last executing test programs:

1.516942549s ago: executing program 0 (id=7500):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4)
sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800)
socket$kcm(0x29, 0x2, 0x0)
unshare(0x24020400)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x19681}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0xffffffffffffffcf, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400195a8563e43c12f461560a8447600000000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e0000000000000059", 0x49}], 0x1)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700182c00fe800000000000000000000000000000ff0200000000000000000000000000013c00000000000000c2040000800100008100907800000000c02c2e55cdd6abbb86360b643dac7c2b1715df088729dd321f83e6adf76072da80d3eab591a76e434ef53dbca3ee782bb6e9e891045d6fbd8ed9c958edbef35f4533e8ec20af11503a435a5351307ed0a6971e20ab535c608bf977030d552f9ad966d256f9eff247820bd717713d2cd67802808e352ddc35"], 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
close(r4)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)

1.51608822s ago: executing program 2 (id=7502):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000080)={0x3, 0x4, 0x1, 0x40, 0x1, 0x0, [{0x8, 0x8, 0xa827}]})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="997425bd7000fbdbdf2509000000000000000d006a49337863e404e0f801d687847f00000000320800000015aebe2f27807e2ae9f5f41b4117183147ba643b2cb59e5dfbab8cf832a070f23e039dfab6c493aa234d723a4af50c96d43f09543a82d18e5d58494a85b3ae1750dbada32d92fbf85c67bf246069a25f736fb2d93bc0e35a5d2736c430300534c64e75e20442266e667c7e21de561f33e73922cf2e19fc87a83efba7277970961f53e8d53c0fcc40f06133e72bc2201c952a5f5b811df254194e739abbff0c6c78a266dde7bd2038cf288ee12425ce07ee73283a2d60a9ee534afcd8a31a2a9380cd6af3532e6357"], 0x28}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000)
pipe(&(0x7f00000001c0)={<r6=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111bc000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffff9}, 0x94)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98)
splice(r6, 0x0, r7, 0x0, 0x80, 0x4)
ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000040)=0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r3], 0x20}}, 0x4000)

609.797037ms ago: executing program 2 (id=7509):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x38}}, 0x40080)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r5, &(0x7f0000001c80)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x2, @private1, 0xa}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000000300)="92829d2878c403975bc8f9e238", 0xd}, {&(0x7f0000000b40)="aaefd31c082c1857f7f71be28657276e1f063b9e31d94569234f5537897647fe4625d95818905950c004924e65f65f00e0cd8bb88333bd064f9b79d95f0ba1ac1b503cbf80f22f106cefccd3537008b58edc2ccf5651a8ec7a9f818d7e3050ad0175451a76359b0f27ffad1c5aed63e83ed826069b7c12bbe81d98185ba10a7b0b3a6a10c7c482a5e76724ff8033879f29b6692ab4b5284975a613d6a4c4ac8238eea6d451e62bb88945083a9262ba3b2c887a273b3eac3ab11418bbfb216bd4f56ad7b4aa4c3cf809c8c022f13b066ea31b5392042ee8773e26463b56785b63b30765016e27538f5fd3fded4b82a040320030df5e939424804498220e516a8663bd2ab80721cafdd6872d09b56660c510e552f312def1f0c12886dd670b79d9d1762ad66121a1da8240aa69355bd28738a926c6e79fedff037491bd5a9a04dd58d7c5b20a6a15bc9baa08ac0df4b0ace817b150627796e2736826aa6638927b1df314fe3749ad05992537bd92f3ecae2aa237ce8dfd34ad47dcd029e6e08443527a02ca03363526cb7e8f8283e5418ebdf60cd358e2b1226e0d29c39e3a1b1a707868c1d312f95cef835e4ff246eca3c7efd0438bf7fc8ac883f47db83db857222b2aa09dd21c48309f39885a32aef43ec7ccae4cd6588952c5939e0ff605f290c84f2933fc896639c3bfd6946c22440891fdb6ff6466df7e3dbe5add9dfa0cf6aa46d119fa8e06249ada848c19025f63c77c048e0b586d9c5d1b2187ccd97f5c51b968e91ded71c4154800c2ead87d3b0a496a96b421a93dbd4622c94d858c5b9c9638e683e9c24474234a1031a79760f6ff3d770d017185948d415c8acb5a9cbb33ba7d7bcf8dda8e4bad028da7b281589146d77cb3d055ee5cc034daf232d403fa505ee64df4b1da2a362046e06510dd3385fdc03d85c24558ef8d25915cdefab58dc687f21d113ae17c33a7f0aaf69c47be127bff74fb7010dc8043f3ee180d0a46782607238976a04f6a1b25f62f4831c51cb08d0565c9b8942965aeb92ea9d79472ce7b40f076c414d296962fa9f9f203de5b45fe0c4d9a639a41ee5a33ae654f9c2b1def24867850bd97d8269570d18210c535401b3d56d6a5f8edf7ca3a7c2750cb0361365d7f0c5d8e3b7c9bafe3bd97d2952c980a519e791e4d8b84a10cb792ea43807c3aaa91a56a8eb88c8b7cf5cb7aa76a07dc96329c7bb80b548baf065f410ad8f8b29d42a8bc50dc40efaf45986f6b91b5606cb2b87c667829ac2ff36878573511ff58911c07612adbfac9e1ef4ce65169439885d02424393cd68f3def137dd82fcaf165e43dd17a738f4b18055c6a668638e548b5c6220d9d0b9b7f08c0819999332ea3cf6cf21d9050dc9743acd44e005a9f862fef5f7771321335fb52d65983f54b3c796af36caf3b7d2f7623f1ea4e1939634eeeb106a812bbc515d7b835826a9c8ca987e4b64a03f2f04699b6e6731904318d75eefb51bf116f542c0d66df54c5b10954ec2cbe97e9c8fea9545527c9fb8e036381cc44ead816ba2038cff057e0e50a9b62561c82570c1cf8c9c2bd3a95872e9f778462d35d95f05981cc04e161224b9eda1bd3d18f3d11b7aea73514d4250f813cad2df957996386e12fa6fd612f9c90f9a2837216c6a7892294f3572122dfa294bcc77233b064d90f2bc58c8ea9b778bb84303c14074bf184026dbc0b4df0af986d36a64ac893d5e945f5d1e5e8d65c78a3662f5272fcbc90d688f6f4637dc19ec6208aa03b7e91a185282b91bfcd10557055a5b711f639d7989edbe5d8610bc7d16665c943b7684102252f966d0a3e98a8a3f0d1cd41154bb3a692471dd09d75fdc454496a174dbc405c13686e4cb36c1e4483852e1fe231732f98e9ef16b70e1bd5962b5b977ae945ccebdece259a932bc537eeb772ff1f451c8abb7b27f9f6950582d2f3373ae7ed49368a531e07c60cf534556d5b25999d095bb8061a3896a4564ff9df091519e404b42131b44afed85c11b7ef6cf8b37939f89bda4dea1c7e438f2aa8b0eb099ecf9de9c78c6d5a21484367fe2b0c4316085cbe2a246f831010e042734855c97db40bffb30a418bd85ce5ece338ff669ea561849e643cd4a24f9622baeb53f2a2d5e088116bdeec7ac1ea6c908865e20ac9c0b061e4f1499246e5e3a724741107639041c91633853a61b17ece9f21cfc73b0a774b332c4c35b43e6fda8dc2aee5e7d4361689c2ba064ea0eb8d17eb9cbd9afc9a975eac2add5057b98180f53bb5697bd4635a0a23bd5653c5a17f8864375f064e2dbcd6a03b3d81fd048e2b35a1b0b91764030bb04199f773188cee215a064d6718c80d0218cc06a4a99a688c79f2cf0cc15b0765553c3f18f7895d6b40ae00422495351642c235287110a4c7a4d11adea676b04039019a9b46a079adc7d96525176603f2bdf4a5d95757acd948f8697f09c9ff8b56e19f1e542bf7fcff9188310e3546efb9d2b47f4f6a192e0c9c0690212f5ede5714665cca440de7e5faf70367b3ff9bb4ecf49bd16a9790a797576967da9f767ace5bec2e99a8767fc46fdd3278afa1bbe1ab7a12a38966c49920f24ea7acd0b36406b16c961e9936dcdb38b3d82889db90eedc6a1eb871c4e82cbc67a8b41c80830868afba588eda914e54356e21db8a231f967c0ac08b8967f573596b557f442c0f4f3e19dadfdb34f7d6e70278097495e3618a66492e7d6d6ebcb4cb342c469b5135c38bccdcbc11dbbf237969223aeb679baf7173a2372c8ccf68be2860dc7ab0ec9b712feae32f8c9605a06d4645bbd38dd3818866f6fe64b8441f2d10e7f24a13347df149e3a4b0709a425fa4e1a6da7f276945dc00b3b2bae558331e4bca89a4eb471d93680538e1de0b4bdd22e73e0f0cb54eacb782e3bf8fd50e21e3f854f2c6deaead980455828ed75daf875a11cf348363262b8ac323e7740488fea1cd8eb31109280c261dbf578a7c4e1f4986c19cbf88c16f1764eca392c5a24ac6fd7f64cf01c33a85998da059f246636566b08d23cc5ff26ad2176a68f45c3c3ca2ee369ed988c694df41a685b88a33839be9dd01c8bfc6b06a0e5faabd7e5715817079750206c97907061a60f6127c9e55d3b5b9c7824537e63e192d9c27788db1081a38d5aa023e7bba8b3e5f649e5d78b47bc6a6d19a9d46f1991050aedf3d2fec1ac1a2e36d44657c80522245ddee96f3ae9d0a6b3bb2b072cba1a7b5e021bed10884d4858a01f6d64f1b6f76e181f3fbb4900ec26483e3de578e4c85debc8385b0856215851ca8fb2693c8cc1589d1ab4a72b7f6a502835f4b8d62b391267865fb2c8062b7b4bcd1582e63be5ab3211df8cd4016c413b63eeeb669d36286a55005a9a76dbb671acc9fa22d7a8f3e61cfe9fb60a95a91ef00683fd06c15be519449369a4c23614705901a09b03ee8b6b492c0059e21e7872de853556bee39340880fb9aff9ca1e81de78833990f45f1ec8f32e7c7eff5356faecf7c76958507048d0e48a113938b1bac3b09264b98242e13dac35f12f7b1d425e1bda490adadb6ce55a5810592732ef31219c543c29fba5263f02050dc001a48b57e69e12f23597f7b79c67d1672d4eb35c3e2a047bc6e437b270cb217d05e95787b4cf0926e8e6ce37af2f1f01ae87fc5d49140b24a560638ec5914e9d4ec1a53a4b0be5f9d06293cbc9b9a56721da1ab3144596ca59fcf40088116696ea12a8b4caf89e4570d641660a91bfdf4954a3a938cbba095b10653555ef09e26aaa2aec41172e33128ad97a8f8adb0147dd7c5ef57c6268d8518ac5cc5d6e6842f7994a207510c766ac69ce811c43fa6dfb865a175b475fad0c708bc0916008d8bafad2a7d5f0dc556bb90f5214c8883d6c9a115dfdbfb3594285a6d3a0ce6aaf684a1984663ed875acced6289f4f2395859de6bf1272c978ab897156b316fa1d3d9b09170dac5321830546ab99a58e21b7a3ec7fa073602d91347fdbffe63558b02885c3c705150d6a718262a4a2dd25c9df5dd1aaa6847e95412b5158f38e2b3f9cf73b3ce709e6418a91b5a9d7966553e3c99819e55534ca433a7f84d4bc83ebe49601166183dad24a3c693820d40bebc9a012e307cdf0b9d73d8c52dffdc4c2396bf71483e2546376869db7b999a4c3e6a7ad99a448e7c9b658e4efa300f5f0a3a79807d3f8c88b2980f137992b8dd5ddc53fcba73296f3706b2ad257b7e9595223903fc59c6007a6f76787031cd2d2edd27b9bcc1dcae511b3950b33b88eb15990d2b9e2c907ecac2a6919c54eb3b108d51d62e19a1191ad28b84717c1f22abaf495a2b5b3417865396b10d198d885b0c49a1b6ccb1c24a171c59afd0c891eaf7b55d7f0f3b90e75be910528a7f02c70bafa7d5947f63b16a783822fb01f73d5b996dc8571f153ffa94baa80367d5c61394b7766e2af1c808c96c369e93ae0abda67ab0c2afd3c71ef9250ebf1fb473822b0059228780294caf78ab526cd63638e6f2c09e0a4bef1865cab647e85b11f728002492942c7e24c27dc55085b59fe21a3839384bb7b8570029a46d4eb10a3c7ed3ec23df5cc9ba19257ce834e268aa8bdce012808e8697b0ceaa1910c8d028aef4a4910bcc53d0ce671697dc6fdcf2ee9a9ceee98a46fa14e700c7b960b104f1d4512cb2a82b27887d77218364d0b395a3e3a58468b503e44fc4175bd8874c24fecf252cfc20425dadb29ba53d35868aa9ae7c226d52403868e132a6913200d79058b5a363ea5595f5f7fd8003a35f5112955def4c5114f46c2a5b545bd6a84dc09a5fe1d8ad5466c62a49d6408657846f7ca9865a4632c264c519b90eecd2b8adb1b29cc21bc4ddf788644b223ccfbf9b52a9f92e994f76faa57daf09cb1352905b07885f5ea42ef50398fbe12a84abf771c3f7add69a7e60f72ba6c4f23863b98e8d84efea604f4e756dab0cfb6a4ee4eb2ad103ff8f4e9c32bda6f17c6ad8bc58c01d1d015e5dddce8766335f909af732cad84335bdac4a00b1e31ada56cc89df2b6a85f0d5480f181026c49b2a856f13deb565413a3a011030fee14123b050160c14bb6f68b109cb43adf0fac05020589625a66c97bacdde7fc9d41a5d3f476a8b2a74898c91eba46a1ebb2b402b75bde9336e2691e63249e2389191f536802c36760a1edc9965e94a7d000a2002781ccf77672b430673e0b7d1324dcff83b3c2e6bd171628b71348daaa405a12f38bcec42841d04d530820766132deb779430d20dab99128898f6a775ec6564811ae87b1dc759f35fd6f86b6dc1f4bf3c21659bb4bfb6a007b4fe8bd9b08298b3147c3d614b0de4855e0e95211e8f276ba70773abfa50af07f9ee9e93dd2a635c995b620b0d3667291325b6e2772b8791be89c7f75667f83a719a866682fdf58f06c12ae322ddf1feed7c66c231001afd7292f23a7e1f5a5fb7e94412668bccff9062979b9a531f375b23db0c7e19a9b4f4b2646379773bfed164baefa5c609f8dc355415716e9d7492b25ecbcfc01c147da170925f95ae0e5e53cd46094526981925b09f2c0d022c5d7d4422044c2e1ed29d48cc98aa88f0b80e85f507b8d878a7b75f9bbe11a9cb6da4da1edda4dc3288ed60502dd9b3facc2e020b09727ffd0cf11f1e5ebf8d7fb2f34a024b95b2251c7ac953ca1cbfb9891fcfacf319792fb9cbebf6faf27804cccdb89ac5823a4564c619ff7c10ebdc0dc25ab75dee4ec2be5101a24549c6aaad779ea85ef07df3b7a1e3c26ab2645c2dab20970dfcd67f02818174cdf1e658329c404a58bb61ae1d93", 0x1000}, {&(0x7f0000001b40)="832c40745a2873bd9c4effe99c63f63a0d6ef6927490368fd16488585180b59cf9b0fd05e2890f6b0eb3a0e6bf8aa798362385ff8248d5cafc9392d708a0da0646b7ad8ca2d92266f9468c285c56d5d399d0af1e8e51ae872cf577af263a6b0e94be0cf7a02a351dc49d4f7769c3ef382f6556ce38d85a1065f71fe332e2d4244aa3956fd8c3954a1ed051ef7121cf76bec0e643ae67949cffa9ff2a4368293d3b58f268fd704a0c6c982a41ebf2317f0e22339941f101f9c312b46ce736bd675d7eea3859785c9f67b272025109", 0xce}], 0x3, 0x0, 0x0, 0x20008004}, 0x40014)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@initdev}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000700)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
pipe(&(0x7f0000000580)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup=r7, 0x1, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0]}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
unshare(0x2a060400)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r12, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x1000000}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}}, 0x884)

608.795208ms ago: executing program 0 (id=7510):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) (async)
connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)

544.978431ms ago: executing program 2 (id=7512):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={<r2=>0x0, 0x682, 0x1, [0x6de2]}, &(0x7f0000000080)=0xa)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x8, 0x6}, 0x8)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='geneve1\x00')
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000140)={{0x5c, @multicast2, 0x4e22, 0x0, 'ovf\x00', 0x3f, 0x7, 0x60}, {@empty, 0x4e22, 0x0, 0x1, 0x3, 0x4}}, 0x44)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000001c0))
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=0x4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8800)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)={0x0, 0x39f, 0xae, "b692cf1b2be1cec9a15466409d09bae1ba9899293e1e25ea38111fba3f9add3522848f581aa714fd397d9a30f274a825572296afee0b953f7b68e19d610d75cbf0f20c94560d573b23d46cad0f2d427648b941047deb3462935b02ced33e43751edb319b1804bf3e8bb430164d4e282a71942e5b8a6d4fbf035f3128d57de8bdb2dbbd7919c830f2d2939eb1040940360a9bcadf69fa3909b8ee77d63f3826306aae413201000206a2aec752c22e"}, 0xb6)
r4 = socket$inet(0x2, 0x1, 0x4956ca4f)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000004c0)=r5, 0x4)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x0, 0x1, 0x4, 0x7}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={r2, @in6={{0xa, 0x4e21, 0xf, @mcast2}}, 0x5, 0x1f93, 0x101, 0x8, 0x80, 0x7fff, 0x8}, &(0x7f0000000640)=0x9c)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000000680)={'caif0\x00'})
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000700)={0x1, 0x7, 0x8})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000740)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000880)={{{@in=@rand_addr=0x64010101, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x4e24, 0x7f, 0x4e22, 0xbf, 0xa, 0x80, 0xa27630569f22b28d, 0x3c, r3, r9}, {0xffffffffffffffe5, 0xfd7, 0x4, 0x7, 0xfffffffffffffffb, 0x9, 0x2000000000000000, 0x4}, {0x90, 0x9, 0x49f, 0x7}, 0xbb, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}, {{@in6=@loopback, 0x4d6, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x3501, 0x2, 0x0, 0xa, 0x101, 0x6, 0x7}}, 0xe8)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r10, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r11, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x42}, 0x30004801)
socket$kcm(0x29, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080)
r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r13, 0x112, 0x7, &(0x7f0000000c40)=0x1, &(0x7f0000000c80)=0x4)

