last executing test programs:

2.265523053s ago: executing program 1 (id=1282):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x2c, r1, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

2.183000016s ago: executing program 1 (id=1285):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r3, 0x1, {0x2, 0xf0, 0x2}, 0xff}, 0x18)

2.111364684s ago: executing program 1 (id=1289):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000a40))

2.044806043s ago: executing program 1 (id=1291):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)

2.043203488s ago: executing program 1 (id=1294):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540f2e700001c00188008000240000000000800014000000000080003"], 0xa4}}, 0x0)

1.482947016s ago: executing program 1 (id=1311):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)

1.216323449s ago: executing program 0 (id=1314):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.104415123s ago: executing program 0 (id=1315):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

985.480984ms ago: executing program 0 (id=1317):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r0}, 0x18)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000080)=0x8)

895.74811ms ago: executing program 0 (id=1318):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x18, 0x22, 0x601, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x0)

843.983077ms ago: executing program 0 (id=1319):
socket$inet6(0xa, 0x5, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r4=>0x0})
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x88d0)

575.91156ms ago: executing program 0 (id=1322):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000340)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000300)}, 0x20)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d040000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x10, 0x110, 0xb}}], 0x28}, 0x0)
r6 = getpid()
syz_open_procfs$namespace(r6, &(0x7f0000000240)='ns/pid_for_children\x00')
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r9, 0x4, 0x0, 0x1, 0xffffff96, 0x2c, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x80, 0x8000, 0x1, 0x5bee}})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000280)={'veth0_to_hsr\x00', @local})
ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000480)={0x3, &(0x7f00000004c0)=[{0x45, 0xfd, 0x1, 0xfffffe00}, {0x1, 0x2}, {0x6, 0x7}]})

213.505044ms ago: executing program 2 (id=1327):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT=r0], 0x13)

152.402422ms ago: executing program 2 (id=1328):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)

151.97794ms ago: executing program 2 (id=1329):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x44)
connect$can_j1939(r0, &(0x7f0000000600)={0x1d, r1, 0x0, {0x2, 0xff}, 0xff}, 0x18)

94.29814ms ago: executing program 2 (id=1330):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004)

94.106152ms ago: executing program 2 (id=1331):
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], &(0x7f0000000040)=""/236, 0x46, 0xec, 0x6}, 0x28)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1}, 0x10)

