057'.
[ 1350.499009][T27863] netlink: 'syz.1.14061': attribute type 32 has an invalid length.
[ 1350.523010][T27864] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1350.538142][T27866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14062'.
[ 1350.568348][T27869] team0: entered promiscuous mode
[ 1350.571180][T27869] ip6gre3: entered promiscuous mode
[ 1350.578490][T27869] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1350.598386][T27871] sctp: [Deprecated]: syz.2.14064 (pid 27871) Use of int in max_burst socket option.
[ 1350.598386][T27871] Use struct sctp_assoc_value instead
[ 1350.647694][T27876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14066'.
[ 1350.657137][T27876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14066'.
[ 1350.716737][   T33] audit: type=1800 audit(1778616665.184:125): pid=27876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14066" name="memory.events" dev="tmpfs" ino=24803 res=0 errno=0
[ 1351.470314][T27896] netlink: 'syz.1.14069': attribute type 13 has an invalid length.
[ 1351.473736][T27896] netlink: 'syz.1.14069': attribute type 13 has an invalid length.
[ 1351.589403][T27903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14070'.
[ 1351.721798][T27908] netlink: 'syz.0.14072': attribute type 4 has an invalid length.
[ 1351.744943][T27915] netlink: 'syz.2.14073': attribute type 1 has an invalid length.
[ 1351.775135][T27915] 8021q: adding VLAN 0 to HW filter on device bond34
[ 1351.925329][T27932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14076'.
[ 1351.926959][T27931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14077'.
[ 1352.236327][T27957] syzkaller1: entered promiscuous mode
[ 1352.238014][T27957] syzkaller1: entered allmulticast mode
[ 1352.243587][T27957] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[ 1352.245767][T27957] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[ 1352.398524][T27966] netlink: 'syz.1.14084': attribute type 4 has an invalid length.
[ 1352.413030][T27962] lo speed is unknown, defaulting to 1000
[ 1352.613966][T27962]  speed is unknown, defaulting to 1000
[ 1352.617886][T27962] hsr0 speed is unknown, defaulting to 1000
[ 1352.626769][T27970] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1353.225435][T27979] Unsupported ieee802154 address type: 0
[ 1354.111356][T27993] netlink: 'syz.2.14092': attribute type 4 has an invalid length.
[ 1355.306476][T28023] veth1_to_team: Caught tx_queue_len zero misconfig
[ 1355.695435][T28037] netlink: 'syz.0.14105': attribute type 4 has an invalid length.
[ 1355.918091][T28041] __nla_validate_parse: 8 callbacks suppressed
[ 1355.918101][T28041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14107'.
[ 1355.966381][T28041] can: request_module (can-proto-0) failed.
[ 1355.974891][T28041] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14107'.
[ 1356.138919][T28053] netlink: 277 bytes leftover after parsing attributes in process `syz.2.14110'.
[ 1356.263365][T28058] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.14111'.
[ 1356.392527][T28064] vlan1: entered promiscuous mode
[ 1356.398927][T28064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14113'.
[ 1356.417374][T28064] netlink: 'syz.2.14113': attribute type 4 has an invalid length.
[ 1356.509093][T28072] netlink: 277 bytes leftover after parsing attributes in process `syz.2.14115'.
[ 1356.927391][T28095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14121'.
[ 1357.040528][T28096] netlink: 'syz.0.14120': attribute type 4 has an invalid length.
[ 1357.045429][T28096] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14120'.
[ 1357.422339][T28110] netlink: 277 bytes leftover after parsing attributes in process `syz.1.14125'.
[ 1357.827934][T28135] gre0: Caught tx_queue_len zero misconfig
[ 1358.145619][T28153] lo speed is unknown, defaulting to 1000
[ 1358.224577][T28164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14137'.
[ 1358.234215][T28164] netlink: 'syz.1.14137': attribute type 1 has an invalid length.
[ 1358.329979][T28153]  speed is unknown, defaulting to 1000
[ 1358.335753][T28153] hsr0 speed is unknown, defaulting to 1000
[ 1358.918096][T28188] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[ 1358.922898][T28188] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[ 1359.106996][T28198] netlink: 'syz.0.14148': attribute type 14 has an invalid length.
[ 1359.253206][T28205] netlink: 'syz.0.14149': attribute type 4 has an invalid length.
[ 1359.301812][T28196] xt_hashlimit: size too large, truncated to 1048576
[ 1370.374317][T28254] netlink: 'syz.0.14162': attribute type 10 has an invalid length.
[ 1370.381612][T28254] __nla_validate_parse: 8 callbacks suppressed
[ 1370.381629][T28254] netlink: 228 bytes leftover after parsing attributes in process `syz.0.14162'.
[ 1370.391535][T28254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14162'.
[ 1370.559189][T28266] nbd: must specify at least one socket
[ 1370.683711][T28272] netlink: 277 bytes leftover after parsing attributes in process `syz.2.14169'.
[ 1370.727713][T28274] netlink: 149 bytes leftover after parsing attributes in process `syz.0.14168'.
[ 1370.918754][T28285] netlink: 200 bytes leftover after parsing attributes in process `syz.1.14172'.
[ 1370.971267][T28286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14172'.
[ 1371.129828][T28293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14174'.
[ 1371.140602][T28293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14174'.
[ 1371.146555][T28293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14174'.
[ 1371.187089][T28288] xt_hashlimit: size too large, truncated to 1048576
[ 1371.295139][T28302] netlink: 'syz.1.14176': attribute type 4 has an invalid length.
[ 1371.410283][T28306] netlink: 273 bytes leftover after parsing attributes in process `syz.0.14178'.
[ 1371.706287][T28324] lo speed is unknown, defaulting to 1000
[ 1371.825629][T28324]  speed is unknown, defaulting to 1000
[ 1371.864505][T28324] hsr0 speed is unknown, defaulting to 1000
[ 1372.613090][T28369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1372.618378][T28365] netlink: 'syz.2.14192': attribute type 4 has an invalid length.
[ 1372.866807][T28387] veth29: entered promiscuous mode
[ 1372.963890][T28391] netlink: 'syz.1.14199': attribute type 4 has an invalid length.
[ 1373.433797][T28428] lo speed is unknown, defaulting to 1000
[ 1373.558908][T28428]  speed is unknown, defaulting to 1000
[ 1373.563984][T28428] hsr0 speed is unknown, defaulting to 1000
[ 1373.709345][   T33] audit: type=1800 audit(1778616688.174:126): pid=28435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14207" name="memory.events" dev="tmpfs" ino=25070 res=0 errno=0
[ 1373.837215][T28443] xt_hashlimit: size too large, truncated to 1048576
[ 1374.330284][T28464] netlink: 'syz.2.14215': attribute type 4 has an invalid length.
[ 1374.454941][   T33] audit: type=1800 audit(1778616688.924:127): pid=28466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14216" name="memory.events" dev="tmpfs" ino=25106 res=0 errno=0
[ 1374.616134][T28479] bridge30: entered allmulticast mode
[ 1374.983997][T28505] sctp: [Deprecated]: syz.1.14228 (pid 28505) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1374.983997][T28505] Use struct sctp_sack_info instead
[ 1375.754880][T28546] __nla_validate_parse: 21 callbacks suppressed
[ 1375.754893][T28546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14237'.
[ 1375.807221][T28553] lo speed is unknown, defaulting to 1000
[ 1375.831571][T28553] lo speed is unknown, defaulting to 1000
[ 1375.943733][T28553]  speed is unknown, defaulting to 1000
[ 1375.947531][T28553] hsr0 speed is unknown, defaulting to 1000
[ 1375.999035][T28553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14239'.
[ 1376.109399][T28569] netlink: 277 bytes leftover after parsing attributes in process `syz.2.14243'.
[ 1376.136221][T28570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14242'.
[ 1376.142980][T28571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14242'.
[ 1376.205914][T28576] netlink: 'syz.1.14244': attribute type 30 has an invalid length.
[ 1376.275955][T28586] netlink: 277 bytes leftover after parsing attributes in process `syz.1.14246'.
[ 1376.736042][T28603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14249'.
[ 1376.825039][T28605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14249'.
[ 1376.828605][T28605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14249'.
[ 1377.012906][T28608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14250'.
[ 1377.609896][T28629] netlink: 'syz.2.14255': attribute type 3 has an invalid length.
[ 1377.841715][T28633] xt_hashlimit: size too large, truncated to 1048576
[ 1378.125224][   T33] audit: type=1800 audit(1778616692.594:128): pid=28656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14263" name="memory.events" dev="tmpfs" ino=23931 res=0 errno=0
[ 1378.146961][T28651] lo speed is unknown, defaulting to 1000
[ 1378.313577][T28651]  speed is unknown, defaulting to 1000
[ 1378.325540][T28651] hsr0 speed is unknown, defaulting to 1000
[ 1378.619639][T28678] netlink: 'syz.1.14268': attribute type 4 has an invalid length.
[ 1379.668855][T28716] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1380.110306][T28721] netlink: 'syz.0.14279': attribute type 4 has an invalid length.
[ 1380.551887][T28739] xt_hashlimit: size too large, truncated to 1048576
[ 1380.839312][T28758] netlink: 'syz.2.14289': attribute type 4 has an invalid length.
[ 1381.018426][T28767] __nla_validate_parse: 42 callbacks suppressed
[ 1381.018440][T28767] netlink: 200 bytes leftover after parsing attributes in process `syz.0.14291'.
[ 1381.180126][T28770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14292'.
[ 1381.217232][T28778] netlink: 277 bytes leftover after parsing attributes in process `syz.0.14293'.
[ 1381.259464][T28778] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1381.501443][T28794] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14298'.
[ 1381.539875][T28794] netlink: 'syz.0.14298': attribute type 4 has an invalid length.
[ 1381.708569][T28804] IPVS: set_ctl: invalid protocol: 51 172.30.0.1:20001
[ 1381.749671][T28806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14301'.
[ 1381.847881][T28811] netlink: 'syz.2.14302': attribute type 4 has an invalid length.
[ 1381.972443][T28821] netlink: 277 bytes leftover after parsing attributes in process `syz.2.14305'.
[ 1382.128678][T28829] netlink: 'syz.0.14307': attribute type 4 has an invalid length.
[ 1382.223032][T28841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14311'.
[ 1382.243033][T28841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14311'.
[ 1382.297210][T28844] netlink: 277 bytes leftover after parsing attributes in process `syz.2.14312'.
[ 1382.433310][T28854] netlink: 'syz.1.14313': attribute type 4 has an invalid length.
[ 1382.477580][T28855] netlink: 460 bytes leftover after parsing attributes in process `syz.0.14315'.
[ 1382.574291][T28866] sctp: [Deprecated]: syz.1.14317 (pid 28866) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1382.574291][T28866] Use struct sctp_sack_info instead
[ 1382.670726][T28869] netlink: 'syz.2.14320': attribute type 4 has an invalid length.
[ 1383.272887][T28855] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[ 1383.313502][T28878] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[ 1383.902568][T28918] netlink: 'syz.2.14332': attribute type 19 has an invalid length.
[ 1383.905755][T28918] netlink: 'syz.2.14332': attribute type 19 has an invalid length.
[ 1384.268838][T28942] netlink: 'syz.1.14336': attribute type 4 has an invalid length.
[ 1384.568876][T28987] netlink: 'syz.1.14346': attribute type 4 has an invalid length.
[ 1384.620353][T28991] netlink: 'syz.2.14347': attribute type 4 has an invalid length.
[ 1384.704458][T28995] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1385.684104][T29052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1386.106495][T29068] __nla_validate_parse: 14 callbacks suppressed
[ 1386.106506][T29068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14365'.
[ 1386.169440][T29073] netlink: 100 bytes leftover after parsing attributes in process `syz.0.14365'.
[ 1386.217420][T29066] xt_hashlimit: size too large, truncated to 1048576
[ 1386.495651][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14368'.
[ 1386.502234][T29083] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14368'.
[ 1387.005058][T29105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14375'.
[ 1387.190297][T29118] validate_nla: 1 callbacks suppressed
[ 1387.190314][T29118] netlink: 'syz.2.14377': attribute type 4 has an invalid length.
[ 1387.350581][T29120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14378'.
[ 1387.567776][T29134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14382'.
[ 1387.575195][T29134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14382'.
[ 1387.918038][T29156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14388'.
[ 1387.924395][T29156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14388'.
[ 1387.947162][T29156] xt_l2tp: invalid flags combination: 8
[ 1387.953326][T29156] netlink: 'syz.0.14388': attribute type 1 has an invalid length.
[ 1388.198308][T29170] sit6: entered allmulticast mode
[ 1388.316926][   T33] audit: type=1800 audit(1778616702.784:129): pid=29174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14393" name="memory.events" dev="tmpfs" ino=24168 res=0 errno=0
[ 1388.669786][T29203] netlink: 'syz.2.14401': attribute type 4 has an invalid length.
[ 1388.907812][T29226] lo speed is unknown, defaulting to 1000
[ 1388.962880][T29235] netlink: 'syz.2.14410': attribute type 3 has an invalid length.
[ 1389.137802][T29226]  speed is unknown, defaulting to 1000
[ 1389.142283][T29226] hsr0 speed is unknown, defaulting to 1000
[ 1389.249579][T29250] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1389.323431][T29245] xt_hashlimit: size too large, truncated to 1048576
[ 1389.795814][T29261] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1392.659917][T29360] __nla_validate_parse: 9 callbacks suppressed
[ 1392.659933][T29360] netlink: 277 bytes leftover after parsing attributes in process `syz.2.14438'.
[ 1392.692026][T29361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14437'.
[ 1392.804477][T29365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14437'.
[ 1392.960878][T29369] netlink: 112 bytes leftover after parsing attributes in process `syz.1.14437'.
[ 1393.534297][T29379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14442'.
[ 1393.572163][T29383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1393.598260][T29383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14443'.
[ 1393.688226][T29386] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[ 1394.106738][T29405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14453'.
[ 1394.109405][T29405] netlink: 'syz.1.14453': attribute type 2 has an invalid length.