479.903146ms ago: executing program 0 (id=7513):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x38, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x38}}, 0x40080) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100003040000000032147f00"/26, @ANYRES16=r5, @ANYRESOCT=r3, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
write$tun(r7, &(0x7f0000000ac0)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local}}}}}, 0x62) (async)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r10, 0x4008af60, &(0x7f00000004c0)={@any=0x1000000}) (async)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
unshare(0x2a060400) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r12, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) (async)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884)

389.729747ms ago: executing program 2 (id=7514):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x6000000, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0xa)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000004c0)={<r5=>0x0, @in6={{0xa, 0x4e24, 0x400, @mcast1, 0xf}}}, &(0x7f0000000580)=0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000005c0)={r5, 0x242c}, &(0x7f0000000640)=0x8)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xff6d)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', r3, 0xffffffffffffffff, 0x5}, 0x50)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r12=>0x0})
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r13}, &(0x7f0000000240), &(0x7f0000000340)=r14}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r14, r12, 0x25, 0x0, @void}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

385.758949ms ago: executing program 1 (id=7515):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000b40)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000005c0)={0x3, 0x5}, 0xffffffffffffff69, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r6, 0xa05, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x38, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x38}}, 0x40080)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000340), &(0x7f0000000400)=0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r13 = socket$can_raw(0x1d, 0x3, 0x1)
unshare(0x2a060400)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r14, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r15 = accept(r13, &(0x7f0000000600)=@phonet, &(0x7f0000000680)=0x80)
getpeername$l2tp(r15, &(0x7f00000006c0)={0x2, 0x0, @multicast2}, &(0x7f0000000700)=0x10)
sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x884)

345.903009ms ago: executing program 0 (id=7516):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x38, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x38}}, 0x40080)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
unshare(0x2a060400)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r10, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884)

265.678045ms ago: executing program 2 (id=7517):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x38}}, 0x40080)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000045c0)={<r9=>0xffffffffffffffff})
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040090}, 0x44004)
splice(r9, 0x0, r8, 0x0, 0x8000, 0x0)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xc, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7ff}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000340)='GPL\x00', 0x1, 0xc7, &(0x7f00000004c0)=""/199, 0x41000, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x9, 0x5625, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff, r6, r5, r9, r10], &(0x7f0000000900)=[{0x3, 0x1, 0xb, 0x5}, {0x4, 0x2, 0x2, 0x6}, {0x3, 0x3, 0xf, 0x3}, {0x5, 0x2, 0x4, 0xa}, {0x5, 0x4, 0xc, 0x7}], 0x10, 0xd281e47}, 0x94)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
unshare(0x2a060400)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r15, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x4c}}, 0x884)

264.732626ms ago: executing program 1 (id=7518):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x6020400) (async)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00')
unshare(0x2c060000) (async)
close(0x3) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)

262.489669ms ago: executing program 0 (id=7519):
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x306, @multicast}, 0x0, {0x2, 0x4e20, @local}, 'dvmrp1\x00'}) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
close(r1) (async, rerun: 32)
r2 = socket(0x10, 0xa, 0xfffffffe) (async, rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r3, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "7fb1d41a81e19daf", "242977b01fe64d015d009e2718f0a544", "30cb9ec2", "6630e17bb1c74bac"}, 0x28) (async)
setsockopt$inet6_tcp_int(r3, 0x11a, 0x3, &(0x7f0000000100)=0x7, 0x20)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
unshare(0x22020600)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, 0x0) (async, rerun: 64)
sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) (async, rerun: 64)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x30004001) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="77016717f34e190e5cbc78298baa6a1400000024"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a3100000000060002408809000014003fde97e6c68878f46e124bf53d97190480080007400000040608"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r8, 0x0, 0x0) (async, rerun: 32)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) (async)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000200)={0x3, 0x2}) (async)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

208.74381ms ago: executing program 1 (id=7520):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x14, r3, 0x1}, 0x14}}, 0x40080)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg(r0, &(0x7f0000001d00)={&(0x7f0000000300)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000004c0)="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", 0xfa}, {&(0x7f0000000600)="73c4469372a6bfe27350c04d1d2145ff66e18b3bcde8d439dc0e85d5847d5fcd3dd05e0d752872cf750739209e418b122cc8c0380e21a37972e4c287e4b56c4ca83b4c483ad8df46f895e95515fd34c50ecf80ae62ce255432e8b26a4629c288c24247e4c9249d265e1d417767ca8471e5f65dc0b77f37869ffc0a19b9297b92732349bf84f3d6eea9043e005b8829aafbd4f99068", 0x95}, {&(0x7f00000006c0)="53f242195ad1921f3b55d265328cfe3d2c214cf37f96a9706ee9e34c161ea0d58d317797e017583ccedd03b1b46ecfb99a4eef22fcf07fed69487ce6a97a54f78645fa1fb1537040116774b0f0abe41e024c2aff793f06da1f990aee683b68b8a5839fe35b3111b34304137db98505", 0x6f}, {&(0x7f0000000740)="1a17ee381249b1289b3337977e36d83852ddb6a2460df9e76b1629eba412bd05493aeaf08255899361c163a8860864a0eac838b935a1df73ee0bcc8563f202d477660deaa7aa7677a13dc39a3b368f2139739617a50cf3092ab07247c2b2233eda3c6f0f5bcb006007e3b470787e85ff2b2ac662ba8bb444ba83427aa7399fa014c1d6c1580628cff31287f3b2f598bce0a20dbb22ffbebff67d41c181b50950e172818a65924c6a14cd5e7fa1b5945e5fe8d8da6c3c04fc449472c2848ddc62d8d4049a9fe06b7aeec03a521b404811420450e674", 0xd5}, {&(0x7f0000000840)="adf304c88a89b234c721eb10d7cffc468f2b83647c2f9abf9181c8d98269b40e473e66ea623992bb0d83a0db8ec6d5b300dcd876d8bdf41fadba6c2e6bae038a80535c53c48399f11e40b6ca150a4f149cd9ae16115d3cb41789652a742d6580b0dbeb9d77b6d49a2185d53df882ae3b40c34ff583f96aeb642a5eaf801b6fbd0a14e483", 0x84}, {&(0x7f0000000900)="4f6e5794db160ced7f45f89947819fc1a8135eb9cfdc989c5f6e7c0b2740ee86be20c96c5174e653757dc8a4e6f3191e6227f877420d014275182dea663aaa8b8212f6a0418130cf3e6d584b6616b49ebcba289b431228d5944edef2fba500d3d5d6c6b25c4b513262bdfc14aa48238ae67b92fd7f2d1203b53a73b31141c44586129d8c7a91", 0x86}], 0x6, &(0x7f0000000b40)=[{0x60, 0x799e5e16483f7164, 0x9, "21f27d301325ceabc1b781a1a850e6b31117714af153975a5e5c07bfef6a0a52ed9af8185ca4d965b54ba730720be442aaabec1cd5f6807029cdb14a4bc99410cf93260b2671c4c58c85923413"}, {0x1010, 0x101, 0x9f, "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"}, {0xc0, 0x112, 0x5, "5d5856f3780f46a5d427bdbda02e6daf14e67e5c12095f2b83c34b34a99f1de4833976f13cf90d2aa1952c1f9c7da8cf454b51b6f36cdd918fa59c11ff465b880f4a6db56830203ff6ba737aa9389aab293d0812f9a6ada897a6b6b41c8f125a0b4e640274338cc6a7f97251c1f6aa276d6b9b9c9f7ad8d8da09effe1426a7420e44d8e36ca370fe12b4594a55639d89844d90ece625cdfc9bb44b097d1b0d0425acc4875d1bf46e4685c7"}, {0x80, 0x103, 0x9, "a6eb13ffd6b41ba85e5fcf263e12f0b1834c816422e7ebd6c70c8a78382df4a861a9ea1839cb7e311ca06fb72304f823eb7ed4eab7f1077b28360a657938f3d9997e3b061a0b470949b57cd99089838433b0440b20010d1b8205dd1f6532a53ca4dce49a56ff6ab30c"}], 0x11b0}, 0x44004898)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'dummy0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10) (async)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001e00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001f80)=@ipv6_deladdr={0x88, 0x15, 0x800, 0x70bd2c, 0x25dfdbfc, {0xa, 0x10, 0x40, 0xfd, r7}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x2, 0x4, 0xfffffff7}}, @IFA_FLAGS={0x8, 0x8, 0x81}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x6, 0x40, 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008050)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="3801000010000100feffffff04010000fe880000000000000000000000000001ac1414aa000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000400000000000000ffff0000000000001c250800000000000200000000000000fbffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000000000000000000002000000fcffffff000000002abd70000000000002000100200000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0x20008805}, 0x0) (async)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="3801000010000100feffffff04010000fe880000000000000000000000000001ac1414aa000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000400000000000000ffff0000000000001c250800000000000200000000000000fbffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000000000000000000002000000fcffffff000000002abd70000000000002000100200000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0x20008805}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
bind$l2tp6(r4, &(0x7f0000000180)={0xa, 0x0, 0xa99, @empty, 0x3, 0x3}, 0x20) (async)
bind$l2tp6(r4, &(0x7f0000000180)={0xa, 0x0, 0xa99, @empty, 0x3, 0x3}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018013e9018108000100e000000118000200ee3800010c00028005000100000000002400028014000180080001000000000008000200e00000020c000280e87b2ed433c4ee33c702e3d505000100000000000800074000000000"], 0x70}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018013e9018108000100e000000118000200ee3800010c00028005000100000000002400028014000180080001000000000008000200e00000020c000280e87b2ed433c4ee33c702e3d505000100000000000800074000000000"], 0x70}}, 0x0)
unshare(0x2a060400)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b4c9a5e5566a5967a0000000180000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r12, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001090001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)

99.77829ms ago: executing program 1 (id=7521):
r0 = socket$xdp(0x2c, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'netpci0\x00', <r3=>0x0}) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) (async, rerun: 64)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r5) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xf, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x29}, 0x94)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000700000004"], 0x10}, 0x331e5c6805043cda) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {0x2}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async, rerun: 64)
r7 = socket(0x2, 0x80805, 0x0) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000006c0)={r9, 0x8f, "30dfc3b2385cdb8b78a9849c150dc9743decd26628b5dbb99754f485dd00f307c1e5a53c4438ccb4ef567c2f2c02fbfb35ae3f4dba77023029e63fb7f278ef34a063ca265da6227d614d1052a2d7d65acdcc14daf623e84f0031baa6875f66c286d80adc0e4a56d73fbecce4c87d7bc5c8d80c2177fde4b5e65218080ee5a40bfbde0d59d6ddcbe4ac585cf402efce"}, &(0x7f0000000280)=0x97)
bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x2, r3, 0x7, r7}, 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x5a0, 0x3d0, 0x3d0, 0x5a0, 0xd0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x4, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0xff, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0xfffffffe, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

98.951633ms ago: executing program 0 (id=7522):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x38}}, 0x40080)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x30, 0x0, 0x82f42bec7e82a886, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0x35, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa9}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40008)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r9, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="55ee4a4cf1734dcbf7a278d30a5a", 0xe}], 0x1}, 0x4)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
unshare(0x2a060400)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r11, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

97.348515ms ago: executing program 2 (id=7523):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x38}}, 0x40080)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x28da}]}, 0x3c}}, 0x800)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
unshare(0x2a060400)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x450}, 0x50)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r10, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884)

95.754802ms ago: executing program 1 (id=7524):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000011c0)={0x2c, r0, 0x11, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x10000)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
pwrite64(r4, &(0x7f0000000380)='k', 0x1, 0xc)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
writev(r6, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) (async)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) (async)
write$cgroup_pid(r9, &(0x7f0000000000), 0xffffff98) (async)
splice(r5, 0x0, r9, 0x0, 0x80, 0xe) (async)
write(r7, 0x0, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0)
r10 = socket$inet(0x2, 0x3, 0x101)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000fc0)={'filter\x00', 0x4}, 0x68)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r12, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) (async)
socket$netlink(0x10, 0x3, 0xc) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c084}, 0x24048880)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x98, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0x1b, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}]}]}, 0x98}}, 0x0)

0s ago: executing program 1 (id=7525):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x8}}}}}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)

kernel console output (not intermixed with test programs):

