last executing test programs:

14.572947952s ago: executing program 3 (id=2823):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x5, 0x10, 0x3, 0x4}]}, 0x10)

14.53980933s ago: executing program 3 (id=2824):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f0000000280)) (async, rerun: 32)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)=@newsa={0x224, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x11d, 0x3, {{'lzjh\x00'}, 0x6a8, "03ffbf3a5a4c0cc79c7d387446915e9bf4db3a6a02f625b05f5b0aa895d8e02ce81532249be6326b0587b512a38ed9f9fa4cd4829468e2183741d3615e219a8fd2cbd13bb98aa5784e0426a43bd6e7c66d7268292db74d350c8083e4d670c864eabc8acdd279facf4de0e55312dd8a901bda8e189a9b61a5f260e65cfc93e9f5a55024ed25a70d2ae6b9224e8538e00199b01934865acdb44a7680c589c7c3f94cae8e09b03206cca3079cff130a9ecfdd30034040959d0b849752a97eedd41f5efdc6e9cb24f5eb18915d008b5e75eaa74a32ea24"}}, @sec_ctx={0xc, 0x8, {0x8}}, @XFRMA_IF_ID={0x8}]}, 0x224}}, 0x0) (rerun: 32)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x3d, 0x0}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x80) (async)
sendto$inet6(r2, 0x0, 0x0, 0x40000, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast2, 0x30}, 0x1c) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0xe8, 0x700001b, 0x148, 0xe8, 0x148, 0x218, 0x206, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x12}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0xa, 0x3, 0x3, 0x2, 0x5, 0x1], 0x1, 0x4}}}, @common=@set={{0x40}, {{0x2, [0x1, 0x2, 0x0, 0x4, 0x3, 0x2], 0x1, 0x9}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)

13.56077077s ago: executing program 3 (id=2826):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/169, 0xa9, 0x0, &(0x7f00000000c0)=""/7, 0x7}, &(0x7f0000000140)=0xffffffffffffff8b)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

13.541402567s ago: executing program 3 (id=2827):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001ec0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e80)={&(0x7f0000000440)={0x1a30, r1, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe9, 0x60}}}}, [@NL80211_ATTR_NAN_FUNC={0x1244, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "1c5c170a635f"}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1210, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x8d, 0x0, "0d5b613e0b91102a8fb245f4027f02b56bf455ecb1cccc4bcf55dcb9b3380a98c5a5f5fb11879c4d13676eb1f6d08b3758fc012b94b159e2190950b4d56ab8d3990576569cd61c17e02cb8dada8baf0b0bd60347f40622b15b85eae8d140e40144624d7abdb1cb31efc38bf70f26cc09c261347c6338e70bc1c766659f2eeecefab1ba8dc24c5ceb6e"}, {0x95, 0x0, "bcb720f30e5fe0c2776c43448fb1418c0692052535cae9825929157856d3a66e8f9fd7d664ed4569e7cd47dec037a835fe206da936f75d1b3b8846ac2483cb5611f17a0afd46566268a0852e50b4fbc55705b37ab62dbcc3489a757458ef578b034902850f73d8e3b55884339f1f72bc225330a94c20f4848f7db20461b8048d4326d2b6e62ee6074b22a1e6bede87d545"}, {0xde, 0x0, "289e12da5cf1d66c1942464280e82a8516c3b14603029b59a970fb560db93de96304e57eec2f335cb1a92a27d1ec23ba8496e2d164c63e054b3c344b09644d223f8d98347efa7239929189167e88783226d0c6771224510df9803094b226a013f0126c75e882f04255d8836d3b70452badd9994b12e0a8a6414133ae6eeac9b196496d39a7c021da86e5f08b9b9c4961cb50e87312562351b4b73ce9d86bc71594c5fa3583c040f83492a4a80291509cc431a6267b3738e93c1ac01c912a86eb1cc950997b4d24c6d2aa2e21fca509017fdfe57be5942593d658"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x220, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x218, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x260, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_INFO={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xb3}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x124, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xe}]}, @NL80211_ATTR_NAN_FUNC={0x2e4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x154, 0xe, 0x0, 0x1, [{0xde, 0x0, "dd992a399005df01763546745fe1cf6cb35621a5501d4ebb34c4550c6c282c1ea4438503475af669f5e87c8b26c7eb1c85cf4fd5ff1e3c2a27b205be68fe0d75c10f4768b3220380ecc8ea35dce630c13c99455adff0f9e7f94db340f39467c70f93fcd6bc93ad7d020b75391601321800bc8772df652055c7be7591045d7303322650303993210a7817390c85d3c7ea061240f91d16770f2797b0717aa9b3266634ce7015ddefb56bdf58e1dea8e1bc6f348f4aa7a4c391279c3e4ab6e76d70ff8d615efde0c84fa428826dd42444d6db40601f0e6b2ad65f21"}, {0x70, 0x0, "9a5c3207c06b21285a4567e3c7e8b4950463606ed4647d27b0a46b73cab6530c4f34f9a9f59bbd84eefbf182f51ffc58e7ac9a1370997068aa921ce97902b36104552d13b646cc0746d67fa2c12e6162935e158b817f8fc537bfafe456d90f23c199f3173160d8d56ae91915"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x10}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SRF={0x118, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0601441490e0"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x58, 0xb, "25f55644912b57d2009871784330ebb4832d2494b1be1ad2e33588d4b9f88e0af24a44672db580e392bb040a8f49d1b97ac2b66aac1ef5892c5581cb10e3695cd4d56acfd827042b2ff60918f15d9030c4997134"}]}, @NL80211_ATTR_NAN_FUNC={0x34, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x34, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7e}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}]}]}, 0x1a30}, 0x1, 0x0, 0x0, 0x20040884}, 0x80)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r2, 0x301, 0x70bd28, 0x0, {0x34}}, 0x14}}, 0x0)

3.47918293s ago: executing program 0 (id=2911):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X'], 0x58}}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000700000014f194e20002b"], 0x65)

3.1083069s ago: executing program 0 (id=2915):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000009c0)=0x4, 0x4)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="e7f3353d2c502ee49e716fe69b3797fea0de24f23416c6c5ea3ba8459374b72379e74d6f254027c0af8b7d22e536264d1bdd7d8a6d8d8eafc53c2f646c2b557ef3899651ac29d3be54448b13d2055be5bf7182c1c96edafd0b6bc3ec008e47fd0f9128813a1f", 0x66}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000440)="6132d00e08a79054db3140daf93d947838443344c04208f20244fe45425a273745e2f3dcce52530ecbcf943001b25c719b2e74b23dd7c393f65da2f19efdd0f3a9cb144b8541796ce1ecef90a5bacd66147b2b478f7e1d912ffedffc76c039269a741a175a20887229d6217a4f37966184ba28e3592fd87452d49b19e5cab9d23bd72402a36d49e528c5d38439d232a77e15f49fd85903e2", 0x98}, {&(0x7f0000000500)="3d54236c8abcf461c078b4a2654971986c1c5526623bff297aa4a5fd54b6f2d7f19e3a290a2623b7c77ed3d41caca8b128f3df4bdca18ec064bff94a21e61df92d806934f1379db7c6eaddb2baec0c93a7ddc7dc5baeda6235d554f577421158a09cdb08b80fb283c7251c92a566e20c50fd4a1a9a3ca39c5393192c8bc1d8c8ceb80a78ca", 0x85}, {&(0x7f00000005c0)="6df931672a15d99dabe71c700fea1271db8be67ed74509eee4d894fb8a843eed85dd70477e62141d2cef7da0a9f49e0d0b2afb14215d12c7032e91453bc0e2ef093da94673845c84e3f46807d1c5d02936f73f04218e253cb04a148901035d111075b20a716cfc62d689e884781aace90f9e637ca0b9af540928efd858a0b855590276ce09fc0d6a7f12f4ab319c0031289e693bf1ef1aaf", 0x98}, {&(0x7f0000000680)="b770383a7a66fba66f30d49abe9e3fbae4e3df6f2c88d9147cbddaf15b7769e5035d3452f5a858f53676711401989ef04fd029cf9c58a40ecfe6d0b3d17ee3850c6fcf65fedb1c23c41ab769d1082c1afdeeef36009ea4a2a60033f591d28c2cae87c691228fdd2a6bd9b494961c13441d4bd0a2df58de7cf33099f0d7a916aa09709d3210816c", 0x87}, {&(0x7f0000000740)="f799ad9ce2aa9cb3b255e65a3f5227ca8e45b9ebbe451601dcc5ad16b3bb50ef539eedc041c3097e80f327b04b459b49b882a2c63d1c9f4cb3b8adf7884a4ed0f022553e63a685242f770f4ee7384601ce0eed01d459db2e442ff86e5017cf5e8da840fac4f556ecd4ccffe4d72007fe08dc0ae1404c1b45a5b6188b4826db64c81195fec3a5e83b2a611dd396d41bc2046fb3a468f88c20bb0371cff523faa483ad75954a9c8c827328f1cd025bd882b5f75256bb0b7b0c", 0xb8}, {&(0x7f0000000800)="150c47731958681feed309e7476ff9e0a3811a787a0c8f5b6f4355242412a6fd7e7279bf53a8e51e84b1d809501586f6e289274b52f6aec21786473655e98768c9359136df3c2c97b470f306b74bff67e5d6622aaaca4f394978eb62ac66351d0b76d1f88ead9a96b735d8e052a57818412fdf4611c71b6da6caba8e5078196121e1b270b123562d89e3ad2b895f25", 0x8f}, {&(0x7f00000008c0)="072294d9df072dd25f310a631dfcedbe2fb7a816ec3bdd7e7402d0cc513a226964392d7055ab6f8b0a3116cfc3d53d8d1e948b5a8cbffe4a471de016ceed0fcb4d48698a04c1e0134da7ec993c719286a04587be66453c8ced70a7cca4120f3372c4b454d8b79e8522f42d3ac881f443d065d4902076644a673d180df6b22e7e4739633407f42e758a792081e95fdb49f04a4c15cb2d9a29273903933f2fd793ee379945045d8869b4363da20a2e4ed7c09dbc67f8466108d6185f2585e00dd8057806920eab7a397c63d61c4adb84099b7ce2139b58656475da52e266d3", 0xde}], 0x7)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, &(0x7f0000000300)=0x9)
close(0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x90)
r6 = socket(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
setsockopt(r6, 0x1, 0x9, &(0x7f0000000140)="3f14b0f1", 0x4)
setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000000)=0x7, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4)

2.420672901s ago: executing program 4 (id=2919):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x82}]}]}, 0x4c}}, 0x40080)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000000)=0x4a3, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x5}, 0x8) (async)
setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000240)=0xc8, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x3fffdf2, 0x45833af92e4b39ff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/1052]}, 0x494) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc3, 0x0, 0x0, 0x58049}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendto$inet(r1, &(0x7f0000000900)="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", 0xff0, 0x4, &(0x7f0000001900)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000080)=0xe, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x80, 0x9e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)

2.248004513s ago: executing program 1 (id=2921):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.207636889s ago: executing program 4 (id=2922):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xb3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x0)

1.99626875s ago: executing program 1 (id=2924):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X'], 0x58}}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000005300014f194e20002b"], 0x65)

1.818979972s ago: executing program 4 (id=2925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)}, 0x4004810)
r1 = socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x1e, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001c000107000000000000000007000000", @ANYRES32=r2, @ANYBLOB="80000200080001007f0000010a0002"], 0x38}}, 0x0)

1.728669797s ago: executing program 2 (id=2926):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3}}}, 0x30}}, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r4, 0x6, 0x10, 0x0, &(0x7f0000000040))
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

1.57177519s ago: executing program 1 (id=2927):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0x5, 0xffff}, {0x9, 0xffe8}}}, 0x24}}, 0x4000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r1}, 0x38)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4000891}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @private=0xa010102}})

1.506836337s ago: executing program 4 (id=2928):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
accept4$inet(r0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="b7000000ffff00009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000200)={r1, r2})
shutdown(r1, 0x1)
sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x73c3bfc5edc560a0, 0x0, 0x7}}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.416241211s ago: executing program 2 (id=2929):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4c841}, 0x802)
syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendto$inet(r0, &(0x7f0000000000)="a4", 0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x1e0, 0x0, 0x1e0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x7}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x6, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0xffffffff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010)
setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000000c0), 0x4)

1.255285751s ago: executing program 0 (id=2930):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x5e, 0x7, 0x6]}, &(0x7f0000000140)=0xa)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket(0x40000000015, 0x5, 0x0)
close(0x3)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 'vcan0\x00'}}, 0x1e)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0x8, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x72}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}]}, 0x34}}, 0x8c0)

1.179122064s ago: executing program 2 (id=2931):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140))
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), r0)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1, @ANYBLOB="010028bd70000000000004000000f4315f2b64d5f06db2c5e3174c72d346f26a2015080000007c2f1f7a89650996429fb1544ae8a60ca9885caa7a30644e096e7d8654a4c0e2783cffd95bdbe84f8b86b15b52bbdd621d335ba5cbe115048d32f57dd110d44721410cf9142d7a19095d15be205ba6a1999d603613ea8434dcb44d702ea44873d337de5e801048f4208d147b6a91573ea568de3c5e2b112fd4519e450417a79fdc709531f66a268658139d"], 0x14}}, 0x4000080)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe(&(0x7f0000000140)) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), r0) (async)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1, @ANYBLOB="010028bd70000000000004000000f4315f2b64d5f06db2c5e3174c72d346f26a2015080000007c2f1f7a89650996429fb1544ae8a60ca9885caa7a30644e096e7d8654a4c0e2783cffd95bdbe84f8b86b15b52bbdd621d335ba5cbe115048d32f57dd110d44721410cf9142d7a19095d15be205ba6a1999d603613ea8434dcb44d702ea44873d337de5e801048f4208d147b6a91573ea568de3c5e2b112fd4519e450417a79fdc709531f66a268658139d"], 0x14}}, 0x4000080) (async)

1.004338661s ago: executing program 0 (id=2932):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x5, 0x0, 0x0, 0x6, 0x2008, 0xfffd}, 0x20)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b32, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

978.246219ms ago: executing program 2 (id=2933):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r3, 0x200, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r4, 0xdad, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048812}, 0x4000002) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64)

940.338016ms ago: executing program 1 (id=2934):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, <r1=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94)

876.312628ms ago: executing program 0 (id=2935):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'tunl0\x00'})
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[], 0xfe33)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x8002}}, {{0xa, 0x4e24, 0x5a, @remote, 0xfffffffc}}}, 0x108)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xd, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x2a, 0x2, 0x0, 0x0, "bc5639179a39df57907b3b0455b3185b2808e2725f85b5e7cdd792a9c2f471ba7141ddb4bcf8ef06a79afa8eb83b856c90dd0982d4b3606f5658776687c45745"}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000a0000680000000004000b0014000600ac1414aa00"/48], 0x30}}, 0x0)

713.713375ms ago: executing program 1 (id=2936):
socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000058650000000000000001"], 0xfdef)

449.434683ms ago: executing program 4 (id=2937):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X'], 0x58}}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000006100014f194e20002b"], 0x65)

308.535841ms ago: executing program 2 (id=2938):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), 0x4)
r1 = socket(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r2 = epoll_create1(0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000140)=0x34fd, 0x4)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f0000000080))
sendto$unix(r3, &(0x7f00000001c0)="475475139a50c9d768f39ba2574cf9ae0915c759d2b8916da7bac42e3f617e00eae063363e3d4475ea81a93ddfa478", 0x2f, 0x81, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100))
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r3, 0xc, 0x0, @void}, 0x10)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f00000002c0))
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f00000045c0)=[{{&(0x7f0000000480)={0xa, 0x1, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44191)
listen(r6, 0x100)
accept4(r6, 0x0, 0x0, 0x0)
r7 = epoll_create(0x11ffffe)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r9, 0x40049421, 0x1)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYRES16=r1], 0x44}, 0x1, 0x2000000000000000}, 0x3)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0x40000001})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r11, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r7, &(0x7f0000000080)={0x40008212})

