last executing test programs:

1.380776282s ago: executing program 1 (id=4385):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x22, 0x800, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x9, 0x4, 0x8, 0x5e, @loopback, @remote, 0xf808, 0x40, 0x8, 0x7}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000006c0)={@empty, @empty, <r8=>0x0}, &(0x7f0000000700)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000780)={'erspan0\x00', <r9=>0x0, 0x700, 0x80, 0x6, 0x1, {{0x22, 0x4, 0x0, 0x2a, 0x88, 0x66, 0x0, 0xa5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, {[@noop, @rr={0x7, 0x1b, 0x57, [@empty, @loopback, @multicast1, @rand_addr=0x64010101, @empty, @multicast2]}, @rr={0x7, 0xb, 0x60, [@loopback, @rand_addr=0x64010101]}, @generic={0x89, 0x6, "06872881"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x44}, @timestamp_prespec={0x44, 0x3c, 0x52, 0x3, 0x8, [{@local, 0xa}, {@multicast1, 0x2}, {@empty, 0x3dbb1419}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x2}, {@multicast1, 0xa7f}]}, @end]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fcdbdf25030000000500030004000000580001801400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="140002006970766c616e310000000000000000001400020076657468315f766c616e0000000000000500050009000000050005000000000078000180080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="000003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0500030000000000140002006970766c616e3100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d616373e96330000000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x2c008024}, 0x20000009)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010000bd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="6c0033008000de00ffffffffffff0802110000005050505050500000"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0)

1.317388315s ago: executing program 1 (id=4386):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.311939892s ago: executing program 1 (id=4387):
recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}, 0x40)
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', <r1=>0x0, 0x4, 0x80, 0x6, 0x4, 0x20, @private0, @private2, 0x8000, 0x7, 0xe, 0x1}})
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="24c1151f423ca507993ac970d29edaddb8dfa6f44ff08478e6a0e7f1ea9ab9ed43e0cba125e28fe03fbebe43cf17fdc777175a03c754d2a06a99e47d5f7be42769aff7acc58e5949ec2b29df4fea1a4ae7566f8e1fa5718aafb83696de300db59d2806bbd7c409dbb543af10024000e8e6aa5afe2bb13be1b3a364694b199c1cb7d347e0c96af7e8b410e492ba5f95f3429535c13dbf7ac6e6553667446a4ec06e4ff3dd3a45d51e6a909a00e48622840c7cee248bc63f310e07242356e142a749585f36b6d234c698cc7c8256b21eaeeed705513cb8083a25227731360cd6c86612c82cf40f312b710bdf6ee4", 0xed}, {&(0x7f0000000340)="256b7a7299af05a729d750374d4ed53587b6fc232ed4d67923a145cda2fe04197745735b55df13a47a04d66b2f41d656809cc9b00d7c239887b95b50844b6eb089696aa49fa73dd016ee898e877d4160795c59d815ceae8ca44e7b8c7cd7bba2adc201530909e30007d02b90ae5fadce", 0x70}, {&(0x7f00000003c0)="31eff8d760650b315b9f72ec1a1f041742b29d8a79d6f5db45067eb241d8e5488bfb", 0x22}, {&(0x7f0000000400)="2b76134546d1f533173c2057fe5793f8f5c6c7ffe92c56c26b84b207764dc819589405552737ee498b4b712e", 0x2c}], 0x4, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x43}, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x98}, 0x20058041)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000640)={0x9, 0x1})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000680)=[@in6={0xa, 0x4e22, 0x7, @local, 0x6}, @in6={0xa, 0x4e21, 0x0, @empty, 0x5}, @in6={0xa, 0x4e21, 0x0, @remote, 0x2ca}, @in6={0xa, 0x4e23, 0x1, @empty, 0x1000}, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @broadcast}], 0xbc)
r3 = socket$inet6(0xa, 0x1, 0x2c)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000740))
ppoll(&(0x7f0000000780)=[{0xffffffffffffffff, 0x98}, {r2, 0x2000}], 0x2, &(0x7f00000007c0)={0x0, 0x3938700}, &(0x7f0000000800)={[0x2]}, 0x8)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000840)={'gre0\x00', <r6=>r1, 0x8000, 0x80, 0x7ff, 0x4, {{0x5, 0x4, 0x2, 0x2e, 0x14, 0x68, 0x5, 0x9, 0x4, 0x0, @empty, @rand_addr=0x64010102}}}})
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f00000008c0)={@dev={0xac, 0x14, 0x14, 0xf}, @local, 0x1, "7d6896798c3d3b11c3d026ad64911afec3e97dfb1c364157e9fe436378aabd05", 0x9, 0x7, 0xca}, 0x3c)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r9, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004)
bind$inet(r5, &(0x7f0000000a80)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'ip6gre0\x00', <r10=>r6, 0x29, 0x3, 0x1, 0x6, 0x40, @remote, @private2, 0x8, 0x7, 0x1, 0x2}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0xab, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)
pipe(&(0x7f0000001040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0x1, <r14=>0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%-010d \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x17, 0xc, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x81}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @tail_call]}, &(0x7f0000000b40)='syzkaller\x00', 0x2, 0x59, &(0x7f0000000b80)=""/89, 0x41000, 0xc, '\x00', r10, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, r11, r13, 0x4, &(0x7f0000001140)=[r14], &(0x7f0000001180)=[{0x5, 0x1, 0x9, 0x9}, {0x0, 0x3, 0x1, 0x3}, {0x4, 0x4, 0x6, 0x6}, {0x2, 0x3, 0x2}], 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x19, 0xc, &(0x7f0000001280)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x0, 0xb, 0x5, 0xf, 0x50, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000001300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, r13, 0x8, &(0x7f0000001340)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x1, 0x6, 0x1, 0x1}, 0x10, r11, r13, 0x6, &(0x7f00000013c0)=[r12, r14, r12, r13, 0x1, r13], &(0x7f0000001400)=[{0x0, 0x2, 0x2}, {0x4, 0x5, 0x9, 0x8}, {0x5, 0x4, 0xb, 0x6}, {0x2, 0x4, 0x2, 0x7}, {0x5, 0x1, 0xc, 0x9}, {0x0, 0x1, 0x3}], 0x10, 0x3af2}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002540)={r12, &(0x7f0000001540)="7a53a4d01d662926eb96ef4502215061e023bcb65cb523fdfbd82ab640d4a59e3b5618d81ac0cd854ea1cdaa89c6e6f39fe2bddadb9c796afc9aab2fbef689fb06e4b025f5c269c01f3474124ab173dca4161d4e7eb6faf5b1b5ddd086d73acf905efa6c6c3c92dfdc6e0444cad37597d4ed24149b2976613e3371fe0a906c900e896400625ccdd560a8f702c72c0d36b0ed6e2c0ec281281894e4af58c52be78786d4c45e488e0ef37ee33679085114e84a346b4c77f5984a54c9eabf0662c7651a899835503b56b9fc2782cff5428edbd92a23c8ad4c6d7d231732e82c95025e061e426b0939a4e13a15b3710ad30f21701818d1d65ca34e329d2fe39cdc63d49cd94ff42937899ed4abf8f1f3d4574e2297110900fa1ed7afbf2f5eb6e10553c63da152542cbbf2ffeb4e9dfd72969120b4c658e3c5bd0061be1b0bc0b0b95f004eae80bce9186bc69244b1f401dfa9d8237cd89a7c45073d35111d7ef05be8d4f629146eb7d1be1982513d82fb1c0c03e46839af4704bd5c96f0b5837bee8cfb89723497d7abc0cb9b0f2ed7e9b720b04ea6cf28e881cb49e2202ee4997a0d32758997dc361cca145cf0f5153d9ae89898d5b70e31c4b7bffe5f7bfc06f0486dfe57c24d1dc24edcf1b42ea6ea54a0ad68b0af9105ef566519123beb1ae496aed81fabff609bff16015731646b4a130dfaf2d61073410c1a45b150c8549322c041ad4ca02128eb39e94f1b7909f67c8a4870b0f54085c72e54a2af7237ed73c7a9580711dc05d4bd0f32c1a6bdd6a041bf153b91a8803af9b8b78067c4ea16be03893bda90769cd46cf7e4414de710d3e8f4edbc92c37f0f468b6a17e87c334da841e302c168dbf68238326ddfd07fa48a52de386cb2aae9d0c226e220367325dbff28063495a68b071fb79b761bd04ad6640eae02d3466bfb5905b7d2ef9cd0d5446838e908b63f5c2dd1a1c03e902a81f44092d1e7d1a8e4e3c830e4cdf9e20505114aee0e32bb03c933f193dbdd6c81998038af5cf6c0dafc459b37f9dd04aeca0d7c6765984d67e13f4922cad105dae6e12d277830e4c55a1d5c4cf2d1e7d2583b651f66c0f051bfb9a1dc3ddd572b8d2441386b7db423a9567d416e1105237ec0ec4cfa82eeb02398f10013c69dea7106537f5928ebf0f75f57a91cddbe832b1f74368aba4fad29c15376e65b2ed7d560977edfa93a045093c1a42284ea22dd1e254631972a08387e3f6e379ecb5fb242dd2099189a26e1ef14723397bd46dda70af35fb295376dc09879b15727eb34e3eec435f764a713df6855d51b1ef85620f8c76d9ad8b0ad4d07977cc7c04daedfe57ef045eb5079abc1fda91387549563f7638f0154fa2265c34cf1d0de4b3eb4584fab6bc8acb94caedf20d767deb63158e4702792cf08d32e5357a92caa7df3f6fe32af7b6d95c5d9c32ffc478f72c2184af28d8cd4bb6f5af6348a6abc8a676d29d625be50cdbcc09224aadcaeeddb420486486f69524f40d1e11b79b6d20fc5dca25f9b01ec0fb2d697c19ebc967066ef7e702943215ccaa1bc2ad7b15a3b92b542a40000fef116e799a69ddb237581c06918938a1fc99db721accc5bd3d25eab0d5febccb7aab62ce1ff482366c31ee2f55627cde787adeb127456d3816f4f8a2e586a4cb7d485838f705bb1260e73646009635b8b542d4f66a90313e613b3bb467de1631ac43684cbca700230b1a04d5ae7c82483e78b927d4d9dd932cecfaa0d78d116200585f9c016abdd7345e9eef53772e86355c2cab06aadcbed65332c2adb22ecd5c0a61eef287f7013b6dcfeb4720ba83f378617545a7e3bcf0594001b9b71709deb5427f017906fcdd4557b5c92298783be4f9b70912c752f268b9efb47226baeee8739afe6c944c44f762b75f0c67d4035317ca89c9c859ec498df1f623684607da9bc73a3fc2fecbf5bf97533f6bfbaa0cd53c4f1d22a0064aded3e1e3c3ce09c0b0bc826cf4b1bc01f582dfb100f64a9abc9f37ee9ba2ab942780ae1471f2c3e31cac8d1f881f2f5a5da457e06930e0b4b6bdfbe473011be8d530e9b0eb3ef4cf94fd451cbe1310c5ae45271851ae25a326e22962922440ed23966f50da9139859bf293a937b803dc22e5ca3b03ed7b97e3751e802dfc062091ee65ade85c8cbab98e5cf6304ece52ca1c6038bcf3add5822e6b0762e50f835cc43a0c3855401352f2adbae149ec76824016f9694d5603845f8ce62ce24262300e6243ee2d3329d7072d76fe2a7870afbc68d162b3edd41dee3db914737ba4da9daf05e5c4219f96179ef2c0f48b60e8b6dac37f1f3ba74dd47dd60869759e9311e3483c37b7a32f2fea0a0bf0642693435ad878e8c216eec2742dda15be19dc2b7c9fcfd1e177f428b923b802b90a8c1e83424687cf6e0edf49f8353bd85abe87f467f048524f2e5127c996ba5937ef66ca1252d7d8d041afba0ac9fb38fb767443e3d3cc49886146d6bba8fe663f0c7908ec2f431c0836c337f0d14ebd0c8f086c7f067135c3d0ea8ac9928ee34c76a284ab669daf51b1141e9e24917a0a0731ea767a694706123ec56b2a6dff0468fb30cc4476ce093b27cc8b4e1e26e71769dd386b6995b5af95ba4abd6130e141938580da23896fc4edb20a35d47dab335d6e879ebece4fb3007624ca4fe13b9011ce6999d93c9314dbbf72bfb14dcb62927df1cd5dd47e264f5d74d2e5becd545c348bb0781cb16a2832a16cfe691e0647b5818367c135a1ed2f186a1f1d20c12b27d463d33509327df2717da44c370c8241eb984e625b35490f0cf7013187e201c750539a45377b7d6e4a799d05281bd14a8de06ca8899cc41cbecc75fd2e8e463554ea2e5706279925725e44928dbfba8d7aeee33628a4b3e2c01000a91ab0e6f8d5afe735fc81cccf0dcabe77c88d50536fda6b6d445ef620dca14567184f3e4a4c14a00c6df83ba1679f7b4b12aad84c0b5d7dfc69fbcec1044351fa59cce1a4d125e701892abe15d846c381d2dfa7316ded56ee32ee21d3e248f42747c7a3962b8b3c94407e1e07d919c9d33e0fda1df6ced9ec8f85b296a0bcac27d00b899bd73f135168dda3257a572547fedbb6a022b8f3a1f3c8879f30cbd57f08da6f291845713bdf23ef96439bd5c3e7be70311d988572db10d170b375f90524fdd745c10ac3e5a03fa31f07766cafc499d559f3881b4d645755876a4addc3987b66a9c376a273975c00e1f6d47a9fc949fad60526dba64b2ed0bced75075f2eac430cc402ae5144f7eebc180bf85b57a2a54ee91e0236545da98665b813f6572f4762b647b33baee41900fac7ea40dd9c93222e086e286da4def74a55f5aa579bb3b47b5e6986233d33cfa252f06e79623950ab526baad273b577a8673a0ff8756442a7fb9ca8af46fccff883c30e3e89b22a1084c242a67f3389324708de4c393096526d9cd327a7524de4bee3834f39d8c20740c4c8f0fe97fde2db9816998251477a46325366d17a91c5054980b26638f6c7d703b0feefaa0460837d1154097ce9caf6d52887a6c0543074b3c477c76bc9031edf421bff8d17f1ed2539f420de510a7ba4dca78c9a06e468a3fbd9e020f83d2b47e825748b295c05e19b60f471df49e85bd4e8c921523a81c14e6ba0ee3e95126509868e06fba3293d704d6969f5a2736339b1d1bbe3f002bd4c022879d54312f04cc87300c7dd70b518cf23d1e80c5c6f745006da41459ef8836a12192e936e94922ae72ff3efa2fc0b1f505b0f009288683c9f32b33266eef28d58d8d42d0368d0f7a577c9714deaeb5d7cc3fe4eb081304ae2109b18ad922b8914854be3d05a06def678668136a93d5020eeb9e7ee425df3af047034a66d6af640c3bf34c134654198a56cdac93c915865fc5482046b442f1cf7832e3a66bb113e2773b894d354ae4a3d6110dcac83c0016333081660381fcf15077f27352405bac0f109fe1da8953f2bcad2c9e7bcc64919493dae57271c051aceb531d9d959d1258f77df5b36e5ba39e4c83396e63c32e6af3968f8153939ad1e721fc9021a12b36d8dcdc0d7811759263eddc655b768d23d4bf5968798d964f7ac48008e62ca09d70ed7f2ba9330c3c7c64cee272fad1eed3141bfd98a199347ffd80e53adc4af342d02d8ecb5d625a87b565d4621d4bb8f2be03f07c500b662915b9ec877e0aef206bce8fee519d96af11e47f9b73cd8f09a5d568d4402c61ab981a5229f89818a0c539924c1a926bcd76ea655e05a936bbac179d3ac4e58adf09dd77b1b0a800ce9445711b3629629da2718a2f451c489d145780b0c0088222ff46febcda8c36a73ccef6126a7bd07e3174dcea657023b473c51847a1fc0f0d01c4aaa230f4fd120316f4606c6198b5232433dd2c6cae0764cf7d2ddb60e7a597bf80ebda80bf9ce18ab1404c641af0ba749bd22f873cdd9329a68641b1e3d8ee2c9a045e8610f5883edbbfc23f2b10d8de36172d49943bf6abcdb73c4830e49978b49d81debb3ffa64b4657911546613d584bbd07ba41b7803c8abe61ca25ab38a25f6e9baa0ea21c3d077ac5d883d346745dfc59c8ab4e66213905bf6b1ef9f991a20bd06b7c6f2eef81646406a5cdb58cc482fa88822c84bbc5c4046c5913c66133beb92ec07f139271792407c9fbeb7924e7ef08cecd6a8491f3d40dbed76c5291c7799db85a3b5c46f184671968d931b01cac52bb48c62ad3003b17f1ae4082341f7a16370c7ba1931d2f8c9bca0cbd93001f63c1e59b859e530e4937b5b8ed646bfa4a738559a1962d1b271f46f60fc81010eb04102e50cad329ddc0c630cb5f77e3f97dcbf6db3f978fe5e0f7769f9fe95f319eadbfab09b106e2b7e2e7573d42a86401131a91a285bda95b31e07dc78ccecd151cf7bb847ff4af87662a3f725e7075481f7857cd92079808f3718e59c840d8f6043893c5d0dfbd74dbd3d4d717f630d7833110c469c977315bd810c15f2abd9cbe2ef879ab07ac068dcc093a89223eb594f56161abe9ace7bf710c83186a485aa0be2b67722f86a9258ab3f10586d10f7ba66969bbcd4f0ecd1f6609de907a2815b0c89059b79f109b0dfbd1399e366f1ee1eaec8c36e7ff6054a6628ea2d5d108764f4dd175dd8d399187c8ad902c4d163cad38f0f938135ede5bd1b630742bc90d54bd96b53d5713b6e1cd60e37b6ed0ff9f87728021b0d8040f61b67a2f30ba1d7b555f5880b60d4210b29f293051d00d05b1cfca8234ea36153a041d88ea4e0afd7f68942802d729ff3b6f88b88b3db80bc05ac193bb2eafe7526ac23e4e7aa9e0cbe8a04516ebcd11c44229403179f1e48ff9d380cb02bf4557bba149e042401c8488ecc7c0c8e721e8df3adebd430965401ac05e1d33e607c6424373f635c1802fd3660f581051c07b2eb278fa66ddb5962d5ab369ffa9d8a04ade321f75acdf6f1916dc38f86ec161ea3a0cd95705323d04506d5cc627d27ecbc21052e3cab7aee0f8900bb5c188552bbd6354f4aaf7c871e94fc968b2b66fa7b65ee9b79ade911cfeb80f8fa170235b43e8de5715445631fdce96204566fe79c39ec424fbd2afb29a71dff15a481edbccb12bbc5bb09874dbf44ac2bad510d202eb15fd559b68c008f247edd79a81344e810e43ffa11a9a9fb37f08d6f20f4c5a9cc8b98e82defa288269fbea0f5f36544ffa3545e9784bde913c9d8b5d0b2373c7fde124fba596dc9b73a269fc87f02fb25d0ae3e2a242323809a146aeaea7ac5ffba4fe8de544ba47b43763586636b78b837e9d9f12276b6ef"}, 0x20)
sendmsg$inet(r4, &(0x7f0000002640)={&(0x7f0000002580)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002600)=[{&(0x7f00000025c0)}], 0x1}, 0x40004)
preadv(r4, &(0x7f00000028c0)=[{&(0x7f0000002680)=""/203, 0xcb}, {&(0x7f0000002780)=""/12, 0xc}, {&(0x7f00000027c0)=""/129, 0x81}, {&(0x7f0000002880)}], 0x4, 0x1, 0x3)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000002a00)={'ip6tnl0\x00', &(0x7f0000002980)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x1, 0x0, 0x50, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8, 0x0, 0x1ff}})

1.104920898s ago: executing program 1 (id=4390):
socket$nl_xfrm(0x10, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x100, @loopback}, 0x1c)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a25ec011f01a8bf1fd4f27279ceed6d3bdd8d147adaf035ec06ab8fc8056c2f175d584e84123cea860aae2a06b91a2dc51af8f21e958e051b7737746f4842a8cfec525b6f2e9fa86ae9af5f21a48f48290a1fde7041efb4de14b6e1895d8544825adfd21de20e88e2a7a77e3c35e7e587df5d0f80bbbf5113b3ed8173bf54216441cb0d716f2bab15324f6f1dd6c2e01be46f50f318871", @ANYRES16=r1, @ANYBLOB="3904feffffff000000005c00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x8000)
r3 = socket$netlink(0x10, 0x3, 0x4)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000700)={&(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x43, 0xfffffffc}, 0x3}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000740)="fce8678774ce25955a3e086643d03e2db54d0cbeac0d71c5d638800294639488f7ca7198f387243e6874d8b405b04f84e9cf9089f345336dbecfc1a1fa0d287af3cd351127ed381905d0f5cc516b3a39f86e8be9fb1045d6110f8733694c09ab444fbf9885cb0894d5b1abe4d92456100326c611ae4c08dc0c01630fccbd270039694d167a99823642c11637b48ed74debf1fe7099999e6ac8959f08f1be1ffe1c1bbf2e1cfde3aca64f47e695fa68834647c27808cee523550898df6be4844f1d4e0348972a442175640e95be28f09fea93a8c63861171e1cc3025f6f2c623499", 0xe1}, {&(0x7f0000000300)="811a1708e1eecaacc25c016db0e8ae90c2509f0514167b24345249fe703c9fb2f3b9bd5f93874c8a481f4420d3892223b342334be1cc2baa36c71d18cc565930dd505ddab3ac0d18633055fb66d384eec46d7b2425d5ccb7", 0x58}, {&(0x7f0000000380)="1cfe58b437bade792aa5560ad032b9c49f41f7f8a714cc1feb54f1bcec316d41aa7cf7532d7740b4", 0x28}, {&(0x7f00000003c0)="a936a19f5018a8abbde9c1cdc5bc8b58c3c84c9bb881359b8b0707fbac4157ea70f731b32b05594ac077053edbd30ec5caff1666c988e4e56fd6a380abfd4bc9ee833d243986a05f290bbed0d3cf770339dcf7cb6b7f532b93c5f7096ad1e9a952a5e9feeb5caec123a00e0dd811afb02749b552eb968277c763", 0x7a}, {&(0x7f0000000440)="4f1019d8870c98c31a9df3506d0fc89f0582a82a05c01a94f99429a8671f33987ad8d6b9ca0c0a44aa5ad2e57fbee3272d087dfa20016cb5d26e1b9aa7", 0x3d}], 0x5, &(0x7f0000000600)="5aeb3a3e015d1fa4d6d2173afa375b1c0cd992dc733724d0b106692555033265b769b48f68b20019d9c93f03683de43aa6a88eaf16bd3fbdca64eb9914e46c4db603512d7d2d2bfd9af25a492cb9067fdeea8667e3ae1116eee02cbf7d24614db456ca5cbcd3c0f6e9a9743f0cb74a302b267bf9eb76e698c4280b6171126655c6dcfadc26049fe3ffb4db3b280ebae5f5ba55d87f4d690f98afe65d750ad97e14c6c2d262c2d3005405d7789f1b607bd40f6f52de53", 0xb6, 0x90}, 0x4101)
write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)=0xffe, 0x4)
socket(0x2a, 0x2, 0xffffffff)
socket$igmp6(0xa, 0x3, 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8, <r9=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = socket(0x29, 0x1, 0x868)
setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0xfffffffe, @empty}, 0x0, {[0x0, 0x0, 0x80, 0x3]}}, 0x5c)