0.4995': attribute type 1 has an invalid length.
[  429.483962][T28142] netlink: 756 bytes leftover after parsing attributes in process `syz.0.4995'.
[  429.492273][T28141] netlink: 'syz.0.4995': attribute type 1 has an invalid length.
[  429.497543][T28141] netlink: 756 bytes leftover after parsing attributes in process `syz.0.4995'.
[  429.625024][T28167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4999'.
[  429.633399][T28167] netlink: 'syz.1.4999': attribute type 2 has an invalid length.
[  429.637056][T28167] netlink: 'syz.1.4999': attribute type 8 has an invalid length.
[  429.640599][T28167] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4999'.
[  429.648052][T28167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4999'.
[  429.651179][T28167] netlink: 'syz.1.4999': attribute type 2 has an invalid length.
[  429.654215][T28167] netlink: 'syz.1.4999': attribute type 8 has an invalid length.
[  429.655240][T28166] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5000'.
[  429.753135][T28178] netlink: zone id is out of range
[  429.756862][T28178] netlink: del zone limit has 4 unknown bytes
[  430.003370][T28200] sctp: [Deprecated]: syz.1.5006 (pid 28200) Use of int in max_burst socket option.
[  430.003370][T28200] Use struct sctp_assoc_value instead
[  430.068403][T28205] batman_adv: batadv0: Interface deactivated: dummy0
[  430.097139][T28205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.102580][T28205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.125208][T28205] veth0_vlan: left promiscuous mode
[  430.193927][ T5478] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  430.197904][ T5478] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.200714][ T5478] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  430.203495][ T5478] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.208390][ T5478] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  430.212664][ T5478] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.217205][ T5478] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  430.220117][ T5478] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.600170][T28247] SET target dimension over the limit!
[  430.790538][T28277] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  431.653467][T28280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  431.947507][T28317] bond39: entered promiscuous mode
[  431.950174][T28317] 8021q: adding VLAN 0 to HW filter on device bond39
[  432.032674][T28324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.131343][T28330] syzkaller1: entered promiscuous mode
[  432.133820][T28330] syzkaller1: entered allmulticast mode
[  432.230672][T28336] tc_dump_action: action bad kind
[  432.289846][T28343] xt_TCPMSS: Only works on TCP SYN packets
[  432.678073][T28367] 8021q: adding VLAN 0 to HW filter on device bond22
[  433.101326][T28384] veth0: entered promiscuous mode
[  433.110075][T28384] veth0: left promiscuous mode
[  433.391255][T28396] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  434.091471][T28419] validate_nla: 25 callbacks suppressed
[  434.091488][T28419] netlink: 'syz.2.5053': attribute type 1 has an invalid length.
[  434.098031][T28419] __nla_validate_parse: 41 callbacks suppressed
[  434.098044][T28419] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5053'.
[  434.478463][T28440] netlink: 'syz.2.5057': attribute type 1 has an invalid length.
[  434.481753][T28440] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5057'.
[  434.961386][T28471] netlink: 'syz.0.5064': attribute type 1 has an invalid length.
[  434.963818][T28471] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5064'.
[  435.262271][T28490] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  435.264448][T28490] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  435.733541][T28495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5068'.
[  438.183251][T28483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  438.188094][T28501] netlink: 'syz.1.5069': attribute type 1 has an invalid length.
[  438.202615][T28501] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5069'.
[  438.361299][T28512] syzkaller0: entered promiscuous mode
[  438.369551][T28512] syzkaller0: entered allmulticast mode
[  438.380591][T28509] netlink: 'syz.2.5070': attribute type 1 has an invalid length.
[  438.389141][T28509] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5070'.
[  438.421178][T28514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.478909][T28515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5071'.
[  441.316262][T28515] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.364228][T28517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5073'.
[  441.367624][T28517] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  441.370371][T28517] netlink: 'syz.2.5073': attribute type 1 has an invalid length.
[  441.372758][T28517] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5073'.
[  441.453618][T28521] netlink: 'syz.1.5075': attribute type 1 has an invalid length.
[  441.457120][T28521] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5075'.
[  441.547512][T28524] netlink: 'syz.0.5076': attribute type 1 has an invalid length.
[  441.552165][T28524] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5076'.
[  441.563246][T28524] netlink: 'syz.0.5076': attribute type 322 has an invalid length.
[  441.586256][T28534] netlink: 'syz.2.5078': attribute type 1 has an invalid length.
[  441.588847][T28534] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5078'.
[  441.900899][T28572] netlink: 'syz.2.5086': attribute type 1 has an invalid length.
[  441.911053][T28572] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5086'.
[  441.989045][T28574] netlink: 'syz.0.5087': attribute type 1 has an invalid length.
[  442.006265][T28574] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5087'.
[  442.018968][T28580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5089'.
[  442.042563][T28588] netlink: 'syz.2.5088': attribute type 1 has an invalid length.
[  442.047134][T28588] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5088'.
[  442.176962][T28599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5090'.
[  442.186971][T28599] block nbd4: Unsupported socket: should be TCP or UNIX.
[  442.207024][T28601] netlink: 'syz.1.5091': attribute type 1 has an invalid length.
[  442.290238][T28605] syzkaller0: entered promiscuous mode
[  442.292145][T28605] syzkaller0: entered allmulticast mode
[  442.458122][T28607] netlink: 'syz.0.5094': attribute type 1 has an invalid length.
[  442.461349][T28607] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  442.544114][T28611] can: request_module (can-proto-0) failed.
[  442.730084][T28627] xt_TCPMSS: Only works on TCP SYN packets
[  443.635104][T28705] 8021q: adding VLAN 0 to HW filter on device bond40
[  443.644986][T28705] bond40: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  443.671236][T28705] macvlan5: entered promiscuous mode
[  443.672975][T28705] macvlan5: entered allmulticast mode
[  443.677254][T28705] bond40: entered promiscuous mode
[  443.678986][T28705] veth0_to_bond: entered promiscuous mode
[  443.683803][T28705] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  443.687777][T28705] bond40: left promiscuous mode
[  443.690981][T28705] veth0_to_bond: left promiscuous mode
[  443.809035][T28724] --map-set only usable from mangle table
[  443.964188][T28745] nbd: must specify a size in bytes for the device
[  444.353756][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3
[  444.538092][T28792] unsupported nlmsg_type 40
[  445.118409][T28785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  445.706600][T28849] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  445.713996][T28849] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  446.480547][T28911] __nla_validate_parse: 60 callbacks suppressed
[  446.480564][T28911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5161'.
[  446.517569][T28911] validate_nla: 31 callbacks suppressed
[  446.517585][T28911] netlink: 'syz.2.5161': attribute type 1 has an invalid length.
[  446.526870][T28911] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5161'.
[  446.549871][T28914] netlink: 'syz.0.5160': attribute type 1 has an invalid length.
[  446.573536][T28914] 8021q: adding VLAN 0 to HW filter on device bond42
[  446.607000][T28920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'.
[  446.624352][T28916] netlink: 'syz.1.5162': attribute type 1 has an invalid length.
[  446.628263][T28916] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5162'.
[  446.632491][T28914] bond42: (slave veth26): Enslaving as an active interface with a down link
[  446.644521][T28916] netlink: 'syz.1.5162': attribute type 1 has an invalid length.
[  446.651246][T28916] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5162'.
[  446.665710][T28914] vlan0: entered allmulticast mode
[  446.670504][T28914] bond42: entered allmulticast mode
[  446.676055][T28914] bond42: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  446.734094][T28923] bond43: option updelay: invalid value (18446744073709518847)
[  446.736559][T28923] bond43: option updelay: allowed values 0 - 2147483647
[  446.740170][T28923] bond43 (unregistering): Released all slaves
[  446.844525][T28930] netlink: 'syz.2.5165': attribute type 1 has an invalid length.
[  446.849733][T28930] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5165'.
[  446.912646][T28942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5166'.
[  446.930773][T28944] netlink: 'syz.1.5168': attribute type 1 has an invalid length.
[  446.933947][T28944] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5168'.
[  446.945419][T28948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5169'.
[  446.960178][T28948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5169'.
[  447.106491][T28963] netlink: 'syz.1.5170': attribute type 1 has an invalid length.
[  447.167085][T28954] netlink: 'syz.2.5171': attribute type 1 has an invalid length.
[  447.194372][T28971] netlink: 'syz.1.5173': attribute type 1 has an invalid length.
[  447.339929][T28982] --map-set only usable from mangle table
[  447.377390][T28984] netlink: 'syz.0.5175': attribute type 1 has an invalid length.
[  448.399216][T29069] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20004
[  448.528191][T29078] bond40: (slave veth0_to_bond): Releasing backup interface
[  449.491672][T29112] lo speed is unknown, defaulting to 1000
[  451.343498][T29240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  451.368709][T29240] 8021q: adding VLAN 0 to HW filter on device bond15
[  451.383244][T29240] bond15: (slave geneve4): making interface the new active one
[  451.387360][T29240] bond15: (slave geneve4): Enslaving as an active interface with an up link
[  451.390331][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.393384][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.399937][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.405149][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.529026][T29246] validate_nla: 26 callbacks suppressed
[  451.529042][T29246] netlink: 'syz.1.5232': attribute type 1 has an invalid length.
[  451.534326][T29246] __nla_validate_parse: 44 callbacks suppressed
[  451.534339][T29246] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5232'.
[  451.680237][T29250] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  451.689166][T29250] macvlan4: left promiscuous mode
[  451.691331][T29250] macvlan4: left allmulticast mode
[  451.693740][T29250] bond9: left promiscuous mode
[  451.695983][T29250] mac80211_hwsim hwsim22 wlan0: left promiscuous mode
[  451.698724][T29250] mac80211_hwsim hwsim22 wlan0: left allmulticast mode
[  451.702042][T29250] veth11: left allmulticast mode
[  451.706290][T29250] vti0: left promiscuous mode
[  451.708285][T29250] vti0: left allmulticast mode
[  451.710502][T29250] bond0: left promiscuous mode
[  451.712612][T29250] bridge7: left promiscuous mode
[  451.716520][T29250] ipip0: left promiscuous mode
[  451.729151][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  451.732800][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  451.736959][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  451.740636][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  451.854089][T29252] netlink: 'syz.1.5234': attribute type 1 has an invalid length.
[  451.863119][T29252] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5234'.
[  451.992579][T29264] netlink: 'syz.1.5236': attribute type 1 has an invalid length.
[  451.998663][T29264] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5236'.
[  452.113274][T29272] netlink: 'syz.2.5239': attribute type 1 has an invalid length.
[  452.116257][T29272] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5239'.
[  452.132156][T29274] netlink: 'syz.1.5240': attribute type 1 has an invalid length.
[  452.137379][T29274] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5240'.
[  452.157437][T29276] netlink: 'syz.2.5241': attribute type 1 has an invalid length.
[  452.160233][T29276] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5241'.
[  452.227295][T29281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5244'.
[  452.405616][T29300] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  452.423402][T29300] netlink: 'syz.0.5246': attribute type 1 has an invalid length.
[  452.426267][T29300] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5246'.
[  452.630386][T29325] netlink: 'syz.2.5250': attribute type 1 has an invalid length.
[  452.635806][T29325] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5250'.
[  452.642499][T29316] netlink: 'syz.2.5250': attribute type 1 has an invalid length.
[  452.657251][T29316] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5250'.
[  452.805606][T29342] netlink: 'syz.0.5255': attribute type 1 has an invalid length.
[  453.142776][T29354] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  454.890523][T29465] veth1_to_bond: entered promiscuous mode
[  454.898348][T29465] veth1_to_bond: left promiscuous mode
[  455.065920][T29487] xt_TCPMSS: Only works on TCP SYN packets
[  456.021918][T29495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  456.257950][T29539] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  456.269988][T29548] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  456.396287][T29566] ip6t_srh: unknown srh invflags BA61
[  456.537465][T29582] validate_nla: 25 callbacks suppressed
[  456.537480][T29582] netlink: 'syz.2.5301': attribute type 1 has an invalid length.
[  456.542255][T29582] __nla_validate_parse: 32 callbacks suppressed
[  456.542263][T29582] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5301'.
[  456.567375][T29587] netlink: 'syz.0.5304': attribute type 1 has an invalid length.
[  456.611613][T29587] 8021q: adding VLAN 0 to HW filter on device bond44
[  456.617119][T29587] bond43: (slave bond44): making interface the new active one
[  456.619903][T29587] bond43: (slave bond44): Enslaving as an active interface with an up link
[  456.628390][T29587] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5304'.
[  456.702606][T29595] netlink: 'syz.0.5306': attribute type 1 has an invalid length.
[  456.709251][T29595] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5306'.
[  456.781876][T29603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5305'.
[  456.790444][T29607] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5307'.
[  457.447698][T29614] netlink: 'syz.1.5309': attribute type 1 has an invalid length.
[  457.450242][T29614] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5309'.
[  457.567196][T29618] netlink: 'syz.2.5311': attribute type 1 has an invalid length.
[  457.570429][T29618] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5311'.
[  457.646216][T29624] openvswitch: netlink: Multiple metadata blocks provided
[  457.689055][T29624] netlink: 'syz.0.5312': attribute type 1 has an invalid length.
[  457.691955][T29624] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5312'.
[  457.778564][T29635] netlink: 'syz.0.5315': attribute type 1 has an invalid length.
[  457.782726][T29635] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5315'.
[  457.852559][T29649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5318'.
[  457.863342][T29649] geneve5: entered promiscuous mode
[  457.882452][T29647] syzkaller0: entered promiscuous mode
[  457.884791][T29647] syzkaller0: entered allmulticast mode
[  457.891217][T29647] xfrm0: Caught tx_queue_len zero misconfig
[  458.012565][T29661] netlink: 'syz.2.5319': attribute type 1 has an invalid length.
[  458.101460][T29659] netlink: 'syz.1.5320': attribute type 1 has an invalid length.
[  458.139169][T29665] netlink: 'syz.2.5321': attribute type 1 has an invalid length.
[  458.254177][T29675] lo speed is unknown, defaulting to 1000
[  458.661175][T29712] openvswitch: netlink: Missing key (keys=40, expected=100)
[  458.818911][T29739] bond45: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  458.840585][T29739] bond45 (unregistering): Released all slaves
[  459.039915][T29763] IPv6: sit0: Disabled Multicast RS
[  459.523584][T29836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  461.601302][T29881] validate_nla: 18 callbacks suppressed
[  461.601312][T29881] netlink: 'syz.0.5365': attribute type 1 has an invalid length.
[  461.609494][T29881] __nla_validate_parse: 29 callbacks suppressed
[  461.609504][T29881] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5365'.
[  461.617246][T29885] netlink: 'syz.2.5366': attribute type 1 has an invalid length.
[  461.630626][T29887] netlink: 'syz.1.5367': attribute type 1 has an invalid length.
[  461.646642][T29887] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5367'.
[  461.687518][T29895] netlink: 'syz.1.5369': attribute type 1 has an invalid length.
[  461.690760][T29895] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5369'.
[  461.725649][T29900] netlink: 'syz.1.5370': attribute type 1 has an invalid length.
[  461.728824][T29900] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5370'.
[  461.889182][T29905] netlink: 'syz.1.5372': attribute type 1 has an invalid length.
[  461.899848][T29912] netlink: 'syz.0.5373': attribute type 1 has an invalid length.
[  461.900741][T29905] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5372'.
[  461.914151][T29912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5373'.
[  462.014450][T29923] netlink: 'syz.0.5376': attribute type 1 has an invalid length.
[  462.037357][T29916] netlink: 'syz.2.5374': attribute type 1 has an invalid length.
[  462.042661][T29916] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5374'.
[  462.057697][T29923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5376'.
[  462.059223][T29919] netlink: 768 bytes leftover after parsing attributes in process `syz.1.5375'.
[  462.061577][T29923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5376'.
[  462.076062][T29923] gretap4: entered allmulticast mode
[  462.447880][T29957] netlink: 'syz.0.5382': attribute type 1 has an invalid length.
[  462.896528][T30011] syzkaller0: entered promiscuous mode
[  462.898778][T30011] syzkaller0: entered allmulticast mode
[  462.908502][T30011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  462.914160][T30011] tipc: Resetting bearer <eth:syzkaller0>
[  462.920415][T30010] tipc: Resetting bearer <eth:syzkaller0>
[  462.945099][T30010] tipc: Disabling bearer <eth:syzkaller0>
[  463.147768][T30026] can: request_module (can-proto-0) failed.
[  463.388096][T30040] bond46: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  463.393422][T30040] bond46 (unregistering): Released all slaves
[  463.679466][T30052] openvswitch: netlink: Missing key (keys=40, expected=80)
[  463.912020][T30071] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  464.386390][T30125] xt_hashlimit: size too large, truncated to 1048576
[  465.078792][T30146] bridge0: entered promiscuous mode
[  465.084728][T30146] bridge0: entered allmulticast mode
[  465.287565][T30167] syzkaller0: entered promiscuous mode
[  465.289375][T30167] syzkaller0: entered allmulticast mode
[  465.711054][T30189] syzkaller0: entered promiscuous mode
[  465.714035][T30189] syzkaller0: entered allmulticast mode
[  466.190422][T30248] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003
[  466.521195][T30291] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  466.606186][T30299] validate_nla: 37 callbacks suppressed
[  466.606196][T30299] netlink: 'syz.2.5463': attribute type 1 has an invalid length.
[  466.717563][T30316] netlink: 'syz.2.5467': attribute type 1 has an invalid length.
[  466.718520][T30310] __nla_validate_parse: 66 callbacks suppressed
[  466.718563][T30310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5466'.
[  466.721275][T30316] netlink: 'syz.2.5467': attribute type 21 has an invalid length.
[  466.736501][T30316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5467'.
[  466.741014][T30316] netlink: 'syz.2.5467': attribute type 1 has an invalid length.