260.994605ms ago: executing program 1 (id=2939):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=@delchain={0x980, 0x65, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x954, 0x2, [@TCA_BPF_ACT={0x950, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10401, 0x6}}]}, {0xd3, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa9f7ff0702fd569bd27d4a702d80df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x2c, 0x15, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x4c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x23, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f19322656"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x460, 0x9, 0x0, 0x0, {{0xb}, {0x410, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5bb5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x302, 0x7, 0x3, 0x2, 0x4, 0x6, 0x1000, 0x3, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x5a1, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0xde0, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x8, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x4, 0x4, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x6, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x25, 0x6, "94cedea66d85e9b70c476ee3b07ad24452af4725e6123a5351d4a5987f8df95171"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0xd4, 0x15, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x101}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0x3ff, 0x6, 0x2, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xfff1}}]}, {0x55, 0x6, "bace3f2ac71bf14c207f641d445e97793135d23b7c9245b51b9b4ba6c9d622ae62b15148f57749735ae9a27ab96cb8c2686e8c80f4e6619f24ca17da3ae47b01f3e25bf12f6c739cd29daa10ff18eba29d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x104, 0x1c, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xff}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1041}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x3, 0x7, 0x1}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x0, 0x20000000, 0x6, 0x8}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x6, 0x5, 0x8}, 0x1}}]}, {0x64, 0x6, "8219c1ba42fa54216ed0ec5282c0d490e99efc31d0f4a390d6e03dfbd2945570184fafa6ca57762a39e8a7498bb615e000e5860a651768400f4d827549f405b3756ce73116bc85911f7d2eaf6a5eeb5884edd3e2acf74f38572f1a2ceff81e3a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x16c, 0xa, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x772c, 0x2, 0x7fff, 0xb}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x8702, 0x5, 0x5, 0xffff8001}, 0xfffe}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x980}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket$kcm(0x21, 0x2, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="0f43000010000104000000000000000000000000dd3f7ceb282d2a34d40fba4bc71757378c0eb8cd12e999aac7e7411e32690803c5771801d8d1b8c43cf35c6e5f9edcf9ef75b3d77c3c83ec39062cbb842243d60a7c8d2a35aa9c5550f955967d16b4691da88d32e480808331d90ae64c5cc57b2d324f55", @ANYRES32=0x0, @ANYBLOB="7b130000000000002800128008000100677265001c000280080004000700000005000a0000000000050013000100000008001f0009000000"], 0x50}}, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async, rerun: 64)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async, rerun: 64)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e23, @private=0xa010101}}, 0x3, 0x0, 0x3a, 0x0, "5ec800000000000001fabcaff4b8d5eb8c461442bc42b8e0662749302c1ffcd1d1190000000000000002000000000000000000000000000300070000000000ebfff800"}, 0xd8) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x37, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) (async)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
r5 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000010a825bc0be013fa4cf27303fd083e502352d5dac6a460b6188085cf0d98c4c28b50469361191b231a076b83c010ce778a3736e6752dc6127b4dce5fa35a9b5e97c9a100f1dbb7ac97ec3d1b6a841782bb7611a2d9e6a2ac49f5b45c8044942f7bfc20ad1f70e2610fe95ea4b744d22415ab71f0e5ecd4db9b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r6, 0x0, &(0x7f00000000c0)=""/102}, 0x20) (async)
bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r7 = socket$rds(0x15, 0x5, 0x0) (rerun: 32)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x5c, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x40}}], 0x48, 0xc800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x4}}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)

169.176372ms ago: executing program 0 (id=2940):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0xffffff44}], 0x10}}], 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x523, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r3 = socket(0x2b, 0x1, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x200})

168.886981ms ago: executing program 3 (id=2835):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8, 0x18, 0x28e}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f, 0x5f, 0xa0]}}, &(0x7f0000000200)=""/146, 0x31, 0x92, 0x1}, 0x20)
unshare(0x40000)
ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0)
r3 = socket$packet(0x11, 0x1, 0x300)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8, 0x18, 0x28e}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f, 0x5f, 0xa0]}}, &(0x7f0000000200)=""/146, 0x31, 0x92, 0x1}, 0x20) (async)
unshare(0x40000) (async)
ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) (async)
socket$packet(0x11, 0x1, 0x300) (async)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) (async)
sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) (async)

559.726µs ago: executing program 2 (id=2941):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x8}}, @const={0xa, 0x0, 0x0, 0xa, 0x3}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x3a, 0x0, 0x5}, @const={0x1, 0x0, 0x0, 0xa, 0x4}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x6}]}, {0x0, [0x2e, 0x61, 0x0, 0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f00000001c0)=""/211, 0x71, 0xd3, 0x1}, 0x28)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14)
pipe(&(0x7f0000000040)) (async)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x1, 0xff, 0x8011, 0xffffffffffffffff, 0x9, '\x00', r2, r0, 0x0, 0x2, 0x1, 0x9, @value=r1}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r4}, 0xc) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r4}, 0xc)

290.733µs ago: executing program 4 (id=2942):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x63, 0x2)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
setsockopt(r0, 0x84, 0x1, &(0x7f0000000180)="0100203200"/20, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d)
accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80)

0s ago: executing program 3 (id=2943):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'bond0\x00', <r1=>0x0})
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r3, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x78)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010)

kernel console output (not intermixed with test programs):