890.254205ms ago: executing program 1 (id=4396):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdr={0x94, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0xa, 0x10, 0xc, 0xfd, r2}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x280}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x5, 0x4, 0x1e7}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x8050}, 0x40041)
sendmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@can={{0x0, 0x1, 0x1, 0x1}, 0x1, 0x5, 0x0, 0x0, "93d6e8141ce6df59"}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000480)=""/112, 0x70, <r4=>0x0, &(0x7f0000000500)=""/109, 0x6d}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x27, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@lx}, @alu={0x4, 0x1, 0x7, 0x0, 0x2, 0x8, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x3, 0x3, 0xb, 0x1, 0x30, 0x4}]}, &(0x7f0000000740)='syzkaller\x00', 0x8000, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x6, '\x00', r2, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000017c0)={0x5, 0x3, 0x9, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)=[0x1, 0x1], &(0x7f0000001840)=[{0x5, 0x4, 0x7, 0x2}, {0x4, 0x3, 0x9, 0xa}, {0x0, 0x1, 0x2, 0x6}, {0x3, 0x2, 0x1, 0xc}, {0x0, 0x1, 0x4, 0x9}, {0x2, 0x1, 0xe, 0x9}, {0x0, 0x1, 0xd, 0xb}, {0x2, 0x3, 0x8, 0xa}], 0x10, 0x6}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x7, 0x7fffffff, 0x5, 0x7fff, 0x40000, 0xffffffffffffffff, 0xb33e, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x7, 0x7fffffff, 0x5, 0x7fff, 0x40000, 0xffffffffffffffff, 0xb33e, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a40)=@generic={&(0x7f0000001a00)='./file0\x00', 0x0, 0x18}, 0x18) (async)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a40)=@generic={&(0x7f0000001a00)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xc, 0x16, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x81, 0x7, 0x0, 0x5, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xe997}, @generic={0x71, 0xe, 0xd, 0x1, 0x2}, @call={0x85, 0x0, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xae}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', r2, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa05, 0x6, 0x6}, 0x10, r4, r5, 0x1, &(0x7f0000001a80)=[r6, r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x2, 0x1, 0x8}], 0x10, 0x6}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xc, 0x16, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x81, 0x7, 0x0, 0x5, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xe997}, @generic={0x71, 0xe, 0xd, 0x1, 0x2}, @call={0x85, 0x0, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xae}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', r2, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa05, 0x6, 0x6}, 0x10, r4, r5, 0x1, &(0x7f0000001a80)=[r6, r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x2, 0x1, 0x8}], 0x10, 0x6}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001bc0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0xff8, 0x1}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001bc0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0xff8, 0x1}, 0x90)
r9 = socket$kcm(0x29, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001c80)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001c80)={'vcan0\x00', <r10=>0x0})
sendmsg$can_raw(r0, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x1d, r10}, 0x10, &(0x7f0000001d80)={&(0x7f0000001d00)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x25, 0x3, 0x0, 0x0, "f444dbcd670b28b21fd989cea6ff0436ee2d4b8bf450739f370ae603954fc5fae3a2b282a3a56bdf790ed7697123832d660027596586f448f18fb067711f97c0"}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001e00)={0x0, 0x2, 0x7, 0x2})
socket$tipc(0x1e, 0x5, 0x0) (async)
r11 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000001e40)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10)
ioctl$sock_proto_private(r11, 0x89e7, &(0x7f0000001e80)="496c3e2e18aba9ca411a705353610bb3ba3b65647bbce019263364d5f503d9799c1c2bd11a45259342")
setsockopt$sock_timeval(r11, 0x1, 0x14, &(0x7f0000001ec0), 0x10) (async)
setsockopt$sock_timeval(r11, 0x1, 0x14, &(0x7f0000001ec0), 0x10)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001f00))
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000001f40)={<r12=>r11, 0x26c, 0x7300000000, 0x5})
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r12, 0x4002f516, &(0x7f0000001f80)={0x7, 0x7})
setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000001fc0)=0x1, 0x4)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000002000), &(0x7f0000002040)=0x4)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000002080)="314be4fba91a2d1cb383f1516620900830669fb1d14dcc247f4d711fc9698f3535a189673d4d59276aeadcb92e641e8c7669a5371b62e09532ee86275a5fe2aa421307c40555cc7d29819e04d172640ca7a67ce1e9818084c459c2f3721dbab44cce1e7e91888b2065618bdcdbf5529a6b2300b8addf3628f64140e09fad5915962ce3c2b062af0b39d4b6a839d567a9df65929d0966e06f1267e2b2c4e1d4d159860842570b6125aed641bc6e6491ebbdeb5ec6d8b0892f4f50f1b42e7a69794ffb4644f0069449806a", 0xca)
getsockopt$netrom_NETROM_T2(r11, 0x103, 0x2, &(0x7f0000002180)=0xa42, &(0x7f00000021c0)=0x4) (async)
getsockopt$netrom_NETROM_T2(r11, 0x103, 0x2, &(0x7f0000002180)=0xa42, &(0x7f00000021c0)=0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), r3)
openat$tun(0xffffffffffffff9c, &(0x7f0000002240), 0x100, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000002240), 0x100, 0x0)

756.618753ms ago: executing program 1 (id=4402):
r0 = socket$inet(0x2, 0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/15, 0xf}], 0x1)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000440)=ANY=[], 0x3e)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$sock(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x20008044)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020067e6d14c38c9739fc062ab0000000071d703b723a9b758c93f6bf322d80000000000020200000000000000010000850000000000000051966d541c4a063d42ac46e77f0b570ba3cfa7a4c79434244563d4f338c50672c8822c7340434140d9a39367c4674031a3854b84123e1ba3c40c33f91a6a3c0192df43019265676aaca549f6eec003d1b29f01434fe753b7a904d9b3224f3eaa2548b48cd49ee796adcc1f70ebe35f8bdc3d310542a5060fa1c938002662747b22ac6843f25832aa5af5dc5ff41a6c4ba3c2"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xc044)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r8, &(0x7f0000000480)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)

700.114408ms ago: executing program 0 (id=4403):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x15c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10000000}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}]}, 0x15c}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt(r5, 0x918626f, 0xffffffff, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000240)="81", 0x1, 0x4040040, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x35, 0x0, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in=@broadcast, @in=@empty}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8)

535.24861ms ago: executing program 0 (id=4407):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

465.819811ms ago: executing program 0 (id=4409):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x424, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d6], 0xb, 0xdc, 0x2}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0x0, 0xff], [0xff000000], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x228, 0x248, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x2, 0x2, 0x1, 0x8}}, @common=@inet=@hashlimit2={{0x150}, {'pimreg1\x00', {0xfffffffffffffff8, 0x2, 0xc, 0x4, 0x3, 0x8, 0x401, 0x0, 0x18}, {0x5}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a0)

400.507317ms ago: executing program 0 (id=4411):
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz1\x00', @default, 0x0, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000b084d04c1ef6517bfe00e03da7bc2d030000000c2ed8"], 0x48)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r10, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4)
getsockopt$inet_buf(r10, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000)

280.204254ms ago: executing program 0 (id=4413):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x28, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x8, 0x1a, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r5=>0x0})
socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf253a00000000000000", @ANYRES32=r5, @ANYBLOB="06006500fcff000004005b00"], 0x28}, 0x1, 0x0, 0x0, 0x20008014}, 0x240040c4)

210.575854ms ago: executing program 0 (id=4415):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000000)=""/238, 0xee}, &(0x7f0000000100)}, 0x20)
r1 = socket(0x22, 0x6, 0x4)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r2 = socket$inet6(0xa, 0x1, 0x6)
preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)}], 0x3, 0x3, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex, 0x22, 0x0, 0xfffffffa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0]}, 0x40)
r3 = socket$netlink(0x10, 0x3, 0xa)
r4 = accept4$phonet_pipe(r1, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x800)
bind$phonet(r4, &(0x7f0000000580)={0x23, 0x5, 0x1, 0x4}, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000006c0)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e22, 0x0, 0x4e23, 0xe1, 0x2, 0x0, 0x20, 0x16, 0x0, r6}, {0x8000000000000000, 0x7, 0x800, 0x2, 0x1, 0x10000, 0x438b, 0x3}, {0x4, 0x5, 0x9, 0x74b8}, 0x1, 0x6e6bb4, 0x1, 0x1, 0x3, 0x1}, {{@in=@remote, 0x4d4, 0x32}, 0x0, @in=@empty, 0x0, 0x1, 0x0, 0xe3, 0x3, 0x80, 0xffffffff}}, 0xe8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000800)=0x1, 0x4)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r3)
sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r8, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x5e}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x3, 0x1, 0x0, {0x100000000, 0x3b1, 0x0, 0x37, 0x0, 0x1}, 0x800, 0x7}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040091)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x1, 0x4}, 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x200000d0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000b80)={<r13=>0x0, <r14=>0x0, <r15=>0x0}, &(0x7f0000000bc0)=0xc)
r16 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$bt_hci(r1, &(0x7f0000000c00)={0x1f, 0x4, 0x1}, 0x6)
r17 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@RTM_NEWNSID={0x24, 0x58, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NETNSA_FD={0x8, 0x3, r17}, @NETNSA_PID={0x8, 0x2, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$can_bcm(r1, &(0x7f0000000d40)={0x1d, r5}, 0x10)
sendmmsg$unix(r1, &(0x7f0000002980)=[{{&(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e00)="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", 0xfa}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000f40)="e09c9740f1d8b0e5f6feb6b5b597f4a3681c5ae4cd671a2602b000ff51da247b8b3aa8cd92e1a0b7f317729366cf2c109eddd3925317d7091eeba1a6642217075b2dac5cfedff64cc5470ba60bcdf8891bb49342cf503699bfba22072f73983329d4759f27953f91c368906e36a5e30c267d410d343592ca8397628d4851493e8c41bc7fbf53807acb2b9d45829b69a63a2ffc65b81e6299c86fa7976a704159dee233bda6eb325db35e88d5a6d9b8b3973c12b8220d55ece0c0a5593cf6f6d140efa5702836be", 0xc7}, {&(0x7f0000001040)="2838ec905fd1835619de99c54f93c45fc7cc2daae1061cbafe55ae350f79f175a1", 0x21}, {&(0x7f0000001080)="2b973e03543cee944dd4c44bd1599c261cca0c2fa170dce273ff8840eaf46800d6059f073ef253a4e295cbd7a1869d38f33d3a12f8177dc9d57cf0f827d03d5da38433a0c840bc14cba4d86675bd2847d207ff9f70180505fd2a5de40c3009040a9111b39139fb458711e8423105950724a1c66438f2a6d0c1e1ececb82b39d346494c57fc6ba92ba76b029643b9656d3f5dab72f3a04960168a9b377ca392e86f26e885dd1404ba1550907f24023da5878d7dd6b50c0a73805c9b05eceadc50b9fcc9abf92af503bb66ba6b7d341d18b9a2bf98abe5967ba2018ed098c1a70bd31e2d37ee7b9c41ad585869bc78c0134b3b8ef1d0122ec396af7a3abd7970dc0ca8edc88d72144d23232286692461d721aad17c0fdaee2729fbdf0caef864e46afa02913f0e47a1d404be9aea60cd46f142f4ad08fbc56a3ef33efff5059b638a8857d959b29858357223e15e7bc0c1015d56746c09a5c78e2eecd3180d0c0e79265c8eb988a3236632fd1fe89d8939ccea2da9f38312ab2b7d109ef8e79d89ab8cbd20490659c1f7c491eceb0a065d4fd184f4248f4c4ae29b82742aaa89927edd3b7e0447b8206a34763cdde1c5aaf0ca5394e1dcf3fa07db989b2530cf362fa2411018855d400c3f17bd0c1c5d7583e2d03f4b20bf35957fce4bd9b4d90025e01f00a5e01b28462599f15de113f1495f60eab7aece1dbb7984f5af3e132ab9856a8a568930915d5e1f22d128eab136eb8b2186345e46aad781ab5b10fd198bb9e7e43531e843130abb8466ebee5bb6abe9a70168440549d126e7d3d7f12c1874990d8ca1c015fe035206cc22b07d69a642552f07e8a8d126e8c5a21391eb584061abb15b9ef39c5379be2cb43328d88655fdfe956a1622ef72e814519d603e6cf26b9b4727f541f655b224952090c7e59fb638c7cf2e3de7bcb9bc2967a9e282714d35e0a318efbb01f83152f15b997d7dab97094db54bc819836de7e5d03c027de5cedd217b0cef1ecaa1bb37f3d7f6077a02be561e22f92bcfe945f0a3bed03accaaf54b67a0971612053e22195ed05213a1ee4131b3e15d1694f0c9821732e43dfebb68e46e4cf8a8f8ede49ab7375c209660fcb0eef8630c0cae78a3ad0096854b7b371aad6542fedf7928b7bc4b5193cacbad8a45a2da53460df6c27ae3e3d8239ea9f25ea23be25f93ea3d67a666691fbb6557c5793e107f3cffbd26576fd0c744550ccbf4ad51e904ebb2962abd70869f82c7ee7b6027b691989e23db17950c46373f1be08a5d48e2978ea3331afa6761b266e87ff64bb8c0f8ab181ebff869d01f05a161c91a347deb690739f7de56dba83246dc8e19063d606b82f60c37333a2cb3e748e70220f621b2bb69ab7168e0894df91c8e16b23e44e280951750805c804ee3b3e617d9efa33f7543c45e5cf73f2e02230b40bd8fd1a1f7994e575a590fab662a1e3bf7599bb94c6ac6c61af1b670c007e81ed8c723133cf94774a5f4a109ef05b66f286a23fb867e3fe1a60bb1cc997cb11bb3b9794d97db4bf673e5f4f3b0de93383459fe4021dacd9a86f2bc656ce298eb2172bea4c3d130bcf34f4dc2b5e49b103869ed36a8b278f504268a00e34ca00962e71e776c7d0ff2a26ee296d2a900c612a5ec4e4a0c8319fd514b811041c75d34390eb0033c40a69c2776b0693a85c36d683d62515b73ee005178f12b89266b2ec66843a968e5a839f5ce4586bf9abbcd3a6638f1d7f40acd9e514fa35a30fc53bd57601eadd547b890d5ca444ecfb3acd2cf0bc81f4c4f18508bbd369f6da340419986c2e690fa3fff0f2fe9041b3d92afeb6a1f7445e560a70f5a737fad8b23dd2ad7bcc94f94a33c6dc260ded18ad910bbfb0a44744a33fc13c3031ad49fb5180ee2cbc04bead7f1725163af8eb75ad5d2d81ee9eeede5b417a8d50df42829fedb15720617cc56efd72ab2658b90d8050d75db1ff1c71defff3bba19f1a8beb10d9b363f37c4713b403866254b7f828a9edac2bd10d9bd4ff92739acfd47d4096767322de5a6b8a744aa244c2426f11f77765669a66062017f3b29a74b05ff6d2664bac12c3b32555e44e6d9db10701a78ff6e66d96c48bcbdbdc0e6e7514c66d98914096d005005dd6c302db779deeb4cfa9338a83ca86bf6bd4a3b9a8773a57de82a8718b61f37552c1effbaa1202baaa1bfbac5e7d5e832550b781d217bf21a6d612bac78208d5bf7a25b82ce82448fe541673bb8752d8966dfeef583c91ef23c912195f4a6b34af677e932ae8f58588325901fa7e1172074746ff04c462b77ca716d404946f4607dd3f349ec82c4b8288039cd31bd0c5f97319a846458fb194a6f239397bbbff9ef4170891a12e2ac941a7621ddcf2208d9b41741fe39fcd835b50eb484bfb243a906cce532a1d24a894100c86c99740cb08dbc374699afc43a48862699afafc43520c5b7846feda3ce1633b73161bd56419086e23df78e91e47d7d587bda2a528f67c1adfaf739b5239697236a529c86eeaef78becb3ed9b4f36d3df44641f1c60f8d0fe07f0b107cf449e761807982981b6456be967896f5309a562fedca32db815a634eb5be22b0c455536791772ddfe51d357d58cd9a4ae9217aef4484bf7cdb5afa1a256982abb5bdd70ad4531708096e48d72ef29de1b6ab58a5fa7f1460a7890ad82fb3196963fb653a1f1554ed3fd817e6cc9ac9b74f2cfce706d2acfbf7603245e7413f7238ee36dc693ce83fc0a15103e3320c578556560f8cf42746b8943ce9bd40bd4f61fa4fb9939d65b18b7fbf50e317de8bd9058cc1e5b709fbe16184c104ba7259f59394d4389afeb7e4e126d76357d89d90d4df7286ca1f5bc67dc0564c8966854a28e5716cbd4528b3c640882045fa0e8517b3edb129647ab3bd31e7d0b2a63f1b9dd334146e45b450844d5fd751615c29170daa96e66dc0f5a9255db04e088debae211abbb9961ee9ffdf88052346b3f16b256877ef4de0d2c084c36c0d8d438e63b54565f3f0941084f361547d4815443749390e59a5e8f805086ad9e99ca9ed52f9c6047d946528296b22974159ef7c1eb2f732f4c4cf12e7f4f01b15891dddb2d87449df791afae6c87ed7c674f884423d8147adec4fae53cc4a0978ba3ea08740c420fefb6e9db7a8f15c74bd6456460ee418e99532e0b01e777d3e9a568f65d8a8a2bba07d0599a7ca40c65f195c3edd10802829e2cefd82c7f59e211a34f2e2bc74b757ba9d4a8da3e61a0cc1e62561216c90e7d58582197a9554ee8e1e81ae7d7501e47d4677219b82ccf64ab78df77e3f10a197c0bc0c845eb18e52cf548a13b66c4a76d953ccf4c6995c5065c135eecd50d28c8af4cf7efba075802d7391ca82405e38d05b7f5ff235c280b0bc680b8757ba00211075627c74fa4c6f3b98c9b290e1c15d4eb3aee370eedd444382d790374915cf9b6820e0ba022e34cf76446e50c4b9ec48654dbdb560624f48921d08f95c5465e500edd86a723ab65b5d11d46ea5e5adf72afb3ca75a60da093d4b33355f92f7a89fc8a465de115fcb702df97dc6c50af8a6db0246f5e9738c5cef8b5fb7a7ed47df8f1b80389807831b465d7857fa84200165fa01e5a6608b027fa09c0e105eda244af4a3597ebc35ef04bec242735534e30c8263d0c793ab4384347efdd5dedb382655f526fbee5c5220093dd89688e7836fdc274f2f379ec710edd5c800e499ba198e2d2ea6894b32a29c02799642db8cefb4e5befaa7e15152f3e6bb01e612434002a864de1e83f08c69dd0c1a846e704cc3edd123536cd62fb01051d76a729c73ecfbfeca8b755e3e81265633159f137d44277e03895a27ee33bc41a77a710bd15b4af8eed5f48e0810f99d7ce95956556b208fb661ff945b6b8a57adeab66204d4d94147b3c3df31c8c7aa87cc52cb271a0e454a3012c2b312ce4ce9bd0ff8c1f09b54c3ac5c0096cef46aa28ea5b6b7559078bcea451452e439b8064e507a1aeeb430863db15f236eabfaabc7f7cb80bfa217bfc4cb1a07fe43f5333363bc603b2cca602d6c53f64fe4fc036f769588ecb51e732abb6ce2583310a7940bbf890dfd4184222a4b3bd84590654b724da0338aff14dbfa6c9f3383e80f286c461244a373cd8c466ec654e863f17917adc61cf8e31c5c15f23f9d1b64dcc680f2df0e52409077dd809c9c0a973b3b3777630d495c548bb1541b8f63b2d127d51e1f1dc9b79b771b24ba2e81f521f2f9c10e071dcba9ab3df0156fcb09ce9d5ecbd2da556ceef20ac956ec4d5ba4ecae555575c3b6958b36ab6f7911ed6a133473abe12c2c8a19b6572113e7782922224da67750fda41c4e7909901b58c0978f839f21c7cb3f183756f8c19a1f560d794ba6b249151a9f7afc8258ce3ef24457c06fe68dc3678b34e91375c519002bda4ebea721164dfc8a4bdf45f78cd95b4f05b109254d260635f1ba6ab02da4c7a571a98ae3a3a21f2499fbc7d655ef3f7fbd32538d09ab4abb0f2b5185f73d341b68d886256b0778dfda934552be32ccb14e03cb33f4c178be45fb6d75b1edb449f0cf064d81782f4efe7e62540b8bc4f550f5903bffd5afce63f02e090a05acb4c4d2f4dcb45f8cd86e1890e993db343639c3a67bfbea2d9bba69e27be58e2d1dab8fb0ab88c05bc82a89674e24b62779124241749e321ae9753c95cf44f30936a1c7d35f2fa5e431949aed658ee2aa3df3a8f1603fc3989a468a033d883229ede4eecfa17e2d3ebc82b28319380a1c7f8e108ff380d8ee6ebcb559f3460b450f8eda7e3bd7f37a4df7fbd1c2aed600249c3f4a0bf4b299fd110ad3b0aa1b8f02065b4181d2276b2a98e5f412c67bf531b0506dcb79d1536e57f897c2721de6faf06ce46b3cce6664b2fd7f56b92aa0f07ba40540859863ccc61a7841662db9624a2ab8e9b71f8cd5a09e3e8e1d55f963d30ecc47d1a3927a7ac6b402c956fe129584808f40cbc00c5da78406083261f2d70986789a4095ebaec2f0f4db1cf2e20c56cc998847f02fcb57855748ac1f1feca9e1f13bf0adec54c6840e896fed9eec2f9b9dc929f36f04f4a058a07cd81745cf818afa96c108ebc32cd28781dc6b3bfab6cd09db0198bfb6550cfc2580e5b0bf442c80602808037f0fdebe24a871c4f3e446991c1f99de25c7476d593fc8bb6ff69ab5e1a9d16f0be349fbc0f85ddb139047a000f11306b1262c71319b02a128130cc0fa5eb2135a700378c3f530e8629972e6095c5ff0a0b6c6b4c675a76ae6fab7d2b8035f7838b28856e504ffaf12c51b9e8222bfac1c12051ab17cbf23534ff60fbd557e900b5e5c32e4fb6b1d5de27fe9e0d83c66429d19f1f8d6bb44e9018a3a8b76cf37af2d7b434c4ddadb5d3ef1701310608ee425bf37a7de30e5c79ab16b0106362b38cd4744fcf61feee2f763796b3f9c5ab72a9f8a5e554e847c5b8b6378e8676f230dba5e5d21acfa4aac45ea776f3f218cbcb0bdcbc8163ee266a2a73776bc02a2223a9b29333c75715accfcec3852817acd3494d5adbab406687288a3f584d663f50c4a668fe1908ebf2640aa234e6c5c71723c95fefbf6cc73d01b389b47ad19eebe6eab1f7ff160d99139ffa6e174a663b81d8543735178662a5bc47809055aa3fcd209c5f481d912d2ab5d05fb5b49fb516e6719a13ee91ec9ce387f33ba8fccbc10a9c3831a64d5222d7ae7fe54842e14d82826bbcb7b195c514d4f30250e151f37d8f3d72839544e58a0f029bca705e6a5e43cb98ed0adb499e3efe68af7258bece11a186b9eb141d0e7d", 0x1000}, {&(0x7f0000002080)="9b6ea9d3e60c91ebb2ac9170be5ba531ec9e3e68860eac3050bac473385360ee32915fcc04ff8b670b3368670630e02228197dda0adc46cfb7bfefaa757421387f96ae6aa3", 0x45}, {&(0x7f0000002100)="77296cd9ac88d19157946a4827489da5fa4319c7c12fa8976cca579228dd5b11219b9bd11a31f11992ef8f419013ae6ad898dab1cd15afdf216dad3ef80d03f459d6a015207aa60847521dcb5f7086745beff366b5e463edc92015601d281548873d8b4552", 0x65}, {&(0x7f0000002180)="e93f72256b4e4b4cf30becacf4b85e4e0bc4dedbbac64ab2d71a61c7c3cfb58d49796e8cd691f1e64fdff65ad9d3fd0ebd4d9d5ad806ebe22e127065bf068527f3f6cdbbad3ebdc53ec4c46bc939bf29d0c404d59a03d6bbb94c10f365676c222b5e9cf98a98e16f12b14a9ef385bfce038bbe", 0x73}], 0x6, &(0x7f00000022c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r13, r6}}}], 0x60, 0x4001}}, {{&(0x7f0000002340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002440)=[{&(0x7f00000023c0)="da6a29a84e8a6e3aba21247d0f59c740c574bb25dc0adc3e56c02d4fb1dba74c5e05e1bbf492cea00dcbaa240ddb23be724bb0ae0478e11e6447509305", 0x3d}, {&(0x7f0000002400)="92f6d5a120f6084d0846bef2822f7d727e7bf63eb131450aef429fbf3a9fc2", 0x1f}], 0x2, &(0x7f0000002480)=[@rights={{0x18, 0x1, 0x1, [r9, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000024c0)="546ad2ddb429385f8d393de74943a42f73d66278d62809c3b995c5ad82c63ec6bf68b236c3d2", 0x26}, {&(0x7f0000002500)="430d0150eb6cdae9e746d8c8bf45b1ab31144b3b61679ab76d9620f05bbb48519dd6bd625f6c533e061a4e99e5c39593ab64a58d8b0f4eab6ae630a69ed6af372eeb00dad6dce3616ee597b2334a8004673b5c52223d57f3c864eb8c62cf6aabbb9a9f1a2715e7a4644e2f478ca20d205a9d879b04bd54ed80d26d8967587e813e6fa3e68e27d8fa287205b8b0562da073fc319ff38f0592eebe50e153f428ec05f2953c7804a2e9347fedf248ad07de83fe0b8cad57008e567f1185a873ff8c70e58c4155d79e4821b9af51656ccda0e4230b13033a46a7aba0448c", 0xdc}, {&(0x7f0000002600)="8ad3809e03dec901ed3b30f68766de96b6b16ed7555762c7ac8f695d36f061c93f8705c5bc59ededd3b34e300265529c008b032dd4c220b01539219575d84fa80f5cacbc997383400ec91cc0cde8ddc01dd1e0e8826faa2938dcd366118de7996b96b8b6c31acbe152778927a26603f0505fd34f9a23682fbff20f5c3ebee4387c87e16e1b55", 0x86}, {&(0x7f00000026c0)="8190e24ac393d1a49802c91954d42c72b26d20447247b596141a13e80a8eba8dde2e62404345b1c96cf8cbd9c1a843a0c57b35c9c558cd7695103a0c0a1c37531c5cf80a0277713746cc335ab033297ff311be43b375fcb8b92b4a6a918e13f420251f1e5152970d6894a3ff8d0686a2c103d71498b600d277aa429d09d9db679db4ee4dd3b9ae08ba50f21d7fd408b31f803ae6c905", 0x96}, {&(0x7f0000002780)="73e26f2c15f442e87a0ef97ac3869dd863f3313877b009897a1cba5ff385756caa82a84b6640928ef1e0f4bd192fc532805eb74899d7aae0a6d1e905486bfa5bb82a2b279e1dff9a55aa8e1a50a02f30443a7c01e18a", 0x56}], 0x5, &(0x7f0000002940)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r12, r10, r10, r16, r3, 0xffffffffffffffff, r17]}}], 0x30, 0x4008000}}], 0x4, 0x24008094)