[  466.766141][T30319] netlink: 'syz.0.5468': attribute type 1 has an invalid length.
[  466.796043][T30324] netlink: 'syz.2.5469': attribute type 1 has an invalid length.
[  466.828099][T30324] bond24: entered promiscuous mode
[  466.831185][T30324] 8021q: adding VLAN 0 to HW filter on device bond24
[  466.844885][T30324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5469'.
[  466.849951][T30324] bond24: entered allmulticast mode
[  467.038423][T30336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5472'.
[  467.082038][T30345] syzkaller1: entered allmulticast mode
[  467.126152][T30349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  467.174772][T30352] xt_hashlimit: size too large, truncated to 1048576
[  467.267728][T30360] xt_hashlimit: size too large, truncated to 1048576
[  467.545919][T30376] netlink: 'syz.0.5481': attribute type 11 has an invalid length.
[  467.680004][T30397] netlink: 'syz.1.5484': attribute type 1 has an invalid length.
[  467.683109][T30397] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5484'.
[  467.688137][T30398] netlink: 'syz.1.5484': attribute type 1 has an invalid length.
[  467.692706][T30398] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5484'.
[  467.756209][T30403] netlink: 'syz.1.5486': attribute type 1 has an invalid length.
[  467.759643][T30403] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5486'.
[  467.784481][T30400] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5485'.
[  467.828515][T30408] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5487'.
[  467.831420][T30413] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5488'.
[  468.248819][T30433] syzkaller0: entered promiscuous mode
[  468.250924][T30433] syzkaller0: entered allmulticast mode
[  470.198936][T30437] Set syz1 is full, maxelem 65536 reached
[  471.291225][T30487] 8021q: adding VLAN 0 to HW filter on device bond47
[  471.308500][T30487] bond47: (slave veth28): Enslaving as an active interface with a down link
[  471.320371][T30487] bond47: (slave dummy0): making interface the new active one
[  471.323842][T30487] dummy0: entered promiscuous mode
[  471.326771][T30487] bond47: (slave dummy0): Enslaving as an active interface with an up link
[  471.332958][T30487] bond47: (slave dummy0): Releasing active interface
[  471.369634][T30483] syzkaller0: entered promiscuous mode
[  471.371428][T30493] xt_hashlimit: size too large, truncated to 1048576
[  471.373904][T30483] syzkaller0: entered allmulticast mode
[  471.700474][T30526] validate_nla: 17 callbacks suppressed
[  471.700486][T30526] netlink: 'syz.0.5517': attribute type 1 has an invalid length.
[  471.782892][T30547] __nla_validate_parse: 20 callbacks suppressed
[  471.782902][T30547] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5520'.
[  471.946627][T30564] netlink: 'syz.1.5524': attribute type 1 has an invalid length.
[  471.951368][T30564] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5524'.
[  471.973195][T30560] netlink: 'syz.2.5523': attribute type 1 has an invalid length.
[  471.975946][T30560] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5523'.
[  472.040149][T30576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5526'.
[  472.092280][T30572] --map-set only usable from mangle table
[  472.096561][T30572] netlink: 'syz.1.5525': attribute type 1 has an invalid length.
[  472.099799][T30572] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5525'.
[  472.104814][T30572] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5525'.
[  472.163201][T30591] netlink: 'syz.1.5528': attribute type 1 has an invalid length.
[  472.167230][T30591] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5528'.
[  472.266486][T30597] netlink: 'syz.1.5530': attribute type 1 has an invalid length.
[  472.269646][T30597] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5530'.
[  472.281471][T30602] netlink: 'syz.1.5530': attribute type 1 has an invalid length.
[  472.285327][T30602] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5530'.
[  472.341873][T30605] openvswitch: netlink: IP tunnel TTL not specified.
[  472.345117][T30605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.351492][T30604] netlink: 'syz.1.5531': attribute type 1 has an invalid length.
[  472.364834][T30604] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5531'.
[  472.431724][T30609] netlink: 'syz.1.5533': attribute type 1 has an invalid length.
[  472.505607][T30607] netlink: 'syz.2.5532': attribute type 1 has an invalid length.
[  473.673088][T30680] macvlan2: entered promiscuous mode
[  473.677010][T30680] macvlan2: entered allmulticast mode
[  473.683618][T30680] bond5: entered promiscuous mode
[  473.699315][T30680] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  473.718855][T30680] bond5: left promiscuous mode
[  473.824074][T30688] veth0: entered promiscuous mode
[  473.832411][T30685] bond0: entered promiscuous mode
[  473.915870][T30685] bond0: left promiscuous mode
[  473.923572][T30685] veth0: left promiscuous mode
[  474.149902][T30715] syzkaller0: entered promiscuous mode
[  474.154035][T30715] syzkaller0: entered allmulticast mode
[  474.969741][T30768] lo speed is unknown, defaulting to 1000
[  474.990276][T30767] lo speed is unknown, defaulting to 1000
[  475.201777][T30784] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8
[  475.351387][T30801] tipc: Invalid UDP bearer configuration
[  475.351428][T30801] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  475.424390][T30808] tc_dump_action: action bad kind
[  475.436436][T30808] bond3: (slave team0): Releasing backup interface
[  475.441216][T30808] batman_adv: batadv0: Removing interface: dummy0
[  475.451292][T30808] team0: Port device team_slave_1 removed
[  475.454051][T30808] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.458322][T30808] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  475.483457][T30808] team0: Device xfrm0 is of different type
[  476.849518][T30860] __nla_validate_parse: 88 callbacks suppressed
[  476.849531][T30860] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5587'.
[  476.912795][T30881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5585'.
[  477.067319][T30888] validate_nla: 86 callbacks suppressed
[  477.067332][T30888] netlink: 'syz.0.5591': attribute type 1 has an invalid length.
[  477.077979][T30888] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5591'.
[  477.166038][T30903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5593'.
[  477.217140][T30905] netlink: 'syz.0.5593': attribute type 1 has an invalid length.
[  477.222982][T30905] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5593'.
[  477.331876][T30906] netlink: 'syz.2.5594': attribute type 1 has an invalid length.
[  477.334902][T30906] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5594'.
[  477.417416][T30913] netlink: 'syz.0.5595': attribute type 1 has an invalid length.
[  477.419844][T30913] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5595'.
[  477.423950][T30913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5595'.
[  477.439412][T30916] netlink: 'syz.2.5596': attribute type 1 has an invalid length.
[  477.442023][T30916] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5596'.
[  477.553676][   T56] block nbd4: Receive control failed (result -22)
[  477.568545][T30931] nbd4: detected capacity change from 0 to 32
[  477.576282][   T97] block nbd4: Dead connection, failed to find a fallback
[  477.579167][   T97] block nbd4: shutting down sockets
[  477.581611][   T97] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.589217][   T97] Buffer I/O error on dev nbd4, logical block 0, async page read
[  477.596102][   T97] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.600944][   T97] Buffer I/O error on dev nbd4, logical block 0, async page read
[  477.604925][   T97] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.608660][   T97] Buffer I/O error on dev nbd4, logical block 0, async page read
[  477.611885][   T97] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.616032][   T97] Buffer I/O error on dev nbd4, logical block 0, async page read
[  477.620362][   T97] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.623964][   T97] Buffer I/O error on dev nbd4, logical block 0, async page read
[  477.628094][   T97] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.631842][   T97] Buffer I/O error on dev nbd4, logical block 0, async page read
[  477.638456][   T97] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.642073][   T97] Buffer I/O error on dev nbd4, logical block 0, async page read
[  477.645506][   T97] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.649245][   T97] Buffer I/O error on dev nbd4, logical block 0, async page read
[  477.652312][T30730] ldm_validate_partition_table(): Disk read failed.
[  477.659497][   T97] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.663197][   T97] Buffer I/O error on dev nbd4, logical block 0, async page read
[  477.667057][   T97] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.670882][   T97] Buffer I/O error on dev nbd4, logical block 0, async page read
[  477.675250][T30730] Dev nbd4: unable to read RDB block 0
[  477.682944][T30730]  nbd4: unable to read partition table
[  477.695547][T30730] ldm_validate_partition_table(): Disk read failed.
[  477.702657][T30730] Dev nbd4: unable to read RDB block 0
[  477.707268][T30730]  nbd4: unable to read partition table
[  477.789765][T30931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5599'.
[  477.858730][T30947] netlink: 'syz.2.5603': attribute type 1 has an invalid length.
[  477.916497][T30946] netlink: 'syz.1.5602': attribute type 1 has an invalid length.
[  477.990712][T30961] netlink: 'syz.1.5605': attribute type 1 has an invalid length.
[  478.100670][T30965] netlink: 'syz.2.5606': attribute type 1 has an invalid length.
[  478.167014][T30975] netlink: 'syz.2.5609': attribute type 1 has an invalid length.
[  478.173800][T30978] syzkaller0: entered promiscuous mode
[  478.178449][T30978] syzkaller0: entered allmulticast mode
[  478.872362][T31035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.239146][T31052] sctp: [Deprecated]: syz.1.5630 (pid 31052) Use of int in max_burst socket option.
[  479.239146][T31052] Use struct sctp_assoc_value instead
[  479.446561][T31061] bond25: entered promiscuous mode
[  479.863588][T31061] bond3: (slave geneve2): Releasing active interface
[  479.878146][T31061] bond12: (slave gretap2): Releasing active interface
[  479.888429][T31061] bond13: (slave bridge15): Releasing backup interface
[  479.890893][T31061] bond13: (slave bridge15): the permanent HWaddr of slave - b2:79:ae:9a:3e:dd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  479.896851][T31061] bridge15: left promiscuous mode
[  479.898814][T31061] bond13: (slave bridge16): making interface the new active one
[  479.901574][T31061] bridge16: entered promiscuous mode
[  479.906403][T31061] bond13: (slave bridge16): Releasing backup interface
[  479.908959][T31061] bridge16: left promiscuous mode
[  479.915717][T31061] bond14: (slave veth15): Releasing active interface
[  479.920159][T31061] bond15: (slave gre1): Releasing backup interface
[  479.922670][T31061] gre1: left promiscuous mode
[  479.932263][T31061] bond16: (slave bridge19): Releasing backup interface
[  479.939228][T31061] geneve0: left promiscuous mode
[  479.978596][T31061] bond19: (slave bridge20): Releasing backup interface
[  479.983085][T31061] bridge20: left promiscuous mode
[  479.985494][T31061] bridge20: left allmulticast mode
[  480.024874][T31061] bond20: (slave ip6gretap0): Releasing active interface
[  480.065133][ T5681] lo speed is unknown, defaulting to 1000
[  480.068389][ T5681] syz2: Port: 1 Link DOWN
[  480.094896][T31070] bond17: entered promiscuous mode
[  480.098921][T31070] bond17: entered allmulticast mode
[  480.101590][T31070] 8021q: adding VLAN 0 to HW filter on device bond17
[  480.105048][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.107733][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.113572][T31060] bond25: left promiscuous mode
[  480.119184][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.126627][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.217714][T31085] 0{X: renamed from gretap0
[  480.223131][T31085] 0{X: entered allmulticast mode
[  480.237845][T31085] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  480.388653][T31119] raw_sendmsg: syz.0.5645 forgot to set AF_INET. Fix it!
[  480.590082][T31145] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  480.678242][T31149] ipt_REJECT: TCP_RESET invalid for non-tcp
[  481.987116][T31208] __nla_validate_parse: 41 callbacks suppressed
[  481.987133][T31208] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5668'.
[  482.172660][T31229] bond26: entered allmulticast mode
[  482.181348][T31229] 8021q: adding VLAN 0 to HW filter on device bond26
[  482.293404][T31249] validate_nla: 20 callbacks suppressed
[  482.293419][T31249] netlink: 'syz.2.5676': attribute type 32 has an invalid length.
[  482.299576][T31244] netlink: 'syz.1.5675': attribute type 1 has an invalid length.
[  482.303007][T31244] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5675'.
[  482.322786][T31256] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5676'.
[  482.358074][T31260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5677'.
[  482.379341][T31260] syzkaller0: entered promiscuous mode
[  482.381090][T31260] syzkaller0: entered allmulticast mode
[  482.399263][T31262] netlink: 'syz.0.5678': attribute type 1 has an invalid length.
[  482.402621][T31262] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5678'.
[  482.438575][T31265] netlink: 'syz.0.5679': attribute type 2 has an invalid length.
[  482.441081][T31265] netlink: 'syz.0.5679': attribute type 2 has an invalid length.
[  482.446222][T31265] netlink: 'syz.0.5679': attribute type 1 has an invalid length.
[  482.448649][T31265] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5679'.
[  482.504361][T31274] netlink: 'syz.0.5682': attribute type 1 has an invalid length.
[  482.508298][T31274] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5682'.
[  482.514122][T31272] xt_NFQUEUE: number of total queues is 0
[  482.530703][T31272] bond18: option arp_all_targets: invalid value (3)
[  482.536694][T31272] bond18 (unregistering): Released all slaves
[  482.648583][T31287] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5684'.
[  482.651623][T31287] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5684'.
[  482.671085][T31290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5685'.
[  482.690688][T31290] ip6tnl5: entered allmulticast mode
[  482.736244][T31287] netlink: 'syz.1.5684': attribute type 10 has an invalid length.
[  482.742501][T31288] bond0 (unregistering): (slave bridge7): Releasing backup interface
[  482.746152][T31288] bond0 (unregistering): Released all slaves
[  482.865043][T31302] netlink: 'syz.1.5687': attribute type 1 has an invalid length.
[  483.207349][T31319] netlink: 'syz.1.5690': attribute type 1 has an invalid length.
[  484.013336][T31387] geneve5: left promiscuous mode
[  484.018950][T31387] bond17: left promiscuous mode
[  484.020893][T31387] bond17: left allmulticast mode
[  484.973775][T31440] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.124279][T31461] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  485.703697][T31508] x_tables: duplicate underflow at hook 2
[  487.310602][T31549] validate_nla: 20 callbacks suppressed
[  487.310615][T31549] netlink: 'syz.2.5737': attribute type 1 has an invalid length.
[  487.321581][T31549] __nla_validate_parse: 34 callbacks suppressed
[  487.321593][T31549] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5737'.
[  487.390801][T31551] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5738'.
[  487.559984][T31573] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5741'.
[  487.562859][T31573] 8021q: VLANs not supported on ip_vti0
[  487.577539][T31575] netlink: 'syz.2.5743': attribute type 1 has an invalid length.
[  487.586599][T31575] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5743'.
[  487.592735][T31564] netlink: 'syz.1.5741': attribute type 1 has an invalid length.
[  487.602733][T31564] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5741'.
[  487.709466][T31581] netlink: 'syz.1.5745': attribute type 1 has an invalid length.
[  487.712837][T31581] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5745'.
[  487.760299][T31591] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5748'.
[  487.763200][T31593] netlink: 'syz.2.5749': attribute type 1 has an invalid length.
[  487.794289][T31593] 8021q: adding VLAN 0 to HW filter on device bond27
[  487.799236][T31593] netlink: 'syz.2.5749': attribute type 1 has an invalid length.
[  487.820920][T31593] netlink: 'syz.2.5749': attribute type 1 has an invalid length.
[  487.824807][T31593] netlink: 'syz.2.5749': attribute type 1 has an invalid length.
[  487.833520][T31593] netlink: 'syz.2.5749': attribute type 1 has an invalid length.
[  487.836179][T31593] netlink: 'syz.2.5749': attribute type 1 has an invalid length.
[  487.918788][T31598] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5750'.
[  487.942838][T31607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5752'.
[  487.972710][T31607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5752'.
[  488.166057][T31626] 8021q: adding VLAN 0 to HW filter on device bond18
[  488.174427][T31626] rdma_op ffff888173a809f0 conn xmit_rdma 0000000000000000
[  488.180077][T31626] bond18: entered promiscuous mode
[  488.182416][T31626] bond18: entered allmulticast mode
[  488.494148][T31640] bond28: entered promiscuous mode
[  488.496638][T31640] 8021q: adding VLAN 0 to HW filter on device bond28
[  488.521830][T31640] bond28: (slave veth25): making interface the new active one
[  488.524353][T31640] veth25: entered promiscuous mode
[  488.527840][T31640] bond28: (slave veth25): Enslaving as an active interface with an up link
[  489.769636][T31763] syzkaller1: entered promiscuous mode
[  489.772935][T31763] syzkaller1: entered allmulticast mode
[  490.740617][T31870] syzkaller1: entered promiscuous mode
[  490.743093][T31870] syzkaller1: entered allmulticast mode
[  490.918277][T31874] IPVS: Error connecting to the multicast addr
[  491.149613][T31891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.268390][T31906] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003
[  491.502777][T31920] x_tables: duplicate underflow at hook 2
[  491.506496][T31921] x_tables: duplicate underflow at hook 2
[  491.751134][T31932] bond30 (unregistering): Released all slaves
[  491.849444][T31935] sctp: [Deprecated]: syz.2.5826 (pid 31935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  491.849444][T31935] Use struct sctp_sack_info instead
[  492.336115][T31972] validate_nla: 124 callbacks suppressed
[  492.336131][T31972] netlink: 'syz.0.5833': attribute type 1 has an invalid length.
[  492.343521][T31972] __nla_validate_parse: 103 callbacks suppressed
[  492.343531][T31972] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5833'.
[  492.377702][T31975] netlink: 'syz.2.5835': attribute type 1 has an invalid length.
[  492.384854][T31975] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5835'.
[  492.428346][T31985] netlink: 'syz.1.5836': attribute type 1 has an invalid length.
[  492.431094][T31985] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5836'.
[  492.538798][T31990] netlink: 'syz.2.5837': attribute type 1 has an invalid length.
[  492.541969][T31990] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5837'.
[  492.671658][T32006] netlink: 'syz.1.5841': attribute type 1 has an invalid length.
[  492.675187][T32006] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5841'.
[  492.735198][T32013] netlink: 'syz.2.5840': attribute type 1 has an invalid length.
[  492.738716][T32013] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5840'.
[  492.932189][T32018] netlink: 'syz.1.5843': attribute type 1 has an invalid length.
[  492.935915][T32018] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5843'.
[  493.048036][T32024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5845'.
[  493.136847][T32029] 8021q: adding VLAN 0 to HW filter on device team0
[  493.149640][T32029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  493.187305][T32029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  493.191459][T32029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  493.199140][T32029] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  493.320515][T32035] netlink: 'syz.1.5848': attribute type 1 has an invalid length.
[  493.325462][T32035] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5848'.
[  493.367321][T32042] netlink: 'syz.1.5850': attribute type 1 has an invalid length.
[  493.369801][T32042] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5850'.
[  493.399123][T32045] netlink: 'syz.1.5851': attribute type 1 has an invalid length.