0s ago: executing program 2 (id=1332):
r0 = epoll_create1(0x80000)
r1 = socket$unix(0x1, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
unshare(0x2c020400)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30656' (ED25519) to the list of known hosts.
syzkaller login: [   48.601623][ T5754] cgroup: Unknown subsys name 'net'
[   48.750970][ T5754] cgroup: Unknown subsys name 'cpuset'
[   48.755401][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.528071][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.854423][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.118652][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.128372][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.132316][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.136310][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.141512][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.188703][ T5862] Bluetooth: hci0: command tx timeout
[   61.614923][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.618464][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.621269][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.624387][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.627243][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.693491][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.696586][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.704689][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.708578][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.712250][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.744005][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.746831][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.749780][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.753428][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.756087][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.895423][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   62.026953][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.030961][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.033316][ T5874] bridge_slave_0: entered allmulticast mode
[   62.036118][ T5874] bridge_slave_0: entered promiscuous mode
[   62.054460][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.057269][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.060603][ T5874] bridge_slave_1: entered allmulticast mode
[   62.064459][ T5874] bridge_slave_1: entered promiscuous mode
[   62.128522][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.137071][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.150609][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   62.182445][ T5878] chnl_net:caif_netlink_parms(): no params data found
[   62.212508][ T5874] team0: Port device team_slave_0 added
[   62.216284][ T5874] team0: Port device team_slave_1 added
[   62.281546][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.283772][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.292694][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.304095][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.306747][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.315302][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.353707][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.356730][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.360005][ T5876] bridge_slave_0: entered allmulticast mode
[   62.363823][ T5876] bridge_slave_0: entered promiscuous mode
[   62.390044][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.393094][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.396101][ T5876] bridge_slave_1: entered allmulticast mode
[   62.400646][ T5876] bridge_slave_1: entered promiscuous mode
[   62.417610][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.420457][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.423283][ T5878] bridge_slave_0: entered allmulticast mode
[   62.426422][ T5878] bridge_slave_0: entered promiscuous mode
[   62.471071][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.474894][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.479733][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.482661][ T5878] bridge_slave_1: entered allmulticast mode
[   62.486080][ T5878] bridge_slave_1: entered promiscuous mode
[   62.496733][ T5874] hsr_slave_0: entered promiscuous mode
[   62.500313][ T5874] hsr_slave_1: entered promiscuous mode
[   62.506665][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.572248][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.584567][ T5876] team0: Port device team_slave_0 added
[   62.589027][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.594510][ T5876] team0: Port device team_slave_1 added
[   62.660050][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.662370][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.672157][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.677641][ T5878] team0: Port device team_slave_0 added
[   62.685825][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.688772][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.697705][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.706946][ T5878] team0: Port device team_slave_1 added
[   62.745978][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.748817][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.758719][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.780489][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.783278][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.794228][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.811362][ T5876] hsr_slave_0: entered promiscuous mode
[   62.814364][ T5876] hsr_slave_1: entered promiscuous mode
[   62.817027][ T5876] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.822281][ T5876] Cannot create hsr debugfs directory
[   62.915661][ T5878] hsr_slave_0: entered promiscuous mode
[   62.919019][ T5878] hsr_slave_1: entered promiscuous mode
[   62.921604][ T5878] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.924488][ T5878] Cannot create hsr debugfs directory