209.822143ms ago: executing program 2 (id=4416):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572000000003f000000000000000000000000000000000000000000a400000036d309b206acdf949dfc47e80610422d31bfc13916f7e1ff9721c124b4b92506f070695662f2ffb12d0602b35d95421139f22057cf48e5504a0e8d20be9a48e7043694c38a27577d1331f813d69e64930d307aaaa3c6f875d8924f6c8c7998ccacb291a162a4cd9528104a0555aea53135fa54d31f19fb705cf537c73408c4a0dd01afb40bc9d66d58a307a57d4c1a2b6ddf48f6bb8e23d74ee8e957b8c5286885c154e8"], &(0x7f0000000200)=0xc8)

130.139219ms ago: executing program 2 (id=4417):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000d00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x229, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @local, @rand_addr=0x64010101, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @rand_addr=0x64010100, @empty, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xf}}}], {{'\x00', 0xc0, 0xe8, 0x0, {0x0, 0x600000000000000}}, {0x28}}}}, 0x440)

128.92861ms ago: executing program 2 (id=4418):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d61632873686131290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001700010000002bbd70002bbd70002bbd700026bd700004"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x3e}, 0x48) (async, rerun: 32)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000000)=@ieee802154, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000000580)=""/4110, 0x100e}], 0x3, &(0x7f0000000200)=""/24, 0x18}, 0x40010020)

49.876913ms ago: executing program 2 (id=4419):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=0x0, @ANYBLOB="23a66152641157cfa5aa87e8ed10ea9c11928f0faded327dc3d7936c23d73ad2cdd5d2a60dfb65770e4e569ca652ec608c6f924dbde25fdfff35f43d644dddeb1d493b2137f53009afc3c42fd9ec934bfc6639b710f7ea3706c15c102b212ccb91a155951c9c55c595ed90b530d70a7e5e1d72df8431f80e48423cada51e67c3f618f936bc483cf3be75601c16ea20df5a72798be6cf5f3252fecd5af469353089260ea0ccfffd94ded0aaaab31b6ffa989e906e4826"], 0x1c}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0100001000010000000008000000000a0101010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000000000050000000000000000000000000000000000000000000000000000000000002639644331e58b0f00000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000010000000290d00000000000002000000000000000a00010023000000000000001c001700000000000000000000000000000000100000000000000000480001007368610cf7a8890000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00feffffff2ccc587c50b56518b1c903cd0dfea622b1f837e47d61d48f1283b87ad5fb8694af5116986bd206920ba00890d700ff7ed14cbd699f0d77449c8262314bf07251ff704fda16232aab86dd7bcb1729c94feb0063af18ac16f6efb8f94a8ceb262bf52e987855d3e917c79ad0bdb0ccbfdbed95f8d405bb836086afa79d005965903b619185db6b529bcb52c1bc0ea4fd69007a59d3a47850c2b027e403a0dc6ba5b8fcf396bb629c35ce5368712fc45067e4419f6cc455ba9103e49a1bf096a2636cefd3061405c5575f5bfa228ead4b3cd1317ee7d4ca70940a1d1ea747667a0376b244"], 0x15c}}, 0x20020881)

250.923µs ago: executing program 2 (id=4420):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="0103fe0fff"], 0x38}, 0x1, 0x0, 0x800000000000000, 0x2800}, 0x40084c0)

0s ago: executing program 2 (id=4421):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x22020400)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800800010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d0001000000080029000edd0000"], 0x38}}, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64)
r3 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 64)
connect$rxrpc(r3, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) (async)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r4}, 0x10)
unshare(0x40000) (async)
sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="06000000000400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000f5fccac622307d2109240000833555463a000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000605000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000001000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0xffffffffffffffdb) (rerun: 32)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

kernel console output (not intermixed with test programs):