[  493.478594][T32048] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  493.651023][T32054] : renamed from dummy0 (while UP)
[  494.540207][T32125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  494.545729][T32125] syzkaller0: entered promiscuous mode
[  494.547896][T32125] syzkaller0: entered allmulticast mode
[  494.573975][T32124] tipc: Resetting bearer <eth:syzkaller0>
[  494.608718][T32124] tipc: Disabling bearer <eth:syzkaller0>
[  496.093924][T32221] syzkaller0: entered promiscuous mode
[  496.104051][T32221] syzkaller0: entered allmulticast mode
[  496.117264][T32221] dvmrp8: entered allmulticast mode
[  496.194494][T32223] openvswitch: netlink: Flow key attr not present in new flow.
[  496.299304][T32237] 8021q: adding VLAN 0 to HW filter on device bond49
[  496.349106][T32245] openvswitch: netlink: Flow actions attr not present in new flow.
[  496.587515][T32270] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  496.602246][T32270] bond0: (slave netdevsim1): Enslaving as an active interface with a down link
[  497.421239][T32348] validate_nla: 36 callbacks suppressed
[  497.421253][T32348] netlink: 'syz.0.5914': attribute type 11 has an invalid length.
[  497.507138][T32348] netlink: 'syz.0.5914': attribute type 1 has an invalid length.
[  497.511894][T32348] __nla_validate_parse: 42 callbacks suppressed
[  497.511905][T32348] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5914'.
[  497.564931][T32359] netlink: 'syz.0.5917': attribute type 1 has an invalid length.
[  497.567976][T32359] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5917'.
[  497.632623][T32361] erspan0: left promiscuous mode
[  497.656467][T17682] lo speed is unknown, defaulting to 1000
[  497.659277][T17682] syz2: Port: 1 Link ACTIVE
[  497.668881][T32361] macvlan0: left promiscuous mode
[  497.671178][T32361] netlink: 'syz.2.5918': attribute type 1 has an invalid length.
[  497.674376][T32361] netlink: 'syz.2.5918': attribute type 2 has an invalid length.
[  497.709438][T32368] netlink: 'syz.2.5921': attribute type 1 has an invalid length.
[  497.712724][T32368] netlink: 'syz.2.5921': attribute type 3 has an invalid length.
[  497.719020][T32368] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5921'.
[  497.756923][T32365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5920'.
[  497.825513][T32379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5924'.
[  497.846580][T32379] pim6reg1: entered promiscuous mode
[  497.851431][T32379] pim6reg1: entered allmulticast mode
[  497.857826][T32381] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  497.861180][T32380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  497.918130][T32385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5924'.
[  497.965734][T32388] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5926'.
[  498.033941][T32391] netlink: 'syz.0.5927': attribute type 1 has an invalid length.
[  498.037439][T32391] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5927'.
[  498.133651][T32398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5928'.
[  498.249106][T32407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5929'.
[  498.265849][T32411] netlink: 'syz.1.5931': attribute type 1 has an invalid length.
[  498.288222][T32407] netlink: 'syz.2.5929': attribute type 1 has an invalid length.
[  498.490456][T32435] =v: renamed from veth0_to_bond
[  498.831240][T32485] bond0: entered promiscuous mode
[  498.839413][T32485] bridge_slave_0: entered promiscuous mode
[  498.894317][T32491] lo: Caught tx_queue_len zero misconfig
[  499.061554][T32508] syzkaller0: entered promiscuous mode
[  499.063391][T32508] syzkaller0: entered allmulticast mode
[  499.572310][T32545] x_tables: duplicate underflow at hook 1
[  499.693218][T32558] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  499.876285][T32565] 8021q: adding VLAN 0 to HW filter on device bond20
[  499.907055][T32565] bond20 (unregistering): Released all slaves
[  500.346531][T32619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  503.376339][T32623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  503.402341][T32633] validate_nla: 21 callbacks suppressed
[  503.402360][T32633] netlink: 'syz.1.5975': attribute type 1 has an invalid length.
[  503.408132][T32633] __nla_validate_parse: 44 callbacks suppressed
[  503.408147][T32633] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5975'.
[  503.651894][T32678] netlink: 'syz.1.5985': attribute type 1 has an invalid length.
[  503.656425][T32678] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5985'.
[  503.730537][T32680] debugfs: '!' already exists in 'ieee80211'
[  503.792648][T32683] netlink: 'syz.1.5987': attribute type 1 has an invalid length.
[  503.797169][T32683] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5987'.
[  503.870090][T32690] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  503.928945][T32700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5991'.
[  504.039454][T32713] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  504.045575][T32713] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  504.064705][T32714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5992'.
[  504.120839][T32720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5994'.
[  504.126001][T32720] netlink: 'syz.1.5994': attribute type 1 has an invalid length.
[  504.129536][T32720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5994'.
[  504.227264][T32723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  504.238116][T32723] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5995'.
[  504.396693][T32725] netlink: 'syz.1.5996': attribute type 1 has an invalid length.
[  504.399355][T32725] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5996'.
[  504.432119][T32732] netlink: 'syz.0.5997': attribute type 1 has an invalid length.
[  504.435613][T32732] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5997'.
[  504.455981][T32737] pim6reg0: tun_chr_ioctl cmd 35111
[  504.518090][T32737] netlink: 'syz.1.5998': attribute type 1 has an invalid length.
[  504.596788][T32748] netlink: 'syz.0.6000': attribute type 1 has an invalid length.
[  504.709533][T32760] netlink: 'syz.0.6002': attribute type 1 has an invalid length.
[  505.506958][  T311] netlink: 'syz.2.6007': attribute type 2 has an invalid length.
[  506.117171][  T365] macsec0: entered promiscuous mode
[  506.119775][  T365] ip6gretap0: entered promiscuous mode
[  506.122210][  T365] macsec0: left promiscuous mode
[  506.124254][  T365] ip6gretap0: left promiscuous mode
[  507.591580][  T498] 8021q: VLANs not supported on ip6gre0
[  507.599357][  T488] 8021q: VLANs not supported on ip6gre0
[  507.969561][  T529] nbd: couldn't find a device at index 2
[  508.043154][  T529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  508.798545][  T548] validate_nla: 24 callbacks suppressed
[  508.798563][  T548] netlink: 'syz.0.6056': attribute type 13 has an invalid length.
[  508.827406][  T548] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  509.054327][  T538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  509.058426][  T545] netlink: 'syz.1.6055': attribute type 1 has an invalid length.
[  509.061586][  T545] __nla_validate_parse: 43 callbacks suppressed
[  509.061600][  T545] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6055'.
[  509.068045][  T553] netlink: 'syz.0.6057': attribute type 1 has an invalid length.
[  509.071735][  T553] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6057'.
[  509.997003][  T556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  510.000631][  T567] netlink: 'syz.2.6059': attribute type 1 has an invalid length.
[  510.003846][  T567] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6059'.
[  510.186639][  T593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6065'.
[  510.238656][  T602] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6069'.
[  510.249971][  T602] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6069'.
[  510.265218][  T602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6069'.
[  510.273142][  T602] netlink: 'syz.0.6069': attribute type 1 has an invalid length.
[  510.288187][  T602] bond51: entered promiscuous mode
[  510.290162][  T602] 8021q: adding VLAN 0 to HW filter on device bond51
[  510.381858][  T609] netlink: 'syz.1.6071': attribute type 1 has an invalid length.
[  510.384528][  T609] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6071'.
[  510.403911][  T602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6069'.
[  510.437414][  T614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6072'.
[  510.589896][  T627] netlink: 'syz.0.6076': attribute type 1 has an invalid length.
[  510.743710][  T650] netlink: 'syz.1.6080': attribute type 1 has an invalid length.
[  510.756720][  T646] netlink: 'syz.0.6079': attribute type 1 has an invalid length.
[  510.862255][  T654] netlink: 'syz.1.6081': attribute type 1 has an invalid length.
[  511.064970][  T686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.071883][  T685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.710291][  T752] geneve4: entered promiscuous mode
[  511.713166][T13685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.719294][T13685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.724489][T13685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.895577][  T878] lo speed is unknown, defaulting to 1000
[  513.343835][  T905] bond0: (slave ip6tnl0): refused to change device type
[  513.658042][  T945] syzkaller1: entered promiscuous mode
[  513.660428][  T945] syzkaller1: entered allmulticast mode
[  513.802685][  T962] veth0: Caught tx_queue_len zero misconfig
[  513.953745][  T976] validate_nla: 19 callbacks suppressed
[  513.953793][  T976] netlink: 'syz.0.6147': attribute type 1 has an invalid length.
[  514.038475][  T979] netlink: 'syz.2.6148': attribute type 1 has an invalid length.
[  514.445200][ T1013] __nla_validate_parse: 47 callbacks suppressed
[  514.445218][ T1013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6155'.
[  514.500461][ T1019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6156'.
[  514.814339][ T1027] netlink: 'syz.1.6158': attribute type 1 has an invalid length.
[  514.818070][ T1027] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6158'.
[  514.871697][ T1031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6159'.
[  514.893032][ T1033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6160'.
[  514.946400][ T1035] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6161'.
[  515.125325][ T1065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6165'.
[  515.137908][ T1048] netlink: 'syz.1.6165': attribute type 1 has an invalid length.
[  515.140736][ T1048] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6165'.
[  515.144278][ T1048] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.6165'.
[  515.214268][ T1073] netlink: 'syz.0.6168': attribute type 1 has an invalid length.
[  515.217827][ T1073] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6168'.
[  515.276266][ T1075] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  515.281754][ T1075] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  515.292599][ T1075] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  515.326367][ T1080] netlink: 'syz.0.6169': attribute type 1 has an invalid length.
[  515.342839][ T1077] netlink: 'syz.1.6170': attribute type 1 has an invalid length.
[  515.429568][ T1084] netlink: 'syz.1.6171': attribute type 1 has an invalid length.
[  515.432418][ T1085] netlink: 'syz.1.6171': attribute type 1 has an invalid length.
[  515.469006][ T1091] netlink: 'syz.1.6172': attribute type 1 has an invalid length.
[  515.473918][ T1091] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  515.477658][ T1091] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  516.546915][ T1163] bond32: entered promiscuous mode
[  516.549612][ T1163] 8021q: adding VLAN 0 to HW filter on device bond32
[  516.586399][ T1163] veth27: entered promiscuous mode
[  516.589766][ T1163] bond32: (slave veth27): Enslaving as a backup interface with a down link
[  518.961262][ T1328] validate_nla: 96 callbacks suppressed
[  518.961275][ T1328] netlink: 'syz.0.6226': attribute type 1 has an invalid length.
[  519.205757][ T1339] netlink: 'syz.0.6229': attribute type 1 has an invalid length.
[  519.393535][ T1360] netlink: 'syz.2.6234': attribute type 1 has an invalid length.
[  519.494928][ T1362] netlink: 'syz.2.6235': attribute type 23 has an invalid length.
[  519.499616][ T1362] netlink: 'syz.2.6235': attribute type 21 has an invalid length.
[  519.502955][ T1362] IPv6: NLM_F_CREATE should be specified when creating new route
[  519.546181][ T1374] netlink: 'syz.2.6236': attribute type 13 has an invalid length.
[  519.556371][ T1374] __nla_validate_parse: 122 callbacks suppressed
[  519.556383][ T1374] netlink: 364 bytes leftover after parsing attributes in process `syz.2.6236'.
[  519.609177][ T1377] netlink: 'syz.0.6237': attribute type 1 has an invalid length.
[  519.612259][ T1377] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6237'.
[  519.720154][ T1384] netlink: 'syz.0.6238': attribute type 1 has an invalid length.
[  519.723543][ T1384] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6238'.
[  519.768797][ T1389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  520.028253][ T1401] netlink: 'syz.0.6243': attribute type 1 has an invalid length.
[  520.031665][ T1401] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6243'.
[  520.124080][ T1406] netlink: 'syz.0.6244': attribute type 1 has an invalid length.
[  520.127000][ T1406] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6244'.
[  520.206043][ T1413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6246'.
[  520.299761][ T1417] bond21: entered promiscuous mode
[  520.302916][ T1417] 8021q: adding VLAN 0 to HW filter on device bond21
[  520.306014][ T1417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6247'.
[  520.340101][ T1425] 8021q: adding VLAN 0 to HW filter on device bond33
[  520.372598][ T1425] bond33: (slave gretap3): making interface the new active one
[  520.386425][ T1425] bond33: (slave gretap3): Enslaving as an active interface with an up link
[  520.409772][ T1425] syz.2.6248 (1425) used greatest stack depth: 18272 bytes left
[  523.206362][ T1413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  523.210563][ T1433] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6250'.
[  523.495258][ T1450] IPv6: NLM_F_CREATE should be specified when creating new route
[  523.693851][ T1470] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6255'.
[  523.822030][ T1484] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6261'.
[  523.870352][ T1491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.030754][ T1505] validate_nla: 8 callbacks suppressed
[  524.030772][ T1505] netlink: 'syz.1.6266': attribute type 1 has an invalid length.
[  524.082746][ T1512] netlink: 'syz.1.6268': attribute type 1 has an invalid length.
[  524.101326][ T1507] netlink: 'syz.0.6267': attribute type 1 has an invalid length.
[  524.198898][ T1515] netlink: 'syz.1.6269': attribute type 1 has an invalid length.
[  524.321534][ T1533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.332792][ T1532] ip6erspan0: entered allmulticast mode
[  524.339887][ T1532] A link change request failed with some changes committed already. Interface ip6erspan0 may have been left with an inconsistent configuration, please check.
[  524.437237][ T1537] netlink: 'syz.0.6274': attribute type 1 has an invalid length.
[  524.560652][ T1540] syzkaller0: entered promiscuous mode
[  524.564767][ T1540] syzkaller0: entered allmulticast mode
[  524.735651][ T1545] netlink: 'syz.0.6275': attribute type 1 has an invalid length.
[  524.738796][ T1545] __nla_validate_parse: 11 callbacks suppressed
[  524.738811][ T1545] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6275'.
[  527.301721][ T1547] netlink: 'syz.2.6276': attribute type 1 has an invalid length.
[  527.304253][ T1547] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6276'.
[  527.512498][T13685] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  527.715452][ T1574] netlink: zone id is out of range
[  527.717108][ T1574] netlink: zone id is out of range
[  527.718743][ T1574] netlink: zone id is out of range
[  527.720474][ T1574] netlink: zone id is out of range
[  527.722038][ T1574] netlink: zone id is out of range
[  527.723629][ T1574] netlink: zone id is out of range
[  527.725777][ T1574] netlink: zone id is out of range
[  528.252748][ T1552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  528.260276][ T1559] netlink: 'syz.0.6279': attribute type 1 has an invalid length.
[  528.264066][ T1559] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6279'.
[  528.268680][ T1571] netlink: 'syz.1.6278': attribute type 1 has an invalid length.
[  528.271994][ T1571] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6278'.
[  528.277206][ T1573] netlink: 'syz.2.6280': attribute type 1 has an invalid length.
[  528.284748][ T1573] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6280'.
[  528.580083][ T1603] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6287'.
[  528.683633][ T1622] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6290'.
[  528.721462][ T1624] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6289'.
[  528.771658][ T1629] syzkaller0: entered promiscuous mode
[  528.773496][ T1629] syzkaller0: entered allmulticast mode
[  528.824832][ T1636] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6293'.
[  529.040082][ T1656] net_ratelimit: 7 callbacks suppressed
[  529.040096][ T1656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  529.098544][ T1667] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6300'.
[  529.145604][ T1661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  529.221098][ T1681] validate_nla: 3 callbacks suppressed
[  529.221110][ T1681] netlink: 'syz.1.6302': attribute type 1 has an invalid length.
[  529.607824][ T1723] netlink: 'syz.0.6310': attribute type 1 has an invalid length.
[  529.644474][ T1727] netlink: 'syz.0.6311': attribute type 1 has an invalid length.
[  529.788880][ T1734] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.962442][ T1739] netlink: 'syz.0.6314': attribute type 1 has an invalid length.
[  529.965720][ T1739] __nla_validate_parse: 6 callbacks suppressed
[  529.965735][ T1739] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6314'.
[  530.180839][ T1752] netlink: 'syz.2.6316': attribute type 1 has an invalid length.
[  530.184107][ T1752] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6316'.
[  530.220968][ T1765] xfrm0: Caught tx_queue_len zero misconfig
[  530.224364][ T1765] netlink: 'syz.0.6319': attribute type 1 has an invalid length.
[  530.229704][ T1765] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6319'.
[  530.326450][ T1772] netlink: 'syz.0.6321': attribute type 1 has an invalid length.
[  530.328894][ T1772] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6321'.
[  530.340707][ T1779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6322'.
[  530.346337][ T1779] xt_TCPMSS: Only works on TCP SYN packets
[  530.420554][ T1788] netlink: 'syz.1.6325': attribute type 1 has an invalid length.
[  530.423691][ T1788] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6325'.
[  530.502965][ T1791] netlink: 'syz.0.6326': attribute type 1 has an invalid length.
[  530.509635][ T1791] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6326'.
[  530.519959][ T1796] netlink: 'syz.0.6326': attribute type 1 has an invalid length.
[  530.527996][ T1796] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6326'.
[  530.646954][ T1812] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6328'.
[  530.722471][ T1819] syzkaller0: entered promiscuous mode
[  530.726235][ T1819] syzkaller0: entered allmulticast mode
[  530.733670][ T1822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6333'.
[  531.653455][ T1865] sctp: [Deprecated]: syz.2.6344 (pid 1865) Use of int in max_burst socket option.
[  531.653455][ T1865] Use struct sctp_assoc_value instead
[  531.910828][ T1889] No such timeout policy "syz1"
[  532.054028][ T1901] geneve0: entered promiscuous mode
[  532.056327][ T1901] macvlan2: entered promiscuous mode
[  532.184426][ T1912] IPVS: ip_vs_edit_dest(): server weight less than zero
[  532.194036][ T1912] SET target dimension over the limit!
[  532.392970][ T1938] siw: device registration error -23
[  532.454242][ T1938] smbdirect: ib_dev[syz2] removed
[  532.533467][ T1949] netlink: zone id is out of range
[  532.535872][ T1949] netlink: zone id is out of range
[  532.538327][ T1949] netlink: zone id is out of range
[  532.540060][ T1949] netlink: del zone limit has 4 unknown bytes
[  532.913594][ T1991] openvswitch: netlink: Missing valid actions attribute.
[  532.921407][ T1991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  533.001521][ T1984] macvlan5: entered promiscuous mode
[  533.003319][ T1984] macvlan5: entered allmulticast mode