[   63.071914][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.094042][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.111944][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.119719][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.175015][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.185187][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.200283][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.211568][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.280721][ T5878] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.295666][ T5878] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.304052][ T5878] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.314397][ T5878] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.376811][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.404029][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.432978][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   63.446669][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.449782][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.456905][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   63.470764][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.473710][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.494077][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.496715][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.509137][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.511594][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.540991][ T5874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.545113][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.582951][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.594728][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.626984][ T5878] 8021q: adding VLAN 0 to HW filter on device team0
[   63.654110][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.656978][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.672061][ T5881] Bluetooth: hci0: command tx timeout
[   63.686164][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.689350][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.760453][ T5881] Bluetooth: hci1: command tx timeout
[   63.777788][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.806419][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.831738][ T5874] veth0_vlan: entered promiscuous mode
[   63.838677][ T5881] Bluetooth: hci2: command tx timeout
[   63.856530][ T5874] veth1_vlan: entered promiscuous mode
[   63.907351][ T5876] veth0_vlan: entered promiscuous mode
[   63.931818][ T5874] veth0_macvtap: entered promiscuous mode
[   63.940209][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.944598][ T5876] veth1_vlan: entered promiscuous mode
[   63.954742][ T5874] veth1_macvtap: entered promiscuous mode
[   64.002698][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.021135][ T5876] veth0_macvtap: entered promiscuous mode
[   64.029266][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.034863][ T5878] veth0_vlan: entered promiscuous mode
[   64.040430][ T5876] veth1_macvtap: entered promiscuous mode
[   64.049285][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.052887][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.056499][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.062546][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.103989][ T5878] veth1_vlan: entered promiscuous mode
[   64.115962][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.131164][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.154447][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.158577][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.161534][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.164200][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.230211][ T5878] veth0_macvtap: entered promiscuous mode
[   64.233155][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.244973][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.251680][ T5878] veth1_macvtap: entered promiscuous mode
[   64.271137][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.281928][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.292287][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.295616][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.306698][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.317364][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.321758][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.325279][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.340165][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.343113][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.445267][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.454498][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.497663][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.504229][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.550474][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.553427][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.610213][ T5940] Bluetooth: MGMT ver 1.23
[   64.906392][ T5965] veth1_to_team: entered allmulticast mode
[   64.912770][ T5965] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   65.034237][ T5972] Illegal XDP return value 60756024 on prog  (id 3) dev N/A, expect packet loss!
[   65.425940][ T5992] tap0: tun_chr_ioctl cmd 1074025677
[   65.431490][ T5992] tap0: linktype set to 0
[   65.506053][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'.
[   65.689516][ T5997] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.763417][ T5881] Bluetooth: hci0: command tx timeout
[   65.838238][ T5881] Bluetooth: hci1: command tx timeout
[   65.908784][ T5881] Bluetooth: hci2: command tx timeout
[   65.965649][ T6013] netlink: 32 bytes leftover after parsing attributes in process `syz.2.50'.
[   66.262574][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'.
[   66.313217][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.881163][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   66.936512][ T6089] netlink: 'syz.1.84': attribute type 4 has an invalid length.
[   66.984322][ T6093] xt_hashlimit: max too large, truncated to 1048576
[   66.987061][ T6093] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   67.187517][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'.