[ 1394.112045][T29405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14453'.
[ 1394.122872][T29406] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.14452'.
[ 1394.126019][T29406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14452'.
[ 1395.244542][T29420] atomic_op ffff88801f22a998 conn xmit_atomic 0000000000000000
[ 1395.372134][T29428] sctp: [Deprecated]: syz.2.14455 (pid 29428) Use of int in maxseg socket option.
[ 1395.372134][T29428] Use struct sctp_assoc_value instead
[ 1395.381917][T29431] netlink: 'syz.2.14455': attribute type 28 has an invalid length.
[ 1395.475153][T29447] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1395.735521][T29472] netlink: 'syz.2.14471': attribute type 4 has an invalid length.
[ 1396.429985][T29488] netlink: 'syz.0.14474': attribute type 7 has an invalid length.
[ 1396.432686][T29488] netlink: 'syz.0.14474': attribute type 8 has an invalid length.
[ 1396.676730][T29499] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1397.406247][T29537] openvswitch: netlink: IP tunnel dst address not specified
[ 1397.527569][T29544] netlink: 'syz.2.14489': attribute type 13 has an invalid length.
[ 1397.555069][T29547] netlink: 'syz.1.14490': attribute type 1 has an invalid length.
[ 1397.576115][T29544] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[ 1397.732672][T29547] __nla_validate_parse: 38 callbacks suppressed
[ 1397.732685][T29547] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14490'.
[ 1397.847715][T29553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14492'.
[ 1397.915912][T29555] netlink: 'syz.2.14493': attribute type 22 has an invalid length.
[ 1397.930552][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14493'.
[ 1397.934440][T29555] bond0: option ad_select: unable to set because the bond device is up
[ 1397.984493][T29557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14494'.
[ 1398.004362][T29557] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[ 1398.007792][T29557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14494'.
[ 1398.246560][T29572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14498'.
[ 1398.256555][T29572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14498'.
[ 1398.416205][T29574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14499'.
[ 1398.424557][T29582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1398.463759][T29584] netlink: 'syz.1.14502': attribute type 1 has an invalid length.
[ 1398.466101][T29584] netlink: 228 bytes leftover after parsing attributes in process `syz.1.14502'.
[ 1398.468732][T29584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14502'.
[ 1398.567982][T29586] lo speed is unknown, defaulting to 1000
[ 1398.667501][T29586]  speed is unknown, defaulting to 1000
[ 1398.671806][T29586] hsr0 speed is unknown, defaulting to 1000
[ 1400.875796][T29706] siw: device registration error -23
[ 1401.123492][T29737] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1401.484577][T29754] netlink: 'syz.2.14546': attribute type 4 has an invalid length.
[ 1401.671891][T29776] netlink: 'syz.0.14550': attribute type 4 has an invalid length.
[ 1401.808031][T29786] netlink: 'syz.2.14554': attribute type 4 has an invalid length.
[ 1401.836505][T29783] lo speed is unknown, defaulting to 1000
[ 1401.953422][T29783]  speed is unknown, defaulting to 1000
[ 1401.957104][T29783] hsr0 speed is unknown, defaulting to 1000
[ 1402.326668][T29809] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1402.520146][T29779] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1402.526831][T29779] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1402.667602][T29844] netlink: 'syz.2.14568': attribute type 13 has an invalid length.
[ 1402.705633][T29844] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[ 1402.883933][T29852] __nla_validate_parse: 13 callbacks suppressed
[ 1402.883946][T29852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14570'.
[ 1402.897580][T29852] lo: Caught tx_queue_len zero misconfig
[ 1402.911961][T29852] netlink: 'syz.2.14570': attribute type 1 has an invalid length.
[ 1402.914626][T29852] netlink: 'syz.2.14570': attribute type 1 has an invalid length.
[ 1402.917374][T29852] netlink: 264 bytes leftover after parsing attributes in process `syz.2.14570'.
[ 1402.920278][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14570'.
[ 1402.923604][T29852] netlink: 'syz.2.14570': attribute type 1 has an invalid length.
[ 1402.926207][T29852] netlink: 'syz.2.14570': attribute type 1 has an invalid length.
[ 1402.928577][T29852] netlink: 264 bytes leftover after parsing attributes in process `syz.2.14570'.
[ 1402.931776][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14570'.
[ 1403.075208][T29861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14573'.
[ 1403.174116][T29872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14575'.
[ 1403.235588][T29872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14575'.
[ 1403.519384][T29890] netlink: 1972 bytes leftover after parsing attributes in process `syz.2.14579'.
[ 1403.586468][T29899] xt_hashlimit: size too large, truncated to 1048576
[ 1403.868274][T29919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14586'.
[ 1404.781568][T29943] lo speed is unknown, defaulting to 1000
[ 1405.098659][T29943]  speed is unknown, defaulting to 1000
[ 1405.106992][T29943] hsr0 speed is unknown, defaulting to 1000
[ 1405.645918][T29992] bond0: Caught tx_queue_len zero misconfig
[ 1405.896025][T29998] lo speed is unknown, defaulting to 1000
[ 1406.008115][T29998]  speed is unknown, defaulting to 1000
[ 1406.015499][T29998] hsr0 speed is unknown, defaulting to 1000
[ 1406.340287][T30017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1406.438693][T30020] ip6gre3: entered promiscuous mode
[ 1407.429330][T30060] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1407.587006][T30062] veth0_macvtap: left promiscuous mode
[ 1407.607324][T30062] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1407.613461][T30062] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1407.618087][T30062] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1407.624391][T30062] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1407.629683][T30062] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1407.687139][T30063] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1407.704453][ T5669] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1407.709391][ T5669] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.718470][ T5669] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1407.721881][ T5669] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.727250][ T5669] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1407.730551][ T5669] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.734452][ T5669] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1407.737652][ T5669] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.848538][T30090] netlink: 'syz.0.14623': attribute type 4 has an invalid length.
[ 1407.871952][T15359]  speed is unknown, defaulting to 1000
[ 1407.874398][T15359] sy2: Port: 1 Link DOWN
[ 1407.878740][T30090] netlink: 'syz.0.14623': attribute type 4 has an invalid length.
[ 1407.895051][T19450]  speed is unknown, defaulting to 1000
[ 1407.899185][T19450] sy2: Port: 1 Link ACTIVE
[ 1408.034350][T30098] __nla_validate_parse: 10 callbacks suppressed
[ 1408.034378][T30098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14626'.
[ 1408.111941][T30109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14628'.
[ 1408.117638][T30109] netlink: 348 bytes leftover after parsing attributes in process `syz.1.14628'.
[ 1408.126044][T30109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14628'.
[ 1408.129568][T30109] netlink: 348 bytes leftover after parsing attributes in process `syz.1.14628'.
[ 1408.134777][T30109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14628'.
[ 1408.139086][T30101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14626'.
[ 1408.328629][T30120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1408.337392][T30120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14629'.
[ 1408.459979][T30130] team_slave_1: Caught tx_queue_len zero misconfig
[ 1408.801877][T30141] netlink: 460 bytes leftover after parsing attributes in process `syz.0.14635'.
[ 1409.054916][T30150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1409.059123][T30150] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1409.165092][T30155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14640'.
[ 1409.539665][T30181] mac80211_hwsim hwsim74 syzkaller0: left promiscuous mode
[ 1409.543372][T30181] mac80211_hwsim hwsim74 syzkaller0: left allmulticast mode
[ 1409.656256][T30196] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1409.755708][   T33] audit: type=1800 audit(1778616724.224:130): pid=30203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14649" name="memory.events" dev="tmpfs" ino=26051 res=0 errno=0
[ 1409.817285][T30217] sctp: [Deprecated]: syz.0.14651 (pid 30217) Use of int in max_burst socket option.
[ 1409.817285][T30217] Use struct sctp_assoc_value instead
[ 1409.873937][T30220] netlink: 'syz.2.14652': attribute type 4 has an invalid length.
[ 1410.021137][T30233] gtp2: entered promiscuous mode
[ 1410.023156][T30233] gtp2: entered allmulticast mode
[ 1410.034011][T30233] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[ 1410.036843][T30233] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[ 1410.180234][T30249] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1410.217407][T30251] bond37: (slave bond_slave_1): Device is not bonding slave
[ 1410.219972][T30251] bond37: option active_slave: invalid value (bond_slave_1)
[ 1410.224761][T30251] bond37 (unregistering): Released all slaves
[ 1410.240683][T30249] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1410.319591][T30249] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1410.353243][T30249] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1410.431191][ T5669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1410.445390][ T5669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1410.462800][T30259] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1410.480265][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1410.492507][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1410.595634][T30280] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1410.644312][T30278] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1411.009040][T30314] netlink: 'syz.0.14677': attribute type 4 has an invalid length.
[ 1411.917545][T30337] bond37: entered promiscuous mode
[ 1411.919249][T30337] bond37: entered allmulticast mode
[ 1411.922751][T30337] 8021q: adding VLAN 0 to HW filter on device bond37
[ 1411.934610][T30336] sctp: [Deprecated]: syz.1.14684 (pid 30336) Use of int in max_burst socket option deprecated.
[ 1411.934610][T30336] Use struct sctp_assoc_value instead
[ 1412.389604][T30382] netlink: 'syz.2.14698': attribute type 4 has an invalid length.
[ 1412.432153][   T33] audit: type=1800 audit(1778616726.904:131): pid=30386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14699" name="memory.events" dev="tmpfs" ino=24645 res=0 errno=0
[ 1412.707250][T30406] netlink: 'syz.1.14704': attribute type 4 has an invalid length.
[ 1412.826600][T30418] netlink: 'syz.1.14707': attribute type 58 has an invalid length.
[ 1412.974399][T30426] netlink: 'syz.1.14709': attribute type 13 has an invalid length.
[ 1413.008633][T30426] mac80211_hwsim hwsim74 syzkaller0: Caught tx_queue_len zero misconfig
[ 1413.226234][T30432] netlink: 'syz.1.14710': attribute type 3 has an invalid length.
[ 1413.232852][T30432] netlink: 'syz.1.14710': attribute type 1 has an invalid length.
[ 1413.356705][T30436] netlink: 'syz.0.14712': attribute type 4 has an invalid length.
[ 1414.000277][T30467] syzkaller1: entered promiscuous mode
[ 1414.007905][T30467] syzkaller1: entered allmulticast mode
[ 1414.077208][T30464] team0: left promiscuous mode
[ 1414.078695][T30464] ip6gre3: left promiscuous mode
[ 1414.090269][T30464] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1414.097038][T31972] bridge0: port 1(veth0_virt_wifi) entered blocking state
[ 1414.099693][T31972] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[ 1414.103442][T16487] hsr0 speed is unknown, defaulting to 1000
[ 1414.107355][T16487] syz2: Port: 1 Link ACTIVE
[ 1414.285649][T30482] netlink: 'syz.1.14722': attribute type 1 has an invalid length.
[ 1414.304001][T30482] 8021q: adding VLAN 0 to HW filter on device bond40
[ 1414.309503][T30485] netlink: 'syz.2.14723': attribute type 13 has an invalid length.
[ 1414.348782][T30485] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[ 1414.907384][T30535] netlink: 'syz.1.14736': attribute type 83 has an invalid length.
[ 1414.911364][T30535] __nla_validate_parse: 31 callbacks suppressed
[ 1414.911380][T30535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14736'.
[ 1414.914797][T30537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14737'.
[ 1414.921956][T30537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14737'.
[ 1414.979088][T30544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14739'.
[ 1415.066791][T30557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14742'.
[ 1415.073764][T30557] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1415.076632][T30544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14739'.
[ 1415.245263][T30564] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1415.297526][T30579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14747'.
[ 1415.349824][T30588] IPVS: Unknown mcast interface: nicvf0
[ 1415.475498][T30602] netlink: 277 bytes leftover after parsing attributes in process `syz.1.14753'.
[ 1415.505824][T30594] netlink: 'syz.2.14751': attribute type 4 has an invalid length.
[ 1415.514552][T30593] netlink: 'syz.2.14751': attribute type 4 has an invalid length.
[ 1415.687437][T30624] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[ 1415.690866][T30624] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[ 1416.010916][T30645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14763'.
[ 1416.231883][T30655] netlink: 'syz.2.14765': attribute type 19 has an invalid length.
[ 1416.430153][T30663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14767'.
[ 1416.647825][T30663] bridge0: port 2(vlan0) entered disabled state
[ 1416.650570][T30663] bridge0: port 1(veth0_virt_wifi) entered disabled state
[ 1416.960253][T30668] xt_hashlimit: size too large, truncated to 1048576
[ 1417.006505][T30663] tipc: Resetting bearer <eth:hsr0>
[ 1417.018971][T30663] tipc: Resetting bearer <eth:hsr0>
[ 1417.065472][T30663] veth29: left promiscuous mode
[ 1417.177229][T19450] lo speed is unknown, defaulting to 1000
[ 1417.177707][T16487] hsr0 speed is unknown, defaulting to 1000
[ 1417.182315][T16487] syz2: Port: 1 Link DOWN
[ 1417.183156][T19450] sqz0: Port: 1 Link DOWN
[ 1417.189561][T19450] lo speed is unknown, defaulting to 1000
[ 1417.254002][T30684] lo speed is unknown, defaulting to 1000
[ 1417.460278][T30684]  speed is unknown, defaulting to 1000
[ 1417.473950][T30684] hsr0 speed is unknown, defaulting to 1000
[ 1417.485288][T30698] netlink: 'syz.0.14774': attribute type 11 has an invalid length.
[ 1417.655484][T30720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1417.755840][   T33] audit: type=1800 audit(1778616732.224:132): pid=30722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14780" name="memory.events" dev="tmpfs" ino=24810 res=0 errno=0
[ 1419.169220][T30779] lo speed is unknown, defaulting to 1000
[ 1419.323647][T30779]  speed is unknown, defaulting to 1000
[ 1419.327251][T30779] hsr0 speed is unknown, defaulting to 1000
[ 1420.045348][T30848] __nla_validate_parse: 14 callbacks suppressed
[ 1420.045366][T30848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14813'.