[  533.938158][ T2075] 8021q: adding VLAN 0 to HW filter on device bond34
[  534.052330][ T2087] xt_l2tp: invalid flags combination: 0
[  534.057998][ T2088] ipip4: entered promiscuous mode
[  534.187748][ T2097] ip6t_srh: unknown srh match flags  4000
[  534.436464][ T2121] validate_nla: 40 callbacks suppressed
[  534.436483][ T2121] netlink: 'syz.0.6405': attribute type 1 has an invalid length.
[  534.669128][ T2142] netlink: 'syz.0.6410': attribute type 1 has an invalid length.
[  534.688618][ T2139] netlink: 'syz.1.6409': attribute type 1 has an invalid length.
[  534.773980][ T2148] netlink: 'syz.1.6412': attribute type 1 has an invalid length.
[  534.778818][ T2152] netlink: 'syz.0.6411': attribute type 1 has an invalid length.
[  534.789196][ T2145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  534.875382][ T2161] netlink: 'syz.1.6415': attribute type 1 has an invalid length.
[  534.990245][ T2175] netlink: 'syz.1.6417': attribute type 1 has an invalid length.
[  535.005278][ T2175] __nla_validate_parse: 64 callbacks suppressed
[  535.005291][ T2175] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6417'.
[  535.036804][ T2180] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  535.093932][ T2180] netlink: 'syz.0.6419': attribute type 12 has an invalid length.
[  535.110034][ T2179] netlink: 'syz.0.6419': attribute type 1 has an invalid length.
[  535.113960][ T2179] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6419'.
[  535.261649][ T2202] netlink: 'syz.1.6422': attribute type 1 has an invalid length.
[  535.279895][ T2202] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6422'.
[  535.319579][ T2208] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6423'.
[  535.373264][ T2211] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6424'.
[  535.403962][ T2213] syzkaller0: entered promiscuous mode
[  535.409003][ T2213] syzkaller0: entered allmulticast mode
[  535.497543][ T2218] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6426'.
[  535.603139][ T2229] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6428'.
[  535.622797][ T2226] x_tables: ip_tables: TEE.1 target: invalid size 40 (kernel) != (user) 0
[  535.623216][ T2231] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6428'.
[  535.655986][ T2229] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6428'.
[  535.665061][ T2231] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6428'.
[  536.253171][ T2285] sctp: [Deprecated]: syz.2.6439 (pid 2285) Use of int in max_burst socket option.
[  536.253171][ T2285] Use struct sctp_assoc_value instead
[  536.315058][ T2290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  536.686642][ T2323] : entered promiscuous mode
[  541.459863][ T2465] validate_nla: 19 callbacks suppressed
[  541.459875][ T2465] netlink: 'syz.2.6469': attribute type 1 has an invalid length.
[  541.464365][ T2465] __nla_validate_parse: 24 callbacks suppressed
[  541.464449][ T2465] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6469'.
[  541.520856][ T2464] netlink: 'syz.0.6470': attribute type 1 has an invalid length.
[  541.523369][ T2464] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6470'.
[  541.581610][ T2476] netlink: 'syz.2.6469': attribute type 1 has an invalid length.
[  541.587122][ T2476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6469'.
[  541.592729][ T2469] netlink: 'syz.1.6471': attribute type 1 has an invalid length.
[  541.598398][ T2469] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6471'.
[  541.661861][ T2486] netlink: 'syz.1.6473': attribute type 1 has an invalid length.
[  541.670402][ T2486] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6473'.
[  541.736299][ T2498] sctp: [Deprecated]: syz.1.6474 (pid 2498) Use of int in max_burst socket option deprecated.
[  541.736299][ T2498] Use struct sctp_assoc_value instead
[  541.833768][ T2502] netlink: 'syz.1.6476': attribute type 1 has an invalid length.
[  541.836363][ T2502] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6476'.
[  541.873203][ T2512] netlink: 'syz.0.6477': attribute type 1 has an invalid length.
[  541.876324][ T2512] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6477'.
[  541.909091][ T2517] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6478'.
[  541.912783][ T2517] netlink: 'syz.1.6478': attribute type 1 has an invalid length.
[  541.916417][ T2517] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6478'.
[  541.988226][ T2527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6481'.
[  542.027448][ T2524] netlink: 'syz.1.6480': attribute type 1 has an invalid length.
[  542.097793][ T2542] netlink: 'syz.1.6483': attribute type 1 has an invalid length.
[  542.187920][ T2549] can: request_module (can-proto-4) failed.
[  542.377252][ T2566] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  542.386055][ T2576] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  542.437744][ T2566] xt_CT: No such helper "netbios-ns"
[  542.652968][ T2613] sit0: Caught tx_queue_len zero misconfig
[  543.855048][ T2763] 8021q: adding VLAN 0 to HW filter on device bond53
[  543.920943][ T2759] macvlan5: entered promiscuous mode
[  543.923060][ T2759] macvlan5: entered allmulticast mode
[  544.005216][ T5625] Bluetooth: hci2: command 0x0405 tx timeout
[  544.096291][ T2787] bond22: entered promiscuous mode
[  544.098160][ T2787] 8021q: adding VLAN 0 to HW filter on device bond22
[  544.124433][ T2796] netlink: 'syz.0.6528': attribute type 11 has an invalid length.
[  544.139384][ T2796] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  544.608600][ T2834] syzkaller0: entered promiscuous mode
[  544.610509][ T2834] syzkaller0: entered allmulticast mode
[  544.687201][ T2848] syzkaller1: entered promiscuous mode
[  544.688987][ T2848] syzkaller1: entered allmulticast mode
[  544.695505][ T2848] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  544.699821][ T2849] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  545.188324][ T2915] syzkaller0: entered promiscuous mode
[  545.193004][ T2915] syzkaller0: entered allmulticast mode
[  545.657022][ T5625] Bluetooth: hci2: link tx timeout
[  545.659408][ T5625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  545.668238][ T2965] Bluetooth: hci2: link tx timeout
[  545.673634][ T2965] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  545.732375][ T2965] Bluetooth: hci2: link tx timeout
[  545.734122][ T2965] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  545.767821][ T2965] Bluetooth: hci2: link tx timeout
[  545.769460][ T2965] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  546.120067][ T2965] Bluetooth: hci2: link tx timeout
[  546.122223][ T2965] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  546.165232][ T2965] Bluetooth: hci2: link tx timeout
[  546.167360][ T2965] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  546.171286][ T2997] --map-set only usable from mangle table
[  546.396138][ T3006] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  546.512366][ T3008] validate_nla: 41 callbacks suppressed
[  546.512382][ T3008] netlink: 'syz.2.6568': attribute type 1 has an invalid length.
[  546.521462][ T3008] __nla_validate_parse: 72 callbacks suppressed
[  546.521511][ T3008] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6568'.
[  546.532004][ T3011] netlink: 'syz.0.6569': attribute type 1 has an invalid length.
[  546.535223][ T3011] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6569'.
[  546.577426][ T3017] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6571'.
[  546.581908][ T3019] netlink: 'syz.2.6570': attribute type 1 has an invalid length.
[  546.582737][ T3017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6571'.
[  546.585754][ T3019] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6570'.
[  547.034960][ T3053] netlink: 'syz.0.6579': attribute type 1 has an invalid length.
[  547.038149][ T3053] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6579'.
[  547.065920][ T3055] netlink: 'syz.1.6578': attribute type 1 has an invalid length.
[  547.070379][ T3055] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6578'.
[  547.075083][ T3055] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6578'.
[  547.103291][ T3067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6582'.
[  547.106297][ T3067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6582'.
[  547.133548][ T2965] Bluetooth: hci2: link tx timeout
[  547.135516][ T2965] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  547.144039][ T2965] Bluetooth: hci2: link tx timeout
[  547.147547][ T2965] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  547.189684][ T3070] netlink: 'syz.0.6581': attribute type 1 has an invalid length.
[  547.203027][ T3062] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  547.209635][ T3073] netlink: 'syz.2.6583': attribute type 1 has an invalid length.
[  547.212442][ T3073] netlink: 'syz.2.6583': attribute type 1 has an invalid length.
[  547.259992][ T3072] netlink: 'syz.2.6583': attribute type 1 has an invalid length.
[  547.335303][ T3073] netlink: 'syz.2.6583': attribute type 1 has an invalid length.
[  547.388892][ T2965] Bluetooth: hci2: link tx timeout
[  547.391010][ T2965] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  547.417266][ T3080] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  547.555362][ T3093] syzkaller0: entered promiscuous mode
[  547.561892][ T3093] syzkaller0: entered allmulticast mode
[  547.569825][ T3093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  547.573071][ T3093] IPVS: length: 35 != 24
[  547.581238][ T3092] tipc: Resetting bearer <eth:syzkaller0>
[  547.613190][ T3092] tipc: Disabling bearer <eth:syzkaller0>
[  547.646257][T31075] hid (null): unknown global tag 0xb4
[  547.652868][T31075] hid (null): unknown global tag 0xd
[  547.674874][T31075] hid-generic 0005:0001:0040.0001: unexpected long global item
[  547.679440][T31075] hid-generic 0005:0001:0040.0001: probe with driver hid-generic failed with error -22
[  547.685203][ T2965] Bluetooth: hci2: command 0x0405 tx timeout
[  547.873669][ T3115] 8021q: adding VLAN 0 to HW filter on device bond54
[  547.908235][ T3115] bond54: (slave veth31): Enslaving as an active interface with a down link
[  547.927380][ T3115] 8021q: adding VLAN 0 to HW filter on device batadv1
[  547.930225][ T3115] bond54: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  548.635208][ T3161] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  548.638033][ T3161] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  548.640607][ T3161] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  548.768355][ T3169] 8021q: adding VLAN 0 to HW filter on device batadv1
[  549.582121][ T3264] IPv6: sit4: Disabled Multicast RS
[  549.846624][ T3287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  549.893320][ T3294] netlink: 'syz.1.6633': attribute type 11 has an invalid length.
[  549.907324][ T3295] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  549.909923][ T3295] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  550.074131][ T3302] 8021q: adding VLAN 0 to HW filter on device bond23
[  550.095513][ T3303] bond23: (slave veth19): Enslaving as an active interface with a down link
[  550.106430][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv2
[  550.110608][ T3302] bond23: (slave batadv2): making interface the new active one
[  550.113991][ T3302] batadv2: entered promiscuous mode
[  550.116673][ T3302] bond23: (slave batadv2): Enslaving as an active interface with an up link
[  550.906986][ T3349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  550.993212][ T3355] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  551.522513][ T3399] x_tables: duplicate underflow at hook 2
[  551.527520][ T3399] validate_nla: 94 callbacks suppressed
[  551.527529][ T3399] netlink: 'syz.0.6659': attribute type 1 has an invalid length.
[  551.532308][ T3399] __nla_validate_parse: 48 callbacks suppressed
[  551.532317][ T3399] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6659'.
[  551.603317][ T3394] netlink: 'syz.2.6657': attribute type 1 has an invalid length.
[  551.611918][ T3394] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6657'.
[  551.738941][ T3415] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6662'.
[  551.752423][ T3426] netlink: 'syz.1.6665': attribute type 1 has an invalid length.
[  551.755228][ T3426] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6665'.
[  551.759038][ T3427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6664'.
[  551.827409][ T3416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6664'.
[  551.831423][ T3427] team0: entered promiscuous mode
[  551.835225][ T3427] team0: entered allmulticast mode
[  551.837618][ T3427] 8021q: adding VLAN 0 to HW filter on device team0
[  551.858790][ T3416] team1: entered promiscuous mode
[  551.861989][ T3416] team1: entered allmulticast mode
[  551.864109][ T3416] 8021q: adding VLAN 0 to HW filter on device team1
[  551.920041][ T3437] netlink: 'syz.0.6668': attribute type 1 has an invalid length.
[  551.923079][ T3437] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6668'.
[  552.003077][ T3447] netlink: 'syz.0.6669': attribute type 1 has an invalid length.
[  552.006912][ T3447] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6669'.
[  552.013207][ T3446] bond28: (slave veth25): Releasing backup interface
[  552.017309][ T3446] veth25: left promiscuous mode
[  552.038952][ T3446] bond32: (slave veth27): Releasing backup interface
[  552.043680][ T3446] veth27: left promiscuous mode
[  552.046680][ T3443] netlink: 'syz.1.6671': attribute type 1 has an invalid length.
[  552.052930][ T3443] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6671'.
[  552.060818][ T3446] bond33: (slave gretap3): Releasing active interface
[  552.082564][ T3453] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6672'.
[  552.113736][ T3446] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  552.123880][ T3446] netlink: 'syz.2.6670': attribute type 1 has an invalid length.
[  552.172610][ T3462] netlink: 'syz.0.6674': attribute type 1 has an invalid length.
[  552.239648][ T3471] netlink: 'syz.0.6676': attribute type 1 has an invalid length.
[  552.277624][ T3468] netlink: 'syz.1.6675': attribute type 1 has an invalid length.
[  552.426247][ T3494] bond35: entered promiscuous mode
[  552.428239][ T3494] 8021q: adding VLAN 0 to HW filter on device bond35
[  552.475079][ T3494] 8021q: adding VLAN 0 to HW filter on device bond35
[  552.477546][ T3494] bond35: (slave gre2): The slave device specified does not support setting the MAC address
[  552.481216][ T3494] bond35: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  552.488562][ T3494] bond35: (slave gre2): making interface the new active one
[  552.491007][ T3494] gre2: entered promiscuous mode
[  552.494118][ T3494] bond35: (slave gre2): Enslaving as an active interface with an up link
[  552.891560][ T3529] syzkaller0: entered promiscuous mode
[  552.900414][ T3529] syzkaller0: entered allmulticast mode
[  552.940095][ T3532] 0{X: left allmulticast mode
[  552.947087][ T3532] dummy0: left promiscuous mode
[  552.950691][ T3532] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  552.967735][ T3532] ip6erspan0: left allmulticast mode
[  552.987565][ T3532] geneve3: left promiscuous mode
[  552.989786][ T3532] bridge0: left promiscuous mode
[  552.991590][ T3532] bridge0: left allmulticast mode
[  552.995315][ T3532] bond36: left promiscuous mode
[  553.003864][ T3532] bond39: left promiscuous mode
[  553.060394][ T3532] gretap4: left allmulticast mode
[  553.093218][ T3532] ip6tnl5: left allmulticast mode
[  553.123745][ T3532] bond51: left promiscuous mode
[  553.132781][ T3532] geneve4: left promiscuous mode
[  553.148858][ T3532] macvlan5: left promiscuous mode
[  553.152640][ T3532] macvlan5: left allmulticast mode
[  553.173319][ T3532] team0: left promiscuous mode
[  553.177248][ T3532] team0: left allmulticast mode
[  553.184336][ T3532] team1: left promiscuous mode
[  553.189549][ T3532] team1: left allmulticast mode
[  553.231253][ T5728] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.235061][ T5728] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.238140][ T5728] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.293566][ T3540] syzkaller1: entered promiscuous mode
[  553.303049][ T3540] syzkaller1: entered allmulticast mode
[  555.087489][ T3609] syz.2.6705 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  555.120088][ T3609] CPU: 1 UID: 0 PID: 3609 Comm: syz.2.6705 Not tainted syzkaller #0 PREEMPT(full) 
[  555.120102][ T3609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  555.120108][ T3609] Call Trace:
[  555.120112][ T3609]  <TASK>
[  555.120117][ T3609]  dump_stack_lvl+0xe8/0x150
[  555.120136][ T3609]  dump_header+0xd3/0x4b0
[  555.120153][ T3609]  oom_kill_process+0x3ab/0x970
[  555.120169][ T3609]  out_of_memory+0x1064/0x1480
[  555.120179][ T3609]  ? try_charge_memcg+0xbca/0x1590
[  555.120196][ T3609]  ? __pfx_out_of_memory+0x10/0x10
[  555.120206][ T3609]  ? do_raw_spin_unlock+0x4d/0x210
[  555.120226][ T3609]  try_charge_memcg+0xc74/0x1590
[  555.120242][ T3609]  ? __pfx_try_charge_memcg+0x10/0x10
[  555.120250][ T3609]  ? percpu_ref_tryget+0x15/0x180
[  555.120270][ T3609]  ? charge_memcg+0x20/0x2b0
[  555.120279][ T3609]  charge_memcg+0x19c/0x2b0
[  555.120288][ T3609]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  555.120297][ T3609]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  555.120307][ T3609]  swap_cache_alloc_folio+0x4de/0x990
[  555.120326][ T3609]  swap_cache_read_folio+0x44/0x120
[  555.120340][ T3609]  swap_cluster_readahead+0x3a0/0x640
[  555.120354][ T3609]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  555.120372][ T3609]  ? get_vma_policy+0x27b/0x3c0
[  555.120384][ T3609]  swapin_readahead+0x19a/0xc10
[  555.120398][ T3609]  ? swap_table_get+0x1e/0x260
[  555.120409][ T3609]  ? swap_table_get+0x1e/0x260
[  555.120420][ T3609]  ? __pfx_swapin_readahead+0x10/0x10
[  555.120432][ T3609]  ? swap_table_get+0x1e/0x260
[  555.120442][ T3609]  ? swap_table_get+0x1e/0x260
[  555.120452][ T3609]  ? swap_table_get+0x1e/0x260
[  555.120463][ T3609]  ? swap_table_get+0x216/0x260
[  555.120479][ T3609]  ? swap_cache_get_folio+0x2e7/0x2f0
[  555.120493][ T3609]  do_swap_page+0x455/0x5060
[  555.120510][ T3609]  ? __pte_offset_map+0x29/0x240
[  555.120526][ T3609]  ? __lock_acquire+0x683/0x2cf0
[  555.120534][ T3609]  ? do_swap_page+0x124/0x5060
[  555.120545][ T3609]  ? __pfx_do_swap_page+0x10/0x10
[  555.120555][ T3609]  ? __pte_offset_map+0x1ae/0x240
[  555.120568][ T3609]  ? pte_offset_map_rw_nolock+0xea/0x160
[  555.120581][ T3609]  handle_mm_fault+0x124c/0x3080
[  555.120599][ T3609]  ? handle_mm_fault+0xec/0x3080
[  555.120614][ T3609]  ? __pfx_handle_mm_fault+0x10/0x10
[  555.120624][ T3609]  ? lock_vma_under_rcu+0x45a/0x500
[  555.120649][ T3609]  do_user_addr_fault+0xa4d/0x1340
[  555.120665][ T3609]  ? trace_page_fault_user+0x84/0x1e0
[  555.120676][ T3609]  exc_page_fault+0x6a/0xc0
[  555.120689][ T3609]  asm_exc_page_fault+0x26/0x30
[  555.120697][ T3609] RIP: 0033:0x7f1934f9d9b8
[  555.120729][ T3609] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 fd c6 02 00 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 93 19 00 00 0f
[  555.120737][ T3609] RSP: 002b:00007ffd1fa6aff0 EFLAGS: 00010206
[  555.120746][ T3609] RAX: 0000000000000000 RBX: 00007f1935215fa0 RCX: 000055558789c808
[  555.120752][ T3609] RDX: 660e26b01d16c400 RSI: 0000000000000000 RDI: 0000000000000000
[  555.120757][ T3609] RBP: 00007f1935217da0 R08: 0000000000000000 R09: 0000000000000000
[  555.120763][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000008772b
[  555.120768][ T3609] R13: 00007f193521618c R14: 00000000000874d6 R15: 00007f1935216180
[  555.120783][ T3609]  </TASK>
[  555.120787][ T3609] memory: usage 307200kB, limit 307200kB, failcnt 3305
[  555.252305][ T3609] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0
[  555.255411][ T3609] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0
[  555.260817][ T3609] Memory cgroup stats for /syz2:
[  555.261028][ T3609] cache 0
[  555.268839][ T3609] rss 0
[  555.270665][ T3609] rss_huge 0
[  555.273032][ T3609] shmem 0
[  555.275673][ T3609] mapped_file 0
[  555.278811][ T3609] dirty 0
[  555.280314][ T3609] writeback 0
[  555.285009][ T3609] workingset_refault_anon 22
[  555.287017][ T3609] workingset_refault_file 1
[  555.288579][ T3609] swap 176128
[  555.289623][ T3609] swapcached 389120
[  555.293433][ T3609] pgpgin 182027
[  555.294646][ T3609] pgpgout 182010
[  555.295809][ T3609] pgfault 387158
[  555.297303][ T3659] 8021q: adding VLAN 0 to HW filter on device bond55
[  555.301477][ T3609] pgmajfault 20
[  555.302670][ T3609] inactive_anon 32768
[  555.304279][ T3609] active_anon 36864
[  555.306341][ T3609] inactive_file 0
[  555.307617][ T3609] active_file 0
[  555.308773][ T3609] unevictable 0
[  555.309859][ T3609] hierarchical_memory_limit 314572800