 87.305353][ T6875] bond2: (slave geneve2): making interface the new active one
[   87.309401][ T6875] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   87.319056][ T6875] bond2: entered promiscuous mode
[   87.320804][ T6875] geneve2: entered promiscuous mode
[   87.798256][ T6883] netlink: 72 bytes leftover after parsing attributes in process `syz.0.307'.
[   88.226307][ T6903] netlink: 140 bytes leftover after parsing attributes in process `syz.0.315'.
[   89.168017][ T6935] openvswitch: netlink: Message has 20 unknown bytes.
[   89.170861][ T6935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.573066][  T791] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa
[   89.597411][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.335'.
[   89.796140][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.340'.
[   90.539140][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'.
[   90.900461][ T6990] openvswitch: netlink: IP tunnel TTL not specified.
[   91.179680][ T6992] netlink: 2 bytes leftover after parsing attributes in process `syz.0.350'.
[   91.298693][ T6996] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   91.809392][ T7021] bond0: (slave gretap0): Opening slave failed
[   91.892674][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.365'.
[   91.918632][ T7032] validate_nla: 47 callbacks suppressed
[   91.918659][ T7032] netlink: 'syz.2.366': attribute type 29 has an invalid length.
[   91.925000][ T7032] netlink: 'syz.2.366': attribute type 29 has an invalid length.
[   91.928223][ T7032] netlink: 'syz.2.366': attribute type 29 has an invalid length.
[   91.931305][ T7032] netlink: 'syz.2.366': attribute type 29 has an invalid length.
[   91.934956][ T7032] netlink: 'syz.2.366': attribute type 29 has an invalid length.
[   91.937567][ T7032] netlink: 'syz.2.366': attribute type 29 has an invalid length.
[   91.940153][ T7032] netlink: 'syz.2.366': attribute type 29 has an invalid length.
[   91.944438][ T7032] netlink: 'syz.2.366': attribute type 29 has an invalid length.
[   91.953186][ T7032] netlink: 'syz.2.366': attribute type 29 has an invalid length.
[   91.956045][ T7032] netlink: 'syz.2.366': attribute type 29 has an invalid length.
[   92.014696][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'.
[   92.487767][ T7051] x_tables: duplicate underflow at hook 3
[   92.651405][ T7060] IPVS: sync thread started: state = MASTER, mcast_ifn = vxcan1, syncid = 4, id = 0
[   92.791624][ T7068] x_tables: duplicate underflow at hook 1
[   92.827297][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'.
[   92.855512][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[   92.908440][ T7074] netlink: 272 bytes leftover after parsing attributes in process `syz.1.384'.
[   93.333589][ T7108] ieee802154 phy0 wpan0: encryption failed: -22
[   93.337034][ T7108] x_tables: duplicate underflow at hook 1
[   93.598306][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'.
[   93.642958][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz.1.405'.
[   94.639016][ T7183] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   94.643377][ T7183] openvswitch: netlink: Duplicate key (type 0).
[   94.730964][ T7190] net veth1_virt_wifi : renamed from virt_wifi0
[   95.024543][ T7213] __nla_validate_parse: 8 callbacks suppressed
[   95.024561][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'.
[   95.080651][ T7216] netlink: 272 bytes leftover after parsing attributes in process `syz.0.441'.
[   95.112682][ T7219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.442'.
[   95.169461][ T7223] netlink: 324 bytes leftover after parsing attributes in process `syz.0.444'.
[   95.183117][ T7224] netlink: 324 bytes leftover after parsing attributes in process `syz.0.444'.
[   95.187674][ T7222] netlink: 108 bytes leftover after parsing attributes in process `syz.0.444'.
[   95.187736][ T7220] wg2: entered promiscuous mode
[   95.201925][ T7220] wg2: entered allmulticast mode
[   95.582774][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'.
[   95.588075][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'.
[   95.855678][ T7256] "syz.1.457" (7256) uses obsolete ecb(arc4) skcipher
[   95.950311][ T7268] x_tables: duplicate underflow at hook 1
[   95.956387][ T7270] batadv_slave_1: entered promiscuous mode
[   96.025049][ T7272] tipc: Started in network mode
[   96.027039][ T7272] tipc: Node identity aeb5ed0f56c8, cluster identity 4711
[   96.030962][ T7273] netlink: 120 bytes leftover after parsing attributes in process `syz.1.461'.
[   96.035031][ T7272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.048922][ T7272] syzkaller0: entered promiscuous mode
[   96.051301][ T7272] syzkaller0: entered allmulticast mode
[   96.076379][ T7272] tipc: Resetting bearer <eth:syzkaller0>
[   96.080021][ T7269] batadv_slave_1: left promiscuous mode
[   96.081603][ T7272] Unsupported ieee802154 address type: 0
[   96.150839][ T7271] tipc: Resetting bearer <eth:syzkaller0>
[   96.172469][ T7271] tipc: Disabling bearer <eth:syzkaller0>
[   96.196948][ T7279] netlink: 108 bytes leftover after parsing attributes in process `syz.2.464'.
[   96.410955][ T7285] bond3: (slave bridge3): making interface the new active one
[   96.417418][ T7285] bond3: (slave bridge3): Enslaving as an active interface with an up link
[   96.480261][   T24] IPVS: starting estimator thread 0...
[   96.605071][ T7293] IPVS: using max 44 ests per chain, 105600 per kthread
[   97.038749][ T7314] pimreg: entered allmulticast mode
[   97.406549][ T7331] x_tables: duplicate underflow at hook 1
[   97.447636][ T7333] x_tables: duplicate underflow at hook 1
[   97.568890][ T7338] validate_nla: 104 callbacks suppressed
[   97.568907][ T7338] netlink: 'syz.1.485': attribute type 1 has an invalid length.
[   97.807087][ T7349] x_tables: duplicate underflow at hook 3
[   97.947123][ T7359] ieee802154 phy0 wpan0: encryption failed: -22
[   98.227246][ T7388] Bluetooth: MGMT ver 1.23
[   99.413126][ T7459] bridge_slave_0: entered allmulticast mode
[   99.842759][ T7474] veth0: entered promiscuous mode
[  100.103030][ T7502] __nla_validate_parse: 22 callbacks suppressed
[  100.103050][ T7502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.546'.
[  100.148366][ T7504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'.
[  100.166105][ T7504] netlink: 48 bytes leftover after parsing attributes in process `syz.0.548'.
[  100.169845][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'.
[  100.214628][ T7504] openvswitch: netlink: Key type 30 is not supported
[  100.224060][ T7504] netlink: 88 bytes leftover after parsing attributes in process `syz.0.548'.
[  100.410395][ T7521] netlink: 272 bytes leftover after parsing attributes in process `syz.1.556'.
[  100.474035][ T7528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.477752][ T7528] syzkaller0: entered promiscuous mode
[  100.479724][ T7528] syzkaller0: entered allmulticast mode
[  100.493138][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'.
[  100.493239][ T7528] tipc: Resetting bearer <eth:syzkaller0>
[  100.499217][ T7526] netlink: 'syz.1.558': attribute type 1 has an invalid length.
[  100.542208][ T7527] tipc: Resetting bearer <eth:syzkaller0>
[  101.246017][ T7527] tipc: Disabling bearer <eth:syzkaller0>
[  101.325856][ T7543] netlink: 344 bytes leftover after parsing attributes in process `syz.1.563'.
[  101.387803][ T7549] x_tables: duplicate underflow at hook 3
[  101.430632][ T7553] x_tables: duplicate underflow at hook 1
[  101.583917][ T7567] veth1_to_bond: entered promiscuous mode
[  101.609144][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'.
[  101.843958][ T7578] netlink: 272 bytes leftover after parsing attributes in process `syz.1.576'.
[  102.116339][ T7589] netlink: 'syz.1.579': attribute type 4 has an invalid length.
[  102.620922][ T7619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.000705][ T7644] batadv0: entered promiscuous mode
[  103.015988][ T7644] vlan2: entered promiscuous mode
[  103.306038][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.308954][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.532776][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.555082][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.809077][ T7651] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.815777][ T7651] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.819287][ T7651] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.823238][ T7651] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.827731][ T7651] geneve2: left promiscuous mode
[  104.514366][ T7721] netlink: 'syz.0.627': attribute type 1 has an invalid length.
[  104.581498][ T7724] netlink: 'syz.0.628': attribute type 4 has an invalid length.
[  105.145308][ T7711] __nla_validate_parse: 45 callbacks suppressed
[  105.145375][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'.
[  105.380469][ T7739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.635'.
[  105.388630][ T7731] netlink: 104 bytes leftover after parsing attributes in process `syz.0.631'.
[  105.398896][ T7739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.635'.
[  105.402109][ T7739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.635'.
[  105.405234][ T7739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.635'.
[  105.408984][ T7739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.635'.
[  105.414712][ T7739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.635'.
[  105.419344][ T7739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.635'.
[  105.423136][ T7739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.635'.
[  105.531448][ T7746] netlink: 'syz.0.637': attribute type 4 has an invalid length.
[  105.681536][ T7758] tipc: Started in network mode
[  105.685764][ T7758] tipc: Node identity , cluster identity 4711
[  105.687851][ T7758] tipc: Failed to obtain node identity
[  105.689936][ T7758] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  105.783901][ T7758] syzkaller0: entered promiscuous mode
[  105.786134][ T7758] syzkaller0: entered allmulticast mode
[  107.441608][ T7809] x_tables: duplicate underflow at hook 1
[  107.910311][ T7846] unknown channel width for channel at 909000KHz?
[  107.915408][ T7846] unknown channel width for channel at 909000KHz?
[  107.918154][ T7846] unknown channel width for channel at 909000KHz?
[  108.064349][ T7852] syzkaller1: entered promiscuous mode
[  108.066628][ T7852] syzkaller1: entered allmulticast mode
[  108.198795][ T7870] tipc: Enabled bearer <udp:syz2>, priority 10
[  108.320548][ T7879] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  108.507437][ T7885] netlink: 'syz.2.693': attribute type 1 has an invalid length.
[  108.642120][ T7897] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  108.925264][ T7919] sctp: [Deprecated]: syz.2.704 (pid 7919) Use of int in max_burst socket option.
[  108.925264][ T7919] Use struct sctp_assoc_value instead
[  109.124375][ T7928] bridge0: port 3(veth0_to_bridge) entered blocking state
[  109.127424][ T7928] bridge0: port 3(veth0_to_bridge) entered disabled state
[  109.136607][ T7928] veth0_to_bridge: entered allmulticast mode
[  109.142734][ T7928] veth0_to_bridge: entered promiscuous mode
[  109.194298][ T5888] tipc: Node number set to 4169002255
[  109.453330][ T7944] x_tables: duplicate underflow at hook 3
[  109.849084][ T7960] netlink: 'syz.1.720': attribute type 1 has an invalid length.
[  110.101331][ T7970] netlink: 'syz.1.725': attribute type 4 has an invalid length.
[  110.734339][ T7985] __nla_validate_parse: 78 callbacks suppressed
[  110.734362][ T7985] netlink: 88 bytes leftover after parsing attributes in process `syz.2.731'.
[  111.207894][ T7994] netlink: 140 bytes leftover after parsing attributes in process `syz.2.734'.
[  112.087368][ T8027] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[  112.092656][ T8027] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  112.150106][ T8029] x_tables: duplicate underflow at hook 1
[  112.715415][ T8039] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[  112.745931][ T8045] netlink: 'syz.0.753': attribute type 1 has an invalid length.
[  113.329540][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'.
[  113.333654][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'.
[  113.340538][ T8081] bond0: entered promiscuous mode
[  113.344073][ T8081] bond_slave_0: entered promiscuous mode
[  113.346190][ T8081] bond_slave_1: entered promiscuous mode
[  113.349000][ T8081] ip6gretap0: entered promiscuous mode
[  113.369549][ T8081] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  113.374228][ T8081] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  113.459665][ T8087] netlink: 152 bytes leftover after parsing attributes in process `syz.1.769'.
[  113.557996][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'.
[  113.767799][ T8109] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  113.934817][ T8114] bridge_slave_0: left allmulticast mode
[  113.937274][ T8114] bridge_slave_0: left promiscuous mode
[  113.940317][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.948601][ T8114] bridge_slave_1: left allmulticast mode
[  113.953701][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'.
[  113.958462][ T8114] bridge_slave_1: left promiscuous mode
[  113.960942][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.977127][ T8114] bond0: (slave bond_slave_0): Releasing backup interface
[  113.984285][ T8114] bond0: (slave bond_slave_1): Releasing backup interface
[  113.997496][ T8114] team0: Port device team_slave_0 removed
[  114.006523][ T8114] team0: Port device team_slave_1 removed
[  114.008814][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.011480][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.017079][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.019408][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.052367][ T8114] bond1: (slave bridge1): Releasing active interface
[  114.070881][ T8123] ieee802154 phy0 wpan0: encryption failed: -90
[  114.083795][ T8114] bond2: (slave geneve2): Releasing active interface
[  114.097731][ T8114] geneve2: left promiscuous mode
[  115.279948][ T8141] lo speed is unknown, defaulting to 1000
[  115.287390][ T8141] lo speed is unknown, defaulting to 1000
[  115.294714][ T8141] lo speed is unknown, defaulting to 1000
[  115.300443][ T8141] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  115.311241][ T8141] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  115.324732][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'.
[  115.335618][ T8143] wg1: entered promiscuous mode
[  115.337730][ T8143] wg1: entered allmulticast mode
[  115.360774][ T8141] lo speed is unknown, defaulting to 1000
[  115.366180][ T8141] lo speed is unknown, defaulting to 1000
[  115.370488][ T8141] lo speed is unknown, defaulting to 1000
[  116.399305][ T8169] netlink: 48 bytes leftover after parsing attributes in process `syz.0.792'.
[  116.412548][ T8169] IPVS: length: 8 != 446622349272
[  117.343221][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.794'.
[  117.436317][ T8181] lo speed is unknown, defaulting to 1000
[  117.634602][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'.
[  117.638144][ T8197] netlink: 'syz.1.803': attribute type 30 has an invalid length.
[  117.650314][ T8197] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.653666][ T8197] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.656364][ T8197] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.659569][ T8197] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.674304][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'.
[  117.677388][ T8197] netlink: 'syz.1.803': attribute type 30 has an invalid length.
[  117.684245][ T8206] netlink: 68 bytes leftover after parsing attributes in process `syz.2.805'.
[  117.716116][ T8181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.796'.
[  117.838403][ T8214] netlink: 140 bytes leftover after parsing attributes in process `syz.1.808'.
[  117.841351][ T8213] netlink: 140 bytes leftover after parsing attributes in process `syz.1.808'.
[  117.969105][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'.
[  117.973747][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'.
[  118.056021][ T8226] netlink: 'syz.0.813': attribute type 4 has an invalid length.
[  119.529189][ T8304] x_tables: duplicate underflow at hook 1
[  120.276527][ T8370] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  120.552489][ T8393] netlink: 'syz.2.879': attribute type 7 has an invalid length.
[  120.555441][ T8393] netlink: 'syz.2.879': attribute type 8 has an invalid length.
[  120.750213][ T8407] x_tables: duplicate underflow at hook 1
[  121.304737][ T8452] syzkaller1: entered promiscuous mode
[  121.309972][ T8452] syzkaller1: entered allmulticast mode
[  121.324792][ T8452] netlink: 'syz.1.903': attribute type 15 has an invalid length.
[  121.517742][ T8460] x_tables: duplicate underflow at hook 1
[  121.914350][ T8483] __nla_validate_parse: 13 callbacks suppressed
[  121.914363][ T8483] netlink: 108 bytes leftover after parsing attributes in process `syz.2.916'.
[  121.985396][ T8486] netlink: 44 bytes leftover after parsing attributes in process `syz.1.917'.
[  121.988431][ T8486] netlink: 43 bytes leftover after parsing attributes in process `syz.1.917'.
[  121.991141][ T8486] netlink: 'syz.1.917': attribute type 5 has an invalid length.
[  122.002913][ T8486] netlink: 43 bytes leftover after parsing attributes in process `syz.1.917'.
[  122.022383][ T8486] batadv_slave_1: entered promiscuous mode
[  122.027256][ T8485] batadv_slave_1: left promiscuous mode
[  122.104930][ T8494] netlink: 'syz.2.920': attribute type 1 has an invalid length.
[  122.133491][ T8494] bond4: (slave bridge4): making interface the new active one
[  122.137558][ T8494] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  122.258162][ T8507] netlink: 'syz.2.925': attribute type 74 has an invalid length.
[  122.261588][ T8507] netlink: 272 bytes leftover after parsing attributes in process `syz.2.925'.
[  122.507016][ T8520] lo speed is unknown, defaulting to 1000
[  122.604084][ T8520] netlink: 'syz.1.931': attribute type 13 has an invalid length.
[  122.914086][ T8535] netlink: 'syz.2.936': attribute type 12 has an invalid length.
[  122.917043][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  122.920599][ T8535] netlink: 'syz.2.936': attribute type 12 has an invalid length.
[  122.960944][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  122.965152][ T8535] netlink: 'syz.2.936': attribute type 12 has an invalid length.
[  122.968152][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  122.983992][ T8538] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  122.991154][ T8535] netlink: 'syz.2.936': attribute type 12 has an invalid length.
[  123.000033][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  123.207415][ T8557] x_tables: duplicate underflow at hook 1
[  123.297508][ T8560] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  123.607233][ T8571] x_tables: duplicate underflow at hook 3
[  123.645232][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'.
[  123.973317][   T55] block nbd0: Receive control failed (result -104)
[  124.119633][ T8595] netlink: 'syz.2.958': attribute type 1 has an invalid length.
[  124.147274][ T8595] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  124.155114][ T8595] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  124.197965][ T8599] gretap0: entered promiscuous mode
[  124.205507][ T8599] bond5: (slave gretap0): making interface the new active one
[  124.210747][ T8599] bond5: (slave gretap0): Enslaving as an active interface with an up link
[  124.495294][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.508598][ T8618] netlink: 'syz.0.968': attribute type 1 has an invalid length.
[  124.687372][   T33] audit: type=1804 audit(1753657822.423:2): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.972" name="/newroot/300/cgroup.controllers" dev="tmpfs" ino=1551 res=1 errno=0
[  124.696565][   T33] audit: type=1800 audit(1753657822.433:3): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.972" name="cgroup.controllers" dev="tmpfs" ino=1551 res=0 errno=0
[  124.704396][   T33] audit: type=1800 audit(1753657822.433:4): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.972" name="cgroup.controllers" dev="tmpfs" ino=1551 res=0 errno=0
[  124.996653][ T8653] tipc: Started in network mode
[  124.998684][ T8653] tipc: Node identity 2e3d8628ec7c, cluster identity 4711
[  125.001585][ T8653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.005488][ T8653] syzkaller0: entered promiscuous mode
[  125.007799][ T8653] syzkaller0: entered allmulticast mode
[  125.011355][ T8652] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.048542][ T8654] tipc: Resetting bearer <eth:syzkaller0>
[  125.055896][ T8651] tipc: Resetting bearer <eth:syzkaller0>
[  125.068562][ T8651] tipc: Disabling bearer <eth:syzkaller0>
[  125.205309][ T8666] netlink: 'syz.1.987': attribute type 8 has an invalid length.
[  125.280979][ T8681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  125.473399][ T8703] netlink: zone id is out of range
[  125.479466][ T8703] netlink: zone id is out of range
[  125.481065][ T8703] netlink: zone id is out of range
[  125.496556][ T8703] netlink: zone id is out of range
[  125.502954][ T8703] netlink: zone id is out of range
[  125.504539][ T8703] netlink: zone id is out of range
[  125.506059][ T8703] netlink: zone id is out of range
[  125.507587][ T8703] netlink: zone id is out of range
[  125.598859][ T8714] x_tables: duplicate underflow at hook 1
[  125.913711][ T8742] x_tables: duplicate underflow at hook 1
[  126.338492][ T8771] x_tables: duplicate underflow at hook 1
[  127.079682][ T8823] netlink: 'syz.2.1043': attribute type 11 has an invalid length.
[  127.183378][ T8832] __nla_validate_parse: 13 callbacks suppressed
[  127.183400][ T8832] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1045'.
[  127.439017][ T8851] netlink: 'syz.0.1052': attribute type 2 has an invalid length.
[  127.615977][ T8864] Bluetooth: MGMT ver 1.23
[  127.738520][ T8885] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1063'.
[  127.822349][ T8890] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1065'.
[  127.853573][ T8893] x_tables: duplicate underflow at hook 1
[  127.976481][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'.
[  128.344912][ T8938] x_tables: duplicate underflow at hook 3
[  128.519067][ T8955] netlink: 'syz.1.1092': attribute type 29 has an invalid length.
[  128.524184][ T8957] netlink: 604 bytes leftover after parsing attributes in process `syz.1.1092'.
[  128.596385][ T8967] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1094'.
[  128.679540][ T8975] netlink: 'syz.2.1099': attribute type 1 has an invalid length.
[  128.733345][ T8975] bond6: (slave bridge5): making interface the new active one
[  128.742948][ T8975] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  128.785899][ T8980] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1101'.
[  128.846647][ T8980] x_tables: duplicate underflow at hook 1
[  128.911419][ T8990] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  129.137594][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[  129.490698][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'.
[  129.647571][ T9040] can: request_module (can-proto-5) failed.
[  129.714501][ T9053] tipc: Enabled bearer <eth:team0>, priority 10
[  129.789902][ T9062] net_ratelimit: 7 callbacks suppressed
[  129.789920][ T9062] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  130.077981][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1141'.
[  130.323212][ T9095] netlink: 'syz.0.1147': attribute type 1 has an invalid length.
[  130.390260][ T9095] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.478305][ T9108] netlink: 'syz.2.1151': attribute type 4 has an invalid length.
[  130.987910][ T9145] x_tables: duplicate underflow at hook 3
[  131.112260][ T9153] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  131.176496][ T9158] x_tables: duplicate underflow at hook 1
[  131.330533][ T9169] netlink: 'syz.2.1175': attribute type 29 has an invalid length.
[  131.339915][ T9169] netlink: 'syz.2.1175': attribute type 29 has an invalid length.
[  131.344085][ T9169] netlink: 'syz.2.1175': attribute type 29 has an invalid length.
[  131.347533][ T9169] netlink: 'syz.2.1175': attribute type 29 has an invalid length.
[  131.351027][ T9169] netlink: 'syz.2.1175': attribute type 29 has an invalid length.
[  131.360155][ T9169] netlink: 'syz.2.1175': attribute type 29 has an invalid length.
[  132.099367][ T9237] x_tables: duplicate underflow at hook 3
[  132.369520][ T9260] __nla_validate_parse: 8 callbacks suppressed
[  132.369537][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1211'.
[  132.383089][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.388228][ T9260] x_tables: duplicate underflow at hook 1
[  132.508429][ T9274] x_tables: duplicate underflow at hook 1
[  132.641106][ T9286] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1223'.
[  132.650262][ T9281] 8021q: adding VLAN 0 to HW filter on device bond3
[  132.660572][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'.
[  132.677607][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'.
[  132.679586][ T9288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'.
[  133.055947][ T9316] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1233'.
[  133.096879][ T9315] bond4: (slave bridge4): making interface the new active one
[  133.099835][ T9315] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  133.120599][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'.
[  133.129002][ T9321] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1234'.
[  133.190806][ T9333] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1238'.
[  133.196543][ T9330] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1235'.
[  133.474526][ T9325] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.477421][ T9325] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.480654][ T9325] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.484054][ T9325] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.626231][ T9351] lo speed is unknown, defaulting to 1000
[  133.788055][ T9366] batadv_slave_1: entered promiscuous mode
[  133.823900][ T9365] batadv_slave_1: left promiscuous mode
[  133.961479][ T9380] x_tables: duplicate underflow at hook 1
[  134.054312][ T9387] openvswitch: netlink: Missing key (keys=40, expected=100)
[  134.058400][ T9387] validate_nla: 33 callbacks suppressed
[  134.058410][ T9387] netlink: 'syz.1.1253': attribute type 1 has an invalid length.
[  137.478163][ T9427] __nla_validate_parse: 10 callbacks suppressed
[  137.478184][ T9427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1267'.