[ 1420.072125][T30848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14813'.
[ 1420.109104][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14814'.
[ 1420.112816][T30852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14814'.
[ 1420.116712][T30855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14815'.
[ 1420.117010][T30852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14814'.
[ 1420.126853][T30855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14815'.
[ 1420.423144][T30884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14822'.
[ 1420.438600][   T33] audit: type=1800 audit(1778616734.904:133): pid=30884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14822" name="memory.events" dev="tmpfs" ino=26395 res=0 errno=0
[ 1420.762933][T30900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14827'.
[ 1420.999201][T30920] lo speed is unknown, defaulting to 1000
[ 1421.248955][T30920]  speed is unknown, defaulting to 1000
[ 1421.254760][T30920] hsr0 speed is unknown, defaulting to 1000
[ 1421.487487][T30943] validate_nla: 3 callbacks suppressed
[ 1421.487502][T30943] netlink: 'syz.1.14836': attribute type 4 has an invalid length.
[ 1421.634612][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14839'.
[ 1421.809069][T30969] netlink: 'syz.2.14843': attribute type 1 has an invalid length.
[ 1422.389314][T31003] netlink: 'syz.1.14852': attribute type 4 has an invalid length.
[ 1422.675843][T31019] netlink: 'syz.1.14856': attribute type 4 has an invalid length.
[ 1423.030312][T31059] netlink: 'syz.0.14866': attribute type 21 has an invalid length.
[ 1423.115000][T31073] netlink: 'syz.2.14867': attribute type 4 has an invalid length.
[ 1423.602450][T31097] xt_hashlimit: size too large, truncated to 1048576
[ 1423.739625][T31109] netlink: 'syz.1.14877': attribute type 1 has an invalid length.
[ 1423.775425][T31109] bond41: (slave bridge20): making interface the new active one
[ 1423.779339][T31109] bond41: (slave bridge20): Enslaving as an active interface with an up link
[ 1423.914468][T31112] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1423.939153][T31112] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1423.944159][T16487] lo speed is unknown, defaulting to 1000
[ 1423.946457][T20583] bridge0: port 2(vlan0) entered blocking state
[ 1423.948004][T16487] sqz0: Port: 1 Link ACTIVE
[ 1423.948399][T20583] bridge0: port 2(vlan0) entered forwarding state
[ 1423.964714][T16487] lo speed is unknown, defaulting to 1000
[ 1424.329273][ T5669] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1424.334788][ T5669] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1424.339396][ T5669] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1424.343595][ T5669] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1424.400957][T31131] lo speed is unknown, defaulting to 1000
[ 1424.604009][T31131]  speed is unknown, defaulting to 1000
[ 1424.609772][T31131] hsr0 speed is unknown, defaulting to 1000
[ 1425.012702][T31139] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 1425.265675][T31159] __nla_validate_parse: 23 callbacks suppressed
[ 1425.265686][T31159] netlink: 460 bytes leftover after parsing attributes in process `syz.2.14889'.
[ 1425.329767][T31165] netlink: 176 bytes leftover after parsing attributes in process `syz.0.14890'.
[ 1425.336088][T31165] netlink: 'syz.0.14890': attribute type 1 has an invalid length.
[ 1425.346249][T31165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14890'.
[ 1425.570268][T31174] netlink: 'syz.2.14893': attribute type 4 has an invalid length.
[ 1425.617126][T31179] lo: Caught tx_queue_len zero misconfig
[ 1425.639747][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14894'.
[ 1425.645212][T31179] netlink: 'syz.2.14894': attribute type 13 has an invalid length.
[ 1425.672522][T31179] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1425.684464][T31171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14892'.
[ 1425.704260][T31171] xt_hashlimit: size too large, truncated to 1048576
[ 1426.112571][T31209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14904'.
[ 1426.116425][T31210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14904'.
[ 1427.166154][T31237] validate_nla: 1 callbacks suppressed
[ 1427.166170][T31237] netlink: 'syz.2.14908': attribute type 4 has an invalid length.
[ 1427.182191][T31235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14908'.
[ 1427.270110][T31247] netlink: 200 bytes leftover after parsing attributes in process `syz.0.14911'.
[ 1427.405280][T31256] xt_hashlimit: size too large, truncated to 1048576
[ 1427.590019][T31270] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1427.637303][T31277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14918'.
[ 1428.439561][T31294] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1428.749012][T31307] xt_CT: No such helper "syz0"
[ 1429.261796][T31334] netlink: 'syz.2.14930': attribute type 1 has an invalid length.
[ 1429.825647][T31361] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1429.899056][T31365] netlink: 'syz.1.14939': attribute type 4 has an invalid length.
[ 1430.335043][T31418] syzkaller1: entered promiscuous mode
[ 1430.337065][T31418] syzkaller1: entered allmulticast mode
[ 1430.350352][T31420] __nla_validate_parse: 4 callbacks suppressed
[ 1430.350363][T31420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14951'.
[ 1430.355990][T31414] syzkaller1: entered promiscuous mode
[ 1430.357772][T31414] syzkaller1: entered allmulticast mode
[ 1430.365782][T31414] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14949'.
[ 1430.372142][T31414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14949'.
[ 1430.375131][T31414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14949'.
[ 1430.488846][T31418] lo speed is unknown, defaulting to 1000
[ 1430.512539][T31432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14954'.
[ 1430.516367][T31432] netlink: 312 bytes leftover after parsing attributes in process `syz.1.14954'.
[ 1430.519490][T31432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14954'.
[ 1430.635629][T31418]  speed is unknown, defaulting to 1000
[ 1430.639519][T31418] hsr0 speed is unknown, defaulting to 1000
[ 1430.776852][T31448] netlink: 'syz.1.14957': attribute type 4 has an invalid length.
[ 1430.834194][T31452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14958'.
[ 1430.838736][T31452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14958'.
[ 1430.957961][T31459] tc_dump_action: action bad kind
[ 1430.961981][T31460] netlink: 'syz.1.14961': attribute type 1 has an invalid length.
[ 1430.964669][T31460] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14961'.
[ 1430.967736][T31460] NCSI netlink: No device for ifindex 0
[ 1431.493577][T31478] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1431.508310][T31478] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.603128][T31478] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1431.606812][T31478] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.696872][T31478] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1431.702712][T31478] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.791653][T31478] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1431.795526][T31478] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.917754][ T9476] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1431.928444][ T9476] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1431.953127][ T9476] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1431.957343][ T9476] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1431.968078][ T9476] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1431.971431][ T9476] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1431.988119][ T9476] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1431.993533][ T9476] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1432.001601][T31491] lo: Caught tx_queue_len zero misconfig
[ 1433.164076][T31529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1433.372041][   T33] audit: type=1800 audit(1778616747.844:134): pid=31544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14982" name="memory.events" dev="tmpfs" ino=24985 res=0 errno=0
[ 1433.694346][T31567] netlink: 'syz.0.14989': attribute type 1 has an invalid length.
[ 1433.937960][T31574] netlink: 'syz.0.14990': attribute type 1 has an invalid length.
[ 1434.311595][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1434.316455][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1434.469174][T31597] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1434.701004][T31624] netlink: 'syz.1.15000': attribute type 2 has an invalid length.
[ 1435.555317][T31653] netlink: 'syz.1.15009': attribute type 1 has an invalid length.
[ 1435.558453][T31653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1435.695559][T31658] sctp: [Deprecated]: syz.0.15010 (pid 31658) Use of int in max_burst socket option.
[ 1435.695559][T31658] Use struct sctp_assoc_value instead
[ 1435.745315][T31661] __nla_validate_parse: 15 callbacks suppressed
[ 1435.745333][T31661] netlink: 277 bytes leftover after parsing attributes in process `syz.0.15011'.
[ 1435.934088][T31665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15012'.
[ 1435.943703][T31667] netlink: 200 bytes leftover after parsing attributes in process `syz.0.15013'.
[ 1436.078162][T31674] netlink: 277 bytes leftover after parsing attributes in process `syz.0.15016'.
[ 1436.438892][T31698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15022'.
[ 1436.556956][T31711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15025'.
[ 1436.673663][T31714] netlink: 80 bytes leftover after parsing attributes in process `syz.1.15026'.
[ 1436.939257][T31730] netlink: 'syz.1.15029': attribute type 4 has an invalid length.
[ 1436.965675][T31729] ip6tnl0: entered promiscuous mode
[ 1437.024986][T31737] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[ 1437.024988][T31738] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[ 1437.094072][T31738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1437.315702][T31742] lo speed is unknown, defaulting to 1000
[ 1437.379737][T31746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15031'.
[ 1437.499343][T31760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15036'.
[ 1437.515927][T31742]  speed is unknown, defaulting to 1000
[ 1437.523291][T31742] hsr0 speed is unknown, defaulting to 1000
[ 1437.544355][T31760] sctp: [Deprecated]: syz.2.15036 (pid 31760) Use of int in maxseg socket option.
[ 1437.544355][T31760] Use struct sctp_assoc_value instead
[ 1437.760778][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1437.908834][T31792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15042'.
[ 1439.139785][T31853] IPVS: Unknown mcast interface: vcan0
[ 1439.158317][T31861] tc_dump_action: action bad kind
[ 1439.352570][T20583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1439.356007][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1439.670989][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1440.624716][T31907] tunl0: Caught tx_queue_len zero misconfig
[ 1440.629493][T31907] xt_hashlimit: size too large, truncated to 1048576
[ 1440.807077][T31913] __nla_validate_parse: 9 callbacks suppressed
[ 1440.807092][T31913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15070'.
[ 1440.811879][T31914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15069'.
[ 1440.856310][T31913] netlink: 'syz.2.15070': attribute type 4 has an invalid length.
[ 1440.876152][T31914] sctp: [Deprecated]: syz.0.15069 (pid 31914) Use of int in max_burst socket option.
[ 1440.876152][T31914] Use struct sctp_assoc_value instead
[ 1440.969352][T31921] x_tables: duplicate underflow at hook 1
[ 1441.237701][T31942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15076'.
[ 1441.240867][T31942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1441.243060][T31942] IPv6: NLM_F_CREATE should be set when creating new route
[ 1441.245176][T31942] IPv6: NLM_F_CREATE should be set when creating new route
[ 1441.306561][T31942] netlink: 'syz.2.15076': attribute type 4 has an invalid length.
[ 1441.359899][T31947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15077'.
[ 1441.469521][T31950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15078'.
[ 1441.484936][T31949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1441.563514][T31954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15079'.
[ 1441.661658][T31958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15080'.
[ 1442.176820][T31975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1442.529094][T32008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15090'.
[ 1442.540060][T32013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15091'.
[ 1442.549849][T32008] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1442.558482][T32015] netem: change failed
[ 1442.618699][T32017] netlink: 'syz.1.15094': attribute type 9 has an invalid length.
[ 1442.626022][T32019] netlink: 277 bytes leftover after parsing attributes in process `syz.0.15093'.
[ 1442.687408][T32019] netlink: 'syz.0.15093': attribute type 1 has an invalid length.
[ 1442.722076][T32033] tap0: tun_chr_ioctl cmd 2148553947
[ 1442.841559][T32041] lo speed is unknown, defaulting to 1000
[ 1442.872835][T32045] ip6erspan0: entered allmulticast mode
[ 1442.981311][T32055] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1442.985624][T32055] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1443.009405][T32041]  speed is unknown, defaulting to 1000
[ 1443.014554][T32041] hsr0 speed is unknown, defaulting to 1000
[ 1443.288955][T32065] netlink: 'syz.0.15106': attribute type 4 has an invalid length.
[ 1443.854988][T32087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1444.125697][T32101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1445.047555][T32129] syzkaller1: entered promiscuous mode
[ 1445.049934][T32129] syzkaller1: entered allmulticast mode
[ 1445.193914][   T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1445.197358][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1445.204594][T32135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1445.309967][T32137] lo speed is unknown, defaulting to 1000
[ 1445.482737][T32137]  speed is unknown, defaulting to 1000
[ 1445.487999][T32137] hsr0 speed is unknown, defaulting to 1000
[ 1445.511006][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1446.393697][T32183] team_slave_1: Caught tx_queue_len zero misconfig
[ 1446.409434][T32183] sctp: [Deprecated]: syz.2.15135 (pid 32183) Use of int in max_burst socket option.
[ 1446.409434][T32183] Use struct sctp_assoc_value instead
[ 1446.496432][ T5446] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1446.504055][ T5446] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1446.511136][ T5446] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1446.518005][ T5446] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1446.582576][T32195] __nla_validate_parse: 7 callbacks suppressed
[ 1446.582587][T32195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15139'.
[ 1446.681387][T32202] netlink: 460 bytes leftover after parsing attributes in process `syz.2.15141'.
[ 1446.689250][T32202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15141'.
[ 1447.065917][T32210] netlink: 'syz.1.15144': attribute type 4 has an invalid length.
[ 1447.157320][T32215] netlink: 'syz.1.15145': attribute type 4 has an invalid length.
[ 1447.191439][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1447.311136][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1448.088724][T32236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15149'.
[ 1448.097243][T32235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1449.019856][T32255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15154'.
[ 1449.168289][T32263] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15156'.
[ 1449.254789][T32268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15158'.
[ 1449.289653][T32271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15159'.
[ 1449.294414][T32271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15159'.
[ 1449.302295][T32271] bond0: Caught tx_queue_len zero misconfig
[ 1449.822614][T32274] netlink: 'syz.2.15160': attribute type 4 has an invalid length.
[ 1450.116143][T32295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15165'.
[ 1450.266527][T32303] lo speed is unknown, defaulting to 1000
[ 1450.269322][T32305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1450.403782][T32303]  speed is unknown, defaulting to 1000
[ 1450.408801][T32303] hsr0 speed is unknown, defaulting to 1000
[ 1450.951081][   T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1450.953889][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1451.402947][T32363] netlink: 'syz.2.15183': attribute type 10 has an invalid length.