[  555.311457][ T3609] hierarchical_memsw_limit 9223372036854771712
[  555.313532][ T3609] total_cache 0
[  555.314925][ T3609] total_rss 0
[  555.316307][ T3609] total_rss_huge 0
[  555.317550][ T3609] total_shmem 0
[  555.318758][ T3609] total_mapped_file 0
[  555.320012][ T3609] total_dirty 0
[  555.321109][ T3609] total_writeback 0
[  555.322329][ T3609] total_workingset_refault_anon 22
[  555.324068][ T3609] total_workingset_refault_file 1
[  555.331383][ T3609] total_swap 176128
[  555.333798][ T3609] total_swapcached 389120
[  555.335732][ T3609] total_pgpgin 182028
[  555.337310][ T3609] total_pgpgout 182011
[  555.338863][ T3609] total_pgfault 387161
[  555.340211][ T3609] total_pgmajfault 20
[  555.341551][ T3609] total_inactive_anon 32768
[  555.343175][ T3609] total_active_anon 36864
[  555.345308][ T3609] total_inactive_file 0
[  555.346877][ T3609] total_active_file 0
[  555.350019][ T3609] total_unevictable 0
[  555.352158][ T3609] anon_cost 0
[  555.353337][ T3609] file_cost 0
[  555.355319][ T3609] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6705,pid=3609,uid=0
[  555.362941][ T3609] Memory cgroup out of memory: Killed process 3609 (syz.2.6705) total-vm:106660kB, anon-rss:1240kB, file-rss:27360kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  555.669786][ T3674] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20001
[  555.830155][ T3681] lo: Caught tx_queue_len zero misconfig
[  556.122000][ T3688] macvlan6: entered promiscuous mode
[  556.125309][ T3688] macvlan6: entered allmulticast mode
[  556.131644][ T3688] bridge18: port 1(macvlan6) entered blocking state
[  556.138833][ T3688] bridge18: port 1(macvlan6) entered disabled state
[  556.702525][ T3752] validate_nla: 25 callbacks suppressed
[  556.702542][ T3752] netlink: 'syz.2.6738': attribute type 1 has an invalid length.
[  556.721263][ T3752] __nla_validate_parse: 41 callbacks suppressed
[  556.721279][ T3752] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6738'.
[  556.832402][ T3761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6740'.
[  557.015416][ T3782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6745'.
[  557.096958][ T3772] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6742'.
[  557.332987][ T3815] netlink: 'syz.2.6750': attribute type 1 has an invalid length.
[  557.338094][ T3815] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6750'.
[  557.342657][ T3819] netlink: 'syz.1.6751': attribute type 1 has an invalid length.
[  557.345707][ T3819] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6751'.
[  557.350360][ T3820] netlink: 'syz.1.6751': attribute type 1 has an invalid length.
[  557.353492][ T3820] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6751'.
[  557.405202][ T3822] netlink: 'syz.2.6752': attribute type 1 has an invalid length.
[  557.409448][ T3822] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6752'.
[  557.430145][ T3826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6753'.
[  557.468809][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6754'.
[  557.550985][ T3837] netlink: 'syz.1.6756': attribute type 1 has an invalid length.
[  557.553144][ T3835] dvmrp8: entered allmulticast mode
[  557.560237][ T3835] netlink: 'syz.2.6755': attribute type 1 has an invalid length.
[  557.629583][ T3842] netlink: 'syz.2.6758': attribute type 1 has an invalid length.
[  557.718192][ T3853] netlink: 'syz.2.6760': attribute type 3 has an invalid length.
[  557.757439][ T3862] netlink: 'syz.2.6761': attribute type 1 has an invalid length.
[  557.801131][ T3866] NCSI netlink: No device for ifindex 0
[  557.938994][ T3876] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  559.902840][ T3936] 8021q: adding VLAN 0 to HW filter on device bond24
[  559.927545][ T3936] bond24: (slave veth21): Enslaving as an active interface with a down link
[  559.936843][ T3936] vlan2: entered allmulticast mode
[  559.938600][ T3936] veth0_to_bond: entered allmulticast mode
[  559.940860][ T3936] veth0_to_bond: entered promiscuous mode
[  559.945626][ T3936] veth0_to_bond: left promiscuous mode
[  559.950463][ T3936] bond24: (slave vlan2): making interface the new active one
[  559.953199][ T3936] veth0_to_bond: entered promiscuous mode
[  559.956066][ T3936] vlan2: entered promiscuous mode
[  559.958258][ T3936] bond24: (slave vlan2): Enslaving as an active interface with an up link
[  559.981977][ T3936] bond25: option updelay: invalid value (18446744073709518847)
[  559.984363][ T3936] bond25: option updelay: allowed values 0 - 2147483647
[  559.991027][ T3936] bond25 (unregistering): Released all slaves
[  561.197699][ T5728] batadv2: left promiscuous mode
[  561.750801][ T3992] __nla_validate_parse: 123 callbacks suppressed
[  561.750817][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6789'.
[  561.757182][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6789'.
[  561.763180][ T3992] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6789'.
[  561.809743][ T3996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6790'.
[  561.827566][ T3996] validate_nla: 108 callbacks suppressed
[  561.827585][ T3996] netlink: 'syz.1.6790': attribute type 1 has an invalid length.
[  561.833025][ T3996] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6790'.
[  562.091808][ T4006] netlink: 'syz.1.6793': attribute type 1 has an invalid length.
[  562.095541][ T4006] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6793'.
[  562.160923][ T4012] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6795'.
[  562.164189][ T4012] netlink: 'syz.0.6795': attribute type 1 has an invalid length.
[  562.168450][ T4012] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6795'.
[  562.244418][ T4014] netlink: 'syz.1.6796': attribute type 1 has an invalid length.
[  562.250563][ T4014] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6796'.
[  562.301938][ T4024] netlink: 'syz.1.6798': attribute type 1 has an invalid length.
[  562.312946][ T4024] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6798'.
[  562.319495][ T4024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  562.672432][ T4059] netlink: 'syz.0.6804': attribute type 1 has an invalid length.
[  562.732215][ T4059] netlink: 'syz.0.6804': attribute type 1 has an invalid length.
[  562.961261][ T4073] sctp: [Deprecated]: syz.0.6807 (pid 4073) Use of int in max_burst socket option.
[  562.961261][ T4073] Use struct sctp_assoc_value instead
[  562.969380][ T4073] netlink: 'syz.0.6807': attribute type 1 has an invalid length.
[  563.083065][ T4086] xt_l2tp: invalid flags combination: 0
[  563.384322][ T4116] netlink: 'syz.2.6814': attribute type 1 has an invalid length.
[  563.570643][ T4143] netlink: 'syz.1.6817': attribute type 1 has an invalid length.
[  563.886458][ T4180] 8021q: adding VLAN 0 to HW filter on device bond25
[  563.905750][ T4180] bond25 (unregistering): Released all slaves
[  565.044107][ T4220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  565.536430][ T4285] openvswitch: netlink: IP tunnel dst address not specified
[  565.867218][ T4325] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  565.873522][ T4325] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  565.926639][ T4329] openvswitch: netlink: IPv4 tunnel dst address is zero
[  566.757148][ T4426] syzkaller0: entered promiscuous mode
[  566.758936][ T4426] syzkaller0: entered allmulticast mode
[  566.925499][ T4437] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  566.929915][ T4437] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  566.933540][ T4437] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  566.940082][ T4437] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  568.406938][ T5625] Bluetooth: hci2: command 0x0405 tx timeout
[  568.568632][ T4443] __nla_validate_parse: 52 callbacks suppressed
[  568.568644][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6887'.
[  568.648357][ T4458] validate_nla: 26 callbacks suppressed
[  568.648368][ T4458] netlink: 'syz.1.6892': attribute type 1 has an invalid length.
[  568.657282][ T4458] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6892'.
[  568.662044][ T4460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6889'.
[  568.738357][ T4461] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6891'.
[  568.851339][ T4470] netlink: 'syz.1.6893': attribute type 1 has an invalid length.
[  568.857241][ T4470] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6893'.
[  568.910072][ T4490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6896'.
[  568.912927][ T4490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6896'.
[  568.921996][ T4490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6896'.
[  569.049300][ T4498] netlink: 'syz.2.6897': attribute type 1 has an invalid length.
[  569.203146][ T4494] netlink: 'syz.1.6898': attribute type 1 has an invalid length.
[  569.206191][ T4494] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6898'.
[  569.699152][ T4514] netlink: 'syz.1.6901': attribute type 1 has an invalid length.
[  569.702980][ T4514] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6901'.
[  569.789329][ T4527] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  569.794720][ T4527] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  569.861374][ T4535] netlink: 'syz.0.6904': attribute type 1 has an invalid length.
[  569.874318][ T4520] netlink: 'syz.1.6903': attribute type 1 has an invalid length.
[  569.878719][ T4521] netlink: 'syz.1.6903': attribute type 1 has an invalid length.
[  569.881635][ T4537] netlink: 'syz.2.6906': attribute type 1 has an invalid length.
[  569.969588][ T4541] netlink: 'syz.1.6907': attribute type 1 has an invalid length.
[  570.135060][ T4554] block nbd5: server does not support multiple connections per device.
[  570.137926][ T4554] block nbd5: shutting down sockets
[  570.274261][ T4577] xt_l2tp: missing protocol rule (udp|l2tpip)
[  570.282700][ T4577] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000
[  570.358296][ T4590] syzkaller1: entered promiscuous mode
[  570.360107][ T4590] syzkaller1: entered allmulticast mode
[  570.501026][ T4604] bond56: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  570.511933][ T4604] bond56 (unregistering): Released all slaves
[  572.297476][ T5728] vlan2: left promiscuous mode
[  572.540816][ T4656] veth32: entered allmulticast mode
[  572.704098][ T4679] netlink: 'syz.0.6937': attribute type 11 has an invalid length.
[  572.727009][ T4679] bridge0: port 1(dummy0) entered blocking state
[  572.730196][ T4679] bridge0: port 1(dummy0) entered disabled state
[  572.733208][ T4679] dummy0: entered allmulticast mode
[  572.744440][ T4679] dummy0: entered promiscuous mode
[  572.748568][ T4679] dummy0: left allmulticast mode
[  572.751434][ T4679] dummy0: left promiscuous mode
[  572.753024][ T4679] bridge0: port 1(dummy0) entered disabled state
[  573.177970][ T4722] syzkaller0: entered promiscuous mode
[  573.179998][ T4722] syzkaller0: entered allmulticast mode
[  574.843932][ T4744] validate_nla: 15 callbacks suppressed
[  574.843949][ T4744] netlink: 'syz.1.6951': attribute type 1 has an invalid length.
[  574.854889][ T4744] __nla_validate_parse: 32 callbacks suppressed
[  574.854905][ T4744] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6951'.
[  574.950906][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6953'.
[  575.028344][ T4752] block nbd5: server does not support multiple connections per device.
[  575.031356][ T4752] block nbd5: shutting down sockets
[  575.188050][ T4778] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6958'.
[  575.191268][ T4778] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6958'.
[  575.273784][ T4784] netlink: 'syz.1.6961': attribute type 12 has an invalid length.
[  575.738058][ T4752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  575.742411][ T4762] netlink: 'syz.0.6955': attribute type 1 has an invalid length.
[  575.745349][ T4762] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6955'.
[  575.748587][ T4784] netlink: 'syz.1.6961': attribute type 1 has an invalid length.
[  575.751740][ T4784] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6961'.
[  575.949521][ T4807] netlink: 'syz.1.6965': attribute type 1 has an invalid length.
[  575.952957][ T4807] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6965'.
[  575.963514][ T4802] netlink: 'syz.0.6964': attribute type 1 has an invalid length.
[  575.969551][ T4802] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6964'.
[  576.051582][ T4819] netlink: 'syz.1.6968': attribute type 1 has an invalid length.
[  576.055385][ T4819] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6968'.
[  576.064115][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6968'.
[  576.070415][ T4819] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  576.078886][ T4819] ipt_ECN: cannot use operation on non-tcp rule
[  576.140934][ T4818] syzkaller1: tun_chr_ioctl cmd 1074025677
[  576.143069][ T4818] syzkaller1: linktype set to 825
[  576.176451][ T4824] netlink: 'syz.1.6971': attribute type 1 has an invalid length.
[  576.230786][ T4830] netlink: 'syz.2.6973': attribute type 1 has an invalid length.
[  576.348473][ T4841] netlink: 'syz.0.6976': attribute type 10 has an invalid length.
[  576.543434][ T4859] SET target dimension over the limit!
[  576.640601][ T4874] xt_hashlimit: size too large, truncated to 1048576
[  576.820734][ T4885] veth29: entered allmulticast mode
[  576.829285][ T4885] bond37: (slave veth29): Enslaving as an active interface with an up link
[  577.056234][ T4905] bond56: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  577.061681][ T4905] bond56 (unregistering): Released all slaves
[  577.103942][ T4911] bond26: entered promiscuous mode
[  577.106577][ T4911] 8021q: adding VLAN 0 to HW filter on device bond26
[  577.357036][ T4928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  578.237911][ T5003] xt_l2tp: invalid flags combination: 8
[  578.250518][ T5003] gre0: entered promiscuous mode
[  578.254148][ T5003] gre0: entered allmulticast mode
[  578.689292][ T5066] block nbd0: Unsupported socket: should be TCP or UNIX.
[  578.901460][ T5085] : entered promiscuous mode
[  579.561722][ T5154] openvswitch: netlink: Missing key (keys=40, expected=100)
[  579.653198][ T5169] tipc: Enabled bearer <eth:vlan0>, priority 30
[  579.986658][ T5205] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  580.111802][ T5219] validate_nla: 30 callbacks suppressed
[  580.111816][ T5219] netlink: 'syz.1.7064': attribute type 1 has an invalid length.
[  580.117485][ T5219] __nla_validate_parse: 40 callbacks suppressed
[  580.117521][ T5219] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7064'.
[  580.201657][ T5221] netlink: 'syz.1.7065': attribute type 1 has an invalid length.
[  580.206345][ T5221] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7065'.
[  580.313238][ T5225] netlink: 'syz.1.7066': attribute type 1 has an invalid length.
[  580.318991][ T5225] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7066'.
[  580.428313][ T5235] netlink: 'syz.1.7068': attribute type 11 has an invalid length.
[  580.436238][ T5235] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7068'.
[  580.512570][ T5237] netlink: 'syz.1.7069': attribute type 1 has an invalid length.
[  580.515229][ T5237] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7069'.
[  580.615350][ T5245] netlink: 'syz.1.7072': attribute type 83 has an invalid length.
[  580.628846][ T5245] netlink: 'syz.1.7072': attribute type 1 has an invalid length.
[  580.631961][ T5245] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7072'.
[  580.677682][ T5247] tipc: New replicast peer: 255.255.255.255
[  580.680217][ T5247] tipc: Enabled bearer <udp:syz2>, priority 26
[  580.683101][ T5247] netlink: 'syz.2.7073': attribute type 1 has an invalid length.
[  580.685830][ T5247] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7073'.
[  580.760953][ T5249] netlink: 'syz.1.7074': attribute type 1 has an invalid length.
[  580.766717][ T5249] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7074'.
[  580.774158][ T5252] macsec0: entered promiscuous mode
[  580.783462][ T5257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7076'.
[  580.798499][ T5257] netlink: 'syz.0.7076': attribute type 1 has an invalid length.
[  580.807868][ T5257] netlink: 756 bytes leftover after parsing attributes in process `syz.0.7076'.
[  580.820034][ T5261] netlink: 'syz.1.7077': attribute type 1 has an invalid length.
[  580.998775][ T5285] xt_CT: You must specify a L4 protocol and not use inversions on it
[  581.733251][ T5347] 8021q: adding VLAN 0 to HW filter on device bond38
[  581.750225][ T5344] IPv6: NLM_F_CREATE should be specified when creating new route
[  583.170095][ T5471] veth33: entered promiscuous mode
[  583.172276][ T5471] veth33: entered allmulticast mode
[  583.175053][ T5471] team0: Device veth33 is up. Set it down before adding it as a team port
[  583.301699][ T5484] IPVS: Error connecting to the multicast addr
[  583.997027][ T5563] batadv0: entered promiscuous mode
[  584.003687][ T5563] batadv0: entered allmulticast mode
[  584.011343][ T5563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  584.903104][ T5573] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  584.914866][ T5573] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  584.952917][ T5638] macvlan6: entered promiscuous mode
[  584.958531][ T5638] macvlan6: entered allmulticast mode
[  584.971663][ T5573] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  584.974462][ T5573] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  585.160715][ T5665] validate_nla: 68 callbacks suppressed
[  585.160726][ T5665] netlink: 'syz.1.7159': attribute type 1 has an invalid length.
[  585.170185][ T5665] __nla_validate_parse: 90 callbacks suppressed
[  585.170195][ T5665] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7159'.
[  585.210810][ T5663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7160'.
[  585.261880][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7160'.
[  585.272825][ T5666] netlink: 'syz.2.7160': attribute type 1 has an invalid length.
[  585.278227][ T5666] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7160'.
[  585.287952][ T5663] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7160'.
[  585.297394][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7160'.
[  585.320786][ T5685] netlink: 'syz.1.7161': attribute type 1 has an invalid length.
[  585.326497][ T5685] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7161'.
[  585.417633][ T5702] netlink: 'syz.2.7162': attribute type 1 has an invalid length.
[  585.421772][ T5702] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7162'.
[  585.426341][ T5693] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7162'.
[  585.432878][ T5698] netlink: 'syz.1.7163': attribute type 1 has an invalid length.
[  585.441159][ T5698] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7163'.
[  585.549286][ T5710] netlink: 'syz.1.7165': attribute type 1 has an invalid length.
[  585.619994][ T5719] netlink: 'syz.1.7166': attribute type 1 has an invalid length.
[  585.806761][ T5740] netlink: 'syz.0.7168': attribute type 1 has an invalid length.
[  585.927945][ T5744] netlink: 'syz.0.7170': attribute type 1 has an invalid length.
[  586.238631][ T5797] netlink: 'syz.0.7177': attribute type 1 has an invalid length.
[  586.340129][ T5800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.918083][ T5970] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  588.978138][ T5974] geneve6: entered promiscuous mode
[  588.981003][ T5674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.984117][ T5674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.987329][ T5674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.994090][ T5674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.146051][ T5988] bond39: entered promiscuous mode
[  589.148420][ T5988] 8021q: adding VLAN 0 to HW filter on device bond39
[  589.190070][ T5988] 8021q: adding VLAN 0 to HW filter on device bond39
[  589.207174][ T5988] bond39: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  589.223548][ T5988] bond39: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  589.239051][ T5988] bond39: (slave ip6gre1): making interface the new active one
[  589.241963][ T5988] ip6gre1: entered promiscuous mode
[  589.246603][ T5988] bond39: (slave ip6gre1): Enslaving as an active interface with an up link
[  589.976237][ T6067] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  590.005846][ T6067] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  590.021596][ T6072] x_tables: duplicate underflow at hook 1
[  590.093721][ T6076] tipc: Resetting bearer <eth:vlan0>
[  590.260088][ T6080] validate_nla: 37 callbacks suppressed
[  590.260103][ T6080] netlink: 'syz.2.7240': attribute type 1 has an invalid length.
[  590.266259][ T6080] __nla_validate_parse: 44 callbacks suppressed
[  590.266275][ T6080] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7240'.