[  137.572625][ T9434] pim6reg1: entered promiscuous mode
[  137.574728][ T9434] pim6reg1: entered allmulticast mode
[  137.585019][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'.
[  137.588515][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'.
[  137.781168][ T9454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1280'.
[  137.802998][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'.
[  137.810047][ T9454] lo speed is unknown, defaulting to 1000
[  137.981028][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'.
[  137.993077][ T9465] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1283'.
[  138.848157][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1289'.
[  138.851193][ T9477] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1289'.
[  138.863775][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1289'.
[  139.062604][ T9499] netlink: 'syz.0.1299': attribute type 1 has an invalid length.
[  139.629261][ T9559] netlink: 'syz.0.1319': attribute type 12 has an invalid length.
[  139.827989][ T9574] x_tables: duplicate underflow at hook 1
[  140.027206][ T9581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.363947][ T9613] netlink: 'syz.2.1342': attribute type 30 has an invalid length.
[  140.367340][ T9613] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  140.370947][ T9613] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  140.375636][ T9611] netlink: 'syz.1.1341': attribute type 21 has an invalid length.
[  140.378757][ T9611] netlink: 'syz.1.1341': attribute type 22 has an invalid length.
[  140.385119][ T9611] netlink: 'syz.1.1341': attribute type 23 has an invalid length.
[  140.681151][ T9638] x_tables: duplicate underflow at hook 1
[  140.695294][ T9639] netlink: 'syz.0.1349': attribute type 1 has an invalid length.
[  140.832183][ T9650] dvmrp1: tun_chr_ioctl cmd 1074025677
[  140.834397][ T9650] dvmrp1: linktype set to 805
[  141.398397][ T9681] tc_dump_action: action bad kind
[  141.792478][ T9713] netlink: 'syz.1.1379': attribute type 13 has an invalid length.
[  142.257933][ T9713] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.263489][ T9713] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.267370][ T9713] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.270654][ T9713] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.363478][ T9713] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.367325][ T9713] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.370811][ T9713] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.374768][ T9713] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.738238][ T9741] netlink: 'syz.1.1386': attribute type 1 has an invalid length.
[  142.741867][ T9741] __nla_validate_parse: 20 callbacks suppressed
[  142.741879][ T9741] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1386'.
[  143.107932][ T9762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.119815][ T9762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.851699][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  143.876064][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1401'.
[  143.936155][ T9781] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1404'.
[  143.939880][ T9781] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  143.984907][ T9784] batadv_slave_1: entered promiscuous mode
[  143.990201][ T9783] batadv_slave_1: left promiscuous mode
[  144.081406][ T9790] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1407'.
[  144.158999][ T9794] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1409'.
[  144.259479][ T9796] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1410'.
[  144.299953][ T9798] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1411'.
[  144.435760][ T9806] x_tables: duplicate underflow at hook 3
[  144.476882][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'.
[  144.936965][ T9820] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1419'.
[  145.468723][ T9868] x_tables: duplicate underflow at hook 3
[  145.696862][ T9886] x_tables: duplicate underflow at hook 1
[  145.885384][ T9907] netlink: 'syz.2.1455': attribute type 1 has an invalid length.
[  145.951063][ T9909] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  145.958616][ T9909] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  146.425077][ T9955] netlink: 'syz.1.1470': attribute type 1 has an invalid length.
[  146.467540][ T9960] lo speed is unknown, defaulting to 1000
[  146.558173][ T9967] netlink: 'syz.1.1475': attribute type 1 has an invalid length.
[  146.573248][ T9966] x_tables: duplicate underflow at hook 1
[  146.598691][ T9966] x_tables: duplicate underflow at hook 1
[  146.611470][ T9967] bond5: (slave bridge5): making interface the new active one
[  146.615480][ T9967] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  146.658440][ T9971] netlink: 'syz.0.1477': attribute type 10 has an invalid length.
[  146.664704][ T9971] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  146.667921][ T9971] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  146.678034][ T9971] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  146.681073][ T9971] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  146.689063][ T9971] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  147.015710][ T9990] netlink: 'syz.1.1483': attribute type 11 has an invalid length.
[  147.076525][T10000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.711176][   T54] Bluetooth: hci2: link tx timeout
[  147.714538][T10034] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  147.755075][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.880190][T10047] __nla_validate_parse: 6 callbacks suppressed
[  147.880202][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'.
[  147.915552][T10047] IPVS: Scheduler module ip_vs_sip not found
[  148.001512][T10057] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1508'.
[  148.043092][T10060] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1510'.
[  148.258927][T10077] netlink: 'syz.2.1517': attribute type 4 has an invalid length.
[  148.267406][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'.
[  148.510153][T10097] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1525'.
[  148.517562][T10085] ip6tnl1: entered promiscuous mode
[  148.519750][T10085] ip6tnl1: entered allmulticast mode
[  148.523750][T10085] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1521'.
[  148.823122][T10120] tipc: Can't bind to reserved service type 0
[  149.196946][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'.
[  149.215483][T10151] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1545'.
[  149.287958][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'.
[  149.298651][T10159] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1548'.
[  149.399854][T10167] sctp: [Deprecated]: syz.2.1553 (pid 10167) Use of int in maxseg socket option.
[  149.399854][T10167] Use struct sctp_assoc_value instead
[  149.815075][ T5220] Bluetooth: hci2: command 0x0406 tx timeout
[  149.998198][T10220] netlink: 'syz.2.1572': attribute type 1 has an invalid length.
[  150.001306][T10220] netlink: 'syz.2.1572': attribute type 4 has an invalid length.
[  150.244686][T10230] veth5: entered promiscuous mode
[  150.452954][T10241] x_tables: duplicate underflow at hook 1
[  151.254543][T10260] netlink: 'syz.1.1584': attribute type 1 has an invalid length.
[  151.258741][T10260] netlink: 'syz.1.1584': attribute type 2 has an invalid length.
[  151.267499][T10262] sctp: [Deprecated]: syz.2.1585 (pid 10262) Use of int in maxseg socket option.
[  151.267499][T10262] Use struct sctp_assoc_value instead
[  151.596828][T10278] netlink: 'syz.1.1589': attribute type 3 has an invalid length.
[  152.957789][T10335] __nla_validate_parse: 42 callbacks suppressed
[  152.957816][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'.
[  152.965611][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'.
[  152.969091][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'.
[  153.078586][T10339] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1612'.
[  153.192032][T10344] x_tables: duplicate underflow at hook 1
[  153.226143][T10349] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1615'.
[  153.385165][T10358] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  153.430548][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1622'.
[  153.526799][T10372] netlink: 'syz.1.1625': attribute type 1 has an invalid length.
[  153.556744][T10372] bond6: (slave bridge6): making interface the new active one
[  153.559774][T10372] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  153.722781][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'.
[  153.727236][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'.
[  154.098447][T10406] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1636'.
[  154.101570][T10406] 0: renamed from hsr0
[  154.107480][T10406] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  154.110878][T10406] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.115400][T10406] 0: entered allmulticast mode
[  154.117045][T10406] hsr_slave_0: entered allmulticast mode
[  154.118852][T10406] hsr_slave_1: entered allmulticast mode
[  154.126686][T10406] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  154.401668][T10416] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1640'.
[  154.563007][T10426] sctp: [Deprecated]: syz.1.1644 (pid 10426) Use of int in maxseg socket option.
[  154.563007][T10426] Use struct sctp_assoc_value instead
[  155.110079][T10449] netlink: 'syz.1.1654': attribute type 1 has an invalid length.
[  155.158659][T10449] bond7: (slave bridge7): making interface the new active one
[  155.164853][T10449] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  155.433737][T10479] x_tables: duplicate underflow at hook 1
[  155.549902][T10491] x_tables: duplicate underflow at hook 3
[  155.614085][T10496] netlink: 'syz.2.1673': attribute type 1 has an invalid length.
[  155.616600][T10496] netlink: 'syz.2.1673': attribute type 1 has an invalid length.
[  155.676551][T10504] x_tables: duplicate underflow at hook 1
[  155.888225][T10515] netlink: 'syz.2.1680': attribute type 7 has an invalid length.
[  155.890910][T10515] netlink: 'syz.2.1680': attribute type 8 has an invalid length.
[  156.109104][T10543] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  156.301632][T10553] x_tables: duplicate underflow at hook 1
[  156.428218][T10562] netlink: 'syz.1.1695': attribute type 11 has an invalid length.
[  157.437014][T10603] x_tables: duplicate underflow at hook 2
[  157.521522][T10610] 1: renamed from 70 (while UP)
[  157.533347][T10610] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check.
[  157.591153][T10606] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  157.594538][T10606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.634030][T10619] x_tables: duplicate underflow at hook 1
[  157.796584][T10630] netlink: 'syz.1.1721': attribute type 1 has an invalid length.
[  157.835385][T10630] 8021q: adding VLAN 0 to HW filter on device bond8
[  157.877111][T10630] bond8: (slave gretap1): making interface the new active one
[  157.882727][T10630] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  158.123849][T10654] netlink: 'syz.2.1729': attribute type 83 has an invalid length.
[  158.127757][T10654] __nla_validate_parse: 56 callbacks suppressed
[  158.127768][T10654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1729'.
[  158.155562][T10656] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  158.163907][T10654] netlink: 'syz.2.1729': attribute type 83 has an invalid length.
[  158.239236][T10665] x_tables: duplicate underflow at hook 1
[  158.304378][T10668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1733'.
[  158.326419][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'.
[  158.329818][T10668] netlink: 'syz.1.1733': attribute type 1 has an invalid length.
[  158.535451][T10691] netlink: 'syz.1.1743': attribute type 10 has an invalid length.
[  158.539874][T10691] 8021q: adding VLAN 0 to HW filter on device team0
[  158.544872][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1741'.
[  158.550135][T10691] bond0: (slave team0): Enslaving as an active interface with an up link
[  158.556616][T10689] delete_channel: no stack
[  158.558506][T10689] delete_channel: no stack
[  158.609517][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'.
[  158.649281][T10706] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1749'.
[  158.652748][T10706] 0: renamed from hsr0
[  158.656628][T10706] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  158.660432][T10706] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.665171][T10706] 0: entered allmulticast mode
[  158.667901][T10706] hsr_slave_0: entered allmulticast mode
[  158.669677][T10706] hsr_slave_1: entered allmulticast mode
[  158.674505][T10706] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  158.681293][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'.
[  158.798805][T10717] x_tables: duplicate underflow at hook 2
[  159.051339][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'.
[  159.375817][T10767] x_tables: duplicate underflow at hook 1
[  159.408912][T10769] netlink: 'syz.0.1771': attribute type 21 has an invalid length.
[  159.411571][T10769] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1771'.
[  159.415256][T10769] netlink: 'syz.0.1771': attribute type 5 has an invalid length.
[  159.417816][T10769] netlink: 'syz.0.1771': attribute type 6 has an invalid length.
[  159.420411][T10769] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1771'.
[  160.747380][T10898] vlan2: entered promiscuous mode
[  160.749596][T10898] bridge0: entered promiscuous mode
[  160.752365][T10898] vlan2: entered allmulticast mode
[  160.754347][T10898] bridge0: entered allmulticast mode
[  162.236229][T10963] x_tables: duplicate underflow at hook 3
[  162.274748][T10966] netlink: 'syz.2.1845': attribute type 2 has an invalid length.
[  162.414902][T10979] syzkaller1: entered promiscuous mode
[  162.416877][T10979] syzkaller1: entered allmulticast mode
[  162.647272][T10990] sctp: [Deprecated]: syz.2.1852 (pid 10990) Use of int in maxseg socket option.
[  162.647272][T10990] Use struct sctp_assoc_value instead
[  162.747045][T10994] Cannot find add_set index 65279 as target
[  163.190982][T11022] __nla_validate_parse: 18 callbacks suppressed
[  163.190998][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'.
[  163.370808][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1868'.
[  163.494316][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1872'.
[  163.500981][T11040] netlink: 'syz.1.1872': attribute type 1 has an invalid length.
[  163.506840][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1872'.
[  163.511527][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'.
[  163.544796][T11045] x_tables: duplicate underflow at hook 1
[  163.655167][T11050] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1875'.
[  164.596106][T11087] wireguard0: entered promiscuous mode
[  164.597975][T11087] wireguard0: entered allmulticast mode
[  164.789837][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1888'.
[  164.839847][T11094] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1889'.
[  164.844054][T11094] 1: renamed from 70 (while UP)
[  164.847921][T11094] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check.
[  165.011939][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'.
[  165.025804][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'.
[  166.041451][T11164] lo speed is unknown, defaulting to 1000
[  166.069721][T11169] netlink: 'syz.2.1919': attribute type 21 has an invalid length.
[  166.495757][T11184] netlink: 'syz.2.1924': attribute type 11 has an invalid length.
[  167.747368][T11219] tipc: Started in network mode
[  167.748948][T11219] tipc: Node identity 5234efae3d55, cluster identity 4711
[  167.751229][T11219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.759057][T11219] syzkaller0: entered promiscuous mode
[  167.760828][T11219] syzkaller0: entered allmulticast mode
[  167.846861][T11230] openvswitch: netlink: IP tunnel TTL not specified.
[  168.030911][T11256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.087737][T11266] netlink: 'syz.0.1958': attribute type 14 has an invalid length.
[  168.101847][T11266] netlink: 'syz.0.1958': attribute type 13 has an invalid length.
[  168.714069][T11310] syzkaller0: entered promiscuous mode
[  168.716117][T11310] syzkaller0: entered allmulticast mode
[  168.752238][  T791] tipc: Node number set to 1868689326
[  169.177395][T11317] Cannot find add_set index 65279 as target
[  169.406082][T11323] __nla_validate_parse: 8 callbacks suppressed
[  169.406107][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'.
[  170.175774][T11332] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  170.233534][T11342] netlink: 'syz.0.1986': attribute type 2 has an invalid length.
[  170.236130][T11342] netlink: 'syz.0.1986': attribute type 2 has an invalid length.
[  170.245196][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'.
[  170.260293][T11343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1982'.
[  170.281649][T11346] x_tables: duplicate underflow at hook 1
[  170.665016][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2000'.
[  170.737465][T11393] v: renamed from ip6_vti0
[  170.746577][T11393] netlink: 1144 bytes leftover after parsing attributes in process `syz.1.2003'.
[  170.750184][T11393] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.2003'.
[  170.753628][T11393] netlink: 32332 bytes leftover after parsing attributes in process `syz.1.2003'.
[  170.844209][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'.
[  170.858167][T11401] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  171.139405][T11427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2014'.
[  171.147976][T11427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2014'.
[  171.267235][T11434] x_tables: duplicate underflow at hook 3
[  171.501274][T11442] syzkaller0: entered promiscuous mode
[  171.510305][T11442] syzkaller0: entered allmulticast mode
[  171.558211][T11452] x_tables: duplicate underflow at hook 1
[  171.753959][T11457] sock: sock_set_timeout: `syz.2.2026' (pid 11457) tries to set negative timeout
[  172.894613][T11454] lo speed is unknown, defaulting to 1000
[  172.957369][T11460] bridge_slave_1: default FDB implementation only supports local addresses
[  173.056229][T11469] openvswitch: netlink: IP tunnel TTL not specified.
[  174.219076][T11521] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  174.726465][T11543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.730773][T11543] syzkaller0: entered promiscuous mode
[  174.733646][T11543] syzkaller0: entered allmulticast mode
[  174.749123][T11543] tipc: Resetting bearer <eth:syzkaller0>
[  175.368679][T11553] Bluetooth: hci1: Opcode 0x080f failed: -4
[  175.474789][   T55] block nbd1: Receive control failed (result -104)
[  175.478678][T11541] tipc: Resetting bearer <eth:syzkaller0>
[  175.490321][T11541] tipc: Disabling bearer <eth:syzkaller0>
[  175.938369][T11592] __nla_validate_parse: 70 callbacks suppressed
[  175.938387][T11592] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2076'.
[  176.603615][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'.
[  176.813845][T11625] x_tables: duplicate underflow at hook 1
[  177.008509][T11635] x_tables: duplicate underflow at hook 3
[  177.113552][T11641] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2096'.
[  177.207826][T11647] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2099'.
[  177.210776][T11647] nbd: illegal input index 65508
[  177.269399][T11655] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2102'.
[  177.411940][   T54] Bluetooth: hci1: command 0x080f tx timeout
[  178.363740][T11712] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2122'.
[  178.366632][T11712] 0: renamed from 71 (while UP)
[  178.369757][T11712] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  178.484359][T11716] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2124'.
[  178.489442][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'.
[  178.496921][T11718] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2125'.
[  178.607643][T11727] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2129'.
[  178.736336][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.738960][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.744960][T11735] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  178.841674][T11745] x_tables: duplicate underflow at hook 3
[  179.149673][T11777] TCP: TCP_TX_DELAY enabled
[  179.169738][T11778] xt_socket: unknown flags 0xfc
[  179.350830][T11791] x_tables: duplicate underflow at hook 1
[  179.651368][T11816] x_tables: duplicate underflow at hook 1
[  180.717398][T11865] 0: renamed from hsr0
[  180.720376][T11865] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  180.728156][T11865] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.734427][T11865] 0: entered allmulticast mode
[  180.736190][T11865] hsr_slave_0: entered allmulticast mode
[  180.738004][T11865] hsr_slave_1: entered allmulticast mode
[  180.741413][T11865] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  180.756124][T11866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.765545][T11866] syzkaller0: entered promiscuous mode
[  180.767629][T11866] syzkaller0: entered allmulticast mode
[  180.934876][T11866] tipc: Resetting bearer <eth:syzkaller0>
[  180.938613][T11864] tipc: Resetting bearer <eth:syzkaller0>
[  180.950227][T11864] tipc: Disabling bearer <eth:syzkaller0>
[  181.289426][T11893] __nla_validate_parse: 14 callbacks suppressed
[  181.289438][T11893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2197'.
[  181.294627][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2197'.
[  181.297461][T11893] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  181.314360][T11893] netlink: 'syz.1.2197': attribute type 9 has an invalid length.
[  181.385578][T11900] x_tables: duplicate underflow at hook 3
[  181.725207][T11923] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2206'.
[  181.731069][T11923] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2206'.
[  181.734617][T11923] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2206'.
[  181.738815][T11923] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2206'.
[  181.753892][T11923] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2206'.
[  181.881577][T11929] netlink: 'syz.0.2209': attribute type 3 has an invalid length.
[  181.901221][T11929] netlink: 'syz.0.2209': attribute type 3 has an invalid length.
[  181.913658][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'.
[  181.929788][T11929] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2209'.
[  181.973007][T11941] tc_dump_action: action bad kind
[  181.979759][T11940] tc_dump_action: action bad kind
[  182.174620][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'.
[  183.699993][T12075] netlink: 'syz.2.2262': attribute type 1 has an invalid length.
[  183.758018][T12075] bond7: (slave bridge8): making interface the new active one
[  183.761406][T12075] bond7: (slave bridge8): Enslaving as an active interface with an up link
[  183.817424][T12082] netem: change failed
[  184.329271][T12126] x_tables: duplicate underflow at hook 3
[  184.448020][T12132] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001
[  184.769740][T12151] netlink: 'syz.0.2293': attribute type 21 has an invalid length.
[  185.204948][T12182] x_tables: duplicate underflow at hook 1
[  185.376809][T12201] openvswitch: netlink: IP tunnel TTL not specified.
[  186.130405][T12245] x_tables: duplicate underflow at hook 3
[  186.168432][T12237] sock: sock_timestamping_bind_phc: sock not bind to device
[  186.251297][T12253] x_tables: duplicate underflow at hook 1
[  186.317593][T12257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.418745][T12262] __nla_validate_parse: 15 callbacks suppressed
[  186.418761][T12262] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2331'.
[  186.425569][T12262] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2331'.
[  186.429125][T12262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2331'.
[  186.705618][T12270] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2334'.
[  186.709090][T12271] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2334'.
[  186.867760][T12278] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2337'.
[  187.046661][T12291] smc: net device bond0 applied user defined pnetid SYZ2
[  187.295864][T12315] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2352'.
[  187.305163][T12313] netlink: 'syz.1.2350': attribute type 1 has an invalid length.
[  187.361376][T12313] bond9: (slave bridge8): making interface the new active one
[  187.368740][T12313] bond9: (slave bridge8): Enslaving as an active interface with an up link
[  187.381594][T12321] macvtap1: entered promiscuous mode
[  187.393147][T12321] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  187.602878][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'.
[  187.605860][T12329] sit0: Master is either lo or non-ether device
[  187.646654][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2360'.
[  187.696834][T12344] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20002
[  187.745251][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'.
[  188.147075][T12360] bond0: Unable to set down delay as MII monitoring is disabled
[  188.266446][T12371] netlink: 'syz.1.2368': attribute type 6 has an invalid length.
[  188.274160][T12363] x_tables: duplicate underflow at hook 2
[  188.565390][T12395] Cannot find add_set index 65279 as target
[  188.903985][T12416] syzkaller1: entered promiscuous mode
[  188.906252][T12416] syzkaller1: entered allmulticast mode
[  188.915967][T12416] batadv_slave_1: entered promiscuous mode
[  189.213089][T12439] x_tables: duplicate underflow at hook 3
[  189.368547][T12446] pim6reg1: entered promiscuous mode
[  189.374776][T12446] pim6reg1: entered allmulticast mode
[  189.501423][T12455] Cannot find add_set index 65279 as target
[  190.240386][T12494] netlink: 'syz.0.2416': attribute type 5 has an invalid length.
[  190.295002][ T5220] Bluetooth: hci2: command 0x0406 tx timeout
[  190.772091][ T5220] Bluetooth: hci1: command 0x080f tx timeout
[  190.900266][T12472] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  190.902741][T12472] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  191.069725][T12523] x_tables: duplicate underflow at hook 3
[  191.263798][T12546] vlan0: entered promiscuous mode
[  191.478866][T12565] __nla_validate_parse: 17 callbacks suppressed
[  191.478881][T12565] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2440'.
[  191.508130][T12568] netlink: 'syz.2.2442': attribute type 32 has an invalid length.