[   67.194071][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'.
[   67.236199][ T6118] warning: `syz.0.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.421143][ T6132] xt_TPROXY: Can be used only with -p tcp or -p udp
[   67.444578][ T6135] netlink: 'syz.1.99': attribute type 1 has an invalid length.
[   67.467063][ T6135] netlink: 224 bytes leftover after parsing attributes in process `syz.1.99'.
[   67.699295][ T6152] syz.2.105 uses obsolete (PF_INET,SOCK_PACKET)
[   67.749232][ T6157] netlink: 'syz.1.107': attribute type 12 has an invalid length.
[   67.752519][ T6157] netlink: 'syz.1.107': attribute type 29 has an invalid length.
[   67.762059][ T6157] netlink: 148 bytes leftover after parsing attributes in process `syz.1.107'.
[   67.765883][ T6157] netlink: 'syz.1.107': attribute type 2 has an invalid length.
[   67.772100][ T6157] netlink: 43 bytes leftover after parsing attributes in process `syz.1.107'.
[   67.776061][ T6157] Zero length message leads to an empty skb
[   67.829302][ T5881] Bluetooth: hci0: command tx timeout
[   67.908407][ T5881] Bluetooth: hci1: command tx timeout
[   67.956159][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'.
[   67.989250][ T5881] Bluetooth: hci2: command tx timeout
[   68.003888][ T6177] syz_tun: entered promiscuous mode
[   68.006009][ T6177] macsec1: entered allmulticast mode
[   68.008583][ T6177] syz_tun: entered allmulticast mode
[   68.011837][ T6177] syz_tun: left allmulticast mode
[   68.013705][ T6177] syz_tun: left promiscuous mode
[   68.456233][ T6200] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   68.708463][ T6169] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   69.130170][ T6254] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   69.849450][ T6279] netlink: 'syz.1.162': attribute type 153 has an invalid length.
[   69.908463][ T5881] Bluetooth: hci0: command tx timeout
[   69.988153][ T5881] Bluetooth: hci1: command tx timeout
[   70.068407][ T5881] Bluetooth: hci2: command tx timeout
[   70.593662][ T6303] __nla_validate_parse: 6 callbacks suppressed
[   70.593673][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'.
[   70.683196][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'.
[   70.751970][ T6318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.177'.
[   70.912594][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'.
[   70.928476][ T6331] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   70.931737][ T6331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.039506][ T6336] Set syz1 is full, maxelem 0 reached
[   71.085875][ T6340] IPv6: sit1: Disabled Multicast RS
[   71.097410][ T6342] netlink: 40 bytes leftover after parsing attributes in process `syz.2.186'.
[   71.113439][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.116259][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.131432][ T6344] netlink: 'syz.1.187': attribute type 21 has an invalid length.
[   71.134129][ T6344] netlink: 132 bytes leftover after parsing attributes in process `syz.1.187'.
[   71.213471][ T6348] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   71.463168][ T6370] wg2: entered promiscuous mode
[   71.466871][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'.
[   71.554897][ T5933] IPVS: starting estimator thread 0...
[   71.648943][ T6379] IPVS: using max 80 ests per chain, 192000 per kthread
[   71.674625][ T6387] netlink: 'syz.2.202': attribute type 6 has an invalid length.
[   71.929636][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.210'.
[   71.991140][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout
[   72.152435][ T6420] syzkaller0: entered promiscuous mode
[   72.158828][ T6420] syzkaller0: entered allmulticast mode
[   72.216793][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.261865][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'.
[   72.265346][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'.
[   72.285150][ T6431] netlink: 'syz.2.220': attribute type 13 has an invalid length.
[   72.595150][ T6451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.672259][ T6451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.722440][ T6451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.798568][ T6451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.895653][ T6451] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.905937][ T6451] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.916141][ T6451] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.934175][ T6451] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.677091][ T6502] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   73.764663][ T6509] bridge_slave_0: left allmulticast mode
[   73.767334][ T6509] bridge_slave_0: left promiscuous mode
[   73.772051][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.793381][ T6509] bridge_slave_1: left allmulticast mode
[   73.796542][ T6509] bridge_slave_1: left promiscuous mode
[   73.800467][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.815435][ T6509] bond0: (slave bond_slave_0): Releasing backup interface
[   73.825511][ T6509] bond0: (slave bond_slave_1): Releasing backup interface
[   73.841728][ T6509] team0: Port device team_slave_0 removed
[   73.848576][ T6509] team0: Port device team_slave_1 removed
[   73.851068][ T6509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.853554][ T6509] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.859130][ T6509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.864061][ T6509] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.876645][ T6514] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   73.882480][ T6514] Cannot find add_set index 4 as target
[   73.889963][ T6515] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   74.515864][ T6549] netlink: 'syz.1.276': attribute type 1 has an invalid length.
[   74.516669][ T6550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.543955][ T6549] netlink: 'syz.1.276': attribute type 11 has an invalid length.
[   75.151580][ T6589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.154168][ T6589] IPv6: NLM_F_CREATE should be set when creating new route