[ 1451.405972][T32363] batman_adv: batadv0: Interface deactivated: dummy0
[ 1451.408485][T32363] batman_adv: batadv0: Removing interface: dummy0
[ 1451.414416][T32363] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1451.556766][T32366] netlink: 'syz.2.15184': attribute type 4 has an invalid length.
[ 1451.592999][T32370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1451.608767][T32372] sctp: [Deprecated]: syz.2.15186 (pid 32372) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1451.608767][T32372] Use struct sctp_sack_info instead
[ 1451.987424][T32380] __nla_validate_parse: 4 callbacks suppressed
[ 1451.987442][T32380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15188'.
[ 1451.995237][T32380] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15188'.
[ 1452.158319][T32382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15189'.
[ 1452.164324][T32382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15189'.
[ 1452.320375][T32389] netlink: 248 bytes leftover after parsing attributes in process `syz.0.15190'.
[ 1452.323705][T32389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15190'.
[ 1452.866448][T32399] netlink: 277 bytes leftover after parsing attributes in process `syz.2.15193'.
[ 1453.272785][T32391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1453.346051][T32412] netlink: 'syz.0.15195': attribute type 1 has an invalid length.
[ 1453.429898][T32409] tipc: Enabling of bearer <udp:s> rejected, already enabled
[ 1453.466369][T32416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15197'.
[ 1453.565963][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15199'.
[ 1453.569274][T32427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15199'.
[ 1453.573497][T32427] netlink: 'syz.1.15199': attribute type 15 has an invalid length.
[ 1453.590800][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1453.647880][T32432] sctp: [Deprecated]: syz.1.15200 (pid 32432) Use of int in maxseg socket option.
[ 1453.647880][T32432] Use struct sctp_assoc_value instead
[ 1453.830728][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.164151][T32448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1454.483747][T19450] syz1: Port: 1 Link DOWN
[ 1454.484702][ T5446] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1454.491700][ T5446] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1454.495149][ T5446] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1454.501153][ T5446] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1454.506474][ T5446] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1454.509736][ T5446] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1454.514209][ T5446] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1454.517367][ T5446] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1454.525969][T32436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1454.735385][T32465] syzkaller1: entered promiscuous mode
[ 1454.737682][T32465] syzkaller1: entered allmulticast mode
[ 1454.752384][T32465] netlink: 'syz.0.15208': attribute type 298 has an invalid length.
[ 1455.024966][T32487] netlink: 'syz.1.15215': attribute type 4 has an invalid length.
[ 1455.719585][T32544] lo speed is unknown, defaulting to 1000
[ 1455.775343][T32556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1456.054260][T32544]  speed is unknown, defaulting to 1000
[ 1456.059702][T32544] hsr0 speed is unknown, defaulting to 1000
[ 1456.074129][T15606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1456.077534][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1456.182605][T32577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1456.219128][T32579] netlink: 'syz.0.15234': attribute type 4 has an invalid length.
[ 1456.778931][T32605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1456.933875][T32613] netlink: 'syz.1.15241': attribute type 4 has an invalid length.
[ 1457.237273][T32631] __nla_validate_parse: 6 callbacks suppressed
[ 1457.237286][T32631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15245'.
[ 1457.388631][T32636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1457.525847][T32640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15247'.
[ 1457.662944][T32641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15247'.
[ 1457.694002][T32641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15247'.
[ 1457.696662][T32641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15247'.
[ 1458.089491][T32644] netlink: 'syz.1.15248': attribute type 4 has an invalid length.
[ 1458.132387][T32651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1458.636487][T32681] netlink: 'syz.0.15257': attribute type 4 has an invalid length.
[ 1458.647359][T32681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15257'.
[ 1458.733043][T32687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15259'.
[ 1458.914893][T32698] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15262'.
[ 1458.918364][T32698] netlink: 'syz.0.15262': attribute type 1 has an invalid length.
[ 1458.920990][T32698] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15262'.
[ 1458.923674][T32698] netlink: 'syz.0.15262': attribute type 1 has an invalid length.
[ 1458.926107][T32698] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15262'.
[ 1458.928735][T32698] netlink: 'syz.0.15262': attribute type 1 has an invalid length.
[ 1458.932265][T32698] netlink: 'syz.0.15262': attribute type 1 has an invalid length.
[ 1458.934685][T32698] netlink: 'syz.0.15262': attribute type 1 has an invalid length.
[ 1458.937057][T32698] netlink: 'syz.0.15262': attribute type 1 has an invalid length.
[ 1458.939458][T32698] netlink: 'syz.0.15262': attribute type 1 has an invalid length.
[ 1458.942097][T32698] netlink: 'syz.0.15262': attribute type 1 has an invalid length.
[ 1458.944504][T32698] netlink: 'syz.0.15262': attribute type 1 has an invalid length.
[ 1458.989295][T32703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1459.127432][T32712] bridge24: the hash_elasticity option has been deprecated and is always 16
[ 1459.129995][T32712] bridge24: entered allmulticast mode
[ 1459.835922][T32753] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[ 1459.852909][T32753] xt_hashlimit: size too large, truncated to 1048576
[ 1460.037008][T32764] xt_hashlimit: size too large, truncated to 1048576
[ 1460.044077][T32765] xt_hashlimit: size too large, truncated to 1048576
[ 1460.161379][  T317] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1460.235291][  T324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1461.191597][T15606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1461.194980][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1461.549971][  T365] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 1462.262189][  T401] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1462.703277][  T419] lo speed is unknown, defaulting to 1000
[ 1462.811596][  T419]  speed is unknown, defaulting to 1000
[ 1462.815322][  T419] hsr0 speed is unknown, defaulting to 1000
[ 1462.859903][  T426] __nla_validate_parse: 122 callbacks suppressed
[ 1462.859919][  T426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15309'.
[ 1463.035656][  T437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15309'.
[ 1463.249911][  T449] 8021q: adding VLAN 0 to HW filter on device bond42
[ 1463.495721][  T453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15315'.
[ 1463.719397][  T466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15319'.
[ 1463.743578][  T466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1463.751562][  T467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15319'.
[ 1463.796780][  T471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15320'.
[ 1463.807697][  T475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15321'.
[ 1463.821580][  T475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15321'.
[ 1463.864966][  T478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.026732][  T488] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.15325'.
[ 1464.091502][  T491] lo speed is unknown, defaulting to 1000
[ 1464.186456][  T491]  speed is unknown, defaulting to 1000
[ 1464.190141][  T491] hsr0 speed is unknown, defaulting to 1000
[ 1464.817401][  T522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.825126][  T522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.827944][  T522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.831777][  T522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.834987][  T522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.838373][  T522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.931198][  T527] validate_nla: 63 callbacks suppressed
[ 1464.931216][  T527] netlink: 'syz.2.15335': attribute type 29 has an invalid length.
[ 1464.947661][  T527] netlink: 'syz.2.15335': attribute type 29 has an invalid length.
[ 1464.952600][  T527] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15335'.
[ 1465.099448][  T531] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1465.133285][  T531] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1465.139238][  T531] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1465.150059][T12972] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1465.152924][T12972] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1465.168677][T32450] syz1: Port: 1 Link ACTIVE
[ 1465.748902][  T543] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode
[ 1465.752102][  T543] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode
[ 1465.847063][   T33] audit: type=1800 audit(1778616780.314:135): pid=547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15340" name="memory.events" dev="tmpfs" ino=25780 res=0 errno=0
[ 1465.982427][  T552] netlink: 'syz.1.15342': attribute type 4 has an invalid length.
[ 1466.186732][  T576] netlink: 'syz.2.15346': attribute type 4 has an invalid length.
[ 1467.005305][  T625] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1467.269381][  T650] lo speed is unknown, defaulting to 1000
[ 1467.395187][  T657] bond43: invalid ARP target 0.0.0.0 specified for addition
[ 1467.397780][  T657] bond43: option arp_ip_target: invalid value (0)
[ 1467.402625][  T657] bond43 (unregistering): Released all slaves
[ 1467.475547][  T650]  speed is unknown, defaulting to 1000
[ 1467.479148][  T650] hsr0 speed is unknown, defaulting to 1000
[ 1467.861993][  T689] __nla_validate_parse: 11 callbacks suppressed
[ 1467.862009][  T689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15364'.
[ 1467.931952][  T695] netlink: 277 bytes leftover after parsing attributes in process `syz.2.15365'.
[ 1467.935772][  T695] netlink: 220 bytes leftover after parsing attributes in process `syz.2.15365'.
[ 1469.249088][  T764] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1469.267959][  T762] lo speed is unknown, defaulting to 1000
[ 1469.445372][  T762]  speed is unknown, defaulting to 1000
[ 1469.446375][  T760] lo speed is unknown, defaulting to 1000
[ 1469.456921][  T762] hsr0 speed is unknown, defaulting to 1000
[ 1469.564168][  T800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15386'.
[ 1469.694039][  T760]  speed is unknown, defaulting to 1000
[ 1469.697806][  T760] hsr0 speed is unknown, defaulting to 1000
[ 1470.018659][  T822] pimreg: entered allmulticast mode
[ 1470.022387][  T811] lo speed is unknown, defaulting to 1000
[ 1470.025628][  T824] netlink: 'syz.2.15391': attribute type 1 has an invalid length.
[ 1470.092550][  T824] 8021q: adding VLAN 0 to HW filter on device bond39
[ 1470.181932][  T811]  speed is unknown, defaulting to 1000
[ 1470.190165][  T811] hsr0 speed is unknown, defaulting to 1000
[ 1470.626879][  T858] netlink: 'syz.0.15400': attribute type 4 has an invalid length.
[ 1470.637503][  T810] pimreg: left allmulticast mode
[ 1470.861873][  T865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15401'.
[ 1471.209694][  T878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15404'.
[ 1471.274079][  T883] net_ratelimit: 173 callbacks suppressed
[ 1471.274092][  T883] openvswitch: netlink: IP tunnel dst address not specified
[ 1471.279638][  T883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15405'.
[ 1471.312003][  T883] bond43 (unregistering): Released all slaves
[ 1471.639101][  T902] x_tables: duplicate underflow at hook 3
[ 1472.200182][  T929] tc_dump_action: action bad kind
[ 1472.203970][  T929] netlink: 80 bytes leftover after parsing attributes in process `syz.0.15415'.
[ 1472.574780][  T980] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1472.642771][  T992] netlink: 277 bytes leftover after parsing attributes in process `syz.2.15429'.
[ 1472.648473][  T993] netlink: 277 bytes leftover after parsing attributes in process `syz.2.15429'.
[ 1472.759533][  T997] netlink: 'syz.2.15430': attribute type 4 has an invalid length.
[ 1472.820114][ T1002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1473.587728][ T1021] netlink: 'syz.0.15435': attribute type 4 has an invalid length.
[ 1474.079708][ T1046] __nla_validate_parse: 2 callbacks suppressed
[ 1474.079719][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15441'.
[ 1474.093935][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15441'.
[ 1474.103670][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15441'.
[ 1474.110790][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15441'.
[ 1474.117091][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15441'.
[ 1474.123678][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15441'.
[ 1474.132152][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15441'.
[ 1474.459327][ T1067] syzkaller0: entered promiscuous mode
[ 1474.470812][ T1067] syzkaller0: entered allmulticast mode
[ 1474.832556][ T1079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15444'.
[ 1474.853845][ T1083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15445'.
[ 1474.974726][ T1084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15445'.
[ 1475.322790][ T1067] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1475.442556][ T1089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1475.446002][ T1089] syzkaller0: entered promiscuous mode
[ 1475.447929][ T1089] syzkaller0: entered allmulticast mode
[ 1475.455175][ T1088] tipc: Resetting bearer <eth:syzkaller0>
[ 1475.485778][ T1088] tipc: Disabling bearer <eth:syzkaller0>
[ 1475.596005][ T1103] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1475.605109][ T1103] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[ 1476.128611][ T1134] bond40: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[ 1476.136143][ T1134] bond40: entered promiscuous mode
[ 1476.138305][ T1134] 8021q: adding VLAN 0 to HW filter on device bond40
[ 1476.321224][ T1139] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[ 1476.324149][ T1139] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[ 1476.878033][ T1188] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1477.001234][ T1190] block nbd0: NBD_DISCONNECT
[ 1477.008292][ T1190] block nbd0: Disconnected due to user request.
[ 1477.012095][ T1190] block nbd0: shutting down sockets
[ 1477.021169][ T1190] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[ 1477.788838][ T1215] netlink: 'syz.1.15473': attribute type 4 has an invalid length.
[ 1478.596400][ T1260] netlink: 'syz.2.15480': attribute type 4 has an invalid length.
[ 1478.927440][ T1267] lo speed is unknown, defaulting to 1000
[ 1479.066930][ T1267]  speed is unknown, defaulting to 1000
[ 1479.073019][ T1267] hsr0 speed is unknown, defaulting to 1000
[ 1479.279994][ T1275] netlink: 'syz.0.15484': attribute type 32 has an invalid length.
[ 1479.283459][ T1275] __nla_validate_parse: 11 callbacks suppressed
[ 1479.283473][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15484'.
[ 1479.309092][ T1275] bond27: Setting coupled_control to off (0)
[ 1479.314247][ T1275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15484'.
[ 1479.492508][ T1287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15486'.
[ 1479.828616][ T1300] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1479.979163][ T1303] netlink: 'syz.2.15492': attribute type 4 has an invalid length.
[ 1480.186991][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15497'.
[ 1480.189724][ T1326] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15497'.
[ 1480.253907][ T1335] netlink: 'syz.2.15500': attribute type 10 has an invalid length.
[ 1480.262458][ T1335] netlink: 228 bytes leftover after parsing attributes in process `syz.2.15500'.
[ 1480.301992][ T1337] netlink: 'syz.1.15499': attribute type 13 has an invalid length.
[ 1480.308278][ T1337] netlink: 'syz.1.15499': attribute type 17 has an invalid length.