[  590.270665][ T6090] netlink: 'syz.0.7241': attribute type 1 has an invalid length.
[  590.316469][ T6090] bond56: (slave veth33): Enslaving as an active interface with a down link
[  590.340894][ T6090] bond56: (slave veth35): Enslaving as an active interface with a down link
[  590.348218][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7241'.
[  590.355296][ T6090] 8021q: adding VLAN 0 to HW filter on device bond56
[  590.433483][ T6100] netlink: 'syz.2.7243': attribute type 1 has an invalid length.
[  590.438348][ T6100] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7243'.
[  590.443135][ T6097] netlink: 'syz.0.7244': attribute type 1 has an invalid length.
[  590.449199][ T6097] netlink: 756 bytes leftover after parsing attributes in process `syz.0.7244'.
[  590.559784][ T6111] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7247'.
[  590.574116][ T6111] netlink: 'syz.0.7247': attribute type 1 has an invalid length.
[  590.582968][ T6111] netlink: 756 bytes leftover after parsing attributes in process `syz.0.7247'.
[  590.632515][ T6109] netlink: 'syz.2.7246': attribute type 1 has an invalid length.
[  590.635383][ T6109] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7246'.
[  590.678721][ T6125] netlink: 'syz.0.7248': attribute type 1 has an invalid length.
[  590.681795][ T6125] netlink: 756 bytes leftover after parsing attributes in process `syz.0.7248'.
[  590.813863][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7253'.
[  590.828776][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7253'.
[  590.858333][ T6131] netlink: 'syz.0.7253': attribute type 1 has an invalid length.
[  591.023739][ T6150] netlink: 'syz.2.7255': attribute type 1 has an invalid length.
[  591.033402][ T6150] netlink: 'syz.2.7255': attribute type 1 has an invalid length.
[  591.112308][ T6153] IPv6: NLM_F_CREATE should be specified when creating new route
[  591.241570][ T6168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  591.257852][ T6168] syzkaller0: entered promiscuous mode
[  591.268462][ T6168] syzkaller0: entered allmulticast mode
[  591.319388][ T6168] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1514) !
[  591.337900][ T6168] tipc: Resetting bearer <eth:syzkaller0>
[  591.430481][ T6167] tipc: Resetting bearer <eth:syzkaller0>
[  591.459942][ T6192] xt_CT: No such helper "snmp_trap"
[  591.463062][ T6167] tipc: Disabling bearer <eth:syzkaller0>
[  591.568953][ T6197] 8021q: adding VLAN 0 to HW filter on device bond57
[  591.612115][ T6197] IPVS: length: 109 != 8
[  591.627247][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv1
[  591.633173][ T6197] bond57: (slave batadv1): making interface the new active one
[  591.637153][ T6197] bond57: (slave batadv1): Enslaving as an active interface with an up link
[  591.757258][ T6216] Cannot find add_set index 0 as target
[  591.952915][ T6233] 8021q: adding VLAN 0 to HW filter on device bond40
[  592.173261][ T6256] x_tables: duplicate underflow at hook 1
[  592.303289][ T6263] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  592.673204][ T6279] veth31: entered allmulticast mode
[  592.684056][ T6279] bond41: (slave veth31): Enslaving as an active interface with a down link
[  592.778868][ T6292] bond42: entered promiscuous mode
[  592.781078][ T6292] bond42: entered allmulticast mode
[  592.783535][ T6292] 8021q: adding VLAN 0 to HW filter on device bond42
[  592.794809][ T6292] erspan3: entered allmulticast mode
[  592.800442][ T6292] bond42: (slave erspan3): making interface the new active one
[  592.802830][ T6292] erspan3: entered promiscuous mode
[  592.807065][ T6292] bond42: (slave erspan3): Enslaving as an active interface with an up link
[  593.663989][ T6365] vlan4: entered promiscuous mode
[  593.665843][ T6365] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  593.670646][ T6365] vlan4: entered allmulticast mode
[  593.672381][ T6365] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  593.707992][   T13] bond24: (slave vlan2): link status definitely down, disabling slave
[  593.714526][   T13] bond24: now running without any active interface!
[  593.804171][ T6380] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component
[  595.310963][ T6439] validate_nla: 30 callbacks suppressed
[  595.310981][ T6439] netlink: 'syz.2.7317': attribute type 1 has an invalid length.
[  595.318413][ T6439] __nla_validate_parse: 39 callbacks suppressed
[  595.318434][ T6439] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7317'.
[  595.463609][ T6454] netlink: 'syz.2.7321': attribute type 1 has an invalid length.
[  595.470828][ T6454] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7321'.
[  595.555305][ T6466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7324'.
[  595.601387][ T6472] netlink: 'syz.2.7323': attribute type 1 has an invalid length.
[  595.613318][ T6472] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7323'.
[  595.630297][ T6475] netlink: 'syz.1.7325': attribute type 1 has an invalid length.
[  595.632743][ T6475] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7325'.
[  595.801810][ T6484] netlink: 'syz.2.7327': attribute type 1 has an invalid length.
[  595.829707][ T6483] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7327'.
[  595.834053][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7327'.
[  595.839943][ T6483] 8021q: adding VLAN 0 to HW filter on device bond43
[  595.856636][ T6483] 8021q: adding VLAN 0 to HW filter on device bond43
[  595.864995][ T6483] bond43: (slave geneve7): making interface the new active one
[  595.868896][ T6483] bond43: (slave geneve7): Enslaving as an active interface with an up link
[  595.872471][ T5728] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  595.876330][ T5728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  595.887582][ T5728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  595.903395][ T5728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  596.042045][ T6489] netlink: 'syz.2.7329': attribute type 1 has an invalid length.
[  596.045635][ T6489] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7329'.
[  596.190881][ T6504] netlink: 'syz.1.7332': attribute type 1 has an invalid length.
[  596.194024][ T6504] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7332'.
[  596.232581][ T6507] netlink: 'syz.1.7333': attribute type 1 has an invalid length.
[  596.247733][ T6507] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7333'.
[  596.254149][ T6507] netlink: 'syz.1.7333': attribute type 1 has an invalid length.
[  596.429678][ T6517] netlink: 'syz.0.7335': attribute type 1 has an invalid length.
[  596.585555][T17682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.816343][ T6550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.844843][ T5074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.539753][ T6604] openvswitch: netlink: Missing key (keys=40, expected=100)
[  598.280512][ T6671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  598.667842][ T6702] mac80211_hwsim hwsim16 wlan1: Master is either lo or non-ether device
[  598.993230][ T6747] syzkaller0: refused to change device tx_queue_len
[  599.549552][ T6786] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[  599.552725][ T6786] bond0 (unregistering): Released all slaves
[  600.038485][ T6835] bond44: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  600.044374][ T6835] bond44 (unregistering): Released all slaves
[  600.061466][ T6837] xt_hl: Unknown TTL match mode: 237
[  600.380896][ T6878] pim6reg1: entered promiscuous mode
[  600.382904][ T6878] pim6reg1: entered allmulticast mode
[  600.400204][ T6878] veth36: entered allmulticast mode
[  600.408376][ T6874] validate_nla: 45 callbacks suppressed
[  600.408388][ T6874] netlink: 'syz.2.7411': attribute type 1 has an invalid length.
[  600.416595][ T6874] __nla_validate_parse: 54 callbacks suppressed
[  600.416606][ T6874] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7411'.
[  600.501677][ T6881] netlink: 'syz.2.7413': attribute type 1 has an invalid length.
[  600.505928][ T6881] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7413'.
[  600.590388][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7415'.
[  600.592498][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7414'.
[  600.597142][ T6888] netlink: 'syz.2.7415': attribute type 1 has an invalid length.
[  600.599635][ T6888] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7415'.
[  600.653282][ T6892] netlink: 'syz.0.7414': attribute type 1 has an invalid length.
[  600.656285][ T6892] netlink: 756 bytes leftover after parsing attributes in process `syz.0.7414'.
[  600.801130][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7419'.
[  600.808393][ T6909] netlink: 'syz.2.7419': attribute type 1 has an invalid length.
[  600.811140][ T6909] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7419'.
[  600.813947][ T6905] netlink: 'syz.0.7418': attribute type 1 has an invalid length.
[  600.819780][ T6905] netlink: 756 bytes leftover after parsing attributes in process `syz.0.7418'.
[  600.852981][ T6915] netlink: 'syz.2.7420': attribute type 1 has an invalid length.
[  600.855524][ T6915] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7420'.
[  600.895457][ T6919] netlink: 'syz.2.7422': attribute type 1 has an invalid length.
[  601.038554][ T6931] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  601.087472][ T6932] netlink: 'syz.1.7426': attribute type 1 has an invalid length.
[  601.153731][ T6940] netlink: 'syz.0.7427': attribute type 1 has an invalid length.
[  601.342413][ T6972] veth1_to_bond: entered promiscuous mode
[  601.348919][ T6971] bond0: option arp_validate: invalid value (55553)
[  601.353724][ T6970] veth1_to_bond: left promiscuous mode
[  601.644359][ T7004] openvswitch: netlink: Flow actions attr not present in new flow.
[  601.901696][ T7008] eql: remember to turn off Van-Jacobson compression on your slave devices
[  601.921797][ T7008] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  602.113394][ T7037] bridge0: entered allmulticast mode
[  604.118569][ T7157] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  604.133358][ T7157] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  604.480226][ T7173] bond0: entered promiscuous mode
[  604.482204][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.490728][ T7173] bond0: entered allmulticast mode
[  604.505506][ T7173] bond0: (slave bridge0): making interface the new active one
[  604.508048][ T7173] bridge0: entered promiscuous mode
[  604.510162][ T7173] bridge0: entered allmulticast mode
[  604.513034][ T7173] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  604.564980][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.732452][ T7186] syzkaller1: entered promiscuous mode
[  604.737381][ T7186] syzkaller1: entered allmulticast mode
[  605.169736][ T7215] bond44: entered promiscuous mode
[  605.311534][ T7229] bond45: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  605.315640][ T7229] bond45 (unregistering): Released all slaves
[  605.389526][ T7246] !: renamed from virt_wifi0
[  605.580431][ T7267] validate_nla: 29 callbacks suppressed
[  605.580451][ T7267] netlink: 'syz.1.7494': attribute type 1 has an invalid length.
[  605.590489][ T7267] __nla_validate_parse: 44 callbacks suppressed
[  605.590503][ T7267] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7494'.
[  605.601039][ T7262] netlink: 'syz.2.7496': attribute type 1 has an invalid length.
[  605.608153][ T7262] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7496'.
[  605.668111][ T7273] netlink: 'syz.1.7498': attribute type 1 has an invalid length.
[  605.671216][ T7273] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7498'.
[  605.752340][ T7279] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  605.756173][ T7279] netlink: 'syz.1.7501': attribute type 1 has an invalid length.
[  605.759274][ T7279] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7501'.
[  605.776804][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7502'.
[  605.790874][ T7282] gre0: left allmulticast mode
[  605.841876][ T7282] bond0: left allmulticast mode
[  605.843891][ T7282] bridge0: left allmulticast mode
[  605.905529][ T7284] netlink: 'syz.1.7503': attribute type 1 has an invalid length.
[  605.908363][ T7284] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7503'.
[  606.115082][ T7297] netlink: 'syz.1.7505': attribute type 1 has an invalid length.
[  606.117631][ T7297] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7505'.
[  606.249799][ T7307] netlink: 'syz.1.7507': attribute type 1 has an invalid length.
[  606.252672][ T7307] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7507'.
[  606.679815][ T7316] netlink: 'syz.2.7509': attribute type 1 has an invalid length.
[  606.682535][ T7316] netlink: 756 bytes leftover after parsing attributes in process `syz.2.7509'.
[  606.690319][ T7320] netlink: 'syz.0.7510': attribute type 1 has an invalid length.
[  606.694937][ T7320] netlink: 756 bytes leftover after parsing attributes in process `syz.0.7510'.
[  606.807818][ T7323] netlink: 'syz.1.7511': attribute type 1 has an invalid length.
[  607.297052][ T5478] 
[  607.298121][ T5478] ============================================
[  607.300498][ T5478] WARNING: possible recursive locking detected
[  607.302822][ T5478] syzkaller #0 Not tainted
[  607.304471][ T5478] --------------------------------------------
[  607.306366][ T5478] kworker/u8:2/5478 is trying to acquire lock:
[  607.308249][ T5478] ffff888168ac6158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  607.311193][ T5478] 
[  607.311193][ T5478] but task is already holding lock:
[  607.313338][ T5478] ffff88816dcde158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  607.316196][ T5478] 
[  607.316196][ T5478] other info that might help us debug this:
[  607.318614][ T5478]  Possible unsafe locking scenario:
[  607.318614][ T5478] 
[  607.320797][ T5478]        CPU0
[  607.321819][ T5478]        ----
[  607.322829][ T5478]   lock(&qdisc_xmit_lock_key#4);
[  607.324388][ T5478]   lock(&qdisc_xmit_lock_key#4);
[  607.325893][ T5478] 
[  607.325893][ T5478]  *** DEADLOCK ***
[  607.325893][ T5478] 
[  607.328396][ T5478]  May be due to missing lock nesting notation
[  607.328396][ T5478] 
[  607.330820][ T5478] 11 locks held by kworker/u8:2/5478:
[  607.332444][ T5478]  #0: ffff888174423140 ((wq_completion)bond42#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  607.335760][ T5478]  #1: ffffc9000423fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  607.339562][ T5478]  #2: ffffffff8e959c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0
[  607.342421][ T5478]  #3: ffffffff8e959cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0
[  607.345411][ T5478]  #4: ffff8881bca87228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0
[  607.349286][ T5478]  #5: ffff88816dcde158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  607.352403][ T5478]  #6: ffffffff8e959c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450
[  607.355228][ T5478]  #7: ffffffff8e959c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0
[  607.358112][ T5478]  #8: ffffffff8e959c60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  607.360721][ T5478]  #9: ffffffff8e959cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0
[  607.363694][ T5478]  #10: ffff888172c97228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0
[  607.367661][ T5478] 
[  607.367661][ T5478] stack backtrace:
[  607.369442][ T5478] CPU: 0 UID: 0 PID: 5478 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  607.369454][ T5478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  607.369462][ T5478] Workqueue: bond42 bond_alb_monitor
[  607.369476][ T5478] Call Trace:
[  607.369482][ T5478]  <TASK>
[  607.369488][ T5478]  dump_stack_lvl+0xe8/0x150
[  607.369500][ T5478]  print_deadlock_bug+0x279/0x290
[  607.369513][ T5478]  __lock_acquire+0x24df/0x2cf0
[  607.369524][ T5478]  ? __pfx_netif_skb_features+0x10/0x10
[  607.369538][ T5478]  ? ret_from_fork_asm+0x1a/0x30
[  607.369548][ T5478]  ? __lock_acquire+0x683/0x2cf0
[  607.369557][ T5478]  ? sch_direct_xmit+0x15f/0x4c0
[  607.369568][ T5478]  lock_acquire+0x106/0x350
[  607.369576][ T5478]  ? sch_direct_xmit+0x15f/0x4c0
[  607.369587][ T5478]  _raw_spin_lock+0x2e/0x40
[  607.369597][ T5478]  ? sch_direct_xmit+0x15f/0x4c0
[  607.369606][ T5478]  sch_direct_xmit+0x15f/0x4c0
[  607.369616][ T5478]  ? __pfx_sch_direct_xmit+0x10/0x10
[  607.369626][ T5478]  ? arp_solicit+0xb50/0xe40
[  607.369637][ T5478]  __dev_queue_xmit+0x1754/0x37f0
[  607.369652][ T5478]  ? __dev_queue_xmit+0x29b/0x37f0
[  607.369664][ T5478]  ? __lock_acquire+0x683/0x2cf0
[  607.369671][ T5478]  ? arpt_do_table+0x25b/0x1f90
[  607.369679][ T5478]  ? __pfx___dev_queue_xmit+0x10/0x10
[  607.369693][ T5478]  ? __pfx_arpt_do_table+0x10/0x10
[  607.369704][ T5478]  ? NF_HOOK+0xa2/0x3c0
[  607.369717][ T5478]  NF_HOOK+0x33a/0x3c0
[  607.369726][ T5478]  ? __pfx_arp_xmit_finish+0x10/0x10
[  607.369734][ T5478]  ? NF_HOOK+0xa2/0x3c0
[  607.369742][ T5478]  ? __pfx_NF_HOOK+0x10/0x10
[  607.369750][ T5478]  ? lock_acquire+0x106/0x350
[  607.369758][ T5478]  ? __pfx_arp_xmit_finish+0x10/0x10
[  607.369767][ T5478]  ? inet_addr_type_dev_table+0x25/0x190
[  607.369777][ T5478]  arp_xmit+0x16c/0x270
[  607.369785][ T5478]  ? arp_xmit+0x23/0x270
[  607.369794][ T5478]  arp_solicit+0xbdc/0xe40
[  607.369805][ T5478]  ? __pfx_arp_solicit+0x10/0x10
[  607.369815][ T5478]  ? __neigh_event_send+0xea4/0x1510
[  607.369825][ T5478]  ? __pfx_arp_solicit+0x10/0x10
[  607.369834][ T5478]  __neigh_event_send+0xf0c/0x1510
[  607.369846][ T5478]  neigh_resolve_output+0x1a1/0x720
[  607.369856][ T5478]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  607.369869][ T5478]  ? ip_finish_output2+0x3de/0x10b0
[  607.369878][ T5478]  ip_finish_output2+0xc4b/0x10b0
[  607.369888][ T5478]  ? ip_skb_dst_mtu+0x811/0xa50
[  607.369897][ T5478]  ? ip_finish_output2+0x3de/0x10b0
[  607.369907][ T5478]  ? ip_finish_output+0x40b/0x530
[  607.369916][ T5478]  ip_output+0x29f/0x450
[  607.369925][ T5478]  ? ip_output+0x5a/0x450
[  607.369934][ T5478]  iptunnel_xmit+0x626/0xd10
[  607.369947][ T5478]  ip_tunnel_xmit+0x195b/0x2040
[  607.369961][ T5478]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  607.369971][ T5478]  ? __pfx_gre_build_header+0x10/0x10
[  607.369980][ T5478]  ? kfree+0x1c5/0x640
[  607.369992][ T5478]  ? pskb_expand_head+0x469/0x13a0
[  607.370006][ T5478]  __gre_xmit+0x19e/0x240
[  607.370014][ T5478]  ? __pfx___gre_xmit+0x10/0x10
[  607.370024][ T5478]  erspan_xmit+0xad5/0x1590
[  607.370034][ T5478]  ? __pfx_erspan_xmit+0x10/0x10
[  607.370042][ T5478]  ? __lock_acquire+0x683/0x2cf0
[  607.370051][ T5478]  dev_hard_start_xmit+0x2cd/0x830
[  607.370066][ T5478]  sch_direct_xmit+0x257/0x4c0
[  607.370077][ T5478]  ? __pfx_sch_direct_xmit+0x10/0x10
[  607.370111][ T5478]  ? __switch_to_asm+0x70/0x70
[  607.370127][ T5478]  __dev_queue_xmit+0x1754/0x37f0
[  607.370145][ T5478]  ? __dev_queue_xmit+0x29b/0x37f0
[  607.370162][ T5478]  ? __pfx___dev_queue_xmit+0x10/0x10
[  607.370173][ T5478]  ? rcu_is_watching+0x15/0xb0
[  607.370184][ T5478]  ? kmem_cache_alloc_node_noprof+0x1a1/0x610
[  607.370197][ T5478]  ? trace_kmem_cache_alloc+0x29/0xe0
[  607.370208][ T5478]  ? kmem_cache_alloc_node_noprof+0x1a1/0x610
[  607.370222][ T5478]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  607.370234][ T5478]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  607.370248][ T5478]  ? __alloc_skb+0x4cc/0x7a0
[  607.370258][ T5478]  ? alb_send_lp_vid+0x14e/0x550
[  607.370270][ T5478]  alb_send_lp_vid+0x348/0x550
[  607.370280][ T5478]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  607.370293][ T5478]  alb_send_learning_packets+0x12c/0x300
[  607.370303][ T5478]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  607.370312][ T5478]  ? bond_alb_monitor+0xf3/0x17c0
[  607.370322][ T5478]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  607.370333][ T5478]  bond_alb_monitor+0x3d0/0x17c0
[  607.370343][ T5478]  ? bond_alb_monitor+0xf3/0x17c0
[  607.370352][ T5478]  ? __pfx_bond_alb_monitor+0x10/0x10
[  607.370361][ T5478]  ? rcu_is_watching+0x15/0xb0
[  607.370371][ T5478]  ? process_scheduled_works+0xa20/0x14e0
[  607.370383][ T5478]  process_scheduled_works+0xa8e/0x14e0
[  607.370400][ T5478]  ? __pfx_process_scheduled_works+0x10/0x10
[  607.370413][ T5478]  ? assign_work+0x3cf/0x5d0
[  607.370424][ T5478]  worker_thread+0xa47/0xfb0
[  607.370441][ T5478]  kthread+0x388/0x470
[  607.370451][ T5478]  ? __pfx_worker_thread+0x10/0x10
[  607.370462][ T5478]  ? __pfx_kthread+0x10/0x10
[  607.370470][ T5478]  ret_from_fork+0x514/0xb70
[  607.370481][ T5478]  ? __pfx_ret_from_fork+0x10/0x10
[  607.370489][ T5478]  ? __switch_to+0xc89/0x1420
[  607.370504][ T5478]  ? __pfx_kthread+0x10/0x10
[  607.370512][ T5478]  ret_from_fork_asm+0x1a/0x30
[  607.370525][ T5478]  </TASK>
[  607.580154][ T7381] syzkaller0: entered promiscuous mode
[  607.581871][ T7381] syzkaller0: entered allmulticast mode