[   75.446696][ T6611] netlink: 'syz.2.304': attribute type 7 has an invalid length.
[   75.453727][ T6614] netlink: 'syz.0.303': attribute type 1 has an invalid length.
[   75.593534][ T6628] netlink: 'syz.2.312': attribute type 21 has an invalid length.
[   75.794117][ T6632] __nla_validate_parse: 15 callbacks suppressed
[   75.794173][ T6632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.313'.
[   75.927287][ T6652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.319'.
[   76.740065][ T6700] netlink: 'syz.0.341': attribute type 1 has an invalid length.
[   76.824242][ T6709] netlink: 56 bytes leftover after parsing attributes in process `syz.1.346'.
[   77.344654][ T6745] pim6reg1: entered promiscuous mode
[   77.357951][ T6745] pim6reg1: entered allmulticast mode
[   77.644577][ T6769] netlink: 'syz.0.375': attribute type 4 has an invalid length.
[   77.961772][ T6769] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.964862][ T6769] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.969177][ T6769] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.972554][ T6769] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.414719][ T6811] netlink: 27 bytes leftover after parsing attributes in process `syz.0.397'.
[   78.559643][ T6824] veth0_to_team: entered promiscuous mode
[   78.562307][ T6824] veth0_to_team: entered allmulticast mode
[   78.874036][ T6842] block nbd0: NBD_DISCONNECT
[   78.876122][ T6842] block nbd0: Disconnected due to user request.
[   78.890254][ T6842] block nbd0: shutting down sockets
[   78.903777][ T6846] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   78.908761][ T6846] macsec1: entered allmulticast mode
[   78.911659][ T6846] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   78.916363][ T6846] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   78.921306][ T6846] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   79.056701][ T6850] netlink: 17 bytes leftover after parsing attributes in process `syz.1.415'.
[   79.061043][ T6850] netlink: zone id is out of range
[   79.063922][ T6850] netlink: zone id is out of range
[   79.066333][ T6850] netlink: zone id is out of range
[   79.075217][ T6850] netlink: zone id is out of range
[   79.079826][ T6850] netlink: zone id is out of range
[   79.084302][ T6850] netlink: zone id is out of range
[   79.088871][ T6850] netlink: zone id is out of range
[   79.092244][ T6850] netlink: zone id is out of range
[   79.098547][ T6850] netlink: zone id is out of range
[   79.103949][ T6850] netlink: zone id is out of range
[   79.187015][ T6858] netlink: 'syz.0.419': attribute type 21 has an invalid length.
[   79.192280][ T6858] netlink: 'syz.0.419': attribute type 22 has an invalid length.
[   79.195373][ T6858] netlink: 'syz.0.419': attribute type 23 has an invalid length.
[   79.200729][ T6858] netlink: 136 bytes leftover after parsing attributes in process `syz.0.419'.
[   79.566933][ T6868] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[   80.277802][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.282137][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.564216][ T6895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.580825][ T6895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.704656][ T6895] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.708733][ T6895] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.712498][ T6895] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.716226][ T6895] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.344965][ T6923] netlink: 'syz.1.439': attribute type 10 has an invalid length.
[   82.196898][ T6977] xt_CT: No such helper "snmp"
[   82.212169][ T6984] ieee802154 phy0 wpan0: encryption failed: -22
[   82.365151][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[   83.066788][ T7043] xt_time: invalid argument - start or stop time greater than 23:59:59
[   83.270585][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'.
[   83.435752][ T7062] netlink: 27 bytes leftover after parsing attributes in process `syz.1.495'.
[   83.825441][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'.
[   84.351781][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'.
[   84.985102][ T7150] tipc: Started in network mode
[   84.987401][ T7150] tipc: Node identity 329f65271811, cluster identity 4711
[   84.998114][ T7150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.006165][ T7150] syzkaller0: entered promiscuous mode
[   85.009026][ T7150] syzkaller0: entered allmulticast mode
[   85.036137][ T7150] tipc: Resetting bearer <eth:syzkaller0>
[   85.044781][ T7149] tipc: Resetting bearer <eth:syzkaller0>
[   85.071401][ T7149] tipc: Disabling bearer <eth:syzkaller0>
[   85.125862][ T7154] netlink: 'syz.0.529': attribute type 10 has an invalid length.
[   85.131713][ T7154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.529'.
[   85.137036][ T7154] team0: entered promiscuous mode
[   85.139837][ T7154] team0: entered allmulticast mode
[   85.143301][ T7154] 8021q: adding VLAN 0 to HW filter on device team0
[   85.146038][ T7154] bridge0: port 1(team0) entered blocking state
[   85.150236][ T7154] bridge0: port 1(team0) entered disabled state
[   85.221251][ T7160] net_ratelimit: 73 callbacks suppressed
[   85.221268][ T7160] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   85.279575][ T7161] veth0: entered promiscuous mode
[   85.282607][ T7161] macsec1: entered promiscuous mode
[   85.396148][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[   85.425394][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[   85.813276][ T7192] IPVS: Scheduler module ip_vs_sip not found
[   85.888235][ T7201] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   85.891649][ T7201] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   86.214307][ T7224] netlink: 48 bytes leftover after parsing attributes in process `syz.1.556'.
[   86.524198][ T7224] bridge_slave_0: left allmulticast mode
[   86.526763][ T7224] bridge_slave_0: left promiscuous mode
[   86.530573][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.585798][ T7224] bridge_slave_1: left allmulticast mode