][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.767'.
[  172.980614][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'.
[  172.983846][ T8902] openvswitch: netlink: IP tunnel dst address not specified
[  173.050805][ T8903] netlink: 'syz.0.768': attribute type 14 has an invalid length.
[  173.050828][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'.
[  173.110860][ T8903] netlink: 'syz.0.768': attribute type 14 has an invalid length.
[  173.110886][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'.
[  173.160145][ T8907] netlink: 32 bytes leftover after parsing attributes in process `syz.3.771'.
[  173.190038][ T8908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.769'.
[  173.386537][ T8918] xt_hashlimit: overflow, try lower: 3/0
[  173.409922][ T8918] ip_tables: iptables: counters copy to user failed while replacing table
[  173.490941][ T8920] netlink: 'syz.2.775': attribute type 10 has an invalid length.
[  173.589403][ T8925] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20003
[  173.755128][ T8920] syz_tun: entered promiscuous mode
[  173.785230][ T8920] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  173.904120][ T8922] 0: reclassify loop, rule prio 0, protocol 03
[  173.997922][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'.
[  174.090644][ T8898] netlink: 32 bytes leftover after parsing attributes in process `syz.1.766'.
[  174.149513][ T8941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.783'.
[  174.318550][ T8943] syzkaller0: entered promiscuous mode
[  174.318577][ T8943] syzkaller0: entered allmulticast mode
[  174.423978][ T8948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.544456][ T8951] netlink: 'syz.0.788': attribute type 1 has an invalid length.
[  174.617574][ T8951] 8021q: adding VLAN 0 to HW filter on device bond6
[  174.622648][ T8951] netlink: 'syz.0.788': attribute type 1 has an invalid length.
[  174.659583][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'.
[  174.692017][ T8952] bond6: (slave veth0_to_bond): making interface the new active one
[  174.704795][ T8952] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  174.979347][ T8968] dvmrp0: entered allmulticast mode
[  175.086989][ T8980] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[  175.711765][ T9004] tipc: Resetting bearer <eth:team0>
[  175.777320][ T9004] tipc: Disabling bearer <eth:team0>
[  175.812482][ T9004] team0 (unregistering): Port device team_slave_0 removed
[  175.830861][ T9004] team0 (unregistering): Port device team_slave_1 removed
[  175.847026][   T50] smc: removing ib device syz1
[  175.959392][ T9017] Bluetooth: hci0: unsupported parameter 5135
[  175.959416][ T9017] Bluetooth: hci0: unsupported parameter 8192
[  175.959431][ T9017] Bluetooth: hci0: unsupported parameter 5135
[  175.959444][ T9017] Bluetooth: hci0: unsupported parameter 8192
[  175.960888][ T9017] netlink: 'syz.3.806': attribute type 10 has an invalid length.
[  176.008927][ T9017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.048167][ T9017] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  176.138638][ T9018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.178496][   T50] smbdirect: ib_dev[syz1] removed
[  176.200632][ T9018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.232119][ T9018] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  176.270762][ T9018] bond0 (unregistering): Released all slaves
[  177.641386][ T9075] Cannot find del_set index 0 as target
[  178.842609][ T9114] __nla_validate_parse: 38 callbacks suppressed
[  178.842634][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.825'.
[  179.486001][ T9146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.831'.
[  179.749669][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.833'.
[  179.749834][ T9151] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  180.114080][ T9163] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  180.114190][ T9163] gretap1: entered promiscuous mode
[  180.114209][ T9163] gretap1: entered allmulticast mode
[  180.651492][ T9181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.843'.
[  180.805186][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'.
[  181.004627][ T9197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'.
[  181.021199][ T9195] batman_adv: batadv0: Adding interface: veth0
[  181.021219][ T9195] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.021251][ T9195] batman_adv: batadv0: Interface activated: veth0
[  181.023587][ T9197] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.023612][ T9197] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.025013][ T9197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.025035][ T9197] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.053701][ T9197] batman_adv: batadv0: Interface deactivated: veth0
[  181.053774][ T9197] batman_adv: batadv0: Removing interface: veth0
[  181.650122][ T9224] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[  181.891248][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.861'.
[  181.949163][ T9240] netlink: 'syz.1.864': attribute type 4 has an invalid length.
[  182.001341][ T9245] netlink: 'syz.1.864': attribute type 4 has an invalid length.
[  182.213440][ T9247] netlink: 48 bytes leftover after parsing attributes in process `syz.3.865'.
[  182.393924][ T9253] xt_nfacct: accounting object `syz0' does not exist
[  182.644148][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'.
[  182.651983][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'.
[  183.956668][ T9304] ip_tables: iptables: counters copy to user failed while replacing table
[  184.082701][ T9311] __nla_validate_parse: 7 callbacks suppressed
[  184.082724][ T9311] netlink: 168 bytes leftover after parsing attributes in process `syz.1.883'.
[  184.186938][ T9314] netlink: 80 bytes leftover after parsing attributes in process `syz.4.886'.
[  184.939778][ T9353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.897'.
[  185.057868][ T9354] syzkaller0: entered promiscuous mode
[  185.057893][ T9354] syzkaller0: entered allmulticast mode
[  185.058149][ T9362] netlink: 52 bytes leftover after parsing attributes in process `syz.3.900'.
[  185.094340][ T9365] netlink: 52 bytes leftover after parsing attributes in process `syz.3.900'.
[  185.443555][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'.
[  186.207851][ T9418] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  186.256901][ T9421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.909'.
[  186.280467][ T9421] netlink: 280 bytes leftover after parsing attributes in process `syz.1.909'.
[  186.299876][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'.
[  186.420190][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'.
[  186.727714][ T9442] xt_bpf: check failed: parse error
[  187.953889][ T9481] xt_hashlimit: size too large, truncated to 1048576
[  188.048507][ T9483] lo speed is unknown, defaulting to 1000
[  188.481411][ T9500] netlink: 'syz.2.935': attribute type 21 has an invalid length.
[  188.708218][ T9506] tipc: Can't bind to reserved service type 0
[  189.142777][ T9529] __nla_validate_parse: 9 callbacks suppressed
[  189.142800][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.942'.
[  189.145318][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.942'.
[  189.196760][ T9532] netlink: 76 bytes leftover after parsing attributes in process `syz.1.942'.
[  189.279376][ T9535] netlink: 144 bytes leftover after parsing attributes in process `syz.2.943'.
[  189.648213][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'.
[  189.822746][ T9545] bond1: option min_links: invalid value (18446744073709551614)
[  189.822776][ T9545] bond1: option min_links: allowed values 0 - 2147483647
[  189.861821][ T9545] bond1 (unregistering): Released all slaves
[  190.201748][ T9561] syzkaller0: entered promiscuous mode
[  190.201773][ T9561] syzkaller0: entered allmulticast mode
[  190.237635][ T9553] sctp: [Deprecated]: syz.0.952 (pid 9553) Use of int in max_burst socket option deprecated.
[  190.237635][ T9553] Use struct sctp_assoc_value instead
[  190.279510][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.955'.
[  190.608202][ T9584] FAULT_INJECTION: forcing a failure.
[  190.608202][ T9584] name failslab, interval 1, probability 0, space 0, times 1
[  190.608257][ T9584] CPU: 0 UID: 0 PID: 9584 Comm: syz.2.958 Not tainted syzkaller #0 PREEMPT(full) 
[  190.608283][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  190.608305][ T9584] Call Trace:
[  190.608317][ T9584]  <TASK>
[  190.608328][ T9584]  dump_stack_lvl+0xe8/0x150
[  190.608367][ T9584]  should_fail_ex+0x410/0x560
[  190.608398][ T9584]  should_failslab+0xa8/0x100
[  190.608427][ T9584]  ? skb_clone+0x212/0x3a0
[  190.608458][ T9584]  kmem_cache_alloc_noprof+0xa1/0x600
[  190.608498][ T9584]  ? skb_clone+0x212/0x3a0
[  190.608536][ T9584]  skb_clone+0x212/0x3a0
[  190.608571][ T9584]  __netlink_deliver_tap+0x413/0x860
[  190.608618][ T9584]  ? netlink_deliver_tap+0x2e/0x1b0
[  190.608663][ T9584]  netlink_deliver_tap+0x19c/0x1b0
[  190.608700][ T9584]  netlink_unicast+0x781/0x940
[  190.608743][ T9584]  netlink_sendmsg+0x813/0xb40
[  190.608788][ T9584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.608832][ T9584]  ? apparmor_socket_sendmsg+0x98/0x360
[  190.608861][ T9584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.608893][ T9584]  sock_sendmsg_nosec+0x13a/0x180
[  190.608934][ T9584]  ____sys_sendmsg+0x54e/0x850
[  190.608971][ T9584]  ? __pfx_____sys_sendmsg+0x10/0x10
[  190.609012][ T9584]  ? import_iovec+0x73/0xa0
[  190.609045][ T9584]  ___sys_sendmsg+0x2a5/0x360
[  190.609074][ T9584]  ? __lock_acquire+0x747/0x2de0
[  190.609103][ T9584]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.609176][ T9584]  ? __fget_files+0x2a/0x420
[  190.609207][ T9584]  ? __fget_files+0x3a2/0x420
[  190.609251][ T9584]  __x64_sys_sendmsg+0x1b1/0x290
[  190.609284][ T9584]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  190.609341][ T9584]  do_syscall_64+0x166/0x520
[  190.609365][ T9584]  ? trace_irq_disable+0x3b/0x140
[  190.609387][ T9584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.609410][ T9584]  ? clear_bhb_loop+0x70/0xc0
[  190.609439][ T9584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.609462][ T9584] RIP: 0033:0x7fab4e59e159
[  190.609491][ T9584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.609510][ T9584] RSP: 002b:00007fab4f49a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.609539][ T9584] RAX: ffffffffffffffda RBX: 00007fab4e825fa0 RCX: 00007fab4e59e159
[  190.609556][ T9584] RDX: 0000000000004000 RSI: 0000200000000340 RDI: 0000000000000006
[  190.609570][ T9584] RBP: 00007fab4f49a090 R08: 0000000000000000 R09: 0000000000000000
[  190.609584][ T9584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.609598][ T9584] R13: 00007fab4e826038 R14: 00007fab4e825fa0 R15: 00007ffc514cf738
[  190.609636][ T9584]  </TASK>
[  190.874208][ T4934] Bluetooth: hci4: link tx timeout
[  190.874282][ T4934] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  191.511604][ T9607] netlink: 256 bytes leftover after parsing attributes in process `syz.3.966'.
[  191.513940][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'.
[  191.584395][ T9609] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  191.584462][ T9609] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  191.681790][ T9609] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003
[  191.954613][ T9625] netlink: 60 bytes leftover after parsing attributes in process `syz.0.971'.
[  192.089419][ T9632] ip6t_rt: unknown flags 36
[  192.229613][ T9638] bridge: RTM_NEWNEIGH with invalid state 0x20
[  192.398705][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.977'.
[  192.692948][ T9661] erspan0: entered promiscuous mode
[  192.905912][ T4934] Bluetooth: hci4: command 0x0406 tx timeout
[  193.668845][ T9694] team0: Device ipvlan0 failed to register rx_handler
[  193.928894][ T9701] netlink: 'syz.2.990': attribute type 2 has an invalid length.
[  194.341634][ T9722] tipc: Started in network mode
[  194.341655][ T9722] tipc: Node identity , cluster identity 4711
[  194.341671][ T9722] tipc: Failed to set node id, please configure manually
[  194.341715][ T9722] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  194.348519][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  194.479121][ T9727] __nla_validate_parse: 3 callbacks suppressed
[  194.479143][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.998'.
[  194.479170][ T9727] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  194.487130][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'.
[  194.487204][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'.
[  194.487421][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'.
[  194.760897][ T9723] syz.0.997 (9723) used greatest stack depth: 18088 bytes left
[  195.123494][ T9755] netlink: 'syz.0.1003': attribute type 23 has an invalid length.
[  195.240148][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'.
[  195.271672][ T9743] bond2: option fail_over_mac: invalid value (16)
[  195.291303][ T9743] bond2 (unregistering): Released all slaves
[  195.517063][ T9752] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  195.589802][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'.
[  195.870974][ T9780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.892668][ T9781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  196.160661][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'.
[  196.361379][ T9807] can: request_module (can-proto-0) failed.
[  196.394214][ T9814] netlink: 'syz.2.1013': attribute type 6 has an invalid length.
[  196.631442][ T9817] can: request_module (can-proto-0) failed.
[  196.861468][ T9835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1017'.
[  196.861506][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'.
[  196.962517][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1019'.
[  196.993098][ T9843] 8021q: VLANs not supported on sit0
[  197.303139][ T9858] xt_socket: unknown flags 0x50
[  197.574958][ T9867] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  197.604234][ T9871] netlink: 'syz.3.1030': attribute type 39 has an invalid length.
[  197.628846][ T9874] netlink: 'syz.2.1031': attribute type 1 has an invalid length.
[  197.817577][ T9874] 8021q: adding VLAN 0 to HW filter on device bond5
[  198.192521][ T9888] bond7: entered allmulticast mode
[  198.318899][ T9893] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  198.332641][ T9893] gretap2: entered promiscuous mode
[  198.332667][ T9893] gretap2: entered allmulticast mode
[  198.431381][ T9895] 8021q: adding VLAN 0 to HW filter on device bond8
[  198.445787][ T9895] bond8: entered allmulticast mode
[  198.463778][ T9895] bond7: (slave bond8): Enslaving as an active interface with an up link
[  198.482207][ T9900] bond7 (unregistering): (slave bond8): Releasing backup interface
[  198.495253][ T9900] bond8: left allmulticast mode
[  198.528014][ T9900] bond7 (unregistering): Released all slaves
[  198.948007][ T9922] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  199.109212][ T9936] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  199.378016][ T9945] 0�X��D��: renamed from gretap0 (while UP)
[  199.419998][ T9945] 0�X��D��: entered allmulticast mode
[  199.547158][ T9953] syzkaller0: entered promiscuous mode
[  199.547182][ T9953] syzkaller0: entered allmulticast mode
[  199.777221][ T9961] __nla_validate_parse: 37 callbacks suppressed
[  199.777243][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'.
[  199.777259][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1050'.
[  200.428198][ T9999] netlink: 'syz.0.1057': attribute type 1 has an invalid length.
[  200.476594][ T9999] 8021q: adding VLAN 0 to HW filter on device bond7
[  200.543322][T10003] xt_limit: Overflow, try lower: 536871034/0
[  200.809946][T10015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1060'.
[  200.810099][T10015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1060'.
[  200.856005][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1060'.
[  200.893917][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'.
[  202.025156][T10072] bridge0: port 3(vlan3) entered blocking state
[  202.036970][T10072] bridge0: port 3(vlan3) entered disabled state
[  202.037156][T10072] vlan3: entered allmulticast mode
[  202.037175][T10072] geneve0: entered allmulticast mode
[  202.072127][T10073] nbd: socks must be embedded in a SOCK_ITEM attr
[  202.091402][T10072] vlan3: entered promiscuous mode
[  202.091425][T10072] geneve0: entered promiscuous mode
[  202.287599][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'.
[  202.308375][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'.
[  202.379871][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1079'.
[  202.611186][T10107] netlink: 'syz.0.1081': attribute type 1 has an invalid length.
[  202.611212][T10107] netlink: 'syz.0.1081': attribute type 3 has an invalid length.
[  202.611258][T10107] netlink: 'syz.0.1081': attribute type 7 has an invalid length.
[  202.611273][T10107] netlink: 'syz.0.1081': attribute type 8 has an invalid length.
[  202.611287][T10107] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1081'.
[  202.611327][T10107] NCSI netlink: No device for ifindex 131092
[  202.951784][T10118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.046575][T10118] syzkaller0: MTU too low for tipc bearer
[  203.046599][T10118] tipc: Disabling bearer <eth:syzkaller0>
[  203.073672][T10134] netlink: 'syz.1.1088': attribute type 18 has an invalid length.
[  203.086423][T10134] netlink: 'syz.1.1088': attribute type 18 has an invalid length.
[  203.248592][T10123] syzkaller0: entered promiscuous mode
[  203.248616][T10123] syzkaller0: entered allmulticast mode
[  203.757170][T10159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.762370][T10159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.869556][T10167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.248940][ T1043] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.249021][ T1043] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  204.249064][ T1043] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  204.249119][ T1043] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  204.697090][T10210] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.998789][T10232] __nla_validate_parse: 16 callbacks suppressed
[  204.998811][T10232] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1103'.
[  205.048680][T10233] netlink: 'syz.1.1103': attribute type 32 has an invalid length.
[  205.396804][T10246] netlink: 'syz.3.1107': attribute type 83 has an invalid length.
[  205.502638][T10255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.518135][T10255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.603369][T10257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.620339][T10257] netlink: 'syz.2.1111': attribute type 2 has an invalid length.
[  205.764044][T10265] netlink: 'syz.3.1114': attribute type 1 has an invalid length.
[  206.051850][T10284] unsupported nlmsg_type 40
[  206.072177][T10284] netlink: 'syz.0.1120': attribute type 15 has an invalid length.
[  206.072205][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'.
[  206.072478][T10284] netlink: 'syz.0.1120': attribute type 15 has an invalid length.
[  206.072496][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'.
[  206.248983][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'.
[  206.434279][T10307] netlink: 'syz.3.1125': attribute type 4 has an invalid length.
[  207.040422][T10328] openvswitch: netlink: Flow key attr not present in new flow.
[  207.411988][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'.
[  207.456954][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'.
[  207.458578][T10343] netlink: 'syz.0.1138': attribute type 2 has an invalid length.
[  207.516869][T10349] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1136'.
[  207.571632][T10338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.765444][T10354] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  207.784426][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1142'.
[  207.937953][T10363] netlink: 'syz.4.1143': attribute type 8 has an invalid length.
[  208.113950][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'.
[  208.131028][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'.
[  208.342389][T10381] gretap0: entered promiscuous mode
[  208.367502][T10381] 0��{X��: renamed from gretap0
[  208.383974][T10381] 0��{X��: left promiscuous mode
[  208.383998][T10381] 0��{X��: entered allmulticast mode
[  208.407547][T10381] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  208.646090][T10386] Cannot find set identified by id 0 to match