[ 1480.425400][ T1333] bridge0: port 2(vlan0) entered disabled state
[ 1480.433248][ T1340] netlink: 'syz.2.15501': attribute type 9 has an invalid length.
[ 1480.482418][ T1341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15499'.
[ 1480.741627][T11708] lo speed is unknown, defaulting to 1000
[ 1480.777105][ T1337] ip6tnl0: left promiscuous mode
[ 1480.801269][ T1337] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1480.823577][ T1337] bridge0: port 2(vlan0) entered blocking state
[ 1480.825970][ T1337] bridge0: port 2(vlan0) entered forwarding state
[ 1480.851971][ T1337] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1480.877792][T12972] bridge0: port 1(veth0_virt_wifi) entered blocking state
[ 1480.880559][T12972] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[ 1480.890107][ T1340] netlink: 'syz.2.15501': attribute type 3 has an invalid length.
[ 1480.894389][ T1340] netlink: 'syz.2.15501': attribute type 3 has an invalid length.
[ 1480.898023][T24492] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1480.904668][T24492] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1480.909591][  T794] lo speed is unknown, defaulting to 1000
[ 1480.912956][T19450] hsr0 speed is unknown, defaulting to 1000
[ 1480.913115][T24492] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1480.915315][T19450] syz2: Port: 1 Link ACTIVE
[ 1480.931354][ T9476] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1480.942362][T11708] lo speed is unknown, defaulting to 1000
[ 1481.233739][ T1383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15509'.
[ 1481.288829][ T1390] lo speed is unknown, defaulting to 1000
[ 1481.295233][   T33] audit: type=1800 audit(1778616795.764:136): pid=1383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15509" name="memory.events" dev="tmpfs" ino=25880 res=0 errno=0
[ 1481.304422][ T1393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15509'.
[ 1481.443434][ T1390]  speed is unknown, defaulting to 1000
[ 1481.447150][ T1394] lo speed is unknown, defaulting to 1000
[ 1481.447841][ T1390] hsr0 speed is unknown, defaulting to 1000
[ 1481.577144][ T1394]  speed is unknown, defaulting to 1000
[ 1481.580727][ T1394] hsr0 speed is unknown, defaulting to 1000
[ 1482.126824][ T1415] netlink: 277 bytes leftover after parsing attributes in process `syz.1.15516'.
[ 1482.305445][ T1417] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20001
[ 1482.427801][ T1426] lo speed is unknown, defaulting to 1000
[ 1482.649750][ T1426]  speed is unknown, defaulting to 1000
[ 1482.653865][ T1426] hsr0 speed is unknown, defaulting to 1000
[ 1483.085998][ T1440] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1483.661541][ T1485] tls_set_device_offload: netdev not found
[ 1485.028896][ T1504] __nla_validate_parse: 3 callbacks suppressed
[ 1485.028913][ T1504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15534'.
[ 1485.339342][ T1518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15538'.
[ 1485.602179][ T1526] netlink: 'syz.0.15541': attribute type 4 has an invalid length.
[ 1485.697115][ T1539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15544'.
[ 1485.902871][ T1549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15546'.
[ 1485.918800][ T1549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15546'.
[ 1486.136367][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15552'.
[ 1487.128904][ T1593] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15558'.
[ 1487.298750][ T1600] netlink: 277 bytes leftover after parsing attributes in process `syz.0.15560'.
[ 1487.935911][ T1612] netlink: 68 bytes leftover after parsing attributes in process `syz.2.15563'.
[ 1487.983536][ T1620] sctp: [Deprecated]: syz.1.15565 (pid 1620) Use of int in max_burst socket option.
[ 1487.983536][ T1620] Use struct sctp_assoc_value instead
[ 1488.178720][ T1623] lo speed is unknown, defaulting to 1000
[ 1488.266846][ T1627] netlink: 277 bytes leftover after parsing attributes in process `syz.0.15567'.
[ 1488.345507][ T1623]  speed is unknown, defaulting to 1000
[ 1488.356368][ T1623] hsr0 speed is unknown, defaulting to 1000
[ 1488.537665][ T1631] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1489.237673][ T1691] netlink: 'syz.1.15583': attribute type 4 has an invalid length.
[ 1489.348023][ T1710] netlink: 'syz.2.15584': attribute type 14 has an invalid length.
[ 1489.564756][ T1718] xt_hashlimit: size too large, truncated to 1048576
[ 1489.780488][ T1723] netlink: 'syz.1.15589': attribute type 4 has an invalid length.
[ 1490.035472][ T1730] sctp: [Deprecated]: syz.1.15591 (pid 1730) Use of int in max_burst socket option.
[ 1490.035472][ T1730] Use struct sctp_assoc_value instead
[ 1490.119474][ T1736] __nla_validate_parse: 6 callbacks suppressed
[ 1490.119500][ T1736] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15593'.
[ 1490.184273][ T1740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15594'.
[ 1490.207410][ T1740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15594'.
[ 1490.287565][ T1743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15595'.
[ 1490.353648][   T33] audit: type=1800 audit(1778616804.824:137): pid=1743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15595" name="memory.events" dev="tmpfs" ino=27692 res=0 errno=0
[ 1490.362743][ T1745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15595'.
[ 1490.632564][ T1752] xt_hashlimit: size too large, truncated to 1048576
[ 1490.800088][ T1758] netlink: 80 bytes leftover after parsing attributes in process `syz.2.15598'.
[ 1490.855339][ T1758] netlink: 'syz.2.15598': attribute type 4 has an invalid length.
[ 1491.154931][ T1775] x_tables: unsorted underflow at hook 2
[ 1492.354447][ T1805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15609'.
[ 1492.425302][ T1808] lo speed is unknown, defaulting to 1000
[ 1492.548081][ T1808]  speed is unknown, defaulting to 1000
[ 1492.554156][ T1808] hsr0 speed is unknown, defaulting to 1000
[ 1492.952718][ T1818] netlink: 'syz.2.15611': attribute type 4 has an invalid length.
[ 1493.103459][ T1837] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15616'.
[ 1493.428224][ T1851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15620'.
[ 1494.135123][ T1882] netlink: 'syz.0.15626': attribute type 4 has an invalid length.
[ 1494.197286][ T1889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15628'.
[ 1494.314117][ T1892] lo speed is unknown, defaulting to 1000
[ 1494.477652][ T1892]  speed is unknown, defaulting to 1000
[ 1494.482820][ T1892] hsr0 speed is unknown, defaulting to 1000
[ 1494.572989][ T1912] netlink: 'syz.1.15633': attribute type 13 has an invalid length.
[ 1494.617838][ T1912] mac80211_hwsim hwsim74 syzkaller0: Caught tx_queue_len zero misconfig
[ 1495.775550][ T1952] lo speed is unknown, defaulting to 1000
[ 1495.916279][ T1952]  speed is unknown, defaulting to 1000
[ 1495.921377][ T1952] hsr0 speed is unknown, defaulting to 1000
[ 1496.071894][ T1957] lo speed is unknown, defaulting to 1000
[ 1496.165407][ T1957]  speed is unknown, defaulting to 1000
[ 1496.169397][ T1957] hsr0 speed is unknown, defaulting to 1000
[ 1496.687114][ T1982] Unknown options in mask 6
[ 1497.453275][ T2001] netlink: 'syz.0.15652': attribute type 4 has an invalid length.
[ 1497.767646][ T2016] sctp: [Deprecated]: syz.2.15656 (pid 2016) Use of int in max_burst socket option.
[ 1497.767646][ T2016] Use struct sctp_assoc_value instead
[ 1497.787894][ T2016] sctp: [Deprecated]: syz.2.15656 (pid 2016) Use of int in max_burst socket option deprecated.
[ 1497.787894][ T2016] Use struct sctp_assoc_value instead
[ 1497.795913][ T2013] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[ 1497.901101][ T2022] __nla_validate_parse: 4 callbacks suppressed
[ 1497.901115][ T2022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15658'.
[ 1497.952127][ T2028] openvswitch: netlink: Key type 260 is out of range max 32
[ 1498.024483][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15660'.
[ 1499.576091][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15663'.
[ 1500.323906][ T2084] RDS: rds_bind could not find a transport for fe80::19, load rds_tcp or rds_rdma?
[ 1501.507762][ T2096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15672'.
[ 1501.816469][ T2129] netlink: 792 bytes leftover after parsing attributes in process `syz.1.15679'.
[ 1502.928705][ T2142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15683'.
[ 1502.938330][ T2142] veth1_to_team: entered promiscuous mode
[ 1502.945835][ T2142] veth1_to_team: left promiscuous mode
[ 1503.225889][ T2145] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15684'.
[ 1503.306650][ T2152] netlink: 277 bytes leftover after parsing attributes in process `syz.1.15686'.
[ 1503.609190][ T2171] netlink: 277 bytes leftover after parsing attributes in process `syz.1.15692'.
[ 1503.617065][ T2172] netlink: 277 bytes leftover after parsing attributes in process `syz.1.15692'.
[ 1503.776576][ T2184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15695'.
[ 1503.833450][ T2187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15694'.
[ 1504.015665][ T2192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1504.072868][ T2192] syzkaller0: entered promiscuous mode
[ 1504.075020][ T2192] syzkaller0: entered allmulticast mode
[ 1504.078473][ T2192] tipc: Resetting bearer <eth:syzkaller0>
[ 1504.089138][ T2210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15702'.
[ 1504.097044][ T2212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15701'.
[ 1504.100028][ T2191] tipc: Resetting bearer <eth:syzkaller0>
[ 1504.213116][   T33] audit: type=1800 audit(1778616818.684:138): pid=2213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15702" name="memory.events" dev="tmpfs" ino=27856 res=0 errno=0
[ 1507.107832][ T2191] tipc: Disabling bearer <eth:syzkaller0>
[ 1507.156103][ T2219] sock: sock_set_timeout: `syz.2.15703' (pid 2219) tries to set negative timeout
[ 1507.216041][ T2230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15706'.
[ 1507.297925][ T2235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1507.528385][ T2260] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[ 1507.848977][ T2281] netlink: 'syz.2.15721': attribute type 4 has an invalid length.
[ 1508.233782][ T2294] __nla_validate_parse: 3 callbacks suppressed
[ 1508.233798][ T2294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15724'.
[ 1508.240023][ T2294] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15724'.
[ 1508.359026][ T2296] netlink: 'syz.1.15725': attribute type 4 has an invalid length.
[ 1508.413523][ T2301] syz_tun: entered allmulticast mode
[ 1508.417310][ T2301] ip6gre0: entered allmulticast mode
[ 1508.923506][ T2339] netlink: 277 bytes leftover after parsing attributes in process `syz.0.15736'.
[ 1509.082998][ T2353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15738'.
[ 1509.108598][ T2357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15739'.
[ 1509.124858][ T2353] bond0: Caught tx_queue_len zero misconfig
[ 1509.690113][ T2376] netlink: 260 bytes leftover after parsing attributes in process `syz.0.15743'.
[ 1509.899653][ T2391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15747'.
[ 1509.996740][ T2397] netlink: 9 bytes leftover after parsing attributes in process `syz.0.15750'.
[ 1509.999564][ T2398] netlink: 9 bytes leftover after parsing attributes in process `syz.0.15750'.
[ 1510.009757][ T2397] netlink: 5 bytes leftover after parsing attributes in process `syz.0.15750'.
[ 1510.009876][ T2398] 0{X: renamed from gretap0
[ 1510.022531][ T2398] 0{X: entered allmulticast mode
[ 1510.025715][ T2398] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 1510.036364][ T2397] 1{X: renamed from 30{X (while UP)
[ 1510.042667][ T2397] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1510.194781][ T2412] netlink: 'syz.1.15752': attribute type 12 has an invalid length.
[ 1510.247600][ T2414] netlink: 'syz.0.15753': attribute type 4 has an invalid length.
[ 1512.989668][ T2406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1513.216325][ T2447] netlink: 'syz.2.15761': attribute type 1 has an invalid length.
[ 1514.097335][ T2497] __nla_validate_parse: 13 callbacks suppressed
[ 1514.097347][ T2497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15771'.
[ 1514.103976][ T2497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15771'.
[ 1514.107412][ T2497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15771'.
[ 1514.112577][ T2497] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15771'.
[ 1514.164153][ T2499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15772'.
[ 1514.233496][ T2507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15772'.
[ 1514.248639][ T2499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15772'.
[ 1514.254277][ T2499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15772'.
[ 1514.356251][ T2509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15774'.
[ 1514.433170][ T2518] sctp: [Deprecated]: syz.1.15776 (pid 2518) Use of int in max_burst socket option.
[ 1514.433170][ T2518] Use struct sctp_assoc_value instead
[ 1514.526555][ T2525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15778'.
[ 1514.675942][ T2543] x_tables: duplicate underflow at hook 1
[ 1514.676086][ T2545] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002
[ 1515.034118][ T2561] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1515.195671][ T2598] lo speed is unknown, defaulting to 1000
[ 1515.306560][ T2598]  speed is unknown, defaulting to 1000
[ 1515.310209][ T2598] hsr0 speed is unknown, defaulting to 1000
[ 1516.263374][ T2636] lo speed is unknown, defaulting to 1000
[ 1516.343900][ T2643] netlink: 'syz.1.15803': attribute type 4 has an invalid length.
[ 1516.469389][ T2636]  speed is unknown, defaulting to 1000
[ 1516.472912][ T2636] hsr0 speed is unknown, defaulting to 1000
[ 1516.513944][ T2656] netlink: 'syz.1.15806': attribute type 4 has an invalid length.
[ 1516.916277][ T2672] bond0: Error: Cannot enslave bond to itself.
[ 1517.646074][ T2717] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1517.763705][ T2724] tipc: Enabled bearer <ib:team0>, priority 12
[ 1518.728578][ T2755] geneve1: left promiscuous mode
[ 1518.988287][ T2769] xt_hashlimit: size too large, truncated to 1048576
[ 1519.136580][ T2802] netlink: 'syz.1.15838': attribute type 11 has an invalid length.