[   86.594681][ T7224] bridge_slave_1: left promiscuous mode
[   86.597592][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.606395][ T7224] bond0: (slave bond_slave_0): Releasing backup interface
[   86.620440][ T7224] bond0: (slave bond_slave_1): Releasing backup interface
[   86.640304][ T7224] team0: Port device team_slave_0 removed
[   86.650481][ T7224] team0: Port device team_slave_1 removed
[   86.653758][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.657031][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.664326][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.671300][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.854013][   T10] cfg80211: failed to load regulatory.db
[   86.949330][ T7234] netlink: 148 bytes leftover after parsing attributes in process `syz.2.559'.
[   87.285231][ T7251] netlink: 'syz.2.567': attribute type 83 has an invalid length.
[   87.881597][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'.
[   87.892616][ T7285] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 34650 - 0
[   87.896576][ T7285] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 34650 - 0
[   87.911100][ T7285] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 34650 - 0
[   87.915185][ T7285] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 34650 - 0
[   87.920520][ T7285] geneve2: entered promiscuous mode
[   87.923001][ T7285] geneve2: entered allmulticast mode
[   87.935263][ T7288] syzkaller1: entered promiscuous mode
[   87.937516][ T7288] syzkaller1: entered allmulticast mode
[   88.181248][ T7300] netlink: 'syz.0.586': attribute type 9 has an invalid length.
[   88.184665][ T7300] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.586'.
[   88.423018][ T7314] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   88.442727][ T7314] netlink: 44 bytes leftover after parsing attributes in process `syz.1.593'.
[   88.558209][ T7333] bridge0: port 1(team0) entered disabled state
[   88.603767][ T7339] netlink: 'syz.0.603': attribute type 21 has an invalid length.
[   88.639866][ T7342] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   88.646261][ T7342] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   88.949515][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   89.054015][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.621'.
[   89.449751][   T33] audit: type=1800 audit(1752097933.521:2): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.633" name="memory.events" dev="tmpfs" ino=1056 res=0 errno=0
[   89.458259][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'.
[   89.622568][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.643'.
[   89.946453][ T7460] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   89.957169][ T7461] openvswitch: netlink: Message has 4 unknown bytes.
[   90.363303][ T7497] netlink: 'syz.2.669': attribute type 1 has an invalid length.
[   90.366693][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'.
[   91.164851][ T7538] netlink: 'syz.2.684': attribute type 4 has an invalid length.
[   91.280005][ T7546] netlink: 56 bytes leftover after parsing attributes in process `syz.0.688'.
[   91.283622][ T7546] netlink: 56 bytes leftover after parsing attributes in process `syz.0.688'.
[   91.289377][ T7546] netlink: 56 bytes leftover after parsing attributes in process `syz.0.688'.
[   91.744006][ T7582] netlink: 'syz.2.704': attribute type 14 has an invalid length.
[   91.839108][ T7597] netlink: 'syz.0.709': attribute type 1 has an invalid length.
[   91.881341][ T7597] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.895132][ T7597] 8021q: adding VLAN 0 to HW filter on device batadv1
[   91.898790][ T7597] bond3: (slave batadv1): making interface the new active one
[   91.903614][ T7597] bond3: (slave batadv1): Enslaving as an active interface with an up link
[   92.155365][ T7627] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   92.460431][ T7647] netlink: zone id is out of range
[   92.462725][ T7647] netlink: zone id is out of range
[   92.465090][ T7647] netlink: set zone limit has 4 unknown bytes
[   92.733555][ T7669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.396910][ T7725] __nla_validate_parse: 6 callbacks suppressed
[   93.396930][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.769'.
[   93.697510][ T7747] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[   93.715437][ T7747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.783'.
[   93.735035][ T7757] netlink: 'syz.1.785': attribute type 11 has an invalid length.
[   93.826794][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'.
[   93.834327][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[   93.914059][ T7774] netlink: 96 bytes leftover after parsing attributes in process `syz.2.795'.
[   94.144351][ T7794] netlink: 'syz.2.802': attribute type 11 has an invalid length.
[   94.147695][ T7794] netlink: 'syz.2.802': attribute type 4 has an invalid length.
[   94.180066][ T7794] netlink: 224 bytes leftover after parsing attributes in process `syz.2.802'.
[   94.552571][ T7819] netlink: 'syz.2.811': attribute type 9 has an invalid length.
[   94.570146][ T7819] netlink: 'syz.2.811': attribute type 6 has an invalid length.
[   94.573638][ T7819] netlink: 'syz.2.811': attribute type 7 has an invalid length.
[   94.640802][ T7827] ieee802154 phy0 wpan0: encryption failed: -90
[   94.697691][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'.
[   94.740691][ T7834] netlink: 52 bytes leftover after parsing attributes in process `syz.2.817'.
[   94.758325][ T7836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.907238][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'.
[   94.912740][ T7851] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.823'.
[   95.370536][ T7885] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   95.595813][ T7903] validate_nla: 2 callbacks suppressed
[   95.596083][ T7903] netlink: 'syz.1.843': attribute type 1 has an invalid length.
[   95.829719][ T7920] netlink: 'syz.0.852': attribute type 2 has an invalid length.
[   95.951459][ T7932] tipc: Started in network mode
[   95.953311][ T7932] tipc: Node identity 02c59f0a9979, cluster identity 4711