[  208.736333][T10363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  209.457275][T10429] netlink: 'syz.1.1157': attribute type 1 has an invalid length.
[  209.836272][T10439] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  210.201817][T10462] Bluetooth: hci0: unsupported parameter 5161
[  210.201839][T10462] Bluetooth: hci0: unsupported parameter 8192
[  210.201852][T10462] Bluetooth: hci0: unsupported parameter 5161
[  210.201862][T10462] Bluetooth: hci0: unsupported parameter 8192
[  210.239525][T10456] af_packet: tpacket_rcv: packet too big, clamped from 616 to 4294967272. macoff=96
[  210.311638][T10463] __nla_validate_parse: 8 callbacks suppressed
[  210.311662][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1165'.
[  211.472356][T10486] tap0: tun_chr_ioctl cmd 2148553947
[  211.518220][T10490] tap0: tun_chr_ioctl cmd 1074025694
[  211.602966][T10486] tap0: tun_chr_ioctl cmd 1074025673
[  211.619159][T10490] tap0: tun_chr_ioctl cmd 2148553947
[  211.798155][T10441] Bluetooth: hci1: command 0x0406 tx timeout
[  211.798204][T10441] Bluetooth: hci2: command 0x0401 tx timeout
[  211.798231][T10441] Bluetooth: hci0: command 0x0406 tx timeout
[  211.798255][T10441] Bluetooth: hci3: command 0x0406 tx timeout
[  211.869386][T10515] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20001
[  212.088335][T10526] geneve3: entered allmulticast mode
[  212.163814][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'.
[  212.201816][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1182'.
[  212.390298][T10531] syzkaller0: entered promiscuous mode
[  212.390325][T10531] syzkaller0: entered allmulticast mode
[  212.787231][T10547] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1187'.
[  212.870075][T10541] veth5: entered promiscuous mode
[  212.870131][T10541] veth5: entered allmulticast mode
[  213.044418][T10562] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1188'.
[  213.064675][T10561] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1188'.
[  213.113396][T10561] netlink: 'syz.4.1188': attribute type 29 has an invalid length.
[  213.226106][T10555] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.335275][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'.
[  213.842897][T10589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1195'.
[  213.845407][T10592] sctp: [Deprecated]: syz.4.1197 (pid 10592) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.845407][T10592] Use struct sctp_sack_info instead
[  214.832128][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  216.581025][T10576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  216.781761][T10627] netlink: 'syz.4.1205': attribute type 3 has an invalid length.
[  216.813432][T10633] netlink: 'syz.4.1205': attribute type 3 has an invalid length.
[  217.189638][T10652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.251870][T10651] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1209'.
[  217.461071][T10666] netlink: 'syz.3.1213': attribute type 1 has an invalid length.
[  217.524035][T10666] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.569252][T10671] netlink: 'syz.4.1216': attribute type 46 has an invalid length.
[  217.683726][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1217'.
[  217.702078][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1217'.
[  217.760060][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'.
[  218.225244][T10696] Bluetooth: MGMT ver 1.23
[  218.485181][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'.
[  218.506141][T10706] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1226'.
[  218.773601][T10716] netlink: 'syz.4.1230': attribute type 1 has an invalid length.
[  218.942940][T10731] netlink: 'syz.1.1232': attribute type 1 has an invalid length.
[  219.009428][T10733] veth0_to_bond: entered allmulticast mode
[  219.052698][T10740] netlink: zone id is out of range
[  219.052717][T10740] netlink: zone id is out of range
[  219.052726][T10740] netlink: zone id is out of range
[  219.052734][T10740] netlink: zone id is out of range
[  219.052743][T10740] netlink: zone id is out of range
[  219.052752][T10740] netlink: zone id is out of range
[  219.053002][T10740] netlink: zone id is out of range
[  219.053014][T10740] netlink: zone id is out of range
[  219.053023][T10740] netlink: zone id is out of range
[  219.172114][T10731] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.175386][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'.
[  219.248848][T10741] bond1: (slave veth5): Enslaving as an active interface with a down link
[  219.770248][T10769] lo speed is unknown, defaulting to 1000
[  221.896182][T10731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  221.916898][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1245'.
[  221.925162][T10793] netlink: 'syz.2.1247': attribute type 1 has an invalid length.
[  221.925249][T10793] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1247'.
[  221.925292][T10793] netlink: 'syz.2.1247': attribute type 1 has an invalid length.
[  221.925325][T10793] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.1247'.
[  222.250343][T10806] batman_adv: batadv0: Adding interface: veth0
[  222.250365][T10806] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  222.250398][T10806] batman_adv: batadv0: Interface activated: veth0
[  222.298775][T10806] __nla_validate_parse: 1 callbacks suppressed
[  222.298800][T10806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1252'.
[  222.298821][T10806] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.298844][T10806] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.342322][T10806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.342351][T10806] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.378251][T10806] batman_adv: batadv0: Interface deactivated: veth0
[  222.378277][T10806] batman_adv: batadv0: Removing interface: veth0
[  222.447826][T10809] netlink: 'syz.2.1253': attribute type 1 has an invalid length.
[  222.657407][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1257'.
[  222.657587][T10809] 8021q: adding VLAN 0 to HW filter on device bond6
[  223.758692][T10830] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  224.189837][T10862] netlink: 'syz.4.1269': attribute type 1 has an invalid length.
[  224.518164][ T1043] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  224.663008][T10885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1278'.
[  224.819064][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'.
[  224.929108][T10890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1277'.
[  229.663981][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'.
[  229.665059][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1284'.
[  229.665096][T10907] netlink: 'syz.1.1284': attribute type 7 has an invalid length.
[  229.665112][T10907] netlink: 'syz.1.1284': attribute type 8 has an invalid length.
[  229.665127][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'.
[  229.761258][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'.
[  230.108810][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1293'.
[  230.128050][T10929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1293'.
[  230.443120][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1297'.
[  230.443175][T10946] net_ratelimit: 498 callbacks suppressed
[  230.443188][T10946] openvswitch: netlink: Missing key (keys=c0, expected=40300)
[  230.484637][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1297'.
[  230.484693][T10951] openvswitch: netlink: Missing key (keys=c0, expected=40300)
[  230.521866][T10954] Bluetooth: MGMT ver 1.23
[  230.797253][T10964] sctp: [Deprecated]: syz.4.1303 (pid 10964) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.797253][T10964] Use struct sctp_sack_info instead
[  230.844585][T10965] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1301'.
[  230.887286][T10957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.079161][T10978] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1304'.
[  231.163262][T10957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.332287][T10957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.498467][T10957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.600488][T10993] bond0: option ad_select: unable to set because the bond device is up
[  231.776063][   T27] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.776113][   T27] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.816709][   T27] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.855733][ T1262] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.532468][T11029] netlink: 'syz.1.1319': attribute type 1 has an invalid length.
[  232.605028][T11035] gretap0: entered promiscuous mode
[  232.616046][T11035] batman_adv: batadv0: Adding interface: gretap0
[  232.616064][T11035] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.616094][T11035] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active
[  232.880867][T11045] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  232.881177][T11045] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  232.881326][T11045] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  232.881504][T11045] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  232.881646][T11045] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  232.881788][T11045] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  232.881930][T11045] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  232.882069][T11045] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  232.883988][T11045] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  232.884169][T11045] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  233.052102][T11029] macvtap1: entered promiscuous mode
[  233.052145][T11029] vlan0: entered promiscuous mode
[  233.052729][T11029] macvtap1: entered allmulticast mode
[  233.052748][T11029] vlan0: entered allmulticast mode
[  233.052761][T11029] veth0_vlan: entered allmulticast mode
[  233.755138][T11091] Cannot find add_set index 65532 as target
[  233.761895][ T1043] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.761986][ T1043] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  233.762026][ T1043] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  233.762064][ T1043] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  233.890799][T11095] x_tables: duplicate underflow at hook 3
[  234.534945][T11122] netlink: 'syz.2.1342': attribute type 1 has an invalid length.
[  234.745859][T11140] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes.
[  234.818600][T11123] __nla_validate_parse: 16 callbacks suppressed
[  234.818617][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1345'.
[  234.818656][T11123] netlink: 'syz.3.1345': attribute type 7 has an invalid length.
[  234.818671][T11123] netlink: 'syz.3.1345': attribute type 8 has an invalid length.
[  234.818685][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1345'.
[  234.894204][T11123] erspan0: entered promiscuous mode
[  234.904841][T11123] gretap0: entered promiscuous mode
[  234.932049][T11123] erspan0: left promiscuous mode
[  234.937828][T11123] gretap0: left promiscuous mode
[  235.072299][T11152] netlink: 'syz.2.1350': attribute type 2 has an invalid length.
[  235.073639][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'.
[  235.314022][T11171] xt_hashlimit: size too large, truncated to 1048576
[  235.378803][T11174] bridge_slave_0 (unregistering): left allmulticast mode
[  235.378835][T11174] bridge_slave_0 (unregistering): left promiscuous mode
[  235.378930][T11174] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.432244][T11175] ieee802154 phy0 wpan0: encryption failed: -22
[  238.024240][T11146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  238.549192][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1366'.
[  238.874065][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'.
[  239.277293][T11251] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1375'.
[  239.284886][T11251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.080548][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  240.458400][T11307] ipt_ah: unknown flags FF
[  240.779467][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'.
[  240.821921][T11315] vlan3: entered allmulticast mode
[  240.821944][T11315] veth1_virt_wifi: entered allmulticast mode
[  240.885314][T11326] netlink: 'syz.0.1389': attribute type 5 has an invalid length.
[  240.885341][T11326] netlink: 'syz.0.1389': attribute type 9 has an invalid length.
[  240.885357][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  241.058241][T11332] netlink: 'syz.3.1392': attribute type 15 has an invalid length.
[  241.058265][T11332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1392'.
[  241.058473][T11334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1392'.
[  241.058491][T11334] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1392'.
[  241.058508][T11334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1392'.
[  241.062835][T11320] 8021q: adding VLAN 0 to HW filter on device bond10
[  241.132015][T11320] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1389'.
[  241.139722][T11320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1389'.
[  241.358104][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'.
[  241.478325][T11347] Bluetooth: hci0: unsupported parameter 5135
[  241.478350][T11347] Bluetooth: hci0: unsupported parameter 8192
[  241.478365][T11347] Bluetooth: hci0: unsupported parameter 5135
[  241.478377][T11347] Bluetooth: hci0: unsupported parameter 8192
[  242.059927][T11373] netlink: zone id is out of range
[  242.059954][T11373] netlink: zone id is out of range
[  242.059963][T11373] netlink: zone id is out of range
[  242.059972][T11373] netlink: zone id is out of range
[  242.059982][T11373] netlink: zone id is out of range
[  242.059990][T11373] netlink: zone id is out of range
[  242.060003][T11373] netlink: zone id is out of range
[  242.060012][T11373] netlink: zone id is out of range
[  242.060021][T11373] netlink: zone id is out of range
[  242.369541][T11379] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001
[  242.844096][T11398] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  242.993888][ T9297] IPVS: starting estimator thread 0...
[  243.075636][T11412] IPVS: using max 27 ests per chain, 64800 per kthread
[  243.996002][T11466] syzkaller1: entered promiscuous mode
[  243.996028][T11466] syzkaller1: entered allmulticast mode
[  243.997404][T11471] netlink: 'syz.3.1430': attribute type 62 has an invalid length.
[  244.271653][T11478] x_tables: duplicate entry at hook 1
[  245.312745][T11496] syzkaller1: entered promiscuous mode
[  245.312763][T11496] syzkaller1: entered allmulticast mode
[  245.681829][T11500] __nla_validate_parse: 9 callbacks suppressed
[  245.681846][T11500] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1439'.
[  245.789791][T11502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1439'.
[  246.668713][T11450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  246.997603][T11518] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1443'.
[  247.070950][T11519] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1442'.
[  247.234436][T11532] xt_hashlimit: size too large, truncated to 1048576
[  247.599230][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1451'.
[  247.659363][T11545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1451'.
[  247.878747][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1454'.
[  248.146398][T11570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1457'.
[  248.186283][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'.
[  248.226696][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'.
[  248.485768][T11585] netlink: 'syz.1.1464': attribute type 7 has an invalid length.
[  251.373923][T11588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  252.158793][T11677] netlink: 'syz.4.1486': attribute type 2 has an invalid length.
[  252.577616][T11686] __nla_validate_parse: 6 callbacks suppressed
[  252.577641][T11686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1488'.
[  252.713204][T11690] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  252.751302][T11690] bond2 (unregistering): Released all slaves
[  253.371878][T11726] netlink: 'syz.0.1498': attribute type 18 has an invalid length.
[  253.607145][T11728] netlink: 'syz.3.1497': attribute type 8 has an invalid length.
[  253.607180][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'.
[  253.875628][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'.
[  254.401129][T11752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'.
[  254.441984][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'.
[  254.652629][T11764] netlink: 'syz.3.1505': attribute type 10 has an invalid length.
[  254.750042][T11764] team0: Port device dummy0 added
[  254.882008][T11771] xt_hashlimit: size too large, truncated to 1048576
[  255.041056][T11775] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  255.124165][T11781] xt_esp: unknown flags DD
[  255.285798][T11786] bridge: RTM_NEWNEIGH with invalid state 0x20
[  255.492201][T11797] netlink: 'syz.1.1518': attribute type 21 has an invalid length.
[  255.492226][T11797] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1518'.
[  255.492301][T11797] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1518'.
[  255.611606][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'.
[  255.700552][T11803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1520'.
[  255.789105][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  255.904147][T11810] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  256.094724][T11815] ieee802154 phy0 wpan0: encryption failed: -22
[  256.114778][T11815] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1525'.
[  256.259432][T11792] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  256.373269][T11817] netlink: 'syz.4.1524': attribute type 4 has an invalid length.
[  256.815313][T11847] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  257.275257][T11858] ip_tables: iptables: counters copy to user failed while replacing table
[  257.755024][T11882] x_tables: duplicate underflow at hook 1
[  258.071782][T11907] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.170750][T11907] bond2: entered promiscuous mode
[  258.170786][T11907] bond2: entered allmulticast mode
[  258.171220][T11907] 8021q: adding VLAN 0 to HW filter on device bond2
[  259.136573][T11951] netlink: 'syz.2.1559': attribute type 3 has an invalid length.
[  259.184011][T11959] netlink: 'syz.3.1561': attribute type 1 has an invalid length.
[  259.184035][T11959] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1561'.
[  259.228805][T11960] netlink: 'syz.3.1561': attribute type 1 has an invalid length.
[  259.228828][T11960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1561'.
[  259.361804][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'.
[  259.361832][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'.
[  259.828332][T11987] openvswitch: netlink: IP tunnel dst address not specified
[  259.937221][T11992] netlink: 'syz.4.1566': attribute type 21 has an invalid length.
[  259.937245][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'.
[  259.968551][T11992] netlink: 'syz.4.1566': attribute type 21 has an invalid length.
[  259.968576][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'.
[  260.024682][T11993] bridge0: port 3(veth1_to_bridge) entered blocking state
[  260.024890][T11993] bridge0: port 3(veth1_to_bridge) entered disabled state
[  260.025023][T11993] veth1_to_bridge: entered allmulticast mode
[  260.040797][T11993] veth1_to_bridge: entered promiscuous mode
[  260.238161][T11995] netlink: 'syz.3.1567': attribute type 17 has an invalid length.
[  260.238187][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'.
[  260.238223][T11995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1567'.
[  260.277935][T11995] erspan0: entered promiscuous mode
[  260.285731][T11995] erspan0: left promiscuous mode
[  260.529926][T12001] 8021q: VLANs not supported on gre0
[  260.782692][T12007] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  260.782728][T12007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.083360][T11951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  262.095929][T11992] netlink: 'syz.4.1566': attribute type 1 has an invalid length.
[  262.095953][T11992] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1566'.
[  262.095991][T11992] NCSI netlink: No device for ifindex 0
[  262.413182][T12014] ip_tables: iptables: counters copy to user failed while replacing table
[  262.713639][T12023] netlink: 'syz.3.1577': attribute type 1 has an invalid length.
[  262.920796][   T32] audit: type=1107 audit(1789138627.799:2): pid=12029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P�D`6���> ��������7����(��Ec9�

�'����/䈀X�e؃	��|T���H�$ϛ��6�]�c[$��ק�ã�����+�VzT�C�c!`O��;~n�
[  262.920796][   T32] �������`�2�m�q­t���8	��!i�>+�/9��a��e�y���t@K�#���lH=�ڗ�#PTP#��=(R��葆��{
[  262.920796][   T32] $�;��Q߁�9��L;`}tQ'
[  263.152118][T12042] netlink: 'syz.3.1581': attribute type 1 has an invalid length.
[  263.298330][T12046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1585'.
[  263.908608][T12067] netlink: 'syz.3.1592': attribute type 1 has an invalid length.
[  264.026052][T12071] veth1_macvtap: left promiscuous mode
[  264.026083][T12071] macsec0: entered allmulticast mode
[  264.059972][T12072] veth1_macvtap: entered promiscuous mode
[  264.060001][T12072] veth1_macvtap: entered allmulticast mode
[  264.060093][T12072] macsec0: left allmulticast mode
[  264.060106][T12072] veth1_macvtap: left allmulticast mode
[  264.604857][T12091] __nla_validate_parse: 2 callbacks suppressed
[  264.604881][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1598'.
[  264.609796][T12090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1597'.
[  264.905316][T12093] netlink: 'syz.2.1601': attribute type 2 has an invalid length.
[  264.941361][T12100] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1599'.
[  264.958354][T12100] netlink: 'syz.4.1599': attribute type 1 has an invalid length.
[  265.222832][T12107] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1603'.
[  265.572380][T12128] netlink: NAT attribute has 1 unknown bytes
[  265.572419][T12128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.953988][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'.
[  265.954175][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'.
[  266.300179][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'.
[  266.332759][T12144] Bluetooth: hci0: unsupported parameter 5135
[  266.332781][T12144] Bluetooth: hci0: unsupported parameter 8192
[  266.332794][T12144] Bluetooth: hci0: unsupported parameter 5135
[  266.332807][T12144] Bluetooth: hci0: unsupported parameter 8192
[  266.403686][T12146] wg0 speed is unknown, defaulting to 1000
[  266.403752][T12146] wg0 speed is unknown, defaulting to 1000
[  266.404567][T12146] wg0 speed is unknown, defaulting to 1000
[  266.443610][T12146] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  266.443651][T12146] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  266.443691][T12146] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  266.487416][T12148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1616'.
[  266.520377][T12146] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  266.578732][T12146] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  266.613257][T12146] wg0 speed is unknown, defaulting to 1000
[  266.622935][T12146] wg0 speed is unknown, defaulting to 1000
[  266.639643][T12146] wg0 speed is unknown, defaulting to 1000
[  266.666968][T12146] wg0 speed is unknown, defaulting to 1000
[  266.673848][T12146] wg0 speed is unknown, defaulting to 1000
[  266.750347][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'.
[  266.750372][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'.
[  266.863490][T12161] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  267.370629][T12181] Bluetooth: hci0: unsupported parameter 5161
[  267.370652][T12181] Bluetooth: hci0: unsupported parameter 8192
[  267.370665][T12181] Bluetooth: hci0: unsupported parameter 5161
[  267.370678][T12181] Bluetooth: hci0: unsupported parameter 8192
[  267.724587][T12195] netlink: 'syz.4.1626': attribute type 14 has an invalid length.
[  268.222679][T12197] vlan0 (unregistering): left allmulticast mode
[  268.222707][T12197] veth0_vlan (unregistering): left allmulticast mode
[  268.222729][T12197] vlan0 (unregistering): left promiscuous mode
[  269.039224][T12198] batadv0: entered promiscuous mode
[  269.039353][T12198] macsec0: entered promiscuous mode
[  269.044097][T12198] 8021q: adding VLAN 0 to HW filter on device macsec0
[  269.083205][T12198] batadv0: left promiscuous mode
[  269.137355][T12225] ip_tables: iptables: counters copy to user failed while replacing table
[  269.672965][T12250] __nla_validate_parse: 1 callbacks suppressed
[  269.672991][T12250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1640'.
[  269.673019][T12250] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  269.927235][T12245] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  269.935197][T12234] lo speed is unknown, defaulting to 1000
[  270.146525][T12234] wg0 speed is unknown, defaulting to 1000
[  270.532603][T12278] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1646'.
[  270.533989][T12282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1647'.
[  270.534027][T12282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1647'.
[  270.568772][T12283] netlink: 'syz.0.1646': attribute type 1 has an invalid length.
[  270.568796][T12283] netlink: 'syz.0.1646': attribute type 2 has an invalid length.
[  270.568811][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1646'.
[  270.666374][T12286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1648'.
[  270.739078][T12282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1647'.
[  270.770870][T12274] syzkaller0: entered promiscuous mode
[  270.770897][T12274] syzkaller0: entered allmulticast mode
[  270.846830][T12282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1647'.
[  271.293996][T12301] openvswitch: netlink: Message has 1 unknown bytes.
[  275.272260][T12301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1650'.
[  275.363711][T12313] netlink: 'syz.1.1655': attribute type 10 has an invalid length.
[  275.365060][T12304] bridge5: entered promiscuous mode
[  275.365131][T12304] bridge5: entered allmulticast mode
[  275.449182][T12313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.504997][T12313] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  275.515374][T12308] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1653'.
[  275.612238][T12314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.643892][T12314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.690107][T12314] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  275.739007][T12314] bond0 (unregistering): Released all slaves
[  275.865384][T12328] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  276.906922][T12369] xt_CONNSECMARK: invalid mode: 0
[  277.441090][T12395] netlink: zone id is out of range
[  277.441218][T12395] netlink: zone id is out of range
[  277.441505][T12395] netlink: zone id is out of range
[  277.441544][T12395] netlink: zone id is out of range
[  277.442046][T12395] netlink: zone id is out of range
[  277.442056][T12395] netlink: zone id is out of range
[  277.442061][T12395] netlink: zone id is out of range
[  277.442067][T12395] netlink: zone id is out of range
[  277.442254][T12395] netlink: zone id is out of range
[  277.513146][T12381] 8021q: adding VLAN 0 to HW filter on device bond11
[  277.526960][T12398] netlink: 'syz.3.1674': attribute type 20 has an invalid length.
[  277.526984][T12398] IPv6: NLM_F_CREATE should be specified when creating new route
[  277.562921][T12387] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1673'.
[  277.565020][T12383] macvlan2: entered promiscuous mode
[  277.565042][T12383] macvlan2: entered allmulticast mode
[  277.872031][T12397] syzkaller1: entered promiscuous mode
[  277.872057][T12397] syzkaller1: entered allmulticast mode
[  277.980206][T12409] netlink: 'syz.1.1677': attribute type 1 has an invalid length.
[  277.997731][T12411] netlink: 'syz.3.1678': attribute type 10 has an invalid length.
[  278.328575][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'.
[  278.334462][T12409] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.383063][T12410] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  278.397373][T12413] bond0: entered promiscuous mode
[  278.397400][T12413] bond0: entered allmulticast mode
[  278.420300][T12414] macvlan0: entered promiscuous mode
[  278.420325][T12414] macvlan0: entered allmulticast mode
[  278.424078][T12414] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  278.471570][T12429] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  278.471910][T12429] gretap2: entered promiscuous mode
[  278.471924][T12429] gretap2: entered allmulticast mode
[  278.577843][T12430] netlink: 'syz.0.1680': attribute type 2 has an invalid length.
[  278.714244][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1683'.
[  278.913550][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'.
[  279.052313][T12447] SET target dimension over the limit!
[  279.208702][T12457] bond4: Removing last ns target with arp_interval on
[  279.544171][T12463] syzkaller0: entered promiscuous mode
[  279.544201][T12463] syzkaller0: entered allmulticast mode
[  282.265173][T12518] netlink: 'syz.1.1701': attribute type 1 has an invalid length.
[  282.265197][T12518] nbd: error processing sock list
[  282.335155][T12517] netlink: 'syz.1.1701': attribute type 1 has an invalid length.
[  282.335179][T12517] nbd: error processing sock list
[  282.385079][T12527] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  282.608746][T12530] bond8: entered promiscuous mode
[  282.608828][T12530] bond8: entered allmulticast mode
[  282.641150][T12530] 8021q: adding VLAN 0 to HW filter on device bond8
[  282.784009][T12547] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1708'.
[  283.021895][T12556] C: renamed from lo (while UP)
[  283.041663][T12556] net_ratelimit: 29 callbacks suppressed
[  283.041686][T12556] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  283.969736][T12597] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9
[  284.001912][T12597] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9
[  284.241299][T12612] netlink: 'syz.2.1725': attribute type 10 has an invalid length.
[  284.241327][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1725'.
[  284.583274][T12631] netlink: 'syz.4.1731': attribute type 12 has an invalid length.
[  284.796661][T12639] netlink: 'syz.0.1733': attribute type 1 has an invalid length.
[  284.796687][T12639] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1733'.
[  284.796703][T12639] netlink: 'syz.0.1733': attribute type 1 has an invalid length.
[  286.257919][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'.
[  286.368347][T12691] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.1745'.
[  287.342874][   T32] audit: type=1804 audit(1789138652.219:3): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1749" name="/newroot/351/cgroup.controllers" dev="tmpfs" ino=1815 res=1 errno=0
[  287.344210][   T32] audit: type=1800 audit(1789138652.219:4): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1749" name="cgroup.controllers" dev="tmpfs" ino=1815 res=0 errno=0
[  287.441704][   T32] audit: type=1804 audit(1789138652.319:5): pid=12721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1749" name="/newroot/351/cgroup.controllers" dev="tmpfs" ino=1815 res=1 errno=0
[  287.459178][   T32] audit: type=1800 audit(1789138652.329:6): pid=12722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1749" name="cgroup.controllers" dev="tmpfs" ino=1815 res=0 errno=0
[  287.513653][T12728] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1752'.
[  288.148495][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1758'.
[  288.551633][T12773] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  288.669656][T12779] netlink: 'syz.3.1768': attribute type 9 has an invalid length.
[  288.800170][T12782] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1769'.
[  288.817976][T12786] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1770'.
[  288.822224][T12787] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1770'.
[  288.824660][T12786] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1770'.
[  289.164810][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'.
[  289.206585][T12809] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1773'.
[  289.267806][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1773'.
[  289.279315][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'.
[  289.279389][T12808] netlink: 'syz.3.1776': attribute type 3 has an invalid length.
[  289.279896][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'.
[  289.279963][T12808] netlink: 'syz.3.1776': attribute type 3 has an invalid length.
[  289.326571][T12808] netlink: 'syz.3.1776': attribute type 3 has an invalid length.
[  289.326779][T12808] netlink: 'syz.3.1776': attribute type 3 has an invalid length.
[  289.326971][T12808] netlink: 'syz.3.1776': attribute type 3 has an invalid length.
[  289.327162][T12808] netlink: 'syz.3.1776': attribute type 3 has an invalid length.
[  289.327355][T12808] netlink: 'syz.3.1776': attribute type 3 has an invalid length.
[  289.327582][T12808] netlink: 'syz.3.1776': attribute type 3 has an invalid length.
[  289.327767][T12808] netlink: 'syz.3.1776': attribute type 3 has an invalid length.
[  289.327990][T12808] netlink: 'syz.3.1776': attribute type 3 has an invalid length.
[  290.049584][T12834] sock: sock_timestamping_bind_phc: sock not bind to device
[  290.525882][T12855] Cannot find add_set index 0 as target
[  290.869667][T12875] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.869709][T12875] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.295374][T12897] syzkaller0: entered promiscuous mode
[  291.295395][T12897] syzkaller0: entered allmulticast mode
[  293.469988][T12853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  295.018155][T12958] __nla_validate_parse: 39 callbacks suppressed
[  295.018177][T12958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1817'.
[  295.037036][T12955] validate_nla: 29 callbacks suppressed
[  295.037058][T12955] netlink: 'syz.0.1816': attribute type 10 has an invalid length.
[  295.045001][T12955] syz_tun: entered promiscuous mode
[  295.153861][T12955] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  295.314168][T12970] netlink: 'syz.1.1820': attribute type 10 has an invalid length.
[  296.046579][T13011] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1827'.
[  296.612097][T13037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.670903][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  297.261102][T13069] ieee802154 phy0 wpan0: encryption failed: -22
[  297.317927][T13069] netlink: 'syz.1.1840': attribute type 5 has an invalid length.
[  297.317952][T13069] netlink: 'syz.1.1840': attribute type 9 has an invalid length.
[  297.317968][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'.
[  297.645327][T13087] syzkaller1: entered promiscuous mode
[  297.645354][T13087] syzkaller1: entered allmulticast mode
[  297.679464][T13087] syzkaller1: tun_chr_ioctl cmd 1074025677
[  297.679491][T13087] syzkaller1: Linktype set failed because interface is up
[  297.681286][T13087] syzkaller1: tun_chr_ioctl cmd 2147767517
[  298.224317][ T1009] syzkaller1: tun_net_xmit 70
[  298.224977][T13095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  298.884385][T13122] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  299.129936][T13131] netlink: 'syz.3.1863': attribute type 10 has an invalid length.
[  299.130217][T13131] hsr0: left allmulticast mode
[  299.130237][T13131] hsr_slave_0: left allmulticast mode
[  299.130255][T13131] hsr_slave_1: left allmulticast mode
[  299.153582][T13131] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  299.792572][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'.
[  299.971305][T13168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1873'.
[  300.004673][T13167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1873'.
[  300.084697][T13167] dvmrp8: entered allmulticast mode
[  300.169083][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'.
[  300.341242][T13189] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1878'.
[  300.361999][T13193] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1878'.
[  300.411814][T13199] xt_LOG: prefix is not null-terminated
[  301.566982][T13238] netlink: 'syz.4.1886': attribute type 1 has an invalid length.
[  301.717863][T13245] bond5: (slave veth0_to_bond): making interface the new active one
[  301.745846][T13245] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  302.071645][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1890'.
[  302.510932][T13287] bond0: (slave bond_slave_1): Device is not bonding slave
[  302.510957][T13287] bond0: option active_slave: invalid value (bond_slave_1)
[  303.481961][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1898'.
[  303.592863][T13314] netlink: 'syz.4.1898': attribute type 8 has an invalid length.
[  303.749232][T13307] 8021q: adding VLAN 0 to HW filter on device bond6
[  303.841370][T13319] 8021q: adding VLAN 0 to HW filter on device bond6
[  303.843802][T13319] bond6: (slave gtp0): The slave device specified does not support setting the MAC address
[  303.863433][T13319] bond6: (slave gtp0): Error -95 calling set_mac_address
[  304.442728][T13342] ip_tables: iptables: counters copy to user failed while replacing table
[  304.779462][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'.
[  304.816556][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'.
[  305.127079][T13360] gre1: entered promiscuous mode
[  305.305167][T13360] gre1: entered promiscuous mode
[  305.454408][T13360] gre1: entered promiscuous mode
[  305.601683][T13360] gre1: entered promiscuous mode
[  305.770029][T13360] gre1: entered promiscuous mode
[  305.897591][T13390] netlink: 'syz.1.1914': attribute type 34 has an invalid length.
[  305.897616][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'.
[  305.961081][T13391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1914'.
[  305.988641][T13360] gre1: entered promiscuous mode
[  306.249151][T13397] netlink: 'syz.3.1915': attribute type 11 has an invalid length.
[  306.249178][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1915'.
[  306.249855][T13397] netlink: 'syz.3.1915': attribute type 11 has an invalid length.
[  306.249873][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1915'.
[  306.394539][T13400] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1916'.
[  306.946625][T13416] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1921'.
[  307.082350][T13430] ip_tables: iptables: counters copy to user failed while replacing table
[  307.493667][T13452] vlan0: entered promiscuous mode
[  307.541304][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1928'.
[  307.541392][T13452] veth1_to_bridge: left allmulticast mode
[  307.541414][T13452] veth1_to_bridge: left promiscuous mode
[  307.541683][T13452] bridge0: port 3(veth1_to_bridge) entered disabled state
[  307.579444][T13452] bridge_slave_1: left promiscuous mode
[  307.582625][T13452] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.623582][T13452] bridge_slave_0: left allmulticast mode
[  307.623612][T13452] bridge_slave_0: left promiscuous mode
[  307.679592][T13452] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.843621][T13458] sctp: [Deprecated]: syz.1.1929 (pid 13458) Use of int in max_burst socket option deprecated.
[  307.843621][T13458] Use struct sctp_assoc_value instead
[  308.572441][T13486] ip_tables: iptables: counters copy to user failed while replacing table
[  308.989387][T13495] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  309.066899][T13495] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1941'.
[  309.067193][T13495] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1941'.
[  309.067453][T13495] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1941'.
[  309.876087][T13529] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.074817][T13537] ip_tables: iptables: counters copy to user failed while replacing table
[  310.738199][T13555] xt_hashlimit: size too large, truncated to 1048576
[  311.221719][T13579] ip_tables: iptables: counters copy to user failed while replacing table
[  311.795731][T13612] __nla_validate_parse: 65 callbacks suppressed
[  311.795754][T13612] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1969'.
[  312.175584][T13623] ip_tables: iptables: counters copy to user failed while replacing table
[  312.434151][T13624] 8021q: adding VLAN 0 to HW filter on device bond9
[  312.653805][T13636] netlink: 'syz.0.1975': attribute type 2 has an invalid length.
[  313.035317][T13645] sctp: [Deprecated]: syz.4.1978 (pid 13645) Use of struct sctp_assoc_value in delayed_ack socket option.
[  313.035317][T13645] Use struct sctp_sack_info instead
[  313.201553][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1977'.
[  313.548024][T13665] ip_tables: iptables: counters copy to user failed while replacing table