[  191.515307][T12565] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2440'.
[  191.570407][T12577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2445'.
[  192.005309][T12608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2456'.
[  192.012199][T12610] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2458'.
[  192.020096][T12610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.045363][T12610] smc: net device bond0 erased user defined pnetid SYZ2
[  192.139296][T12611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2456'.
[  192.842158][T12638] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2468'.
[  192.845043][T12638] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2468'.
[  192.848338][T12638] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2468'.
[  192.851144][T12638] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2468'.
[  193.814910][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.164157][T12702] x_tables: duplicate underflow at hook 3
[  194.604280][T12726] netlink: 'syz.1.2496': attribute type 2 has an invalid length.
[  194.716672][T12732] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  195.528543][T12788] 8021q: adding VLAN 0 to HW filter on device team0
[  195.690585][T12804] Cannot find add_set index 2 as target
[  195.697464][T12807] netlink: 'syz.2.2529': attribute type 1 has an invalid length.
[  195.736866][T12807] bond9: (slave bridge9): making interface the new active one
[  195.740527][T12807] bond9: (slave bridge9): Enslaving as an active interface with an up link
[  195.916325][T12822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  196.206516][T12849] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  196.524041][T12881] netlink: 'syz.1.2551': attribute type 1 has an invalid length.
[  196.607918][T12890] __nla_validate_parse: 15 callbacks suppressed
[  196.607934][T12890] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2554'.
[  196.714861][T12898] Cannot find add_set index 2 as target
[  196.786317][T12907] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2560'.
[  196.950066][T12928] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  196.967221][T12931] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2570'.
[  196.971378][T12931] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2570'.
[  196.972646][T12928] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  196.975338][T12931] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2570'.
[  196.980546][T12931] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2570'.
[  196.992235][T12928] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  196.995774][T12928] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  197.011955][T12928] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  197.015406][T12928] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  197.018412][T12928] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  197.025473][T12928] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  197.028129][T12928] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  197.036214][T12928] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  197.400045][T12958] Cannot find add_set index 2 as target
[  197.942269][T12974] tipc: Enabled bearer <eth:wg0>, priority 14
[  198.029729][T12980] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2586'.
[  198.036699][T12980] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2586'.
[  198.042391][T12980] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2586'.
[  198.043988][T12981] netlink: 'syz.2.2587': attribute type 21 has an invalid length.
[  198.045706][T12980] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2586'.
[  198.047745][T12981] netlink: 'syz.2.2587': attribute type 22 has an invalid length.
[  198.047757][T12981] netlink: 'syz.2.2587': attribute type 23 has an invalid length.
[  198.047762][T12981] netlink: 'syz.2.2587': attribute type 25 has an invalid length.
[  198.047769][T12981] netlink: 'syz.2.2587': attribute type 26 has an invalid length.
[  198.146644][T12988] syz.2.2590 uses old SIOCAX25GETINFO
[  198.361025][T13000] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  198.369834][T12999] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  198.663679][T13040] lo speed is unknown, defaulting to 1000
[  198.698495][T13035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  198.712616][T13034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  198.847014][T13051] netlink: 'syz.1.2611': attribute type 6 has an invalid length.
[  198.898494][T13051] can: request_module (can-proto-4) failed.
[  199.135007][T13065] batadv_slave_0: entered promiscuous mode
[  199.143665][T13064] batadv_slave_0: left promiscuous mode
[  199.459161][T13095] vxcan1: entered allmulticast mode
[  199.464259][T13095] vxcan1: left allmulticast mode
[  199.531644][T13097] raw_sendmsg: syz.2.2627 forgot to set AF_INET. Fix it!
[  199.611332][T13101] DL<Y: renamed from lo
[  199.639321][T13105] netlink: 'syz.1.2631': attribute type 6 has an invalid length.
[  199.700098][T13105] can: request_module (can-proto-4) failed.
[  199.926588][T13130] netlink: 'syz.2.2638': attribute type 9 has an invalid length.
[  199.929827][T13130] netlink: 'syz.2.2638': attribute type 6 has an invalid length.
[  199.935869][T13131] netlink: 'syz.2.2638': attribute type 9 has an invalid length.
[  199.939200][T13131] netlink: 'syz.2.2638': attribute type 6 has an invalid length.
[  200.050583][T13137] x_tables: duplicate underflow at hook 3
[  200.416940][T13162] netlink: 'syz.0.2650': attribute type 3 has an invalid length.
[  200.419798][T13162] netlink: 'syz.0.2650': attribute type 3 has an invalid length.
[  200.504296][T13170] openvswitch: netlink: IP tunnel TTL not specified.
[  200.713828][T13186] syzkaller0: entered promiscuous mode
[  200.715703][T13186] syzkaller0: entered allmulticast mode
[  200.879165][T13199] x_tables: duplicate underflow at hook 1
[  200.927336][T13208] netlink: 'syz.1.2667': attribute type 1 has an invalid length.
[  200.964327][T13208] bond10: (slave bridge9): making interface the new active one
[  200.967473][T13208] bond10: (slave bridge9): Enslaving as an active interface with an up link
[  201.045524][T13216] lo speed is unknown, defaulting to 1000
[  201.171644][T13225] x_tables: duplicate underflow at hook 3
[  201.338016][T13237] netlink: 'syz.0.2678': attribute type 6 has an invalid length.
[  201.415803][T13245] openvswitch: netlink: IP tunnel TTL not specified.
[  201.600330][T13268] syzkaller1: entered promiscuous mode
[  201.602624][T13268] syzkaller1: entered allmulticast mode
[  201.940598][T13285] __nla_validate_parse: 44 callbacks suppressed
[  201.940614][T13285] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2698'.
[  202.616438][T13298] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2703'.
[  202.718095][T13305] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  202.732593][T13304] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  202.740031][T13305] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  202.788433][T13309] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2708'.
[  202.994162][T13320] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2713'.
[  203.187778][T13330] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2716'.
[  203.194921][T13330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2716'.
[  203.197856][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'.
[  204.414392][T13354] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2725'.
[  204.604838][T13360] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  205.059031][T13385] Cannot find add_set index 2 as target
[  205.108356][T13391] x_tables: duplicate underflow at hook 2
[  205.179478][T13397] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2735'.
[  205.488247][T13424] Cannot find add_set index 2 as target
[  205.750768][T13438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2747'.
[  206.159956][T13477] netlink: 'syz.2.2761': attribute type 7 has an invalid length.
[  206.324147][T13489] netlink: 'syz.1.2762': attribute type 13 has an invalid length.
[  206.786988][T13517] netlink: 'syz.1.2773': attribute type 1 has an invalid length.
[  207.044090][T13537] __nla_validate_parse: 6 callbacks suppressed
[  207.044106][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2780'.
[  207.128516][   T24] hid-generic 0005:15C2:1010.0002: item fetching failed at offset 0/1
[  207.143509][   T24] hid-generic 0005:15C2:1010.0002: probe with driver hid-generic failed with error -22
[  207.167747][T13540] lo speed is unknown, defaulting to 1000
[  207.500314][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'.
[  208.774729][T13608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2802'.
[  208.886928][T13616] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  208.984537][T13622] tipc: Resetting bearer <eth:syzkaller0>
[  210.141494][T13643] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  210.186905][T13647] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2815'.
[  211.174184][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'.
[  211.457013][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2832'.
[  211.538426][T13703] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2834'.
[  211.851092][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'.
[  211.867098][T13732] netlink: 'syz.2.2843': attribute type 1 has an invalid length.
[  211.874722][T13732] netlink: 'syz.2.2843': attribute type 2 has an invalid length.
[  211.940458][T13734] netlink: 'syz.1.2846': attribute type 12 has an invalid length.
[  211.950552][T13736] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  211.952436][T13737] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  211.958659][T13734] x_tables: duplicate underflow at hook 2
[  212.079820][T13744] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2850'.
[  212.086779][T13744] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2850'.
[  212.095786][T13744] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2850'.
[  212.099181][T13744] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2850'.
[  212.154173][T13747] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2851'.
[  212.158921][T13747] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2851'.
[  212.420075][T13770] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  212.597562][T13776] syzkaller1: entered promiscuous mode
[  212.599746][T13776] syzkaller1: entered allmulticast mode
[  212.618660][T13786] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  212.872450][T13795] netlink: 'syz.1.2868': attribute type 1 has an invalid length.
[  212.874953][T13795] nbd: error processing sock list
[  212.876875][T13795] block nbd2: shutting down sockets
[  212.952326][T13811] netlink: 'syz.2.2873': attribute type 1 has an invalid length.
[  212.957290][T13811] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2873'.
[  212.961341][T13811] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2873'.
[  212.961513][T13812] Cannot find add_set index 2 as target
[  212.965274][T13811] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2873'.
[  212.965872][T13811] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2873'.
[  213.036521][T13808] bridge0: entered allmulticast mode
[  213.550760][T13855] x_tables: duplicate underflow at hook 1
[  213.710462][T13876] netlink: 'syz.2.2899': attribute type 41 has an invalid length.
[  213.717629][T13878] netlink: 'syz.0.2898': attribute type 1 has an invalid length.
[  213.755623][T13878] bond4: (slave bridge7): making interface the new active one
[  213.758787][T13878] bond4: (slave bridge7): Enslaving as an active interface with an up link
[  214.541994][T13941] netlink: 'syz.2.2922': attribute type 8 has an invalid length.
[  214.590456][T13946] x_tables: duplicate underflow at hook 1
[  215.011466][T13968] openvswitch: netlink: IP tunnel TTL not specified.
[  215.054776][T13970] x_tables: duplicate underflow at hook 1
[  215.147916][T13975] netlink: 'syz.2.2934': attribute type 1 has an invalid length.
[  215.219967][T13977] lo speed is unknown, defaulting to 1000
[  216.115826][T14039] netlink: 'syz.0.2956': attribute type 25 has an invalid length.
[  216.260757][T14048] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  216.685250][T14070] erspan0: entered allmulticast mode
[  216.740012][T14081] netlink: 'syz.1.2968': attribute type 11 has an invalid length.
[  217.509507][T14126] __nla_validate_parse: 33 callbacks suppressed
[  217.509525][T14126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2984'.
[  217.957898][T14136] x_tables: duplicate underflow at hook 2
[  218.300815][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2999'.
[  218.331558][T14167] x_tables: duplicate underflow at hook 3
[  218.373338][T14170] sock: sock_set_timeout: `syz.1.2998' (pid 14170) tries to set negative timeout
[  218.380721][T14170] validate_nla: 1 callbacks suppressed
[  218.380734][T14170] netlink: 'syz.1.2998': attribute type 11 has an invalid length.
[  218.394501][T14173] x_tables: duplicate underflow at hook 1
[  218.403121][T14169] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3002'.
[  218.569635][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'.
[  218.579895][T14177] netlink: 'syz.0.3005': attribute type 1 has an invalid length.
[  218.588561][T14177] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3005'.
[  218.738918][T14197] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3008'.
[  219.329752][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3012'.
[  219.599742][T14215] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3017'.
[  219.630454][T14220] netlink: 'syz.1.3020': attribute type 1 has an invalid length.
[  219.849865][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3025'.
[  219.888322][T14242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3027'.
[  220.069460][T14259] IPv6: Can't replace route, no match found
[  220.144242][T14263] x_tables: duplicate underflow at hook 1
[  220.193812][   T33] audit: type=1800 audit(1753657917.933:5): pid=14267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3037" name="x000000000000000c00000000000000000000014" dev="tmpfs" ino=5144 res=0 errno=0
[  220.205662][   T33] audit: type=1804 audit(1753657917.943:6): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3037" name="/newroot/1003/x000000000000000c00000000000000000000014" dev="tmpfs" ino=5144 res=1 errno=0
[  220.339833][T14279] netlink: 'syz.0.3039': attribute type 12 has an invalid length.
[  220.345624][T14279] netlink: 'syz.0.3039': attribute type 14 has an invalid length.
[  220.657538][T14301] netlink: 'syz.1.3044': attribute type 1 has an invalid length.
[  220.734549][T14305] openvswitch: netlink: IP tunnel TTL not specified.
[  221.074550][T14335] x_tables: duplicate underflow at hook 1
[  221.079644][T14336] sctp: [Deprecated]: syz.1.3059 (pid 14336) Use of int in max_burst socket option deprecated.
[  221.079644][T14336] Use struct sctp_assoc_value instead
[  221.249002][T14343] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.258245][T14343] tipc: Resetting bearer <eth:syzkaller0>
[  221.404434][   T33] audit: type=1800 audit(1753657919.143:7): pid=14351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3066" name=14 dev="tmpfs" ino=5613 res=0 errno=0
[  221.410351][   T33] audit: type=1800 audit(1753657919.143:8): pid=14351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3066" name=14 dev="tmpfs" ino=5613 res=0 errno=0
[  221.508064][T14362] ip6_vti0: Master is either lo or non-ether device
[  221.740614][T14374] netlink: 'syz.1.3075': attribute type 1 has an invalid length.
[  221.812773][T14376] bond11: (slave bridge10): making interface the new active one
[  221.818431][T14376] bond11: (slave bridge10): Enslaving as an active interface with an up link
[  222.077503][T14396] x_tables: duplicate underflow at hook 1
[  222.217573][T14406] lo speed is unknown, defaulting to 1000
[  222.299789][T14416] DL<Y: entered allmulticast mode
[  222.304038][T14416] tunl0: entered allmulticast mode
[  222.306800][T14416] gre0: entered allmulticast mode
[  222.309471][T14416] erspan0: entered allmulticast mode
[  222.312104][T14416] ip_vti0: entered allmulticast mode
[  222.314957][T14416] ip6_vti0: entered allmulticast mode
[  222.319122][T14416] sit0: entered allmulticast mode
[  222.321325][T14416] ip6tnl0: entered allmulticast mode
[  222.330171][T14416] ip6gre0: entered allmulticast mode
[  222.332673][T14416] syz_tun: entered allmulticast mode
[  222.334954][T14416] ip6gretap0: entered allmulticast mode
[  222.349486][T14416] bridge0: entered allmulticast mode
[  222.352756][T14416] vcan0: entered allmulticast mode
[  222.355185][T14416] bond0: entered allmulticast mode
[  222.360028][T14416] team0: entered allmulticast mode
[  222.364319][T14416] dummy0: entered allmulticast mode
[  222.366993][T14416] nlmon0: entered allmulticast mode
[  222.369370][T14416] caif0: entered allmulticast mode
[  222.371672][T14416] batadv0: entered allmulticast mode
[  222.377870][T14416] vxcan0: entered allmulticast mode
[  222.380210][T14416] vxcan1: entered allmulticast mode
[  222.382930][T14416] veth0: entered allmulticast mode
[  222.385419][T14416] veth1: entered allmulticast mode
[  222.387792][T14416] wg0: entered allmulticast mode
[  222.390057][T14416] wg1: entered allmulticast mode
[  222.392471][T14416] wg2: left promiscuous mode
[  222.394222][T14416] veth0_to_bridge: entered allmulticast mode
[  222.396286][T14416] veth1_to_bridge: entered allmulticast mode
[  222.400738][T14416] bridge_slave_1: entered allmulticast mode
[  222.403472][T14416] veth0_to_bond: entered allmulticast mode
[  222.406024][T14416] bond_slave_0: entered allmulticast mode
[  222.408453][T14416] veth1_to_bond: entered allmulticast mode
[  222.410991][T14416] bond_slave_1: entered allmulticast mode
[  222.413788][T14416] veth0_to_team: left promiscuous mode
[  222.416219][T14416] team_slave_0: entered allmulticast mode
[  222.418711][T14416] veth1_to_team: entered allmulticast mode
[  222.421214][T14416] team_slave_1: entered allmulticast mode
[  222.423963][T14416] veth0_to_batadv: entered allmulticast mode
[  222.426544][T14416] batadv_slave_0: entered allmulticast mode
[  222.429272][T14416] veth1_to_batadv: entered allmulticast mode
[  222.432037][T14416] batadv_slave_1: entered allmulticast mode
[  222.434650][T14416] xfrm0: entered allmulticast mode
[  222.436950][T14416] veth0_to_hsr: entered allmulticast mode
[  222.439530][T14416] veth1_to_hsr: entered allmulticast mode
[  222.446269][T14416] veth1_virt_wifi: entered allmulticast mode
[  222.450210][T14416] veth0_virt_wifi: entered allmulticast mode
[  222.453250][T14416] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  222.456344][T14416] veth1_vlan: entered allmulticast mode
[  222.458774][T14416] veth0_vlan: entered allmulticast mode
[  222.461119][T14416] vlan0: left promiscuous mode
[  222.463372][T14416] vlan0: entered allmulticast mode
[  222.465629][T14416] vlan1: entered allmulticast mode
[  222.467827][T14416] macvlan0: entered allmulticast mode
[  222.470182][T14416] macvlan1: entered allmulticast mode
[  222.472559][T14416] ipvlan0: entered allmulticast mode
[  222.475119][T14416] ipvlan1: entered allmulticast mode
[  222.477489][T14416] geneve0: entered allmulticast mode
[  222.479878][T14416] geneve1: entered allmulticast mode
[  222.482301][T14416] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  222.485405][T14416] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  222.488561][T14416] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  222.491714][T14416] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  222.494927][T14416] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  222.498047][T14416] bond1: entered allmulticast mode
[  222.500199][T14416] bridge1: entered allmulticast mode
[  222.502665][T14416] geneve2: left promiscuous mode
[  222.504696][T14416] geneve2: entered allmulticast mode
[  222.506974][T14416] bond2: entered allmulticast mode
[  222.509100][T14416] bridge2: entered allmulticast mode
[  222.511588][T14416] bond3: entered allmulticast mode
[  222.513860][T14416] bridge3: entered allmulticast mode
[  222.516394][T14416] ;: entered allmulticast mode
[  222.518658][T14416] mac80211_hwsim hwsim9 wlan2: entered allmulticast mode
[  222.521568][T14416] macvlan2: entered allmulticast mode
[  222.524010][T14416] bond4: entered allmulticast mode
[  222.526162][T14416] bridge4: entered allmulticast mode
[  222.528590][T14416] bond5: entered allmulticast mode
[  222.530723][T14416] gretap0: entered allmulticast mode
[  222.533378][T14416] gretap0: left promiscuous mode
[  222.535575][T14416] bond6: entered allmulticast mode
[  222.537737][T14416] bridge5: entered allmulticast mode
[  222.540172][T14416] bridge6: entered allmulticast mode
[  222.542574][T14416] veth2: entered allmulticast mode
[  222.544904][T14416] veth3: entered allmulticast mode
[  222.547202][T14416] syztnl0: entered allmulticast mode
[  222.549552][T14416] veth4: entered allmulticast mode
[  222.551993][T14416] veth5: left promiscuous mode
[  222.554023][T14416] veth5: entered allmulticast mode
[  222.556332][T14416] mac80211_hwsim hwsim11 wlan3: entered allmulticast mode
[  222.560065][T14416] macsec1: entered allmulticast mode
[  222.564329][T14416] syztnl1: entered allmulticast mode
[  222.567000][T14416] bridge7: entered allmulticast mode
[  222.569409][T14416] bond7: entered allmulticast mode
[  222.571590][T14416] bridge8: entered allmulticast mode
[  222.578570][T14416] bond8: entered allmulticast mode
[  222.580942][T14416] bond9: entered allmulticast mode
[  222.583152][T14416] bridge9: entered allmulticast mode
[  222.588723][T14416] ip6tnl1: entered allmulticast mode
[  222.591123][T14416] veth1_to_hsr.3: entered allmulticast mode
[  222.595865][T14416] bridge10: entered allmulticast mode
[  222.600025][T14416] bridge11: entered allmulticast mode
[  222.617098][T14430] netlink: 'syz.1.3094': attribute type 1 has an invalid length.
[  222.623542][T14430] __nla_validate_parse: 7 callbacks suppressed
[  222.623554][T14430] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3094'.
[  222.785599][T14439] netlink: 'syz.2.3098': attribute type 10 has an invalid length.
[  222.799600][T14439] bridge0: left allmulticast mode
[  222.812788][T14439] bridge0: entered allmulticast mode
[  222.814781][T14439] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  222.916560][T14449] lo speed is unknown, defaulting to 1000
[  223.127219][T14463] x_tables: duplicate underflow at hook 3
[  223.262923][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3109'.
[  223.273967][T14474] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  223.277455][T14474] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  223.280903][T14474] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  223.284662][T14474] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.290087][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3109'.
[  223.311446][T14476] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  223.406464][T14481] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3108'.
[  223.595522][T14492] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  223.874137][T14503] Cannot find add_set index 2 as target
[  224.047908][T14512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3120'.
[  224.160044][T14518] x_tables: duplicate underflow at hook 1
[  224.326833][T14523] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  224.516606][T14543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3128'.
[  224.632300][T14550] netlink: 'syz.2.3132': attribute type 1 has an invalid length.
[  224.659508][T14550] bond10: (slave bridge12): making interface the new active one
[  224.663484][T14550] bond10: (slave bridge12): Enslaving as an active interface with an up link
[  224.696560][T14553] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3133'.
[  224.781035][T14559] netlink: 'syz.2.3135': attribute type 1 has an invalid length.
[  224.786964][T14559] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3135'.
[  224.790537][T14559] netlink: 'syz.2.3135': attribute type 2 has an invalid length.
[  224.793966][T14559] netlink: 'syz.2.3135': attribute type 1 has an invalid length.
[  224.798912][T14560] netlink: 'syz.2.3135': attribute type 1 has an invalid length.
[  224.801449][T14560] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3135'.
[  224.804871][T14560] netlink: 'syz.2.3135': attribute type 2 has an invalid length.
[  224.807912][T14560] netlink: 'syz.2.3135': attribute type 1 has an invalid length.
[  224.956778][T14568] netlink: 'syz.2.3138': attribute type 1 has an invalid length.
[  224.983983][T14568] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  224.990193][ T5857] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  224.998244][T14568] 8021q: adding VLAN 0 to HW filter on device bond11
[  225.015090][T14568] veth7: entered promiscuous mode
[  225.019560][T14568] bond11: (slave veth7): Enslaving as a backup interface with a down link
[  225.027757][T14568] bond0: (slave bridge0): Releasing backup interface
[  225.030764][T14568] bridge0: left allmulticast mode
[  225.038834][T14568] bond1: (slave bridge1): Releasing active interface
[  225.043104][T14568] bond2: (slave bridge2): Releasing active interface
[  225.047165][T14568] bond3: (slave bridge3): Releasing active interface
[  225.050898][T14568] bond4: (slave bridge4): Releasing active interface
[  225.054674][T14568] bond5: (slave gretap0): Releasing active interface
[  225.059656][T14568] bond6: (slave bridge5): Releasing active interface
[  225.065788][T14568] bond7: (slave bridge8): Releasing active interface
[  225.070914][T14568] bond9: (slave bridge9): Releasing active interface
[  225.084444][T14568] bond10: (slave bridge12): Releasing active interface
[  225.094824][T14568] bond11: (slave ip6gretap1): Removing an active aggregator
[  225.098741][T14568] bond11: (slave ip6gretap1): Releasing backup interface
[  225.101034][T14568] bond11: (slave ip6gretap1): the permanent HWaddr of slave - 72:20:e9:07:cf:11 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  225.111482][T14568] bond11: (slave veth7): Releasing backup interface
[  225.281233][T14580] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3142'.
[  225.566605][T14602] erspan0: left allmulticast mode
[  225.593777][T14602] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  225.770160][T14632] Cannot find add_set index 2 as target
[  225.970336][T14652] netlink: 'syz.2.3165': attribute type 3 has an invalid length.
[  226.220733][T14680] openvswitch: netlink: IP tunnel TTL not specified.
[  226.238642][T14682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.241235][T14682] syzkaller0: entered promiscuous mode
[  226.244443][T14682] syzkaller0: entered allmulticast mode