[   95.955890][ T7932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.961718][ T7932] syzkaller0: entered promiscuous mode
[   95.964091][ T7932] syzkaller0: entered allmulticast mode
[   96.000240][ T7932] tipc: Resetting bearer <eth:syzkaller0>
[   96.005726][ T7931] tipc: Resetting bearer <eth:syzkaller0>
[   96.019060][ T7931] tipc: Disabling bearer <eth:syzkaller0>
[   97.138729][ T8002] netlink: 'syz.0.890': attribute type 2 has an invalid length.
[   97.335293][ T8014] xt_l2tp: v2 doesn't support IP mode
[   97.997737][ T8043] netlink: 'syz.1.909': attribute type 1 has an invalid length.
[   98.175109][ T8055] netlink: 'syz.1.915': attribute type 2 has an invalid length.
[   98.318601][ T8061] tun0: tun_chr_ioctl cmd 2147767521
[   98.803942][ T8084] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   99.397706][ T8122] netlink: 'syz.2.946': attribute type 1 has an invalid length.
[   99.766110][ T8154] __nla_validate_parse: 8 callbacks suppressed
[   99.766121][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'.
[   99.814878][ T8158] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  100.151578][ T8180] netlink: 56 bytes leftover after parsing attributes in process `syz.2.970'.
[  100.158631][ T8180] netlink: 56 bytes leftover after parsing attributes in process `syz.2.970'.
[  100.414355][ T8197] netlink: 1 bytes leftover after parsing attributes in process `syz.1.978'.
[  100.460693][ T8201] netlink: 5 bytes leftover after parsing attributes in process `syz.1.980'.
[  100.676465][ T8219] bond0: entered promiscuous mode
[  100.678681][ T8219] bond0: entered allmulticast mode
[  100.681828][ T8219] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.939145][ T8239] syzkaller1: entered promiscuous mode
[  100.941808][ T8239] syzkaller1: entered allmulticast mode
[  101.050981][ T8245] netlink: 428 bytes leftover after parsing attributes in process `syz.0.998'.
[  101.563224][ T8271] sock: sock_set_timeout: `syz.2.1009' (pid 8271) tries to set negative timeout
[  101.601165][ T8273] syz_tun: entered promiscuous mode
[  101.602992][ T8273] syz_tun: entered allmulticast mode
[  101.607066][ T8273] syz.2.1010 (8273) used greatest stack depth: 19960 bytes left
[  102.111682][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'.
[  102.115391][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'.
[  102.201800][ T8299] delete_channel: no stack
[  103.487951][ T8334] tun0: tun_chr_ioctl cmd 1074025675
[  103.489773][ T8334] tun0: persist enabled
[  103.497151][ T8334] tun0: tun_chr_ioctl cmd 1074025675
[  103.507949][ T8334] tun0: persist disabled
[  103.541608][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1039'.
[  103.758435][ T8349] vlan2: entered promiscuous mode
[  104.091334][ T8367] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1053'.
[  104.264294][ T8385] ieee802154 phy0 wpan0: encryption failed: -22
[  104.336194][ T8394] batadv0: entered promiscuous mode
[  104.340413][ T8394] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  104.347086][ T8394] batadv0: left promiscuous mode
[  104.851807][ T8444] __nla_validate_parse: 2 callbacks suppressed
[  104.851826][ T8444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1090'.
[  104.856971][ T8444] netlink: 'syz.1.1090': attribute type 1 has an invalid length.
[  104.859059][ T8447] netlink: 'syz.2.1091': attribute type 13 has an invalid length.
[  104.903450][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'.
[  104.906390][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'.
[  104.911100][ T8452] netlink: 'syz.2.1094': attribute type 15 has an invalid length.
[  104.917287][ T8451] IPv6: NLM_F_REPLACE set, but no existing node found!
[  105.192288][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1106'.
[  105.331418][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'.
[  105.688313][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1128'.
[  105.747261][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1130'.
[  106.077505][ T8568] xt_CT: You must specify a L4 protocol and not use inversions on it
[  106.435389][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'.
[  106.443874][ T8597] macvtap1: entered promiscuous mode
[  106.445751][ T8597] erspan0: entered promiscuous mode
[  106.447811][ T8597] macvtap1: entered allmulticast mode
[  106.451155][ T8597] erspan0: entered allmulticast mode
[  106.490308][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'.
[  106.541944][ T8622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1144'.
[  106.800251][ T8643] veth0_to_bridge: entered promiscuous mode
[  106.803101][ T8641] veth0_to_bridge: left promiscuous mode
[  106.953335][ T8661] ip6gre1: entered allmulticast mode
[  107.032252][ T8667] netlink: 'syz.1.1161': attribute type 1 has an invalid length.
[  107.078069][ T8669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.490837][ T8697] SET target dimension over the limit!
[  107.540018][ T8704] netlink: 'syz.0.1178': attribute type 9 has an invalid length.
[  108.197069][ T8758] netlink: 'syz.0.1204': attribute type 29 has an invalid length.
[  108.286605][   T33] audit: type=1800 audit(1752097952.351:3): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1207" name="memory.events" dev="tmpfs" ino=2066 res=0 errno=0
[  108.302233][   T33] audit: type=1804 audit(1752097952.351:4): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1207" name="/newroot/407/memory.events" dev="tmpfs" ino=2066 res=1 errno=0
[  108.625112][ T8790] netlink: zone id is out of range
[  108.643597][ T8790] netlink: zone id is out of range
[  108.646191][ T8790] netlink: zone id is out of range
[  108.656539][ T8790] netlink: zone id is out of range
[  108.659909][ T8790] netlink: zone id is out of range
[  108.661975][ T8790] netlink: zone id is out of range
[  108.663958][ T8790] netlink: zone id is out of range
[  108.666295][ T8790] netlink: zone id is out of range
[  108.670824][ T8790] netlink: zone id is out of range
[  108.731279][ T8797] xt_SECMARK: invalid mode: 0
[  109.145247][ T5881] Bluetooth: hci2: link tx timeout