[ 1519.213878][ T2812] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[ 1519.217280][ T2812] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[ 1519.219991][ T2812] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[ 1519.227367][ T2812] __nla_validate_parse: 30 callbacks suppressed
[ 1519.227378][ T2812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15840'.
[ 1519.244434][ T2812] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15840'.
[ 1519.406493][ T2843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15845'.
[ 1519.470150][   T33] audit: type=1800 audit(1778616833.934:139): pid=2835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15845" name="memory.events" dev="tmpfs" ino=28053 res=0 errno=0
[ 1519.603298][ T2849] netlink: 'syz.2.15847': attribute type 4 has an invalid length.
[ 1519.659257][ T2858] netlink: 200 bytes leftover after parsing attributes in process `syz.2.15849'.
[ 1519.668953][ T2858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15849'.
[ 1519.669090][ T2860] netlink: 80 bytes leftover after parsing attributes in process `syz.0.15848'.
[ 1519.726575][ T2862] netlink: 9 bytes leftover after parsing attributes in process `syz.0.15850'.
[ 1519.733020][ T2862] 1: renamed from c0 (while UP)
[ 1519.737967][ T2862] 1: entered allmulticast mode
[ 1519.743776][ T2862] hsr_slave_0: entered allmulticast mode
[ 1519.751437][ T2862] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[ 1519.773961][ T2865] netlink: 9 bytes leftover after parsing attributes in process `syz.0.15850'.
[ 1519.780294][ T2865] 0: renamed from c1 (while UP)
[ 1519.784643][ T2865] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[ 1519.799543][ T2871] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[ 1519.802913][ T2871] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[ 1519.831660][ T2873] netlink: 277 bytes leftover after parsing attributes in process `syz.0.15853'.
[ 1519.937798][ T2873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15853'.
[ 1520.009856][ T2877] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1520.013521][ T2877] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1520.077923][ T2877] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1520.081334][ T2877] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1520.134614][ T2877] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1520.137582][ T2877] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1520.196206][ T2877] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1520.205519][ T2877] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1520.296350][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1520.299557][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1520.318709][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1520.322469][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1520.335884][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1520.339084][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1520.355459][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1520.358858][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1520.609652][ T2899] xt_hashlimit: size too large, truncated to 1048576
[ 1520.614738][ T2898] xt_hashlimit: size too large, truncated to 1048576
[ 1520.719588][ T2936] netlink: 'syz.0.15861': attribute type 4 has an invalid length.
[ 1520.910288][ T2953] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1520.919911][ T2953] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1520.939418][ T2961] netlink: 'syz.2.15868': attribute type 4 has an invalid length.
[ 1520.943642][ T2962] netlink: 'syz.2.15868': attribute type 4 has an invalid length.
[ 1520.977742][ T2953] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1520.981746][ T2953] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1521.032733][ T2953] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1521.040733][ T2953] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1521.076984][ T2967] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[ 1521.082510][ T2970] netlink: 'syz.2.15871': attribute type 1 has an invalid length.
[ 1521.082684][ T2953] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1521.085242][ T2969] netlink: 'syz.2.15871': attribute type 1 has an invalid length.
[ 1521.097642][ T2953] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1521.128805][ T2970] bond41: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1521.148080][ T2970] veth41: entered promiscuous mode
[ 1521.153314][ T2970] bond41: (slave veth41): Enslaving as a backup interface with a down link
[ 1521.170129][ T2969] veth43: entered promiscuous mode
[ 1521.174962][ T2969] bond41: (slave veth43): Enslaving as a backup interface with a down link
[ 1521.281220][ T2976] netlink: 'syz.2.15873': attribute type 4 has an invalid length.
[ 1521.386797][ T2987] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1521.503641][ T2995] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1521.515335][ T2994] netlink: 'syz.2.15878': attribute type 21 has an invalid length.
[ 1521.597637][ T3001] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1521.871933][   T33] audit: type=1800 audit(1778616836.344:140): pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15880" name="memory.events" dev="tmpfs" ino=26754 res=0 errno=0
[ 1521.935391][ T3011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1522.168048][ T3033] x_tables: unsorted underflow at hook 4
[ 1522.515469][ T5669] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1522.519441][ T5669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.533289][ T5669] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1522.538925][ T5669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.556733][ T5669] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1522.559897][ T5669] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.571329][ T5669] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1522.581126][ T5669] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.159325][ T3081] lo speed is unknown, defaulting to 1000
[ 1523.286788][ T3081]  speed is unknown, defaulting to 1000
[ 1523.301286][ T3081] hsr0 speed is unknown, defaulting to 1000
[ 1523.508181][ T3107] netlink: 'syz.0.15907': attribute type 13 has an invalid length.
[ 1523.675391][ T3114] netlink: 'syz.2.15908': attribute type 4 has an invalid length.
[ 1524.897100][ T3198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1525.214669][ T3220] validate_nla: 1 callbacks suppressed
[ 1525.214681][ T3220] netlink: 'syz.1.15932': attribute type 4 has an invalid length.
[ 1525.262567][ T3229] x_tables: duplicate underflow at hook 2
[ 1525.266446][ T3229] ip6gre0: left allmulticast mode
[ 1525.495465][ T3250] netlink: 'syz.1.15936': attribute type 4 has an invalid length.
[ 1525.721117][ T3261] __nla_validate_parse: 14 callbacks suppressed
[ 1525.721135][ T3261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15939'.
[ 1526.133447][ T3295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15946'.
[ 1526.676340][ T3317] bridge0: port 2(vlan0) entered disabled state
[ 1526.678427][ T3317] bridge0: port 1(veth0_virt_wifi) entered disabled state
[ 1526.938162][ T3317] tipc: Resetting bearer <eth:hsr0>
[ 1526.950089][ T3317] tipc: Resetting bearer <eth:hsr0>
[ 1527.004064][ T3317] mac80211_hwsim hwsim74 syzkaller0: left promiscuous mode
[ 1527.006817][ T3317] mac80211_hwsim hwsim74 syzkaller0: left allmulticast mode
[ 1527.013200][ T3317] ip6erspan0: left allmulticast mode
[ 1527.016418][T19450] lo speed is unknown, defaulting to 1000
[ 1527.018831][T15359] hsr0 speed is unknown, defaulting to 1000
[ 1527.021845][T19450] sqz0: Port: 1 Link DOWN
[ 1527.023629][T15359] syz2: Port: 1 Link DOWN
[ 1527.025478][T15359] lo speed is unknown, defaulting to 1000
[ 1527.103094][ T3324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15953'.
[ 1527.106735][ T3324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15953'.
[ 1527.114411][ T3324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15953'.
[ 1527.119013][ T3324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15953'.
[ 1527.347977][ T3339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15957'.
[ 1527.355862][ T3339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15957'.
[ 1527.415163][   T33] audit: type=1800 audit(1778616841.884:141): pid=3339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15957" name="memory.events" dev="tmpfs" ino=26908 res=0 errno=0
[ 1527.545887][ T3348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15956'.
[ 1528.051658][ T3355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15960'.
[ 1528.095131][ T3355] netlink: 'syz.0.15960': attribute type 4 has an invalid length.
[ 1529.484863][ T3417] netlink: 'syz.2.15975': attribute type 21 has an invalid length.
[ 1529.598794][ T3420] netlink: 'syz.2.15976': attribute type 1 has an invalid length.
[ 1529.634995][ T3420] bond42: entered promiscuous mode
[ 1529.637734][ T3420] 8021q: adding VLAN 0 to HW filter on device bond42
[ 1529.664251][ T3420] vlan3: entered allmulticast mode
[ 1529.668167][ T3420] bond42: entered allmulticast mode
[ 1529.686809][ T3420] bond42: (slave bridge31): making interface the new active one
[ 1529.689954][ T3420] bridge31: entered promiscuous mode
[ 1529.693158][ T3420] bridge31: entered allmulticast mode
[ 1529.698477][ T3420] bond42: (slave bridge31): Enslaving as an active interface with an up link
[ 1530.390062][ T3484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1530.860369][ T3507] __nla_validate_parse: 15 callbacks suppressed
[ 1530.864720][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15996'.
[ 1530.870356][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15996'.
[ 1530.889122][ T3507] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15996'.
[ 1530.925441][ T3509] netlink: 'syz.2.15997': attribute type 3 has an invalid length.
[ 1531.160016][ T3523] netlink: 'syz.1.16001': attribute type 1 has an invalid length.
[ 1531.164206][ T3523] netlink: 'syz.1.16001': attribute type 4 has an invalid length.
[ 1531.168553][ T3523] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.16001'.
[ 1531.226372][ T3529] netlink: 'syz.1.16002': attribute type 1 has an invalid length.
[ 1531.229114][ T3529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16002'.
[ 1531.237979][ T3529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16002'.
[ 1531.294290][ T3532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16003'.
[ 1531.341639][ T3535] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16004'.
[ 1531.640815][ T3544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16006'.
[ 1531.933359][ T3555] lo speed is unknown, defaulting to 1000
[ 1531.972217][ T3557] x_tables: duplicate underflow at hook 1
[ 1532.101199][ T3555]  speed is unknown, defaulting to 1000
[ 1532.105138][ T3555] hsr0 speed is unknown, defaulting to 1000
[ 1532.376620][ T3577] sctp: [Deprecated]: syz.1.16015 (pid 3577) Use of int in max_burst socket option.
[ 1532.376620][ T3577] Use struct sctp_assoc_value instead
[ 1532.562862][ T3590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16018'.
[ 1532.758956][ T3602] netlink: 'syz.0.16019': attribute type 4 has an invalid length.
[ 1533.197916][ T3630] netlink: 'syz.2.16025': attribute type 4 has an invalid length.
[ 1533.226049][ T3626] lo speed is unknown, defaulting to 1000
[ 1533.466633][ T3626]  speed is unknown, defaulting to 1000
[ 1533.470217][ T3626] hsr0 speed is unknown, defaulting to 1000
[ 1533.668956][ T3654] netlink: 'syz.2.16031': attribute type 4 has an invalid length.
[ 1533.791667][ T3658] netlink: 'syz.2.16032': attribute type 4 has an invalid length.
[ 1533.859525][ T3663] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1533.859980][ T3663] netlink: 'syz.2.16033': attribute type 21 has an invalid length.
[ 1533.867695][ T3662] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1535.289112][ T3700] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1535.748503][ T3732] syzkaller0: entered promiscuous mode
[ 1535.751447][ T3732] syzkaller0: entered allmulticast mode
[ 1536.020502][ T3755] __nla_validate_parse: 4 callbacks suppressed
[ 1536.020513][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16052'.
[ 1536.075135][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16054'.
[ 1536.169200][ T3764] netlink: 'syz.2.16055': attribute type 4 has an invalid length.
[ 1536.282893][ T3785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16061'.
[ 1536.434063][ T3799] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16065'.
[ 1536.528053][ T3805] netlink: 'syz.0.16066': attribute type 4 has an invalid length.
[ 1536.575282][ T3808] netlink: 'syz.2.16067': attribute type 4 has an invalid length.
[ 1536.627557][ T3811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16068'.
[ 1537.108676][ T3825] netlink: 'syz.0.16072': attribute type 4 has an invalid length.
[ 1537.453829][ T3843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16075'.
[ 1537.454821][ T3845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16075'.
[ 1537.575356][ T3850] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1537.578224][ T3850] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1538.081888][ T3858] gre15: entered promiscuous mode
[ 1538.207218][ T3867] netlink: 277 bytes leftover after parsing attributes in process `syz.0.16082'.
[ 1538.439702][ T3869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16083'.
[ 1538.717382][ T3886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16087'.
[ 1538.744413][ T3885] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1538.749921][ T3885] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1538.877478][ T3898] netlink: 'syz.0.16091': attribute type 4 has an invalid length.
[ 1539.115499][ T3920] netlink: 'syz.0.16097': attribute type 1 has an invalid length.
[ 1539.624529][ T3943] netlink: 'syz.1.16105': attribute type 4 has an invalid length.
[ 1540.366761][ T3997] xt_hashlimit: size too large, truncated to 1048576
[ 1540.777721][ T4027] netlink: 'syz.0.16124': attribute type 1 has an invalid length.
[ 1541.435728][ T4038] __nla_validate_parse: 19 callbacks suppressed
[ 1541.435745][ T4038] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.16127'.
[ 1542.097096][ T4052] lo speed is unknown, defaulting to 1000
[ 1542.193859][ T4052]  speed is unknown, defaulting to 1000
[ 1542.197650][ T4052] hsr0 speed is unknown, defaulting to 1000
[ 1542.432275][ T4063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16134'.
[ 1542.441114][ T4062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16134'.
[ 1542.445913][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16135'.
[ 1542.481764][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16135'.
[ 1542.588967][ T4075] netlink: 277 bytes leftover after parsing attributes in process `syz.0.16137'.
[ 1542.787535][ T4086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1542.794101][ T4086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16139'.
[ 1542.835810][ T4090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16141'.
[ 1543.553315][ T4096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16142'.
[ 1543.574684][ T4096] netlink: 'syz.2.16142': attribute type 3 has an invalid length.
[ 1543.688524][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16145'.
[ 1543.871749][ T4117] IPVS: length: 15 != 8
[ 1544.014868][ T4120] nbd: must specify at least one socket
[ 1544.194542][ T4125] netlink: 'syz.0.16151': attribute type 4 has an invalid length.
[ 1544.241982][ T4136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1546.016969][ T4240] xt_hashlimit: size too large, truncated to 1048576
[ 1546.424814][ T4270] netlink: 'syz.2.16185': attribute type 1 has an invalid length.
[ 1546.427861][ T4270] netlink: 'syz.2.16185': attribute type 10 has an invalid length.
[ 1546.500959][ T4273] netlink: 'syz.2.16185': attribute type 10 has an invalid length.
[ 1546.507472][ T4273] __nla_validate_parse: 15 callbacks suppressed
[ 1546.507482][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16185'.
[ 1546.512904][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16185'.