[  226.249690][T14682] tipc: Resetting bearer <eth:syzkaller0>
[  226.254012][T14681] tipc: Resetting bearer <eth:syzkaller0>
[  226.267543][T14681] tipc: Disabling bearer <eth:syzkaller0>
[  226.305830][T14687] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002
[  226.984560][T14732] 0{X: entered promiscuous mode
[  226.986263][T14732] 0{X: left allmulticast mode
[  227.298438][T14758] veth7: entered promiscuous mode
[  227.414538][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  227.486448][T14769] x_tables: duplicate underflow at hook 1
[  227.934668][T14787] vlan2: entered promiscuous mode
[  227.936700][T14787] bridge0: entered promiscuous mode
[  227.938850][T14787] vlan2: entered allmulticast mode
[  227.977830][T14788] __nla_validate_parse: 76 callbacks suppressed
[  227.977849][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'.
[  228.213392][T14795] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.283359][T14808] syzkaller1: entered promiscuous mode
[  228.285184][T14808] syzkaller1: entered allmulticast mode
[  228.362908][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'.
[  228.366474][T14810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3219'.
[  228.485175][T14827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.854933][T14845] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3224'.
[  228.914932][T14847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.918496][T14847] syzkaller0: entered promiscuous mode
[  228.920722][T14847] syzkaller0: entered allmulticast mode
[  228.939292][T14847] tipc: Resetting bearer <eth:syzkaller0>
[  228.951641][T14846] tipc: Resetting bearer <eth:syzkaller0>
[  228.965610][T14846] tipc: Disabling bearer <eth:syzkaller0>
[  229.229622][T14862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3231'.
[  229.410357][T14877] x_tables: duplicate underflow at hook 1
[  229.436167][T14875] netlink: 'syz.2.3235': attribute type 12 has an invalid length.
[  229.504324][T14883] Cannot find add_set index 65279 as target
[  229.547221][T14887] x_tables: duplicate underflow at hook 1
[  229.570982][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'.
[  229.650526][T14892] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3242'.
[  229.793460][T14901] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3245'.
[  230.174394][T14922] x_tables: duplicate underflow at hook 3
[  230.231389][T14926] netlink: 'syz.0.3253': attribute type 4 has an invalid length.
[  230.239136][T14926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3253'.
[  230.248952][T14928] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3254'.
[  230.267758][T14926] netlink: 'syz.0.3253': attribute type 21 has an invalid length.
[  230.271393][T14928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.278815][T14927] tipc: Disabling bearer <eth:syzkaller0>
[  230.416817][T14936] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  230.420530][T14936] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  230.818121][T14963] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  230.820744][T14962] openvswitch: netlink: IP tunnel TTL not specified.
[  231.110454][T14980] Cannot find add_set index 65279 as target
[  231.359281][T14995] wg1: left promiscuous mode
[  231.361149][T14995] wg1: left allmulticast mode
[  231.374299][T14995] batadv_slave_1: left promiscuous mode
[  231.383261][T14995] 0: left allmulticast mode
[  231.384686][T14995] hsr_slave_0: left allmulticast mode
[  231.386304][T14995] hsr_slave_1: left allmulticast mode
[  231.426807][T14995] ip6tnl1: left promiscuous mode
[  231.429004][T14995] ip6tnl1: left allmulticast mode
[  231.459291][T14995] veth7: left promiscuous mode
[  231.477296][T15000] syzkaller0: left promiscuous mode
[  231.572815][ T5220] Bluetooth: hci2: command 0x0406 tx timeout
[  231.601672][T15016] netlink: 'syz.0.3286': attribute type 20 has an invalid length.
[  231.668789][T15026] x_tables: duplicate underflow at hook 1
[  231.704909][T15029] netlink: 'syz.2.3290': attribute type 3 has an invalid length.
[  231.897255][T15034] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  231.976724][T15048] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004
[  232.819752][T15064] netlink: 'syz.2.3301': attribute type 8 has an invalid length.
[  232.867891][T15066] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  232.877804][T15068] xt_CT: You must specify a L4 protocol and not use inversions on it
[  233.091038][T15084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.103727][T15079] syzkaller0: entered promiscuous mode
[  233.105465][T15079] syzkaller0: entered allmulticast mode
[  233.129392][T15079] tipc: Resetting bearer <eth:syzkaller0>
[  233.145437][T15078] tipc: Resetting bearer <eth:syzkaller0>
[  233.161009][T15078] tipc: Disabling bearer <eth:syzkaller0>
[  233.179043][T15089] __nla_validate_parse: 11 callbacks suppressed
[  233.179063][T15089] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3310'.
[  233.439627][T15101] lo speed is unknown, defaulting to 1000
[  234.649638][T15144] lo speed is unknown, defaulting to 1000
[  235.019553][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3333'.
[  235.095550][T15156] netlink: 'syz.1.3333': attribute type 1 has an invalid length.
[  235.097997][T15156] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3333'.
[  235.249124][T15171] batadv_slave_1: entered promiscuous mode
[  235.251575][T15171] batadv_slave_1: left allmulticast mode
[  235.260709][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3337'.
[  235.360685][T15182] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3342'.
[  235.375646][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3337'.
[  235.438416][T15185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3342'.
[  235.788032][T15210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3350'.
[  235.788544][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3350'.
[  235.854281][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3350'.
[  235.965151][T15216] Cannot find add_set index 65279 as target
[  236.397060][T15241] openvswitch: netlink: IP tunnel TTL not specified.
[  236.546162][T15248] netlink: 'syz.0.3366': attribute type 1 has an invalid length.
[  236.595470][T15255] Cannot find add_set index 2 as target
[  237.178640][T15295] Cannot find add_set index 2 as target
[  237.196254][T15297] netlink: 'syz.2.3379': attribute type 20 has an invalid length.
[  237.350845][T15309] x_tables: duplicate underflow at hook 3
[  238.350028][T15366] syzkaller0: entered promiscuous mode
[  238.416775][T15370] Cannot find add_set index 2 as target
[  238.464769][T15376] __nla_validate_parse: 70 callbacks suppressed
[  238.464782][T15376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3412'.
[  239.179382][T15400] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3422'.
[  239.224931][T15402] openvswitch: netlink: IP tunnel TTL not specified.
[  239.475047][T15412] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3428'.
[  239.525869][T15419] syzkaller1: entered promiscuous mode
[  239.528605][T15419] syzkaller1: entered allmulticast mode
[  239.536298][T15419] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3430'.
[  239.552595][T15419] Cannot find add_set index 2 as target
[  239.640460][T15429] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3433'.
[  239.645303][T15430] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3433'.
[  239.843606][T15447] netlink: zone id is out of range
[  239.849496][T15448] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3438'.
[  239.857648][T15447] netlink: zone id is out of range
[  239.860764][T15447] netlink: zone id is out of range
[  239.862968][T15447] netlink: zone id is out of range
[  239.864759][T15447] netlink: zone id is out of range
[  239.866868][T15447] netlink: zone id is out of range
[  239.869268][T15447] netlink: zone id is out of range
[  239.874873][T15447] netlink: zone id is out of range
[  240.080927][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3446'.
[  240.169988][T15473] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  240.248350][T15485] "syz.2.3452" (15485) uses obsolete ecb(arc4) skcipher
[  240.646328][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'.
[  240.655983][T15508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3460'.
[  241.087134][T15539] veth0_to_team: entered promiscuous mode
[  241.089561][T15539] veth0_to_team: entered allmulticast mode
[  241.198145][T15551] Cannot find add_set index 65279 as target
[  241.245700][T15559] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  241.540720][T15587] Cannot find add_set index 2 as target
[  241.615987][T15593] netlink: 'syz.2.3488': attribute type 10 has an invalid length.
[  241.619497][T15593] team0: left allmulticast mode
[  241.621574][T15593] team0: Cannot enslave team device to itself
[  241.678677][T15595] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  241.888557][T15617] netlink: 'syz.2.3496': attribute type 4 has an invalid length.
[  241.935863][T15621] netlink: 'syz.1.3499': attribute type 1 has an invalid length.
[  241.938818][T15622] netlink: 'syz.1.3499': attribute type 1 has an invalid length.
[  241.978060][T15625] net_ratelimit: 6 callbacks suppressed
[  241.978077][T15625] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  241.986395][T15628] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  241.990002][T15628] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  241.995229][T15625] Cannot find add_set index 2 as target
[  242.059261][T15636] Cannot find add_set index 2 as target
[  242.887831][T15701] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  243.595695][T15765] __nla_validate_parse: 18 callbacks suppressed
[  243.595713][T15765] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3548'.
[  243.634445][T15767] netlink: 'syz.2.3550': attribute type 1 has an invalid length.
[  243.640863][T15767] netlink: 'syz.2.3550': attribute type 10 has an invalid length.
[  243.649040][T15767] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3550'.
[  243.719390][T15775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.722721][T15775] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  243.725340][T15775] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  243.735456][T15775] tipc: Resetting bearer <eth:syzkaller0>
[  243.794430][T15784] Cannot find add_set index 2 as target
[  243.872142][T15796] x_tables: duplicate underflow at hook 1
[  243.876409][T15797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.884376][T15797] syzkaller0: entered promiscuous mode
[  243.886592][T15797] syzkaller0: entered allmulticast mode
[  243.906363][T15787] tipc: Resetting bearer <eth:syzkaller0>
[  243.910968][T15785] tipc: Resetting bearer <eth:syzkaller0>
[  243.926282][T15785] tipc: Disabling bearer <eth:syzkaller0>
[  243.933302][T15801] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.163137][T15820] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  244.356906][T15842] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3574'.
[  244.377817][T15845] x_tables: duplicate underflow at hook 3
[  244.455029][T15850] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.578375][T15860] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  244.686431][T15865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3583'.
[  244.724703][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3585'.
[  244.733765][T15869] gtp0: entered promiscuous mode
[  244.735434][T15869] gtp0: entered allmulticast mode
[  244.744574][T15869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3585'.
[  244.980024][T15886] openvswitch: netlink: IP tunnel TTL not specified.
[  245.064647][T15892] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  245.074715][T15892] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3595'.
[  245.953438][T15903] netlink: 'syz.2.3597': attribute type 4 has an invalid length.
[  245.956942][T15903] netlink: 'syz.2.3597': attribute type 4 has an invalid length.
[  246.101434][T15912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.105701][T15912] syzkaller0: entered promiscuous mode
[  246.109656][T15912] syzkaller0: entered allmulticast mode
[  246.110982][T15914] Cannot find set identified by id 0 to match
[  246.118018][T15912] tipc: Resetting bearer <eth:syzkaller0>
[  246.123151][T15911] tipc: Resetting bearer <eth:syzkaller0>
[  246.140361][T15911] tipc: Disabling bearer <eth:syzkaller0>
[  246.249631][T15926] ipvlan2: entered promiscuous mode
[  246.251892][T15926] bridge0: port 1(ipvlan2) entered blocking state
[  246.254951][T15926] bridge0: port 1(ipvlan2) entered disabled state
[  246.257843][T15926] ipvlan2: entered allmulticast mode
[  246.261360][T15926] bridge0: entered allmulticast mode
[  246.265821][T15926] ipvlan2: left allmulticast mode
[  246.267382][T15926] bridge0: left allmulticast mode
[  246.297226][T15930] Cannot find add_set index 2 as target
[  246.423921][T15940] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3606'.
[  246.429273][T15941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3607'.
[  246.600269][T15951] lo speed is unknown, defaulting to 1000
[  246.847482][T15976] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  246.859003][T15974] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.945098][T15983] netlink: 'syz.1.3625': attribute type 1 has an invalid length.
[  246.950636][T15983] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  246.965952][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3627'.
[  247.104348][T16002] netlink: 'syz.1.3631': attribute type 1 has an invalid length.
[  247.503682][T16035] x_tables: duplicate underflow at hook 1
[  247.545680][T16042] Cannot find add_set index 65279 as target
[  248.380981][T16059] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.601673][T16069] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.840360][T16087] Cannot find add_set index 2 as target
[  248.993814][T16106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  249.076323][T16111] x_tables: duplicate underflow at hook 1
[  249.190258][T16115] __nla_validate_parse: 7 callbacks suppressed
[  249.190271][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'.
[  249.296133][T16125] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  249.329767][T16129] Cannot find add_set index 2 as target
[  249.552884][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3682'.
[  249.555800][T16149] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3682'.
[  249.558993][T16150] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3682'.
[  249.667539][T16162] Cannot find add_set index 2 as target
[  249.704310][T16166] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3690'.
[  249.714868][T16168] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3688'.
[  249.797252][T16176] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3693'.
[  249.813368][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3693'.
[  249.882570][T16186] x_tables: duplicate underflow at hook 1
[  249.886755][T16185] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.036944][T16194] delete_channel: no stack
[  250.237223][T16219] ip_vti0: left allmulticast mode
[  250.239154][T16219] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3709'.
[  250.246274][T16219] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  250.259460][T16219] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  250.561207][T16254] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3725'.
[  250.752602][T16257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  250.755553][T16258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  251.086512][T16301] netlink: 'syz.1.3737': attribute type 11 has an invalid length.
[  251.089138][T16301] netlink: 'syz.1.3737': attribute type 11 has an invalid length.
[  251.217517][T16323] openvswitch: netlink: IP tunnel TTL not specified.
[  251.225963][T16326] Cannot find add_set index 65279 as target
[  251.320408][T16340] x_tables: duplicate underflow at hook 3
[  251.330167][T16338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.339026][T16338] syzkaller0: entered promiscuous mode
[  251.340859][T16338] syzkaller0: entered allmulticast mode
[  251.377611][T16338] tipc: Resetting bearer <eth:syzkaller0>
[  251.427926][T16337] tipc: Resetting bearer <eth:syzkaller0>
[  251.445198][T16337] tipc: Disabling bearer <eth:syzkaller0>
[  251.668265][T16372] nbd: must specify a device to reconfigure
[  251.941065][T16399] netlink: 'syz.1.3766': attribute type 9 has an invalid length.
[  252.071595][T16407] 8021q: VLANs not supported on caif0
[  252.124737][T16409] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  252.274444][T16418] x_tables: duplicate underflow at hook 3
[  252.384943][T16439] tipc: Bearer <eth:team_slave_1>: already 2 bearers with priority 10
[  252.389147][T16439] tipc: Bearer <eth:team_slave_1>: trying with adjusted priority
[  252.394554][T16439] tipc: Enabling of bearer <eth:team_slave_1> rejected, max 3 bearers permitted
[  252.434132][T16447] trusted_key: syz.2.3787 sent an empty control message without MSG_MORE.
[  252.497031][T16458] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  252.958985][T16506] x_tables: duplicate underflow at hook 1
[  252.997038][T16509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.999766][T16509] syzkaller0: entered promiscuous mode
[  253.002631][T16509] syzkaller0: entered allmulticast mode
[  253.043422][T16509] tipc: Resetting bearer <eth:syzkaller0>
[  253.054228][T16509] openvswitch: netlink: VXLAN extension message has 5 unknown bytes.
[  253.058468][T16508] tipc: Resetting bearer <eth:syzkaller0>
[  253.081594][T16508] tipc: Disabling bearer <eth:syzkaller0>
[  253.124658][T16514] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  253.127876][T16514] team0: Device ipvlan0 is already an upper device of the team interface
[  253.175988][T16519] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  253.178383][T16519] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  253.197993][T16519] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  253.266543][T16527] x_tables: duplicate underflow at hook 3
[  253.326353][T16531] netlink: 'syz.0.3820': attribute type 1 has an invalid length.
[  253.928959][T16572] x_tables: duplicate underflow at hook 1
[  254.183537][T16586] netlink: 'syz.0.3839': attribute type 23 has an invalid length.
[  254.240110][T16587] __nla_validate_parse: 45 callbacks suppressed
[  254.240127][T16587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3839'.
[  254.546313][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'.
[  254.553570][T16597] netlink: 'syz.1.3843': attribute type 1 has an invalid length.
[  254.556681][T16597] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3843'.
[  254.798963][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3850'.
[  254.820362][T16623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3850'.
[  254.823972][T16623] netlink: 'syz.1.3850': attribute type 4 has an invalid length.
[  254.829909][T16623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3850'.
[  254.834872][T16623] unsupported nlmsg_type 40
[  254.900383][T16627] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  254.944672][T16629] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.087033][T16640] x_tables: duplicate underflow at hook 1
[  255.236564][T16651] x_tables: duplicate underflow at hook 1
[  255.239037][T16652] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3863'.
[  255.257508][T16652] 1: renamed from 70
[  255.266220][T16652] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  255.270202][T16652] 1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  255.275555][T16652] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check.
[  255.502558][T16672] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  255.549412][T16677] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3870'.
[  255.564407][T16677] netlink: 'syz.2.3870': attribute type 29 has an invalid length.
[  255.980370][T16721] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  256.350374][T16753] Cannot find add_set index 2 as target
[  256.564712][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3909'.
[  256.624702][T16779] Cannot find add_set index 65279 as target
[  257.166762][T16798] x_tables: duplicate underflow at hook 3
[  257.219395][T16805] pimreg: entered allmulticast mode
[  257.225434][T16805] pimreg: left allmulticast mode
[  257.599963][T16831] netlink: 'syz.2.3932': attribute type 10 has an invalid length.
[  257.706520][T16846] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  257.821345][T16856] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  258.079223][T16878] x_tables: duplicate underflow at hook 3
[  258.621276][T16920] netlink: 4516 bytes leftover after parsing attributes in process `syz.2.3963'.
[  258.664971][T16924] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  259.044912][T16952] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  259.051156][T16952] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  259.059028][T16952] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  259.476994][T16978] __nla_validate_parse: 2 callbacks suppressed
[  259.477006][T16978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3984'.
[  259.509247][T16981] Cannot find add_set index 65279 as target
[  259.540434][T16983] xt_l2tp: missing protocol rule (udp|l2tpip)
[  259.676651][T17002] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3995'.
[  259.681505][T17002] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  259.686253][T17002] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  259.688599][T17002] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  259.716830][T17004] bond0: Unable to set up delay as MII monitoring is disabled
[  259.801423][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3999'.
[  259.870821][T17025] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4005'.
[  259.872905][T17026] x_tables: duplicate underflow at hook 3
[  259.889650][T17025] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  260.068880][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4016'.
[  260.078077][T17052] openvswitch: netlink: IP tunnel TTL not specified.
[  260.129178][T17058] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  260.155522][T17054] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4018'.
[  260.162111][T17054] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.168921][T17066] x_tables: duplicate underflow at hook 1
[  260.250410][T17077] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4026'.
[  260.315086][T17087] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.338371][T17087] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4028'.
[  260.478913][T17104] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4030'.
[  260.515335][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4033'.
[  260.668275][T17110] xt_l2tp: missing protocol rule (udp|l2tpip)
[  260.789060][T17131] netlink: 'syz.2.4041': attribute type 21 has an invalid length.
[  261.715074][T17189] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  262.788837][T17278] netlink: 'syz.2.4090': attribute type 11 has an invalid length.
[  262.896095][T17285] x_tables: duplicate underflow at hook 3
[  263.477372][T17332] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  263.546816][T17336] x_tables: duplicate underflow at hook 1
[  263.677925][T17343] Cannot find add_set index 65279 as target
[  263.960999][T17354] netlink: 'syz.2.4120': attribute type 11 has an invalid length.
[  263.973795][T17354] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  263.976593][T17354] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  263.979242][T17354] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  263.982387][T17354] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  263.987278][T17354] netlink: 'syz.2.4120': attribute type 11 has an invalid length.
[  264.134825][T17365] x_tables: duplicate underflow at hook 3
[  264.195345][T17369] Cannot find add_set index 2 as target
[  264.328634][T17380] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  264.511568][T17391] netlink: 'syz.0.4136': attribute type 29 has an invalid length.
[  264.519214][T17391] __nla_validate_parse: 10 callbacks suppressed
[  264.519230][T17391] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4136'.
[  264.586060][T17396] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  264.588997][T17396] tipc: Bearer <udp:s>: trying with adjusted priority
[  264.591654][T17396] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  264.600924][T17396] SET target dimension over the limit!
[  264.695064][T17403] openvswitch: netlink: IP tunnel TTL not specified.
[  264.930017][T17410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  265.027349][T17441] netlink: 'syz.0.4153': attribute type 11 has an invalid length.
[  265.110424][T17448] xt_l2tp: invalid flags combination: 8
[  265.130085][T17451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  265.150283][T17451] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.200587][T17453] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4157'.
[  265.265191][T17459] xt_l2tp: missing protocol rule (udp|l2tpip)
[  265.557352][T17478] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.648449][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4168'.
[  265.664780][T17484] syzkaller1: entered promiscuous mode
[  265.667048][T17484] syzkaller1: entered allmulticast mode
[  266.015242][T17503] netlink: 'syz.2.4175': attribute type 1 has an invalid length.
[  266.021558][T17504] openvswitch: netlink: IP tunnel TTL not specified.
[  266.042995][T17503] bond13: entered promiscuous mode
[  266.045094][T17503] bond13: entered allmulticast mode
[  266.048805][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4175'.
[  266.059733][T17503] bridge15: the hash_elasticity option has been deprecated and is always 16
[  266.066454][T17503] bond13: (slave bridge15): making interface the new active one
[  266.069358][T17503] bridge15: entered promiscuous mode
[  266.071560][T17503] bridge15: entered allmulticast mode
[  266.074636][T17503] bond13: (slave bridge15): Enslaving as an active interface with an up link
[  266.083324][T17503] netlink: 'syz.2.4175': attribute type 29 has an invalid length.
[  266.158208][T17509] pim6reg: entered allmulticast mode
[  266.175209][T17509] pim6reg: left allmulticast mode
[  266.225524][T17513] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  266.480045][T17535] lo speed is unknown, defaulting to 1000
[  266.634283][T17548] netlink: 'syz.1.4190': attribute type 15 has an invalid length.
[  266.820025][T17566] SET target dimension over the limit!
[  266.823440][T17564] Cannot find add_set index 2 as target