[  313.701532][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'.
[  314.107417][T13685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1989'.
[  314.179730][T13690] netlink: 'syz.1.1989': attribute type 4 has an invalid length.
[  314.179757][T13690] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.1989'.
[  314.258485][T13688] netlink: 'syz.3.1991': attribute type 83 has an invalid length.
[  314.279249][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'.
[  314.279293][T13688] netlink: 'syz.3.1991': attribute type 10 has an invalid length.
[  314.279311][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'.
[  314.591795][T13702] sctp: [Deprecated]: syz.0.1994 (pid 13702) Use of struct sctp_assoc_value in delayed_ack socket option.
[  314.591795][T13702] Use struct sctp_sack_info instead
[  316.996844][T13736] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.2001'.
[  317.106430][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'.
[  317.189920][T13748] bond13: (slave vlan5): making interface the new active one
[  317.193516][T13748] bond13: (slave vlan5): Enslaving as an active interface with an up link
[  317.228794][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  317.395092][T13740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2003'.
[  317.519684][T13760] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058)
[  317.593802][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'.
[  317.746845][T13777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2013'.
[  317.939075][T13782] bond2: (slave bond_slave_0): Device is not bonding slave
[  317.939103][T13782] bond2: option active_slave: invalid value (bond_slave_0)
[  317.940988][T13782] bond2 (unregistering): Released all slaves
[  318.048552][T13791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2015'.
[  318.408398][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'.
[  318.585304][T13810] ip_tables: iptables: counters copy to user failed while replacing table
[  318.602203][T13811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2021'.
[  318.791639][T13815] netlink: 'syz.0.2022': attribute type 1 has an invalid length.
[  318.993764][T13815] 8021q: adding VLAN 0 to HW filter on device bond14
[  319.205148][T13839] netlink: 'syz.0.2027': attribute type 1 has an invalid length.
[  319.205175][T13839] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2027'.
[  319.430939][T13848] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2030'.
[  319.539641][T13851] gre1: entered promiscuous mode
[  319.854583][T13864] ip_tables: iptables: counters copy to user failed while replacing table
[  319.957107][T13871] syzkaller0: entered promiscuous mode
[  319.957132][T13871] syzkaller0: entered allmulticast mode
[  320.118786][T13883] sit0: entered promiscuous mode
[  320.146642][T13883] netlink: 'syz.3.2040': attribute type 1 has an invalid length.
[  320.318341][T13893] pimreg: entered allmulticast mode
[  320.789239][T13910] tipc: Failed to remove unknown binding: 66,1,1/33554436:3018438979/3018438981
[  320.789273][T13910] tipc: Failed to remove unknown binding: 66,1,1/33554436:3018438979/3018438981
[  320.818055][T13914] ip_tables: iptables: counters copy to user failed while replacing table
[  320.993731][T13909] bond10: entered promiscuous mode
[  320.993758][T13909] bond10: entered allmulticast mode
[  321.218806][T13925] bond5: entered allmulticast mode
[  321.222656][T13934] sctp: [Deprecated]: syz.4.2054 (pid 13934) Use of int in maxseg socket option.
[  321.222656][T13934] Use struct sctp_assoc_value instead
[  321.377227][T13926] 8021q: adding VLAN 0 to HW filter on device bond6
[  321.381019][T13926] bond6: entered allmulticast mode
[  321.383921][T13926] bond5: (slave bond6): Enslaving as an active interface with an up link
[  321.420403][T13927] bond5 (unregistering): (slave bond6): Releasing backup interface
[  321.422499][T13927] bond6: left allmulticast mode
[  321.449356][T13927] bond5 (unregistering): Released all slaves
[  321.471252][T13929] tipc: Started in network mode
[  321.471286][T13929] tipc: Node identity ee5270acbb56, cluster identity 4711
[  321.471451][T13929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.473468][T13944] syzkaller0: entered promiscuous mode
[  321.473491][T13944] syzkaller0: entered allmulticast mode
[  321.522329][T13943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.597595][T13929] tipc: Resetting bearer <eth:syzkaller0>
[  321.663054][T13928] tipc: Resetting bearer <eth:syzkaller0>
[  321.727847][T13928] tipc: Disabling bearer <eth:syzkaller0>
[  321.854917][T13959] ip_tables: iptables: counters copy to user failed while replacing table
[  322.283336][T13977] __nla_validate_parse: 7 callbacks suppressed
[  322.283363][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'.
[  322.306539][T13967] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2065'.
[  322.452765][T13976] pim6reg1: entered promiscuous mode
[  322.452791][T13976] pim6reg1: entered allmulticast mode
[  322.569710][T13985] ip_tables: iptables: counters copy to user failed while replacing table
[  322.921150][T14001] syzkaller0: entered promiscuous mode
[  322.921177][T14001] syzkaller0: entered allmulticast mode
[  322.950298][T14001] tipc: Started in network mode
[  322.950335][T14001] tipc: Node identity 0ecb090771c4, cluster identity 4711
[  322.950559][T14001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.992737][T14000] tipc: Resetting bearer <eth:syzkaller0>
[  323.111294][T14000] tipc: Disabling bearer <eth:syzkaller0>
[  323.128041][T14010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2077'.
[  323.316826][T14012] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.2080'.
[  323.401821][T14018] ip_tables: iptables: counters copy to user failed while replacing table
[  323.622749][T14021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2084'.
[  323.642264][T14031] siw: device registration error -23
[  323.782739][T14038] openvswitch: netlink: Missing key (keys=c0, expected=40280)
[  323.989437][T14045] netlink: 18 bytes leftover after parsing attributes in process `syz.3.2090'.
[  324.091380][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2091'.
[  324.581483][T14060] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2096'.
[  324.727071][T14065] ip_tables: iptables: counters copy to user failed while replacing table
[  325.047377][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2101'.
[  325.118894][T14082] netlink: 'syz.0.2104': attribute type 28 has an invalid length.
[  325.118919][T14082] netlink: 'syz.0.2104': attribute type 3 has an invalid length.
[  325.118929][T14082] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2104'.
[  325.122766][T14086] netlink: 'syz.0.2104': attribute type 28 has an invalid length.
[  325.122790][T14086] netlink: 'syz.0.2104': attribute type 3 has an invalid length.
[  325.338806][T14094] netlink: 'syz.3.2107': attribute type 12 has an invalid length.
[  325.481336][T14094] bond2: option primary_reselect: invalid value (255)
[  325.483812][T14102] netlink: 'syz.0.2109': attribute type 4 has an invalid length.
[  325.514027][T14094] bond2 (unregistering): Released all slaves
[  325.729960][T14107] ip_tables: iptables: counters copy to user failed while replacing table
[  325.853718][T14109] sctp: [Deprecated]: syz.0.2111 (pid 14109) Use of struct sctp_assoc_value in delayed_ack socket option.
[  325.853718][T14109] Use struct sctp_sack_info instead
[  325.927531][T14123] sctp: [Deprecated]: syz.0.2111 (pid 14123) Use of struct sctp_assoc_value in delayed_ack socket option.
[  325.927531][T14123] Use struct sctp_sack_info instead
[  326.422502][T14155] netlink: 'syz.4.2120': attribute type 10 has an invalid length.
[  326.509536][T14155] netlink: 'syz.4.2120': attribute type 10 has an invalid length.
[  326.623823][T14161] netlink: 'syz.3.2122': attribute type 4 has an invalid length.
[  326.794834][T14172] ip_tables: iptables: counters copy to user failed while replacing table
[  327.048466][T14187] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004
[  327.049782][T14168] netlink: 'syz.0.2126': attribute type 1 has an invalid length.
[  327.089661][T14189] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6erspan0, syncid = 0, id = 0
[  327.313818][T14196] __nla_validate_parse: 10 callbacks suppressed
[  327.313842][T14196] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2131'.
[  327.314941][T14196] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2131'.
[  327.426701][T14193] tc action pedit 'at' offset -2147483645 out of bounds
[  327.523346][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'.
[  327.602161][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'.
[  327.767782][T14213] tap0: tun_chr_ioctl cmd 1074025676
[  327.767808][T14213] tap0: owner set to 0
[  327.802590][T14221] tap0: tun_chr_ioctl cmd 1074025676
[  327.802615][T14221] tap0: owner set to 0
[  327.804743][T14215] tap0: tun_chr_ioctl cmd 1074025673
[  328.318021][T14248] veth1_to_bond: entered allmulticast mode
[  328.318421][T14248] veth1_to_bond: entered promiscuous mode
[  328.491708][T14253] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2145'.
[  328.909696][T14247] veth1_to_bond: left promiscuous mode
[  328.909955][T14247] veth1_to_bond: left allmulticast mode
[  328.926865][T14273] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2151'.
[  329.272260][T14253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  329.512373][T14299] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2158'.
[  329.652922][T14301] xt_NETMAP: bad MAP_IPS.
[  329.694420][T14306] wg1: entered promiscuous mode
[  329.694446][T14306] wg1: entered allmulticast mode
[  329.725188][T14305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.165287][T14315] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2165'.
[  330.166202][T14325] validate_nla: 2 callbacks suppressed
[  330.166220][T14325] netlink: 'syz.3.2168': attribute type 4 has an invalid length.
[  330.168630][T14325] netlink: 'syz.3.2168': attribute type 4 has an invalid length.
[  330.208024][   T10] lo speed is unknown, defaulting to 1000
[  330.208070][   T10] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  330.302223][T14331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2169'.
[  330.472400][T14338] x_tables: duplicate underflow at hook 1
[  330.642160][T14350] openvswitch: netlink: IP tunnel TTL not specified.
[  330.658030][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'.
[  330.712378][T14353] xt_hashlimit: size too large, truncated to 1048576
[  330.712602][T14353] xt_hashlimit: max too large, truncated to 1048576
[  330.712714][T14353] xt_hashlimit: invalid rate
[  331.118555][T14374] netlink: 'syz.2.2177': attribute type 6 has an invalid length.
[  331.353680][T14383] xt_l2tp: v2 doesn't support IP mode
[  332.589358][T14440] smc: net device lo applied user defined pnetid SYZ0
[  332.589558][T14440] smc: smcd device lo applied user defined pnetid SYZ0
[  332.760275][T14453] netlink: 'syz.3.2203': attribute type 11 has an invalid length.
[  332.760300][T14453] __nla_validate_parse: 37 callbacks suppressed
[  332.760322][T14453] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2203'.
[  332.815082][T14452] netlink: 'syz.2.2202': attribute type 10 has an invalid length.
[  332.851859][T14452] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  333.020485][T14457] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2204'.
[  333.032057][T14457] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  333.142875][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'.
[  333.297082][T14461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2205'.
[  333.358266][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'.
[  333.431728][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'.
[  333.522525][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'.
[  333.522558][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'.
[  333.793678][T14483] syzkaller0: entered promiscuous mode
[  333.793705][T14483] syzkaller0: entered allmulticast mode
[  333.950926][T14498] netlink: 'syz.3.2213': attribute type 2 has an invalid length.
[  334.134124][T14505] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003
[  334.433885][T14525] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2219'.
[  334.448395][T14526] netlink: 'syz.2.2219': attribute type 1 has an invalid length.
[  334.448644][T14526] netlink: 'syz.2.2219': attribute type 1 has an invalid length.
[  334.448871][T14526] netlink: 'syz.2.2219': attribute type 1 has an invalid length.
[  334.449108][T14526] netlink: 'syz.2.2219': attribute type 1 has an invalid length.
[  334.493097][T14526] netlink: 'syz.2.2219': attribute type 1 has an invalid length.
[  335.039796][T14541] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2222'.
[  335.516819][T14558] validate_nla: 30 callbacks suppressed
[  335.516842][T14558] netlink: 'syz.1.2226': attribute type 1 has an invalid length.
[  335.521296][T14555] xfrm1: entered allmulticast mode
[  336.159016][T14585] ip_tables: iptables: counters copy to user failed while replacing table
[  337.095660][T14638] ip_tables: iptables: counters copy to user failed while replacing table
[  337.507054][T14655] ip_vti0: entered promiscuous mode
[  337.709378][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  337.933350][T14674] __nla_validate_parse: 6 callbacks suppressed
[  337.933374][T14674] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2252'.
[  337.933394][T14674] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2252'.
[  337.933411][T14674] netlink: 'syz.3.2252': attribute type 6 has an invalid length.
[  337.933426][T14674] netlink: 'syz.3.2252': attribute type 5 has an invalid length.
[  337.933440][T14674] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2252'.
[  337.936719][T14674] netlink: 'syz.3.2252': attribute type 32 has an invalid length.
[  337.936772][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'.
[  338.096134][T14679] netlink: 5812 bytes leftover after parsing attributes in process `syz.0.2254'.
[  338.096199][T14679] netlink: 5812 bytes leftover after parsing attributes in process `syz.0.2254'.
[  338.207887][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'.
[  338.210437][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'.
[  338.210462][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2255'.
[  338.391630][T14674] bond2: option coupled_control: invalid value (192)
[  338.407674][T14674] bond2 (unregistering): Released all slaves
[  338.485043][T14691] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  338.498547][T14693] netlink: 'syz.2.2257': attribute type 12 has an invalid length.
[  338.777580][T14708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2260'.
[  339.171064][T14729] netlink: 'syz.0.2265': attribute type 1 has an invalid length.
[  339.171089][T14729] netlink: 'syz.0.2265': attribute type 4 has an invalid length.
[  339.674004][T14740] IPVS: Unknown mcast interface: vcan0
[  340.075054][T14756] netlink: 'syz.1.2274': attribute type 12 has an invalid length.
[  340.159979][T14756] bond7: option primary_reselect: invalid value (255)
[  340.182847][T14756] bond7 (unregistering): Released all slaves
[  340.536476][T14780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  340.724819][T14787] netlink: 'syz.0.2286': attribute type 10 has an invalid length.
[  340.734864][T14794] netlink: 'syz.0.2286': attribute type 10 has an invalid length.
[  340.868379][T14799] Bluetooth: ISO socket layer initialized
[  341.696159][T14838] 8021q: adding VLAN 0 to HW filter on device bond8
[  341.792095][T14838] netlink: 'syz.4.2297': attribute type 4 has an invalid length.
[  341.855649][T14838] .`: renamed from bond0 (while UP)
[  341.937194][T14850] veth1_to_bond: entered allmulticast mode
[  342.129321][T14850] veth1_to_bond (unregistering): left allmulticast mode
[  342.149506][T14863] netlink: zone id is out of range
[  342.149524][T14863] netlink: zone id is out of range
[  342.149533][T14863] netlink: zone id is out of range
[  342.149721][T14863] netlink: zone id is out of range
[  342.202408][T14863] netlink: zone id is out of range
[  342.556363][T14873] ip_tables: iptables: counters copy to user failed while replacing table
[  342.722780][T14886] xt_esp: unknown flags DD
[  343.304557][T14908] can: request_module (can-proto-0) failed.
[  343.674148][T14923] xt_esp: unknown flags DD
[  343.725177][T14920] xt_esp: unknown flags DD
[  343.763568][T14929] ip_tables: iptables: counters copy to user failed while replacing table
[  343.824705][T14931] netlink: 'syz.1.2321': attribute type 4 has an invalid length.
[  344.095324][T14940] __nla_validate_parse: 22 callbacks suppressed
[  344.095347][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'.
[  344.318849][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'.
[  344.363156][T14951] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2327'.
[  344.363192][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'.
[  344.439707][T14959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2332'.
[  344.459314][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2331'.
[  344.524039][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2333'.
[  344.536981][T14965] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2333'.
[  344.543217][T14955] netlink: 'syz.4.2331': attribute type 1 has an invalid length.
[  344.688368][T14973] ip_tables: iptables: counters copy to user failed while replacing table
[  344.737743][T14955] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.743900][T14969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.743926][T14969] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.032856][T14983] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2337'.
[  345.122806][T14986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2339'.
[  345.417848][ T9298] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  345.418241][ T9298] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  345.441343][  T988] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  345.443690][T15006] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  345.639648][T15012] ip_tables: iptables: counters copy to user failed while replacing table
[  345.759182][T15014] Bluetooth: hci0: unsupported parameter 5134
[  345.759210][T15014] Bluetooth: hci0: unsupported parameter 8192
[  345.759227][T15014] Bluetooth: hci0: unsupported parameter 5134
[  345.759241][T15014] Bluetooth: hci0: unsupported parameter 8192
[  345.849501][  T988] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  346.281573][  T988] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  346.291284][T15035] netlink: 'syz.0.2353': attribute type 10 has an invalid length.
[  346.314381][T15035] bond6: (slave veth0_to_bond): Releasing active interface
[  346.332723][T15035] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  346.755801][T15068] syzkaller0: entered promiscuous mode
[  346.755826][T15068] syzkaller0: entered allmulticast mode
[  346.846729][T15074] xt_policy: output policy not valid in PREROUTING and INPUT
[  347.114994][T15084] x_tables: duplicate underflow at hook 2
[  347.183571][T15083] netlink: 'syz.0.2368': attribute type 1 has an invalid length.
[  347.358985][T15092] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  347.863642][T15119] openvswitch: netlink: Multiple metadata blocks provided
[  347.943429][T15121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.239222][T15139] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  348.663488][T15152] 8021q: VLANs not supported on gre0
[  349.246873][T15193] __nla_validate_parse: 12 callbacks suppressed
[  349.246897][T15193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2398'.
[  349.278502][T15190] nbd: must specify a size in bytes for the device
[  349.305658][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  349.448476][T15200] netlink: 'syz.2.2400': attribute type 1 has an invalid length.
[  349.605230][T15204] bond11: (slave gretap0): making interface the new active one
[  349.618554][T15204] bond11: (slave gretap0): Enslaving as an active interface with an up link
[  349.620464][T15206] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  350.147791][T15230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2410'.
[  350.300278][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2412'.
[  350.300732][T15237] netlink: 'syz.1.2413': attribute type 16 has an invalid length.