[  109.149762][ T5881] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  109.680930][ T8862] bridge0: port 3(gretap0) entered blocking state
[  109.683242][ T8862] bridge0: port 3(gretap0) entered disabled state
[  109.686681][ T8862] gretap0: entered allmulticast mode
[  109.692400][ T8862] gretap0: entered promiscuous mode
[  109.998173][ T8888] netlink: 'syz.2.1262': attribute type 3 has an invalid length.
[  110.416336][ T8922] gretap0: left allmulticast mode
[  110.420198][ T8922] gretap0: left promiscuous mode
[  110.423247][ T8922] bridge0: port 3(gretap0) entered disabled state
[  110.432261][ T8922] bridge_slave_0: left allmulticast mode
[  110.434902][ T8922] bridge_slave_0: left promiscuous mode
[  110.437466][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.450784][ T8922] bridge_slave_1: left allmulticast mode
[  110.453154][ T8922] bridge_slave_1: left promiscuous mode
[  110.455701][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.471322][ T8922] bond0: (slave bond_slave_0): Releasing backup interface
[  110.481005][ T8922] bond0: (slave bond_slave_1): Releasing backup interface
[  110.491482][ T8922] team0: Port device team_slave_0 removed
[  110.498903][ T8922] team0: Port device team_slave_1 removed
[  110.510180][ T8922] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.515306][ T8922] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.723400][ T8939] bridge3: entered allmulticast mode
[  110.860577][ T8955] __nla_validate_parse: 4 callbacks suppressed
[  110.860591][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'.
[  110.921427][ T8959] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1296'.
[  111.051823][ T8966] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1299'.
[  111.091407][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'.
[  111.094508][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1300'.
[  111.194567][ T5881] Bluetooth: hci2: command 0x0405 tx timeout
[  111.452141][ T5899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.456824][ T5899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34650 - 0
[  111.527264][ T5899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.530801][ T5899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34650 - 0
[  111.573899][ T5899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.577256][ T5899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34650 - 0
[  111.692781][ T5899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.696212][ T5899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34650 - 0
[  112.000770][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.003962][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.006876][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.010421][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.013044][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.172785][ T5899] bond0 (unregistering): Released all slaves
[  112.186892][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'.
[  112.285835][ T5899] tipc: Left network mode
[  112.469986][ T9028] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1322'.
[  112.622882][ T9006] chnl_net:caif_netlink_parms(): no params data found
[  112.762104][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.770776][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.774117][ T9006] bridge_slave_0: entered allmulticast mode
[  112.778413][ T9006] bridge_slave_0: entered promiscuous mode
[  112.791377][ T5899] hsr_slave_0: left promiscuous mode
[  112.794299][ T5899] hsr_slave_1: left promiscuous mode
[  112.805823][ T5899] veth0: left promiscuous mode
[  112.807800][ T5899] veth1_macvtap: left promiscuous mode
[  112.812179][ T5899] veth0_macvtap: left promiscuous mode
[  112.815514][ T5899] veth1_vlan: left promiscuous mode
[  112.817627][ T5899] veth0_vlan: left promiscuous mode
Connection to localhost closed by remote host.
[  113.662199][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.665287][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.669331][ T9006] bridge_slave_1: entered allmulticast mode
[  113.673068][ T9006] bridge_slave_1: entered promiscuous mode
[  113.989995][ T5899] bridge_slave_1: left allmulticast mode
[  113.992399][ T5899] bridge_slave_1: left promiscuous mode
[  113.995788][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.003154][ T5899] bridge_slave_0: left allmulticast mode
[  114.005546][ T5899] bridge_slave_0: left promiscuous mode
[  114.010565][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.104925][ T5899] bond0 (unregistering): Released all slaves
[  115.842492][ T5899] erspan0 (unregistering): left allmulticast mode
[  115.844836][ T5899] erspan0 (unregistering): left promiscuous mode
[  116.250977][ T5899] bond0 (unregistering): Released all slaves
[  116.262206][ T5899] bond1 (unregistering): Released all slaves
[  116.270179][ T5899] bond2 (unregistering): Released all slaves
[  116.329104][ T5899] bond3 (unregistering): (slave batadv1): Releasing active interface
[  116.332810][ T5899] bond3 (unregistering): Released all slaves
[  116.409501][ T5899] tipc: Left network mode
[  116.591320][ T5899] hsr_slave_0: left promiscuous mode
[  116.594854][ T5899] hsr_slave_1: left promiscuous mode
[  132.550038][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.552116][ T1362] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
21:52:47  Registers:
info registers vcpu 0

CPU#0
RAX=2142400d5afe2f00 RBX=ffffffff81975d58 RCX=2142400d5afe2f00 RDX=0000000000000001
RSI=ffffffff8d996d10 RDI=ffffffff8be28fc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1def0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffe048b1a8 CR3=000000002925a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000a25a5c3 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=baed85a4be19bd00 RBX=ffffffff81975d58 RCX=baed85a4be19bd00 RDX=0000000000000001
RSI=ffffffff8d996d10 RDI=ffffffff8be28fc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555d171e47f0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000000000 0000000031564544
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffffff00000000 XMM09=0000000000000021 00000000316e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