[ 1546.750885][ T4270] nbd0: detected capacity change from 0 to 63
[ 1546.758392][   T56] block nbd0: Receive control failed (result -32)
[ 1546.761897][ T4275] block nbd0: Receive control failed (result -32)
[ 1546.763349][ T4274] block nbd0: Send control failed (result -32)
[ 1546.769275][ T4274] block nbd0: Request send failed, requeueing
[ 1546.788612][ T4274] block nbd0: Dead connection, failed to find a fallback
[ 1546.809099][   T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.816177][   T95] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1546.824459][ T4274] block nbd0: shutting down sockets
[ 1546.835959][ T4274] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.842750][ T4274] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1546.846172][ T4274] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.849628][ T4274] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1546.853535][ T4274] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.854520][ T4277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16186'.
[ 1546.861797][ T4274] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1546.865409][ T4274] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.868852][ T4274] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1546.876857][ T4274] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.880301][ T4277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16186'.
[ 1546.884753][ T4274] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1546.888908][ T4274] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.893382][ T4274] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1546.898095][ T4274] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.902946][ T4274] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1546.909781][ T4274] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.919816][ T4274] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1546.923599][ T4274] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.926935][ T4274] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1546.945579][ T4274] ldm_validate_partition_table(): Disk read failed.
[ 1546.953668][ T4274] Dev nbd0: unable to read RDB block 0
[ 1546.957807][ T4274]  nbd0: unable to read partition table
[ 1546.991234][ T4274] ldm_validate_partition_table(): Disk read failed.
[ 1546.995313][ T4274] Dev nbd0: unable to read RDB block 0
[ 1547.002452][ T4274]  nbd0: unable to read partition table
[ 1547.052623][ T4285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16189'.
[ 1547.069014][ T4289] Bluetooth: hci0: Opcode 0x0401 failed: -22
[ 1547.436962][ T4305] lo: Caught tx_queue_len zero misconfig
[ 1547.467616][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16198'.
[ 1547.625727][ T4340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16200'.
[ 1547.674681][ T4343] sctp: [Deprecated]: syz.0.16201 (pid 4343) Use of int in max_burst socket option.
[ 1547.674681][ T4343] Use struct sctp_assoc_value instead
[ 1547.728173][ T4346] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16202'.
[ 1548.338270][ T4381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16207'.
[ 1548.985490][ T4384] netlink: 'syz.2.16208': attribute type 4 has an invalid length.
[ 1548.989177][ T4393] netlink: 277 bytes leftover after parsing attributes in process `syz.0.16211'.
[ 1549.080781][ T4396] lo speed is unknown, defaulting to 1000
[ 1549.225722][ T4409] syzkaller1: entered allmulticast mode
[ 1549.318578][ T4396]  speed is unknown, defaulting to 1000
[ 1549.324030][ T4396] hsr0 speed is unknown, defaulting to 1000
[ 1549.380724][ T4419] syzkaller0: entered promiscuous mode
[ 1549.382482][ T4419] syzkaller0: entered allmulticast mode
[ 1552.210164][ T4432] __nla_validate_parse: 1 callbacks suppressed
[ 1552.210183][ T4432] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16218'.
[ 1552.412495][ T4438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16219'.
[ 1552.634396][ T4447] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode
[ 1552.636767][ T4447] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode
[ 1552.767428][ T4457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16228'.
[ 1552.777167][ T4457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16228'.
[ 1552.816359][ T4460] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16229'.
[ 1552.826294][ T4460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1554.004520][ T4487] netlink: 'syz.2.16236': attribute type 2 has an invalid length.
[ 1554.044155][ T4488] lo speed is unknown, defaulting to 1000
[ 1554.128582][ T4502] netlink: 140 bytes leftover after parsing attributes in process `syz.0.16237'.
[ 1554.148022][ T4496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16237'.
[ 1554.207866][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16240'.
[ 1554.213535][ T4488]  speed is unknown, defaulting to 1000
[ 1554.219371][ T4488] hsr0 speed is unknown, defaulting to 1000
[ 1555.422881][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16252'.
[ 1555.834432][ T4581] netlink: 277 bytes leftover after parsing attributes in process `syz.2.16258'.
[ 1556.434826][ T4608] sctp: [Deprecated]: syz.2.16263 (pid 4608) Use of int in maxseg socket option.
[ 1556.434826][ T4608] Use struct sctp_assoc_value instead
[ 1557.353828][ T4640] __nla_validate_parse: 36 callbacks suppressed
[ 1557.353849][ T4640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16270'.
[ 1557.484871][ T4643] mac80211_hwsim hwsim74 syzkaller0: left promiscuous mode
[ 1557.494934][ T4643] mac80211_hwsim hwsim74 syzkaller0: left allmulticast mode
[ 1557.512984][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16270'.
[ 1557.840366][ T4680] tc_dump_action: action bad kind
[ 1557.848503][ T4680] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16280'.
[ 1557.980085][ T4696] netlink: 277 bytes leftover after parsing attributes in process `syz.1.16283'.
[ 1557.992872][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16281'.
[ 1558.825160][ T4710] vlan1: entered promiscuous mode
[ 1558.826839][ T4710] veth1_to_bridge: entered promiscuous mode
[ 1558.875997][ T4710] netlink: 'syz.0.16287': attribute type 4 has an invalid length.
[ 1558.987434][ T4724] netlink: 'syz.1.16289': attribute type 4 has an invalid length.
[ 1559.013820][ T4723] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16290'.
[ 1559.036480][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16291'.
[ 1559.039937][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16291'.
[ 1559.118034][ T4730] sctp: [Deprecated]: syz.1.16292 (pid 4730) Use of int in max_burst socket option.
[ 1559.118034][ T4730] Use struct sctp_assoc_value instead
[ 1559.273760][ T4748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16297'.
[ 1559.298079][ T4753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1559.355006][ T4760] bond43 (unregistering): Released all slaves
[ 1559.368689][ T4763] netlink: 200 bytes leftover after parsing attributes in process `syz.1.16302'.
[ 1559.471935][ T4771] lo speed is unknown, defaulting to 1000
[ 1559.629506][ T4771]  speed is unknown, defaulting to 1000
[ 1559.634648][ T4771] hsr0 speed is unknown, defaulting to 1000
[ 1560.017623][ T4805] netlink: 'syz.2.16314': attribute type 4 has an invalid length.
[ 1560.193564][ T4823] openvswitch: netlink: Message has 4 unknown bytes.
[ 1560.201372][ T4823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1560.267468][ T4829] lo speed is unknown, defaulting to 1000
[ 1560.463573][ T4829]  speed is unknown, defaulting to 1000
[ 1560.468722][ T4829] hsr0 speed is unknown, defaulting to 1000
[ 1560.570273][ T4855] dvmrp0: left allmulticast mode
[ 1560.573294][ T4855] dvmrp8: left allmulticast mode
[ 1560.874336][ T4869] syzkaller1: tun_chr_ioctl cmd 35108
[ 1560.894977][ T4872] syzkaller0: mtu less than device minimum
[ 1560.896822][ T4871] syzkaller0: mtu less than device minimum
[ 1560.899429][ T4871] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode
[ 1560.903773][ T4871] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode
[ 1561.316244][ T4899] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1562.083834][ T4915] netlink: 'syz.1.16342': attribute type 4 has an invalid length.
[ 1562.285348][ T4928] tipc: Trying to set illegal importance in message
[ 1562.363403][ T4931] netlink: 'syz.0.16347': attribute type 1 has an invalid length.
[ 1562.366461][ T4931] __nla_validate_parse: 13 callbacks suppressed
[ 1562.366477][ T4931] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16347'.
[ 1562.418987][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16348'.
[ 1563.380080][ T4959] netlink: 277 bytes leftover after parsing attributes in process `syz.0.16356'.
[ 1563.392923][ T4943] xt_hashlimit: size too large, truncated to 1048576
[ 1563.428550][ T4956] netlink: 'syz.1.16355': attribute type 4 has an invalid length.
[ 1563.497909][ T4967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16357'.
[ 1563.519357][ T4970] netlink: 277 bytes leftover after parsing attributes in process `syz.0.16358'.
[ 1563.543810][ T4967] mac80211_hwsim hwsim74 syzkaller0: left promiscuous mode
[ 1563.547711][ T4967] mac80211_hwsim hwsim74 syzkaller0: left allmulticast mode
[ 1563.676265][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16361'.
[ 1563.837019][ T4991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16365'.
[ 1563.934473][ T5003] lo speed is unknown, defaulting to 1000
[ 1563.952102][ T5006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16366'.
[ 1564.119175][ T5003]  speed is unknown, defaulting to 1000
[ 1564.124335][ T5003] hsr0 speed is unknown, defaulting to 1000
[ 1564.197734][ T5013] lo speed is unknown, defaulting to 1000
[ 1564.421418][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16370'.
[ 1564.497665][ T5025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16371'.
[ 1564.500053][ T5013]  speed is unknown, defaulting to 1000
[ 1564.506825][ T5013] hsr0 speed is unknown, defaulting to 1000
[ 1564.554230][ T5025] netlink: zone id is out of range
[ 1565.668190][ T5092] netlink: 'syz.1.16387': attribute type 18 has an invalid length.
[ 1565.851665][ T5107] netlink: 'syz.0.16392': attribute type 1 has an invalid length.
[ 1565.884401][ T5107] bond29: entered promiscuous mode
[ 1565.890211][ T5107] bond29: entered allmulticast mode
[ 1565.892983][ T5107] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1566.390239][ T5142] netlink: 'syz.2.16399': attribute type 4 has an invalid length.
[ 1566.623510][ T5155] netlink: 'syz.0.16403': attribute type 4 has an invalid length.
[ 1566.627110][ T5160] lo speed is unknown, defaulting to 1000
[ 1566.931069][ T5160]  speed is unknown, defaulting to 1000
[ 1566.935057][ T5160] hsr0 speed is unknown, defaulting to 1000
[ 1567.072994][ T5190] netlink: 'syz.2.16410': attribute type 4 has an invalid length.
[ 1567.161033][ T5199] Cannot find del_set index 4 as target
[ 1567.387707][ T5219] __nla_validate_parse: 12 callbacks suppressed
[ 1567.387718][ T5219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16416'.
[ 1567.566235][ T5228] netlink: 'syz.2.16420': attribute type 13 has an invalid length.
[ 1567.815835][ T5242] netlink: 277 bytes leftover after parsing attributes in process `syz.0.16424'.
[ 1568.136607][ T5258] netlink: 'syz.2.16429': attribute type 4 has an invalid length.
[ 1568.188148][ T5265] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1568.466990][ T5289] sctp: [Deprecated]: syz.2.16436 (pid 5289) Use of int in max_burst socket option.
[ 1568.466990][ T5289] Use struct sctp_assoc_value instead
[ 1568.535655][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1568.539844][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1568.544248][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1568.547611][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1568.626626][ T5296] netlink: 277 bytes leftover after parsing attributes in process `syz.1.16439'.
[ 1568.740150][ T5298] netlink: 'syz.2.16440': attribute type 4 has an invalid length.
[ 1568.899503][ T5311] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[ 1568.996122][ T5322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16447'.
[ 1569.007016][ T5322] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16447'.
[ 1569.023886][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16446'.
[ 1569.147673][ T5332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16446'.
[ 1569.165415][ T5332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16446'.
[ 1569.168100][ T5332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16446'.
[ 1570.145776][ T5364] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16457'.
[ 1570.154715][ T5364] openvswitch: netlink: Message has 4 unknown bytes.
[ 1570.486880][ T5374] netlink: 'syz.2.16460': attribute type 4 has an invalid length.
[ 1570.605926][ T5379] netlink: 'syz.2.16461': attribute type 4 has an invalid length.
[ 1570.961555][ T5391] netlink: 'syz.1.16463': attribute type 2 has an invalid length.
[ 1570.964422][ T5391] netlink: 'syz.1.16463': attribute type 2 has an invalid length.
[ 1571.062226][ T5400] : renamed from veth0_to_bond
[ 1571.334058][ T5413] 
[ 1571.335014][ T5413] ======================================================
[ 1571.337588][ T5413] WARNING: possible circular locking dependency detected
[ 1571.340035][ T5413] syzkaller #0 Not tainted
[ 1571.341762][ T5413] ------------------------------------------------------
[ 1571.344260][ T5413] syz.0.16469/5413 is trying to acquire lock:
[ 1571.346525][ T5413] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0x9d/0x760
[ 1571.349699][ T5413] 
[ 1571.349699][ T5413] but task is already holding lock:
[ 1571.352352][ T5413] ffff88819c1fd4d0 (&fp->aux->used_maps_mutex){+.+.}-{4:4}, at: bpf_prog_bind_map+0x2b5/0x690
[ 1571.355660][ T5413] 
[ 1571.355660][ T5413] which lock already depends on the new lock.