[  350.300751][T15237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2413'.
[  350.303322][T15233] ip_tables: iptables: counters copy to user failed while replacing table
[  350.716603][T15251] netlink: 'syz.0.2418': attribute type 1 has an invalid length.
[  350.954110][T15269] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  350.958106][T15269] bond12 (unregistering): Released all slaves
[  351.037522][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'.
[  351.037548][T15281] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2424'.
[  351.090827][T15268] bond7 (unregistering): Released all slaves
[  351.782465][T15297] ieee802154 phy0 wpan0: encryption failed: -22
[  353.727715][T15256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  353.755298][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'.
[  353.857009][T15301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2428'.
[  354.682477][T15342] xt_hashlimit: size too large, truncated to 1048576
[  354.805380][T15349] netlink: 516 bytes leftover after parsing attributes in process `syz.2.2440'.
[  354.808779][T15349] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2440'.
[  355.102537][T15351] ipt_ah: unknown flags FF
[  355.106061][T15351] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2440'.
[  355.412764][T15345] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.546693][T15345] bridge_slave_0 (unregistering): left allmulticast mode
[  355.552195][T15345] bridge_slave_0 (unregistering): left promiscuous mode
[  355.567539][T15345] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.799048][T15372] vlan3: entered promiscuous mode
[  355.799072][T15372] geneve1: entered promiscuous mode
[  355.799252][T15372] vlan3: entered allmulticast mode
[  355.799267][T15372] geneve1: entered allmulticast mode
[  355.936910][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2449'.
[  355.937378][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2449'.
[  356.052415][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2448'.
[  356.123255][T15390] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2450'.
[  356.422921][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'.
[  356.542898][T15405] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.543186][T15408] bond0: left promiscuous mode
[  356.543207][T15408] bond0: left allmulticast mode
[  356.889460][T15422] openvswitch: netlink: Message has 8 unknown bytes.
[  357.000211][T15436] openvswitch: netlink: Missing valid actions attribute.
[  357.000241][T15436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.481507][T15462] h: entered promiscuous mode
[  357.496512][T15461] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2470'.
[  357.545622][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  357.780042][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'.
[  357.890789][T15475] ip_tables: iptables: counters copy to user failed while replacing table
[  357.921868][T15491] ip_tables: iptables: counters copy to user failed while replacing table
[  358.716325][T15519] xt_CT: No such helper "netbios-ns"
[  358.740634][T15527] netlink: 'syz.3.2485': attribute type 30 has an invalid length.
[  358.824539][T15527] bond2: option arp_missed_max: invalid value (0)
[  358.824569][T15527] bond2: option arp_missed_max: allowed values 1 - 255
[  358.842813][T15527] bond2 (unregistering): Released all slaves
[  358.970336][T15531] 
: renamed from bond0 (while UP)
[  359.001718][T15538] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  359.705666][T15567] bond8: (slave geneve6): making interface the new active one
[  359.707049][T15567] bond8: (slave geneve6): Enslaving as an active interface with an up link
[  359.845193][T15574] netlink: 'syz.0.2502': attribute type 3 has an invalid length.
[  359.993315][T15580] netlink: 'syz.3.2504': attribute type 2 has an invalid length.
[  360.030719][T15583] bridge0: entered allmulticast mode
[  360.123007][T15586] bridge4: entered allmulticast mode
[  360.233889][T15573] netlink: 'syz.2.2503': attribute type 34 has an invalid length.
[  360.233910][T15573] __nla_validate_parse: 2 callbacks suppressed
[  360.233920][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'.
[  360.348076][ T9763] tipc: Node number set to 1426354348
[  360.559947][T15611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2513'.
[  360.893432][T15628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2514'.
[  360.909126][T15628] netlink: 'syz.0.2514': attribute type 5 has an invalid length.
[  360.996400][T15633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2514'.
[  361.212830][T15645] netlink: 'syz.3.2515': attribute type 83 has an invalid length.
[  361.234681][T15645] netlink: 'syz.3.2515': attribute type 83 has an invalid length.
[  361.583101][T15658] x_tables: unsorted underflow at hook 1
[  361.656555][T15659] sctp: [Deprecated]: syz.3.2517 (pid 15659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  361.656555][T15659] Use struct sctp_sack_info instead
[  361.695158][T15658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2518'.
[  361.746186][T15668] netlink: 'syz.0.2520': attribute type 4 has an invalid length.
[  361.781540][T15668] netlink: 'syz.0.2520': attribute type 4 has an invalid length.
[  361.900022][ T5279] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.957091][T15677] Bluetooth: hci0: invalid length 0, exp 1 for type 31
[  361.957453][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2521'.
[  361.997763][T15677] Bluetooth: hci0: invalid length 0, exp 1 for type 31
[  362.302131][T15699] vlan4: entered promiscuous mode
[  362.302156][T15699] hsr0: entered promiscuous mode
[  362.302705][T15699] vlan4: entered allmulticast mode
[  362.302724][T15699] hsr0: entered allmulticast mode
[  362.302740][T15699] hsr_slave_0: entered allmulticast mode
[  362.302758][T15699] hsr_slave_1: entered allmulticast mode
[  362.394316][T15699] 8021q: VLANs not supported on wg0
[  362.726635][T15715] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2528'.
[  362.790410][T15718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2529'.
[  362.803588][T15718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  362.820315][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2530'.
[  362.927685][T15718] tc action pedit offset must be on 32 bit boundaries
[  363.329202][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'.
[  363.517200][T15753] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.462349][T15796] ieee802154 phy0 wpan0: encryption failed: -22
[  364.612123][T15801] netlink: 'syz.4.2550': attribute type 8 has an invalid length.
[  364.956568][T15818] lo speed is unknown, defaulting to 1000
[  365.000893][T15830] netlink: 'syz.4.2557': attribute type 1 has an invalid length.
[  365.000923][T15830] netlink: 'syz.4.2557': attribute type 1 has an invalid length.
[  365.005244][T15818] wg0 speed is unknown, defaulting to 1000
[  365.368104][T15842] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  365.391816][T15842] __nla_validate_parse: 9 callbacks suppressed
[  365.391835][T15842] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2562'.
[  365.391851][T15842] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2562'.
[  365.424638][T15842] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2562'.
[  365.670785][T15852] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.236866][T15863] netlink: 'syz.0.2567': attribute type 2 has an invalid length.
[  366.236887][T15863] netlink: 'syz.0.2567': attribute type 2 has an invalid length.
[  366.313142][T15869] IPv6: NLM_F_CREATE should be specified when creating new route
[  366.745336][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'.
[  367.072791][T15900] ieee802154 phy0 wpan0: encryption failed: -22
[  367.093614][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'.
[  367.231963][T15907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2581'.
[  367.254817][T15905] openvswitch: netlink: Message has 32 unknown bytes.
[  367.828282][T15935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2591'.
[  367.867339][ T4934] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  367.931318][T15935] x_tables: ip6_tables: mh match: only valid for protocol 135
[  368.108349][T15945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2594'.
[  368.108921][T15945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2594'.
[  368.300641][T15958] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  368.376494][T15950] netlink: 'syz.0.2597': attribute type 3 has an invalid length.
[  368.441503][T15960] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  368.592133][T15960] 8021q: adding VLAN 0 to HW filter on device bond7
[  368.617577][T15965] bond0: (slave veth0_to_bond): Releasing active interface
[  368.655048][T15965] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  368.696981][T15966] macvlan0: entered promiscuous mode
[  368.697008][T15966] macvlan0: entered allmulticast mode
[  368.698959][T15966] bond7: entered promiscuous mode
[  368.701128][T15966] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  368.701878][T15966] bond7: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  368.708345][T15966] bond7: left promiscuous mode
[  368.791168][T15978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2601'.
[  368.829023][T15973] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  368.892769][T15978] xfrm1: entered promiscuous mode
[  368.892794][T15978] xfrm1: entered allmulticast mode
[  368.952639][T15982] syzkaller1: entered promiscuous mode
[  368.952669][T15982] syzkaller1: entered allmulticast mode
[  369.264667][T16003] atomic_op ffff8880329621e0 conn xmit_atomic 0000000000000000
[  369.557212][T16015] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  369.813251][T16026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.842769][   T32] audit: type=1804 audit(1789138734.719:7): pid=16029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2613" name="/newroot/547/cgroup.controllers" dev="tmpfs" ino=2807 res=1 errno=0
[  369.842826][   T32] audit: type=1800 audit(1789138734.719:8): pid=16029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2613" name="cgroup.controllers" dev="tmpfs" ino=2807 res=0 errno=0
[  370.046257][T16038] netlink: 'syz.1.2616': attribute type 1 has an invalid length.
[  370.160901][T16044] sctp: [Deprecated]: syz.1.2620 (pid 16044) Use of int in maxseg socket option.
[  370.160901][T16044] Use struct sctp_assoc_value instead
[  370.207170][T16045] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  371.537739][T16097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.543188][T16097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.653977][T16105] __nla_validate_parse: 9 callbacks suppressed
[  371.654000][T16105] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2635'.
[  371.944120][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'.
[  372.154919][T16113] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[  372.429344][T16131] netlink: 'syz.3.2644': attribute type 2 has an invalid length.
[  372.429370][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'.
[  373.094454][T16161] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  373.094685][T16161] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  373.127519][T16152] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2648'.
[  373.252703][T16113] infiniband syz1: set active
[  373.252730][T16113] infiniband syz1: added syz_tun
[  373.274576][T16113] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  373.318512][T16113] infiniband syz1: Couldn't open port 1
[  373.318775][T16113] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  373.318821][T16113] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  373.318867][T16113] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  373.511779][T16175] netlink: 'syz.4.2654': attribute type 10 has an invalid length.
[  373.532474][T16175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.551261][T16175] batadv0: entered allmulticast mode
[  373.552011][T16175] .`: (slave batadv0): Enslaving as an active interface with an up link
[  373.607480][T16175] bond0 (unregistering): Released all slaves
[  373.647845][T16113] RDS/IB: syz1: added
[  373.647903][T16113] smc: adding ib device syz1 with port count 1
[  373.647926][T16113] smc:    ib device syz1 port 1 has no pnetid
[  373.694690][T16182] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  374.185885][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  374.194792][T16193] xt_NETMAP: bad MAP_IPS.
[  374.454996][T16201] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2660'.
[  374.484166][T16201] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2660'.
[  374.780588][T16210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2662'.
[  375.389025][T16233] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2671'.
[  375.572927][T16244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2672'.
[  375.583330][T16243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2672'.
[  375.961235][T16258] bond8: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  375.985100][T16258] bond8 (unregistering): Released all slaves
[  376.087310][T16262] netlink: 'syz.1.2675': attribute type 8 has an invalid length.
[  376.232682][T16262] bridge0: port 3(veth1_to_bridge) entered disabled state
[  376.233022][T16262] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.889373][T16284] dvmrp8: entered allmulticast mode
[  376.932797][T16284] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  377.542903][T16307] netlink: 'syz.3.2684': attribute type 1 has an invalid length.
[  377.568300][T16305] __nla_validate_parse: 4 callbacks suppressed
[  377.568324][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'.
[  377.568352][T16305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2683'.
[  377.621713][T16310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2685'.
[  377.638066][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'.
[  377.642425][T16310] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  377.643750][T16307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2684'.
[  378.198932][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2693'.
[  378.272895][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2693'.
[  378.352252][T16341] netlink: 'syz.4.2694': attribute type 10 has an invalid length.
[  378.400589][T16344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2695'.
[  378.468974][T16346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2696'.
[  378.470089][T16346] netlink: 'syz.2.2696': attribute type 23 has an invalid length.
[  378.669726][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  378.761629][T16356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.901390][T16363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2700'.
[  379.001913][T16371] netlink: 'syz.1.2704': attribute type 1 has an invalid length.
[  379.104302][T16371] 8021q: adding VLAN 0 to HW filter on device bond8
[  380.086611][T16434] netlink: 'syz.0.2718': attribute type 1 has an invalid length.
[  380.172383][T16428] netlink: 'syz.0.2718': attribute type 1 has an invalid length.
[  380.172425][T16428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.206065][T16434] 8021q: adding VLAN 0 to HW filter on device bond16
[  380.290078][T16428] bond16: (slave ip6erspan0): making interface the new active one
[  380.293609][T16428] bond16: (slave ip6erspan0): Enslaving as an active interface with an up link
[  381.453125][T16497] ip_tables: iptables: counters copy to user failed while replacing table
[  381.694863][T16510] netlink: 'syz.2.2738': attribute type 1 has an invalid length.
[  381.907642][T16517] 8021q: adding VLAN 0 to HW filter on device bond14
[  381.910407][T16517] bond13: (slave bond14): making interface the new active one
[  381.910963][T16517] bond13: (slave bond14): Enslaving as an active interface with an up link
[  381.968424][T16510] bond13: (slave gretap2): Enslaving as a backup interface with an up link
[  382.083263][T16524] tls_set_device_offload: netdev not found
[  382.245029][T16530] netlink: 'syz.3.2745': attribute type 4 has an invalid length.
[  382.268426][T16530] netlink: 'syz.3.2745': attribute type 4 has an invalid length.
[  382.372336][T16541] netlink: 'syz.0.2746': attribute type 1 has an invalid length.
[  382.891875][T16558] __nla_validate_parse: 9 callbacks suppressed
[  382.891898][T16558] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2753'.
[  382.892101][T16557] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2753'.
[  383.005117][T16564] syzkaller1: entered promiscuous mode
[  383.005147][T16564] syzkaller1: entered allmulticast mode
[  383.150870][T16572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2755'.
[  383.150905][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'.
[  383.150921][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2755'.
[  383.177028][T16572] netlink: 'syz.2.2755': attribute type 1 has an invalid length.
[  383.207524][T16574] bridge0: port 1(ipvlan2) entered blocking state
[  383.207788][T16574] bridge0: port 1(ipvlan2) entered disabled state
[  383.208139][T16574] ipvlan2: entered allmulticast mode
[  383.208160][T16574] bridge0: entered allmulticast mode
[  383.211964][T16574] ipvlan2: left allmulticast mode
[  383.211986][T16574] bridge0: left allmulticast mode
[  383.449711][T16572] 8021q: adding VLAN 0 to HW filter on device bond15
[  383.533008][T16579] bond15: (slave gretap3): making interface the new active one
[  383.534169][T16579] bond15: (slave gretap3): Enslaving as an active interface with an up link
[  383.701593][T16600] netlink: 'syz.3.2764': attribute type 21 has an invalid length.
[  383.701617][T16600] netlink: 'syz.3.2764': attribute type 22 has an invalid length.
[  383.701631][T16600] netlink: 'syz.3.2764': attribute type 23 has an invalid length.
[  383.701646][T16600] netlink: 'syz.3.2764': attribute type 25 has an invalid length.
[  383.701660][T16600] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2764'.
[  383.702617][T16599] netlink: 'syz.3.2764': attribute type 21 has an invalid length.
[  383.702641][T16599] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2764'.
[  383.740113][T16600] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2764'.
[  383.942795][T16609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2764'.
[  383.948532][T16608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2764'.
[  384.058872][T16599] syzkaller1: entered promiscuous mode
[  384.058898][T16599] syzkaller1: entered allmulticast mode
[  384.172235][T16625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  384.172256][T16625] IPv6: NLM_F_CREATE should be set when creating new route
[  384.409743][T16626] bond_slave_1: mtu less than device minimum
[  384.522815][T16634] bond9: Unable to set peer notification delay as MII monitoring is disabled
[  384.525113][T16634] bond9 (unregistering): Released all slaves
[  384.685239][T16649] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  384.698223][T16649] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  384.698449][T16649] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  384.698654][T16649] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  384.698863][T16649] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  384.700339][T16649] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  384.700578][T16649] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  384.780615][T16644] syzkaller1: entered promiscuous mode
[  384.780640][T16644] syzkaller1: entered allmulticast mode
[  385.230602][T16662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.289461][T16664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.348601][T16662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.385224][ T7051] IPVS: starting estimator thread 0...
[  385.465582][T16672] IPVS: using max 28 ests per chain, 67200 per kthread
[  386.317957][T16685] syzkaller0: entered promiscuous mode
[  386.317983][T16685] syzkaller0: entered allmulticast mode
[  386.320466][T16685] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  386.708966][T16709] netlink: 'syz.2.2789': attribute type 11 has an invalid length.
[  386.873697][T16717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.981433][T16719] syzkaller0: entered promiscuous mode
[  386.981459][T16719] syzkaller0: entered allmulticast mode
[  387.716039][T16758] net_ratelimit: 8 callbacks suppressed
[  387.716061][T16758] openvswitch: netlink: Key type 31 is not supported