[ 1571.355660][ T5413] 
[ 1571.359498][ T5413] 
[ 1571.359498][ T5413] the existing dependency chain (in reverse order) is:
[ 1571.362623][ T5413] 
[ 1571.362623][ T5413] -> #7 (&fp->aux->used_maps_mutex){+.+.}-{4:4}:
[ 1571.365123][ T5413]        __mutex_lock+0x1a3/0x1550
[ 1571.366942][ T5413]        __bpf_prog_select_runtime+0x9f/0xb20
[ 1571.368912][ T5413]        bpf_prepare_filter+0x1130/0x12d0
[ 1571.370583][ T5413]        sk_reuseport_attach_filter+0x24/0x210
[ 1571.372542][ T5413]        sk_setsockopt+0x1e50/0x2d60
[ 1571.374258][ T5413]        udp_lib_setsockopt+0xbc/0x6b0
[ 1571.375909][ T5413]        udpv6_setsockopt+0x67/0xb0
[ 1571.377473][ T5413]        do_sock_setsockopt+0x17c/0x1b0
[ 1571.379283][ T5413]        __x64_sys_setsockopt+0x13d/0x1b0
[ 1571.381266][ T5413]        do_syscall_64+0x15f/0xf80
[ 1571.382944][ T5413]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1571.384925][ T5413] 
[ 1571.384925][ T5413] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1571.387463][ T5413]        lock_sock_nested+0x41/0x100
[ 1571.389261][ T5413]        inet_shutdown+0x6a/0x390
[ 1571.391106][ T5413]        nbd_mark_nsock_dead+0x2e9/0x560
[ 1571.393109][ T5413]        recv_work+0x1c2e/0x1d40
[ 1571.394732][ T5413]        process_scheduled_works+0xb5d/0x1860
[ 1571.396627][ T5413]        worker_thread+0xa53/0xfc0
[ 1571.398488][ T5413]        kthread+0x388/0x470
[ 1571.400252][ T5413]        ret_from_fork+0x514/0xb70
[ 1571.402125][ T5413]        ret_from_fork_asm+0x1a/0x30
[ 1571.404028][ T5413] 
[ 1571.404028][ T5413] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1571.406789][ T5413]        __mutex_lock+0x1a3/0x1550
[ 1571.408661][ T5413]        nbd_queue_rq+0x37b/0x1100
[ 1571.410550][ T5413]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1571.412748][ T5413]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1571.414752][ T5413]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1571.416822][ T5413]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1571.418644][ T5413]        blk_mq_dispatch_list+0xd16/0xe10
[ 1571.420744][ T5413]        blk_mq_flush_plug_list+0x48d/0x570
[ 1571.422864][ T5413]        __blk_flush_plug+0x3ed/0x4d0
[ 1571.424827][ T5413]        __submit_bio+0x28d/0x580
[ 1571.426704][ T5413]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1571.428946][ T5413]        block_read_full_folio+0x599/0x830
[ 1571.431095][ T5413]        filemap_read_folio+0x137/0x3b0
[ 1571.433139][ T5413]        do_read_cache_folio+0x358/0x590
[ 1571.435701][ T5413]        read_part_sector+0xb6/0x2b0
[ 1571.437679][ T5413]        adfspart_check_ICS+0xb1/0x960
[ 1571.439652][ T5413]        bdev_disk_changed+0x817/0x1770
[ 1571.441644][ T5413]        blkdev_get_whole+0x380/0x510
[ 1571.443572][ T5413]        bdev_open+0x31e/0xd30
[ 1571.445268][ T5413]        blkdev_open+0x470/0x610
[ 1571.446979][ T5413]        do_dentry_open+0x785/0x14e0
[ 1571.448894][ T5413]        vfs_open+0x3b/0x340
[ 1571.450599][ T5413]        path_openat+0x2e08/0x3860
[ 1571.452501][ T5413]        do_file_open+0x23e/0x4a0
[ 1571.454409][ T5413]        do_sys_openat2+0x113/0x200
[ 1571.456310][ T5413]        __x64_sys_openat+0x138/0x170
[ 1571.458305][ T5413]        do_syscall_64+0x15f/0xf80
[ 1571.460119][ T5413]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1571.462487][ T5413] 
[ 1571.462487][ T5413] -> #4 (&cmd->lock){+.+.}-{4:4}:
[ 1571.465138][ T5413]        __mutex_lock+0x1a3/0x1550
[ 1571.466959][ T5413]        nbd_queue_rq+0xc6/0x1100
[ 1571.468773][ T5413]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1571.470928][ T5413]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1571.473328][ T5413]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1571.475678][ T5413]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1571.477754][ T5413]        blk_mq_dispatch_list+0xd16/0xe10
[ 1571.479825][ T5413]        blk_mq_flush_plug_list+0x48d/0x570
[ 1571.482017][ T5413]        __blk_flush_plug+0x3ed/0x4d0
[ 1571.483950][ T5413]        __submit_bio+0x28d/0x580
[ 1571.485794][ T5413]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1571.488008][ T5413]        block_read_full_folio+0x599/0x830
[ 1571.490111][ T5413]        filemap_read_folio+0x137/0x3b0
[ 1571.491891][ T5413]        do_read_cache_folio+0x358/0x590
[ 1571.493778][ T5413]        read_part_sector+0xb6/0x2b0
[ 1571.495547][ T5413]        adfspart_check_ICS+0xb1/0x960
[ 1571.497589][ T5413]        bdev_disk_changed+0x817/0x1770
[ 1571.499572][ T5413]        blkdev_get_whole+0x380/0x510
[ 1571.501488][ T5413]        bdev_open+0x31e/0xd30
[ 1571.503319][ T5413]        blkdev_open+0x470/0x610
[ 1571.505194][ T5413]        do_dentry_open+0x785/0x14e0
[ 1571.507184][ T5413]        vfs_open+0x3b/0x340
[ 1571.508874][ T5413]        path_openat+0x2e08/0x3860
[ 1571.510741][ T5413]        do_file_open+0x23e/0x4a0
[ 1571.512613][ T5413]        do_sys_openat2+0x113/0x200
[ 1571.514511][ T5413]        __x64_sys_openat+0x138/0x170
[ 1571.516539][ T5413]        do_syscall_64+0x15f/0xf80
[ 1571.518390][ T5413]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1571.520674][ T5413] 
[ 1571.520674][ T5413] -> #3 (set->srcu){.+.+}-{0:0}:
[ 1571.523228][ T5413]        __synchronize_srcu+0xca/0x300
[ 1571.525186][ T5413]        elevator_switch+0x1e8/0x7a0
[ 1571.527152][ T5413]        elevator_change+0x2cc/0x450
[ 1571.529052][ T5413]        elevator_set_default+0x36c/0x430
[ 1571.531151][ T5413]        blk_register_queue+0x3e9/0x4e0
[ 1571.533159][ T5413]        __add_disk+0x677/0xd50
[ 1571.534933][ T5413]        add_disk_fwnode+0xfb/0x480
[ 1571.536879][ T5413]        nbd_dev_add+0x72c/0xb50
[ 1571.538715][ T5413]        nbd_init+0x168/0x1f0
[ 1571.540398][ T5413]        do_one_initcall+0x250/0x870
[ 1571.542383][ T5413]        do_initcall_level+0x104/0x190
[ 1571.544322][ T5413]        do_initcalls+0x59/0xa0
[ 1571.546091][ T5413]        kernel_init_freeable+0x2a6/0x3e0
[ 1571.548177][ T5413]        kernel_init+0x1d/0x1d0
[ 1571.549988][ T5413]        ret_from_fork+0x514/0xb70
[ 1571.551918][ T5413]        ret_from_fork_asm+0x1a/0x30
[ 1571.553790][ T5413] 
[ 1571.553790][ T5413] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[ 1571.556584][ T5413]        __mutex_lock+0x1a3/0x1550
[ 1571.558425][ T5413]        elevator_change+0x1b3/0x450
[ 1571.560383][ T5413]        elevator_set_none+0xb5/0x140
[ 1571.562339][ T5413]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1571.564589][ T5413]        nbd_start_device+0x17f/0xb10
[ 1571.566577][ T5413]        nbd_genl_connect+0x165b/0x1cf0
[ 1571.568542][ T5413]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1571.570676][ T5413]        genl_rcv_msg+0x61c/0x7a0
[ 1571.572483][ T5413]        netlink_rcv_skb+0x232/0x4b0
[ 1571.574418][ T5413]        genl_rcv+0x28/0x40
[ 1571.576147][ T5413]        netlink_unicast+0x75c/0x8e0
[ 1571.577976][ T5413]        netlink_sendmsg+0x813/0xb40
[ 1571.579822][ T5413]        ____sys_sendmsg+0x972/0x9f0
[ 1571.581788][ T5413]        ___sys_sendmsg+0x2a5/0x360
[ 1571.583649][ T5413]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1571.585653][ T5413]        do_syscall_64+0x15f/0xf80
[ 1571.587497][ T5413]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1571.589801][ T5413] 
[ 1571.589801][ T5413] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 1571.592802][ T5413]        blk_alloc_queue+0x546/0x680
[ 1571.594714][ T5413]        __blk_mq_alloc_disk+0x197/0x390
[ 1571.596789][ T5413]        nbd_dev_add+0x499/0xb50
[ 1571.598694][ T5413]        nbd_init+0x168/0x1f0
[ 1571.600394][ T5413]        do_one_initcall+0x250/0x870
[ 1571.602287][ T5413]        do_initcall_level+0x104/0x190
[ 1571.604290][ T5413]        do_initcalls+0x59/0xa0
[ 1571.606011][ T5413]        kernel_init_freeable+0x2a6/0x3e0
[ 1571.608081][ T5413]        kernel_init+0x1d/0x1d0
[ 1571.609903][ T5413]        ret_from_fork+0x514/0xb70
[ 1571.611767][ T5413]        ret_from_fork_asm+0x1a/0x30
[ 1571.613685][ T5413] 
[ 1571.613685][ T5413] -> #0 (fs_reclaim){+.+.}-{0:0}:
[ 1571.616297][ T5413]        __lock_acquire+0x15a5/0x2cf0
[ 1571.618045][ T5413]        lock_acquire+0x106/0x350
[ 1571.619929][ T5413]        fs_reclaim_acquire+0x71/0x100
[ 1571.621895][ T5413]        __kmalloc_noprof+0x9d/0x760
[ 1571.623778][ T5413]        bpf_prog_bind_map+0x3a4/0x690
[ 1571.625759][ T5413]        __sys_bpf+0x5ba/0x950
[ 1571.627536][ T5413]        __x64_sys_bpf+0x7c/0x90
[ 1571.629409][ T5413]        do_syscall_64+0x15f/0xf80
[ 1571.631314][ T5413]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1571.633615][ T5413] 
[ 1571.633615][ T5413] other info that might help us debug this:
[ 1571.633615][ T5413] 
[ 1571.637225][ T5413] Chain exists of:
[ 1571.637225][ T5413]   fs_reclaim --> sk_lock-AF_INET6 --> &fp->aux->used_maps_mutex
[ 1571.637225][ T5413] 
[ 1571.642166][ T5413]  Possible unsafe locking scenario:
[ 1571.642166][ T5413] 
[ 1571.644831][ T5413]        CPU0                    CPU1
[ 1571.646788][ T5413]        ----                    ----
[ 1571.648680][ T5413]   lock(&fp->aux->used_maps_mutex);
[ 1571.650632][ T5413]                                lock(sk_lock-AF_INET6);
[ 1571.653138][ T5413]                                lock(&fp->aux->used_maps_mutex);
[ 1571.656009][ T5413]   lock(fs_reclaim);
[ 1571.657474][ T5413] 
[ 1571.657474][ T5413]  *** DEADLOCK ***
[ 1571.657474][ T5413] 
[ 1571.660407][ T5413] 1 lock held by syz.0.16469/5413:
[ 1571.662246][ T5413]  #0: ffff88819c1fd4d0 (&fp->aux->used_maps_mutex){+.+.}-{4:4}, at: bpf_prog_bind_map+0x2b5/0x690
[ 1571.665864][ T5413] 
[ 1571.665864][ T5413] stack backtrace:
[ 1571.667995][ T5413] CPU: 0 UID: 0 PID: 5413 Comm: syz.0.16469 Not tainted syzkaller #0 PREEMPT(full) 
[ 1571.668012][ T5413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1571.668023][ T5413] Call Trace:
[ 1571.668031][ T5413]  <TASK>
[ 1571.668039][ T5413]  dump_stack_lvl+0xe8/0x150
[ 1571.668082][ T5413]  print_circular_bug+0x2e1/0x300
[ 1571.668102][ T5413]  check_noncircular+0x12e/0x150
[ 1571.668120][ T5413]  __lock_acquire+0x15a5/0x2cf0
[ 1571.668138][ T5413]  ? trace_contention_end+0x3d/0x140
[ 1571.668156][ T5413]  ? __mutex_lock+0x319/0x1550
[ 1571.668170][ T5413]  ? try_to_wake_up+0x828/0x1380
[ 1571.668191][ T5413]  ? __kmalloc_noprof+0x9d/0x760
[ 1571.668210][ T5413]  lock_acquire+0x106/0x350
[ 1571.668224][ T5413]  ? __kmalloc_noprof+0x9d/0x760
[ 1571.668243][ T5413]  ? __pfx___mutex_lock+0x10/0x10
[ 1571.668256][ T5413]  ? __fget_files+0x2a/0x420
[ 1571.668273][ T5413]  fs_reclaim_acquire+0x71/0x100
[ 1571.668292][ T5413]  ? __kmalloc_noprof+0x9d/0x760
[ 1571.668309][ T5413]  __kmalloc_noprof+0x9d/0x760
[ 1571.668327][ T5413]  ? bpf_prog_bind_map+0x3a4/0x690
[ 1571.668343][ T5413]  bpf_prog_bind_map+0x3a4/0x690
[ 1571.668359][ T5413]  __sys_bpf+0x5ba/0x950
[ 1571.668379][ T5413]  ? __pfx___sys_bpf+0x10/0x10
[ 1571.668405][ T5413]  ? rcu_is_watching+0x15/0xb0
[ 1571.668424][ T5413]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1571.668438][ T5413]  __x64_sys_bpf+0x7c/0x90
[ 1571.668457][ T5413]  do_syscall_64+0x15f/0xf80
[ 1571.668470][ T5413]  ? trace_irq_disable+0x3b/0x140
[ 1571.668492][ T5413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1571.668513][ T5413] RIP: 0033:0x7fa61c39cdd9
[ 1571.668527][ T5413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1571.668540][ T5413] RSP: 002b:00007fa61d33f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1571.668556][ T5413] RAX: ffffffffffffffda RBX: 00007fa61c615fa0 RCX: 00007fa61c39cdd9
[ 1571.668566][ T5413] RDX: 000000000000000c RSI: 0000200000000080 RDI: 0000000000000023
[ 1571.668575][ T5413] RBP: 00007fa61c432d69 R08: 0000000000000000 R09: 0000000000000000
[ 1571.668584][ T5413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1571.668592][ T5413] R13: 00007fa61c616038 R14: 00007fa61c615fa0 R15: 00007ffd07626f78
[ 1571.668609][ T5413]  </TASK>