[  388.295324][T16781] bond9: (slave vlan0): Opening slave failed
[  388.480597][T16791] __nla_validate_parse: 18 callbacks suppressed
[  388.480620][T16791] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2813'.
[  388.543625][T16791] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  388.543713][T16791] gretap1: entered promiscuous mode
[  388.543731][T16791] gretap1: entered allmulticast mode
[  389.811650][T16843] ipt_rpfilter: unknown options
[  391.002628][T16852] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  391.063509][T16874] validate_nla: 5 callbacks suppressed
[  391.063526][T16874] netlink: 'syz.4.2828': attribute type 4 has an invalid length.
[  391.263958][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2830'.
[  391.493075][T16888] : entered promiscuous mode
[  391.493094][T16888] : entered allmulticast mode
[  391.568378][T16822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  392.192766][ T4934] Bluetooth: hci2: command 0x0401 tx timeout
[  392.224275][T16917] ip_tables: iptables: counters copy to user failed while replacing table
[  392.236041][T16917] ip_tables: iptables: counters copy to user failed while replacing table
[  392.237209][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  392.262797][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  392.273580][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  392.279037][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  392.288828][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  392.490947][T16931] openvswitch: netlink: Missing valid actions attribute.
[  392.490983][T16931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.812364][ T5622] syz_tun (unregistering): left promiscuous mode
[  393.077820][T16947] netlink: 'syz.4.2841': attribute type 1 has an invalid length.
[  393.187242][T16912] lo speed is unknown, defaulting to 1000
[  393.189092][T16912] wg0 speed is unknown, defaulting to 1000
[  393.991759][T16978] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8
[  394.088523][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2853'.
[  394.128504][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'.
[  394.345615][ T4934] Bluetooth: hci5: command tx timeout
[  394.727086][ T7051] tipc: Subscription rejected, illegal request
[  394.958117][T17017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2859'.
[  394.980339][T17019] netlink: 'syz.0.2859': attribute type 83 has an invalid length.
[  395.012170][T17022] IPVS: dh: FWM 3 0x00000003 - no destination available
[  395.226600][  T408] IPVS: twos: UDP 127.0.0.1:20001 - no destination available
[  395.324293][T16912] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.328645][T16912] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.328831][T16912] bridge_slave_0: entered allmulticast mode
[  395.356585][T16912] bridge_slave_0: entered promiscuous mode
[  395.391661][T16912] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.391832][T16912] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.392001][T16912] bridge_slave_1: entered allmulticast mode
[  395.420548][T16912] bridge_slave_1: entered promiscuous mode
[  395.662992][T16912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.685257][T16912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.844793][T16912] team0: Port device team_slave_0 added
[  395.866907][T17055] netlink: 'syz.2.2871': attribute type 10 has an invalid length.
[  395.885855][T16912] team0: Port device team_slave_1 added
[  395.954359][T17059] netlink: 'syz.0.2872': attribute type 6 has an invalid length.
[  395.954386][T17059] netlink: 'syz.0.2872': attribute type 5 has an invalid length.
[  395.982779][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'.
[  395.988404][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2871'.
[  396.046503][T17055] team0: Port device dummy0 added
[  396.089729][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2871'.
[  396.268077][T16912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.268097][T16912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.268126][T16912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.303500][T16912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.303552][T16912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.303644][T16912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.417894][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'.
[  396.425586][ T4934] Bluetooth: hci5: command tx timeout
[  396.532630][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'.
[  396.816727][T17097] netlink: 'syz.1.2877': attribute type 23 has an invalid length.
[  396.879602][T16912] hsr_slave_0: entered promiscuous mode
[  396.883565][T16912] hsr_slave_1: entered promiscuous mode
[  396.884344][T16912] debugfs: 'hsr0' already exists in 'hsr'
[  396.884364][T16912] Cannot create hsr debugfs directory
[  397.353760][T17113] netlink: 'syz.4.2885': attribute type 21 has an invalid length.
[  397.373268][T17113] netlink: 'syz.4.2885': attribute type 6 has an invalid length.
[  397.373293][T17113] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2885'.
[  397.552700][T17125] netlink: 'syz.4.2887': attribute type 16 has an invalid length.
[  397.552728][T17125] netlink: 'syz.4.2887': attribute type 17 has an invalid length.
[  397.632086][T17129] atomic_op ffff8880554fb9e0 conn xmit_atomic 0000000000000000
[  397.663353][T17132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2888'.
[  397.764942][T17122] tipc: Resetting bearer <eth:xfrm0>
[  397.772432][T17122] tipc: Resetting bearer <eth:xfrm0>
[  397.919312][T17125] 0�X��D��: left allmulticast mode
[  397.961134][T17125] 8021q: adding VLAN 0 to HW filter on device .`
[  397.984996][T17125] bridge_slave_1: left allmulticast mode
[  398.008123][T17125] tipc: Resetting bearer <eth:xfrm0>
[  398.027568][T17125] vlan0: left promiscuous mode
[  398.072617][T17125] vlan2: left allmulticast mode
[  398.072642][T17125] .`: left allmulticast mode
[  398.072658][T17125] bond_slave_0: left allmulticast mode
[  398.072677][T17125] bond_slave_1: left allmulticast mode
[  398.072693][T17125] batadv0: left allmulticast mode
[  398.073888][T17125] bond1: left promiscuous mode
[  398.073909][T17125] xfrm1: left promiscuous mode
[  398.138229][T17125] geneve2: left promiscuous mode
[  398.138255][T17125] geneve2: left allmulticast mode
[  398.141269][T17125] : left promiscuous mode
[  398.141293][T17125] : left allmulticast mode
[  398.168166][T17125] gretap1: left promiscuous mode
[  398.168189][T17125] gretap1: left allmulticast mode
[  398.190893][T17125] gretap2: left promiscuous mode
[  398.190920][T17125] gretap2: left allmulticast mode
[  398.209249][T17125] geneve3: left allmulticast mode
[  398.221390][T17125] 8021q: adding VLAN 0 to HW filter on device bond2
[  398.243646][T17125] gretap0: left promiscuous mode
[  398.254164][T17125] batman_adv: batadv0: Interface activated: gretap0
[  398.271366][T17125] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check.
[  398.508642][ T4934] Bluetooth: hci5: command tx timeout
[  399.398742][T16912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.398784][T16912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.805235][T16912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.805278][T16912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.880462][T17205] netlink: NAT attribute has 4 unknown bytes
[  399.880500][T17205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.193920][T16912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.193962][T16912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.232560][T17222] __nla_validate_parse: 2 callbacks suppressed
[  400.232583][T17222] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2906'.
[  400.404211][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2907'.
[  400.528652][T16912] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  400.585823][ T4934] Bluetooth: hci5: command tx timeout
[  400.592797][T16912] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  400.606976][T16912] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  400.639357][T16912] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  400.641479][T17231] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2909'.
[  400.671790][T16912] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  400.693059][T16912] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  400.707034][T16912] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  400.730316][T16912] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  400.782279][T17238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.069247][ T1009] IPVS: twos: UDP 127.0.0.1:20001 - no destination available
[  401.194475][T16912] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.227422][T16912] 8021q: adding VLAN 0 to HW filter on device team0
[  401.250494][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.250615][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state
[  401.283581][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.283692][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.590142][T17272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2916'.
[  401.590429][T17272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2916'.
[  402.259155][T17293] bond9: option all_slaves_active: invalid value (179)
[  402.266568][T17293] bond9 (unregistering): Released all slaves
[  402.534947][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2925'.
[  402.899299][T16912] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.926531][T17320] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2927'.
[  403.018479][T16912] veth0_vlan: entered promiscuous mode
[  403.065272][T16912] veth1_vlan: entered promiscuous mode
[  403.168545][T16912] veth0_macvtap: entered promiscuous mode
[  403.191278][T16912] veth1_macvtap: entered promiscuous mode
[  403.242829][T16912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.287247][T16912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.376531][ T7051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.376588][ T7051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.376739][ T7051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.399127][ T7049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.691416][ T6550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.691442][ T6550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.912343][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.912383][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.159895][T17364] netlink: 'syz.3.2835': attribute type 24 has an invalid length.
[  404.180937][T17364] netlink: 'syz.3.2835': attribute type 24 has an invalid length.
[  404.315740][T17371] ------------[ cut here ]------------
[  404.315758][T17371] !chanctx_conf
[  404.315772][T17371] WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#0: syz.0.2940/17371
[  404.336701][T17371] Modules linked in:
[  404.340664][T17371] CPU: 0 UID: 0 PID: 17371 Comm: syz.0.2940 Not tainted syzkaller #0 PREEMPT(full) 
[  404.350162][T17371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  404.360672][T17371] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480
[  404.366761][T17371] Code: 6e 43 f6 e9 b1 fe ff ff e8 d5 c2 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 c7 c2 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 b9 c2 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4
[  404.386494][T17371] RSP: 0018:ffffc90006eff498 EFLAGS: 00010287
[  404.392611][T17371] RAX: ffffffff8b6007f7 RBX: ffffffff8b60046f RCX: 0000000000080000
[  404.400717][T17371] RDX: ffffc900042b1000 RSI: 000000000000277c RDI: 000000000000277d
[  404.408790][T17371] RBP: 00000000ffffffff R08: ffffffff8b60046f R09: 0000000000000000
[  404.416885][T17371] R10: dffffc0000000000 R11: ffffed100f4d6cee R12: ffff8880767b0ec0
[  404.424942][T17371] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[  404.433066][T17371] FS:  00007f8b8560b6c0(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000
[  404.442085][T17371] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  404.448873][T17371] CR2: 0000200000000200 CR3: 0000000074c36000 CR4: 00000000003526f0
[  404.456955][T17371] Call Trace:
[  404.460307][T17371]  <TASK>
[  404.463290][T17371]  mesh_plink_frame_tx+0x73d/0xc30
[  404.468563][T17371]  ? __pfx_mesh_plink_frame_tx+0x10/0x10
[  404.474427][T17371]  ? hwmp_route_info_get+0x330/0x1580
[  404.479929][T17371]  mesh_plink_deactivate+0x18b/0x2f0
[  404.485286][T17371]  mesh_sta_cleanup+0x42/0x150
[  404.490155][T17371]  cleanup_single_sta+0x3ff/0x660
[  404.495254][T17371]  __sta_info_flush+0x5bb/0x700
[  404.500293][T17371]  ? __pfx___sta_info_flush+0x10/0x10
[  404.505778][T17371]  ieee80211_do_stop+0x3cd/0x2410
[  404.510893][T17371]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  404.516494][T17371]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  404.522379][T17371]  ieee80211_stop+0x1ab/0x200
[  404.527185][T17371]  ? __pfx_ieee80211_stop+0x10/0x10
[  404.532488][T17371]  __dev_close_many+0x366/0x6e0
[  404.537471][T17371]  ? __pfx___dev_close_many+0x10/0x10
[  404.542895][T17371]  ? __dev_change_flags+0x2e2/0x820
[  404.548217][T17371]  ? __local_bh_enable_ip+0xd6/0x140
[  404.553575][T17371]  __dev_change_flags+0x3f5/0x820
[  404.558737][T17371]  ? __pfx___dev_change_flags+0x10/0x10
[  404.564437][T17371]  ? __pfx___mutex_lock+0x10/0x10
[  404.569579][T17371]  ? full_name_hash+0x92/0xe0
[  404.574319][T17371]  netif_change_flags+0x7c/0x1b0
[  404.579383][T17371]  dev_change_flags+0x128/0x260
[  404.584307][T17371]  dev_ioctl+0x7b4/0x1150
[  404.589021][T17371]  sock_do_ioctl+0x23e/0x320
[  404.593708][T17371]  ? __pfx_sock_do_ioctl+0x10/0x10
[  404.598942][T17371]  ? hook_file_ioctl+0x1f2/0x600
[  404.604005][T17371]  sock_ioctl+0x57a/0x7e0
[  404.608468][T17371]  ? __pfx_sock_ioctl+0x10/0x10
[  404.613383][T17371]  ? __fget_files+0x2a/0x420
[  404.618086][T17371]  ? __fget_files+0x3a2/0x420
[  404.623168][T17371]  ? __fget_files+0x2a/0x420
[  404.627918][T17371]  ? bpf_lsm_file_ioctl+0x9/0x20
[  404.632919][T17371]  ? __pfx_sock_ioctl+0x10/0x10
[  404.637924][T17371]  __se_sys_ioctl+0xfc/0x170
[  404.642572][T17371]  do_syscall_64+0x166/0x520
[  404.647240][T17371]  ? trace_irq_disable+0x3b/0x140
[  404.652319][T17371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.658497][T17371]  ? clear_bhb_loop+0x70/0xc0
[  404.663322][T17371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.669297][T17371] RIP: 0033:0x7f8b8479e159
[  404.673761][T17371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.693506][T17371] RSP: 002b:00007f8b8560b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  404.702192][T17371] RAX: ffffffffffffffda RBX: 00007f8b84a25fa0 RCX: 00007f8b8479e159
[  404.710255][T17371] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006
[  404.718386][T17371] RBP: 00007f8b8483503b R08: 0000000000000000 R09: 0000000000000000
[  404.726496][T17371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.734507][T17371] R13: 00007f8b84a26038 R14: 00007f8b84a25fa0 R15: 00007ffcabcc23c8
[  404.742680][T17371]  </TASK>
[  404.745794][T17371] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  404.753108][T17371] CPU: 0 UID: 0 PID: 17371 Comm: syz.0.2940 Not tainted syzkaller #0 PREEMPT(full) 
[  404.762524][T17371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  404.772631][T17371] Call Trace:
[  404.775956][T17371]  <TASK>
[  404.778927][T17371]  vpanic+0x56d/0xa60
[  404.782967][T17371]  ? __pfx__printk+0x10/0x10
[  404.787605][T17371]  ? __pfx_vpanic+0x10/0x10
[  404.792166][T17371]  ? is_bpf_text_address+0x292/0x2b0
[  404.797528][T17371]  ? is_bpf_text_address+0x26/0x2b0
[  404.802806][T17371]  panic+0xc5/0xd0
[  404.806594][T17371]  ? __pfx_panic+0x10/0x10
[  404.811089][T17371]  __warn+0x315/0x4c0
[  404.815169][T17371]  ? ieee80211_tx_skb_tid+0x3b8/0x480
[  404.820725][T17371]  ? ieee80211_tx_skb_tid+0x3b8/0x480
[  404.826149][T17371]  __report_bug+0x276/0x570
[  404.830710][T17371]  ? ieee80211_tx_skb_tid+0x3b8/0x480
[  404.836134][T17371]  ? __pfx___report_bug+0x10/0x10
[  404.841206][T17371]  ? __lock_acquire+0x747/0x2de0
[  404.846211][T17371]  ? ieee80211_tx_skb_tid+0x3b8/0x480
[  404.851640][T17371]  report_bug+0x16b/0x220
[  404.856034][T17371]  ? ieee80211_tx_skb_tid+0x3b8/0x480
[  404.861464][T17371]  ? ieee80211_tx_skb_tid+0x3ba/0x480
[  404.866895][T17371]  handle_bug+0x9c/0x200
[  404.871202][T17371]  exc_invalid_op+0x1a/0x50
[  404.875777][T17371]  asm_exc_invalid_op+0x1a/0x20
[  404.880689][T17371] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480
[  404.886799][T17371] Code: 6e 43 f6 e9 b1 fe ff ff e8 d5 c2 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 c7 c2 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 b9 c2 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4
[  404.906552][T17371] RSP: 0018:ffffc90006eff498 EFLAGS: 00010287
[  404.912671][T17371] RAX: ffffffff8b6007f7 RBX: ffffffff8b60046f RCX: 0000000000080000
[  404.920945][T17371] RDX: ffffc900042b1000 RSI: 000000000000277c RDI: 000000000000277d
[  404.928973][T17371] RBP: 00000000ffffffff R08: ffffffff8b60046f R09: 0000000000000000
[  404.936994][T17371] R10: dffffc0000000000 R11: ffffed100f4d6cee R12: ffff8880767b0ec0
[  404.945012][T17371] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[  404.953035][T17371]  ? ieee80211_tx_skb_tid+0x2f/0x480
[  404.958376][T17371]  ? ieee80211_tx_skb_tid+0x2f/0x480
[  404.963708][T17371]  ? ieee80211_tx_skb_tid+0x3b7/0x480
[  404.969158][T17371]  ? ieee80211_tx_skb_tid+0x3b7/0x480
[  404.974583][T17371]  mesh_plink_frame_tx+0x73d/0xc30
[  404.979754][T17371]  ? __pfx_mesh_plink_frame_tx+0x10/0x10
[  404.985471][T17371]  ? hwmp_route_info_get+0x330/0x1580
[  404.991001][T17371]  mesh_plink_deactivate+0x18b/0x2f0
[  404.996342][T17371]  mesh_sta_cleanup+0x42/0x150
[  405.001164][T17371]  cleanup_single_sta+0x3ff/0x660
[  405.006952][T17371]  __sta_info_flush+0x5bb/0x700
[  405.011878][T17371]  ? __pfx___sta_info_flush+0x10/0x10
[  405.017348][T17371]  ieee80211_do_stop+0x3cd/0x2410
[  405.022482][T17371]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  405.028025][T17371]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  405.033912][T17371]  ieee80211_stop+0x1ab/0x200
[  405.038664][T17371]  ? __pfx_ieee80211_stop+0x10/0x10
[  405.043921][T17371]  __dev_close_many+0x366/0x6e0
[  405.048831][T17371]  ? __pfx___dev_close_many+0x10/0x10
[  405.054267][T17371]  ? __dev_change_flags+0x2e2/0x820
[  405.059539][T17371]  ? __local_bh_enable_ip+0xd6/0x140
[  405.064883][T17371]  __dev_change_flags+0x3f5/0x820
[  405.069970][T17371]  ? __pfx___dev_change_flags+0x10/0x10
[  405.075577][T17371]  ? __pfx___mutex_lock+0x10/0x10
[  405.080665][T17371]  ? full_name_hash+0x92/0xe0
[  405.085433][T17371]  netif_change_flags+0x7c/0x1b0
[  405.090437][T17371]  dev_change_flags+0x128/0x260
[  405.095344][T17371]  dev_ioctl+0x7b4/0x1150
[  405.099827][T17371]  sock_do_ioctl+0x23e/0x320
[  405.104466][T17371]  ? __pfx_sock_do_ioctl+0x10/0x10
[  405.109608][T17371]  ? hook_file_ioctl+0x1f2/0x600
[  405.114593][T17371]  sock_ioctl+0x57a/0x7e0
[  405.119127][T17371]  ? __pfx_sock_ioctl+0x10/0x10
[  405.124016][T17371]  ? __fget_files+0x2a/0x420
[  405.128638][T17371]  ? __fget_files+0x3a2/0x420
[  405.133347][T17371]  ? __fget_files+0x2a/0x420
[  405.138008][T17371]  ? bpf_lsm_file_ioctl+0x9/0x20
[  405.143009][T17371]  ? __pfx_sock_ioctl+0x10/0x10
[  405.147896][T17371]  __se_sys_ioctl+0xfc/0x170
[  405.152519][T17371]  do_syscall_64+0x166/0x520
[  405.157165][T17371]  ? trace_irq_disable+0x3b/0x140
[  405.162228][T17371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.168323][T17371]  ? clear_bhb_loop+0x70/0xc0
[  405.173031][T17371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.178958][T17371] RIP: 0033:0x7f8b8479e159
[  405.183421][T17371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.203171][T17371] RSP: 002b:00007f8b8560b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  405.211731][T17371] RAX: ffffffffffffffda RBX: 00007f8b84a25fa0 RCX: 00007f8b8479e159
[  405.219730][T17371] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006
[  405.227726][T17371] RBP: 00007f8b8483503b R08: 0000000000000000 R09: 0000000000000000
[  405.235730][T17371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  405.243779][T17371] R13: 00007f8b84a26038 R14: 00007f8b84a25fa0 R15: 00007ffcabcc23c8
[  405.251817][T17371]  </TASK>
[  405.255471][T17371] Kernel Offset: disabled
[  405.259828][T17371] Rebooting in 86400 seconds..