[  266.994540][T17579] netlink: 'syz.0.4199': attribute type 1 has an invalid length.
[  267.014356][T17579] 8021q: adding VLAN 0 to HW filter on device bond5
[  267.027523][T17579] bond5: (slave gretap1): making interface the new active one
[  267.030539][T17579] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  267.845643][T17630] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4222'.
[  267.870700][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4223'.
[  267.894409][T17632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4223'.
[  267.941655][T17632] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4223'.
[  268.094635][T17654] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  268.116621][   T56] block nbd2: Receive control failed (result -104)
[  268.187234][T17660] openvswitch: netlink: IP tunnel dst address not specified
[  268.230061][T17660] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4232'.
[  268.461072][T17683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4241'.
[  268.506837][T17687] openvswitch: netlink: IP tunnel TTL not specified.
[  268.556900][T17695] x_tables: duplicate underflow at hook 1
[  268.918182][T17711] Cannot find add_set index 2 as target
[  268.988741][T17712] pim6reg: entered allmulticast mode
[  268.993872][T17712] pim6reg: left allmulticast mode
[  269.309849][T17738] x_tables: duplicate underflow at hook 1
[  269.367142][T17743] x_tables: duplicate underflow at hook 3
[  269.928277][T17790] __nla_validate_parse: 5 callbacks suppressed
[  269.928294][T17790] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4279'.
[  270.588746][T17834] tun0: tun_chr_ioctl cmd 1074025681
[  270.897854][T17847] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  271.166530][T17869] x_tables: duplicate underflow at hook 1
[  271.251735][T17877] ipt_ECN: cannot use operation on non-tcp rule
[  271.725435][T17901] xt_CT: No such helper "snmp_trap"
[  271.899692][T17932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.930153][T17937] x_tables: duplicate underflow at hook 3
[  271.949402][T17940] x_tables: duplicate underflow at hook 1
[  272.039045][T17952] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  272.158345][T17963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4326'.
[  272.227055][T17969] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4329'.
[  272.240580][T17969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.276332][T17969] syzkaller0: entered promiscuous mode
[  272.278186][T17969] syzkaller0: entered allmulticast mode
[  272.280672][T17969] tipc: Resetting bearer <eth:syzkaller0>
[  272.292415][T17966] tipc: Resetting bearer <eth:syzkaller0>
[  272.380254][T17973] SET target dimension over the limit!
[  273.272410][ T5869] tipc: Node number set to 3259074088
[  273.458522][T17966] tipc: Disabling bearer <eth:syzkaller0>
[  273.464818][T17977] netlink: 'syz.0.4332': attribute type 4 has an invalid length.
[  273.529466][T17983] x_tables: duplicate underflow at hook 1
[  273.605013][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4335'.
[  273.778297][T18002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4341'.
[  273.798683][T18002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.867264][T18002] syzkaller0: entered promiscuous mode
[  273.869794][T18002] syzkaller0: entered allmulticast mode
[  273.873480][T18002] tipc: Resetting bearer <eth:syzkaller0>
[  273.884434][T18007] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002
[  273.889353][T18001] tipc: Resetting bearer <eth:syzkaller0>
[  274.147961][T18019] delete_channel: no stack
[  274.259429][T18027] xt_l2tp: missing protocol rule (udp|l2tpip)
[  275.311282][T18001] tipc: Disabling bearer <eth:syzkaller0>
[  275.322030][T18014] batman_adv: batadv0: Adding interface: ip6gretap1
[  275.324098][T18014] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.332198][T18014] batman_adv: batadv0: Interface activated: ip6gretap1
[  275.434433][T18046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4356'.
[  275.437693][T18046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4356'.
[  275.446374][T18047] netlink: 'syz.0.4354': attribute type 13 has an invalid length.
[  275.449347][T18047] netlink: 'syz.0.4354': attribute type 17 has an invalid length.
[  275.502017][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  275.542844][T18047] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.546458][T18047] 8021q: adding VLAN 0 to HW filter on device team0
[  275.548832][T18047] tipc: Resetting bearer <eth:team0>
[  275.550894][T18047] tipc: Resetting bearer <eth:team0>
[  275.558050][T18047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  275.564568][   T24] lo speed is unknown, defaulting to 1000
[  275.568114][   T24] syz1: Port: 1 Link ACTIVE
[  275.577913][T18057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.583431][T18057] syzkaller0: entered promiscuous mode
[  275.586214][T18057] syzkaller0: entered allmulticast mode
[  275.588479][T18047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  275.595106][T18057] tipc: Resetting bearer <eth:syzkaller0>
[  275.599184][T18047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  275.603542][T18055] tipc: Resetting bearer <eth:syzkaller0>
[  275.615192][T18055] tipc: Disabling bearer <eth:syzkaller0>
[  275.798078][T18067] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4363'.
[  275.809384][T18067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.838526][T18067] syzkaller0: entered promiscuous mode
[  275.840727][T18067] syzkaller0: entered allmulticast mode
[  275.843587][T18067] tipc: Resetting bearer <eth:syzkaller0>
[  275.849372][T18066] tipc: Resetting bearer <eth:syzkaller0>
[  276.542218][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  277.179431][T18066] tipc: Disabling bearer <eth:syzkaller0>
[  277.319446][T18084] tap0: tun_chr_ioctl cmd 35108
[  277.381176][T18084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4369'.
[  277.500559][T18095] openvswitch: netlink: IP tunnel TTL not specified.
[  277.572243][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  277.613008][T18104] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4374'.
[  277.621417][T18104] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.653896][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4375'.
[  277.669588][T18104] syzkaller0: entered promiscuous mode
[  277.672231][T18104] syzkaller0: entered allmulticast mode
[  277.675949][T18104] tipc: Resetting bearer <eth:syzkaller0>
[  277.709371][T18103] tipc: Resetting bearer <eth:syzkaller0>
[  277.818252][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4378'.
[  277.854424][T18118] netlink: 9888 bytes leftover after parsing attributes in process `syz.1.4376'.
[  277.858206][T18118] netlink: get zone limit has 4 unknown bytes
[  278.615582][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  279.108260][T18103] tipc: Disabling bearer <eth:syzkaller0>
[  279.231739][T18128] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  279.650319][T18170] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4391'.
[  279.654348][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  279.708088][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4392'.
[  280.060537][T18206] vlan0: entered allmulticast mode
[  280.062788][T18206] dummy0: entered allmulticast mode
[  280.468510][T18231] __nla_validate_parse: 1 callbacks suppressed
[  280.468522][T18231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4413'.
[  280.688130][T18245] netlink: 'syz.2.4419': attribute type 2 has an invalid length.
[  280.692104][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  280.851972][    C1] ==================================================================
[  280.854644][    C1] BUG: KFENCE: use-after-free write in rose_timer_expiry+0x22d/0x4b0
[  280.854644][    C1] 
[  280.858694][    C1] Use-after-free write at 0xffff88813652602a (in kfence-#146):
[  280.862065][    C1]  rose_timer_expiry+0x22d/0x4b0
[  280.864544][    C1]  call_timer_fn+0x17e/0x5f0
[  280.866387][    C1]  __run_timer_base+0x61a/0x860
[  280.868335][    C1]  run_timer_softirq+0xb7/0x180
[  280.870287][    C1]  handle_softirqs+0x286/0x870
[  280.872184][    C1]  __irq_exit_rcu+0xca/0x1f0
[  280.874009][    C1]  irq_exit_rcu+0x9/0x30
[  280.875678][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  280.877861][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  280.880213][    C1]  fib_rules_event+0x783/0xe30
[  280.882067][    C1]  notifier_call_chain+0x1b6/0x3e0
[  280.884073][    C1]  unregister_netdevice_many_notify+0x15d8/0x2320
[  280.886586][    C1]  vlan_device_event+0x1db4/0x1ef0
[  280.888599][    C1]  notifier_call_chain+0x1b6/0x3e0
[  280.890642][    C1]  unregister_netdevice_many_notify+0x15d8/0x2320
[  280.893166][    C1]  unregister_netdevice_queue+0x33c/0x380
[  280.895420][    C1]  __tun_detach+0xda4/0x1560
[  280.897240][    C1]  tun_chr_close+0x10a/0x1c0
[  280.899057][    C1]  __fput+0x44c/0xa70
[  280.900665][    C1]  task_work_run+0x1d4/0x260
[  280.902497][    C1]  get_signal+0x11ed/0x1340
[  280.904312][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  280.906463][    C1]  exit_to_user_mode_loop+0x75/0x110
[  280.908469][    C1]  do_syscall_64+0x2bd/0x3b0
[  280.910197][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.912517][    C1] 
[  280.913484][    C1] kfence-#146: 0xffff888136526f00-0xffff888136526fef, size=240, cache=skbuff_head_cache
[  280.913484][    C1] 
[  280.918003][    C1] allocated by task 13 on cpu 0 at 273.633289s (7.284713s ago):
[  280.920864][    C1]  __alloc_skb+0x112/0x2d0
[  280.922642][    C1]  __netdev_alloc_skb+0x108/0x970
[  280.924554][    C1]  alb_send_lp_vid+0x10d/0x510
[  280.926472][    C1]  alb_send_learning_packets+0x10d/0x2c0
[  280.928687][    C1]  bond_alb_monitor+0x3e4/0x1800
[  280.930522][    C1]  process_scheduled_works+0xae1/0x17b0
[  280.932711][    C1]  worker_thread+0x8a0/0xda0
[  280.934578][    C1]  kthread+0x711/0x8a0
[  280.936201][    C1]  ret_from_fork+0x3fc/0x770
[  280.938060][    C1]  ret_from_fork_asm+0x1a/0x30
[  280.939964][    C1] 
[  280.940938][    C1] freed by task 13 on cpu 0 at 273.633398s (7.307538s ago):
[  280.943495][    C1]  ip_tunnel_xmit+0xe76/0x2380
[  280.944951][    C1]  gre_tap_xmit+0x590/0x7a0
[  280.946416][    C1]  dev_hard_start_xmit+0x2d7/0x830
[  280.947977][    C1]  sch_direct_xmit+0x241/0x4b0
[  280.949410][    C1]  __dev_queue_xmit+0x17b6/0x3a70
[  280.950937][    C1]  alb_send_lp_vid+0x324/0x510
[  280.952424][    C1]  alb_send_learning_packets+0x10d/0x2c0
[  280.954143][    C1]  bond_alb_monitor+0x3e4/0x1800
[  280.955637][    C1]  process_scheduled_works+0xae1/0x17b0
[  280.957316][    C1]  worker_thread+0x8a0/0xda0
[  280.958697][    C1]  kthread+0x711/0x8a0
[  280.959933][    C1]  ret_from_fork+0x3fc/0x770
[  280.961361][    C1]  ret_from_fork_asm+0x1a/0x30
[  280.962853][    C1] 
[  280.963621][    C1] CPU: 1 UID: 0 PID: 18200 Comm: syz.1.4402 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  280.967520][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.970611][    C1] RIP: 0010:rose_timer_expiry+0x22d/0x4b0
[  280.972407][    C1] Code: 80 3c 28 00 74 08 4c 89 e7 e8 af 58 bf f7 4d 8b 24 24 49 83 c4 2a 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2c 02 00 00 <66> 41 ff 0c 24 4c 89 ff be 6e 00 00 00 ba ff ff ff ff b9 ff ff ff
[  280.978279][    C1] RSP: 0018:ffffc900001e0b68 EFLAGS: 00010246
[  280.980158][    C1] RAX: 0000000000000000 RBX: ffff888113e6e6f8 RCX: ffff888106941cc0
[  280.982629][    C1] RDX: 0000000000000100 RSI: ffffffff8f678df0 RDI: 0000000000000002
[  280.985072][    C1] RBP: 1ffff110227cdcbd R08: ffff888106941cc0 R09: 0000000000000004
[  280.987495][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88813652602a
[  280.989799][    C1] R13: dffffc0000000000 R14: ffff888113e6e1c0 R15: ffff888113e6e000
[  280.992187][    C1] FS:  00007fa1e10ac6c0(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  280.995069][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  280.997129][    C1] CR2: ffff88813652602a CR3: 000000011fa20000 CR4: 00000000000006f0
[  280.999667][    C1] Call Trace:
[  281.000759][    C1]  <IRQ>
[  281.001692][    C1]  call_timer_fn+0x17e/0x5f0
[  281.003127][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  281.004833][    C1]  ? call_timer_fn+0xbe/0x5f0
[  281.006340][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  281.007980][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.009587][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.011145][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  281.012919][    C1]  __run_timer_base+0x61a/0x860
[  281.014480][    C1]  ? ktime_get+0x3e/0x1f0
[  281.015847][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  281.017561][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  281.019496][    C1]  run_timer_softirq+0xb7/0x180
[  281.020940][    C1]  handle_softirqs+0x286/0x870
[  281.022423][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  281.023915][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  281.025531][    C1]  __irq_exit_rcu+0xca/0x1f0
[  281.026916][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  281.028538][    C1]  irq_exit_rcu+0x9/0x30
[  281.029849][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  281.031593][    C1]  </IRQ>
[  281.032508][    C1]  <TASK>
[  281.033442][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  281.035298][    C1] RIP: 0010:fib_rules_event+0x783/0xe30
[  281.036944][    C1] Code: f8 4d 8b 26 4d 39 f4 0f 84 4a 02 00 00 4d 8d 7c 24 10 4d 89 fd 49 c1 ed 03 41 0f b6 44 1d 00 84 c0 0f 85 41 01 00 00 41 8b 2f <48> 8b 04 24 0f b6 04 18 84 c0 48 8b 5c 24 08 0f 85 47 01 00 00 8b
[  281.042915][    C1] RSP: 0018:ffffc90002b0f380 EFLAGS: 00000246
[  281.044811][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  281.047254][    C1] RDX: ffffc9000833a000 RSI: 000000000000c6f1 RDI: 000000000000c6f2
[  281.049747][    C1] RBP: 0000000000000000 R08: ffff888106941cc0 R09: 0000000000000003
[  281.052199][    C1] R10: 000000000000000b R11: 0000000000000002 R12: ffff888029d09200
[  281.054612][    C1] R13: 1ffff110053a1242 R14: ffff888022273a80 R15: ffff888029d09210
[  281.057009][    C1]  notifier_call_chain+0x1b6/0x3e0
[  281.058618][    C1]  unregister_netdevice_many_notify+0x15d8/0x2320
[  281.060631][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  281.062710][    C1]  ? kasan_quarantine_put+0xdd/0x220
[  281.064364][    C1]  ? vlan_vid_del+0x629/0x760
[  281.065859][    C1]  vlan_device_event+0x1db4/0x1ef0
[  281.067443][    C1]  ? __pfx_phonet_device_notify+0x10/0x10
[  281.069213][    C1]  ? __pfx_vlan_device_event+0x10/0x10
[  281.070910][    C1]  ? isotp_notifier+0xa3/0x6b0
[  281.072398][    C1]  ? cgw_notifier+0xde/0x3b0
[  281.073834][    C1]  notifier_call_chain+0x1b6/0x3e0
[  281.075450][    C1]  unregister_netdevice_many_notify+0x15d8/0x2320
[  281.077451][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  281.079527][    C1]  ? __mod_timer+0xb37/0xf30
[  281.080954][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.082602][    C1]  unregister_netdevice_queue+0x33c/0x380
[  281.084391][    C1]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  281.086195][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  281.088142][    C1]  ? linkwatch_urgent_event+0x318/0x3a0
[  281.089884][    C1]  __tun_detach+0xda4/0x1560
[  281.091318][    C1]  ? __pfx_tun_chr_close+0x10/0x10
[  281.092922][    C1]  tun_chr_close+0x10a/0x1c0
[  281.094379][    C1]  __fput+0x44c/0xa70
[  281.095583][    C1]  task_work_run+0x1d4/0x260
[  281.096983][    C1]  ? __pfx_task_work_run+0x10/0x10
[  281.098567][    C1]  get_signal+0x11ed/0x1340
[  281.099970][    C1]  ? task_work_add+0x377/0x420
[  281.101460][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  281.103145][    C1]  ? __pfx___fput_deferred+0x10/0x10
[  281.104827][    C1]  ? __fget_files+0x2a/0x420
[  281.106285][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  281.108171][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  281.109911][    C1]  exit_to_user_mode_loop+0x75/0x110
[  281.111545][    C1]  do_syscall_64+0x2bd/0x3b0
[  281.112911][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.114468][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.116328][    C1]  ? exc_page_fault+0x9f/0xf0
[  281.117765][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.119589][    C1] RIP: 0033:0x7fa1e018e9a9
[  281.120982][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.126778][    C1] RSP: 002b:00007fa1e10ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  281.129407][    C1] RAX: fffffffffffffe00 RBX: 00007fa1e03b5fa0 RCX: 00007fa1e018e9a9
[  281.131836][    C1] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[  281.134276][    C1] RBP: 00007fa1e0210d69 R08: 0000000000000000 R09: 0000000000000000
[  281.136738][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.139193][    C1] R13: 0000000000000000 R14: 00007fa1e03b5fa0 R15: 00007ffe13d77c08
[  281.141644][    C1]  </TASK>
[  281.142638][    C1] ==================================================================
[  281.145026][    C1] Kernel panic - not syncing: KFENCE: panic_on_warn set ...
[  281.147759][    C1] CPU: 1 UID: 0 PID: 18200 Comm: syz.1.4402 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  281.151576][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.154678][    C1] Call Trace:
[  281.155706][    C1]  <IRQ>
[  281.156628][    C1]  dump_stack_lvl+0x99/0x250
[  281.158086][    C1]  ? __asan_memcpy+0x40/0x70
[  281.159550][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.161174][    C1]  ? __pfx__printk+0x10/0x10
[  281.162674][    C1]  panic+0x2db/0x790
[  281.163926][    C1]  ? __pfx_panic+0x10/0x10
[  281.165382][    C1]  ? _printk+0xcf/0x120
[  281.166703][    C1]  ? __pfx__printk+0x10/0x10
[  281.168149][    C1]  check_panic_on_warn+0x89/0xb0
[  281.169701][    C1]  kfence_report_error+0x748/0xa40
[  281.171304][    C1]  ? __pfx_kfence_report_error+0x10/0x10
[  281.172989][    C1]  ? rose_timer_expiry+0x22d/0x4b0
[  281.174588][    C1]  ? call_timer_fn+0x17e/0x5f0
[  281.176030][    C1]  ? __run_timer_base+0x61a/0x860
[  281.177583][    C1]  ? run_timer_softirq+0xb7/0x180
[  281.179182][    C1]  ? handle_softirqs+0x286/0x870
[  281.180773][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  281.182297][    C1]  ? irq_exit_rcu+0x9/0x30
[  281.183705][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  281.185567][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  281.187488][    C1]  ? fib_rules_event+0x783/0xe30
[  281.189042][    C1]  ? notifier_call_chain+0x1b6/0x3e0
[  281.190715][    C1]  ? unregister_netdevice_many_notify+0x15d8/0x2320
[  281.192731][    C1]  ? vlan_device_event+0x1db4/0x1ef0
[  281.194378][    C1]  ? notifier_call_chain+0x1b6/0x3e0
[  281.196036][    C1]  ? unregister_netdevice_many_notify+0x15d8/0x2320
[  281.198079][    C1]  ? unregister_netdevice_queue+0x33c/0x380
[  281.199974][    C1]  ? __tun_detach+0xda4/0x1560
[  281.201454][    C1]  ? tun_chr_close+0x10a/0x1c0
[  281.202888][    C1]  ? __fput+0x44c/0xa70
[  281.204178][    C1]  ? task_work_run+0x1d4/0x260
[  281.205716][    C1]  ? get_signal+0x11ed/0x1340
[  281.207145][    C1]  ? arch_do_signal_or_restart+0x9a/0x750
[  281.208884][    C1]  ? exit_to_user_mode_loop+0x75/0x110
[  281.210567][    C1]  ? do_syscall_64+0x2bd/0x3b0
[  281.212054][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.213914][    C1]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  281.215617][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  281.217468][    C1]  ? search_bpf_extables+0x26/0x3c0
[  281.219076][    C1]  kfence_handle_page_fault+0x358/0x4d0
[  281.220848][    C1]  page_fault_oops+0x19f/0xa10
[  281.222377][    C1]  ? stack_trace_save+0x9c/0xe0
[  281.223927][    C1]  ? __pfx_fixup_exception+0x10/0x10
[  281.225626][    C1]  ? __pfx_page_fault_oops+0x10/0x10
[  281.227273][    C1]  ? is_prefetch+0x403/0x640
[  281.228701][    C1]  ? check_path+0x21/0x40
[  281.230002][    C1]  ? __pfx_is_prefetch+0x10/0x10
[  281.231546][    C1]  ? validate_chain+0x897/0x2140
[  281.233036][    C1]  __bad_area_nosemaphore+0x11a/0x780
[  281.234716][    C1]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  281.236556][    C1]  ? spurious_kernel_fault+0x1c7/0x6b0
[  281.238156][    C1]  ? do_kern_addr_fault+0x30/0x80
[  281.239715][    C1]  exc_page_fault+0xc3/0xf0
[  281.241117][    C1]  asm_exc_page_fault+0x26/0x30
[  281.242649][    C1] RIP: 0010:rose_timer_expiry+0x22d/0x4b0
[  281.244444][    C1] Code: 80 3c 28 00 74 08 4c 89 e7 e8 af 58 bf f7 4d 8b 24 24 49 83 c4 2a 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2c 02 00 00 <66> 41 ff 0c 24 4c 89 ff be 6e 00 00 00 ba ff ff ff ff b9 ff ff ff
[  281.250346][    C1] RSP: 0018:ffffc900001e0b68 EFLAGS: 00010246
[  281.252237][    C1] RAX: 0000000000000000 RBX: ffff888113e6e6f8 RCX: ffff888106941cc0
[  281.254997][    C1] RDX: 0000000000000100 RSI: ffffffff8f678df0 RDI: 0000000000000002
[  281.258179][    C1] RBP: 1ffff110227cdcbd R08: ffff888106941cc0 R09: 0000000000000004
[  281.261263][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88813652602a
[  281.264371][    C1] R13: dffffc0000000000 R14: ffff888113e6e1c0 R15: ffff888113e6e000
[  281.267523][    C1]  ? rose_timer_expiry+0x1ea/0x4b0
[  281.269573][    C1]  call_timer_fn+0x17e/0x5f0
[  281.271454][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  281.273645][    C1]  ? call_timer_fn+0xbe/0x5f0
[  281.275544][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  281.277636][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.279729][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.281778][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  281.283935][    C1]  __run_timer_base+0x61a/0x860
[  281.285939][    C1]  ? ktime_get+0x3e/0x1f0
[  281.287681][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  281.289822][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  281.292245][    C1]  run_timer_softirq+0xb7/0x180
[  281.294180][    C1]  handle_softirqs+0x286/0x870
[  281.296092][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  281.298029][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  281.300159][    C1]  __irq_exit_rcu+0xca/0x1f0
[  281.302046][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  281.304086][    C1]  irq_exit_rcu+0x9/0x30
[  281.305832][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  281.308012][    C1]  </IRQ>
[  281.309196][    C1]  <TASK>
[  281.310417][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  281.312793][    C1] RIP: 0010:fib_rules_event+0x783/0xe30
[  281.314981][    C1] Code: f8 4d 8b 26 4d 39 f4 0f 84 4a 02 00 00 4d 8d 7c 24 10 4d 89 fd 49 c1 ed 03 41 0f b6 44 1d 00 84 c0 0f 85 41 01 00 00 41 8b 2f <48> 8b 04 24 0f b6 04 18 84 c0 48 8b 5c 24 08 0f 85 47 01 00 00 8b
[  281.322588][    C1] RSP: 0018:ffffc90002b0f380 EFLAGS: 00000246
[  281.325019][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  281.328174][    C1] RDX: ffffc9000833a000 RSI: 000000000000c6f1 RDI: 000000000000c6f2
[  281.331299][    C1] RBP: 0000000000000000 R08: ffff888106941cc0 R09: 0000000000000003
[  281.334446][    C1] R10: 000000000000000b R11: 0000000000000002 R12: ffff888029d09200
[  281.337582][    C1] R13: 1ffff110053a1242 R14: ffff888022273a80 R15: ffff888029d09210
[  281.340748][    C1]  notifier_call_chain+0x1b6/0x3e0
[  281.342830][    C1]  unregister_netdevice_many_notify+0x15d8/0x2320
[  281.345452][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  281.348189][    C1]  ? kasan_quarantine_put+0xdd/0x220
[  281.350320][    C1]  ? vlan_vid_del+0x629/0x760
[  281.352121][    C1]  vlan_device_event+0x1db4/0x1ef0
[  281.354101][    C1]  ? __pfx_phonet_device_notify+0x10/0x10
[  281.356383][    C1]  ? __pfx_vlan_device_event+0x10/0x10
[  281.358553][    C1]  ? isotp_notifier+0xa3/0x6b0
[  281.360477][    C1]  ? cgw_notifier+0xde/0x3b0
[  281.362356][    C1]  notifier_call_chain+0x1b6/0x3e0
[  281.364447][    C1]  unregister_netdevice_many_notify+0x15d8/0x2320
[  281.367013][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  281.369783][    C1]  ? __mod_timer+0xb37/0xf30
[  281.371663][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.373762][    C1]  unregister_netdevice_queue+0x33c/0x380
[  281.375992][    C1]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  281.378292][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  281.380768][    C1]  ? linkwatch_urgent_event+0x318/0x3a0
[  281.382970][    C1]  __tun_detach+0xda4/0x1560
[  281.384786][    C1]  ? __pfx_tun_chr_close+0x10/0x10
[  281.386769][    C1]  tun_chr_close+0x10a/0x1c0
[  281.388611][    C1]  __fput+0x44c/0xa70
[  281.390171][    C1]  task_work_run+0x1d4/0x260
[  281.392039][    C1]  ? __pfx_task_work_run+0x10/0x10
[  281.394081][    C1]  get_signal+0x11ed/0x1340
[  281.395930][    C1]  ? task_work_add+0x377/0x420
[  281.397866][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  281.400070][    C1]  ? __pfx___fput_deferred+0x10/0x10
[  281.402244][    C1]  ? __fget_files+0x2a/0x420
[  281.404104][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  281.406626][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  281.408822][    C1]  exit_to_user_mode_loop+0x75/0x110
[  281.410933][    C1]  do_syscall_64+0x2bd/0x3b0
[  281.412801][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.414862][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.417275][    C1]  ? exc_page_fault+0x9f/0xf0
[  281.419130][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.421451][    C1] RIP: 0033:0x7fa1e018e9a9
[  281.423241][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.430820][    C1] RSP: 002b:00007fa1e10ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  281.434120][    C1] RAX: fffffffffffffe00 RBX: 00007fa1e03b5fa0 RCX: 00007fa1e018e9a9
[  281.437269][    C1] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[  281.440382][    C1] RBP: 00007fa1e0210d69 R08: 0000000000000000 R09: 0000000000000000
[  281.443513][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.446638][    C1] R13: 0000000000000000 R14: 00007fa1e03b5fa0 R15: 00007ffe13d77c08
[  281.449763][    C1]  </TASK>
[  281.451775][    C1] Kernel Offset: disabled
[  281.453978][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:12:58  Registers:
info registers vcpu 0

CPU#0
RAX=fb0af4a57a6b1b00 RBX=ffffffff81976a48 RCX=fb0af4a57a6b1b00 RDX=0000000000000001
RSI=ffffffff8d995f7f RDI=ffffffff8be28c00 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555588e3c808 CR3=000000003f2c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=6c7585f35fba1c7a 8909b0773831f363
XMM02=32c52f19bdf4e0f1 8e9240664ba882aa XMM03=5bfa6b4805e9d1a6 e0aad79948b75e80
XMM04=8ae1017c3a44302f a0501a8eaa559aff XMM05=1d9e272b2ab85bfa 6b4805e9d1a6e0aa
XMM06=d79948b75e8032c5 2f19bdf4e0f18e92 XMM07=40664ba882aa6c75 85f35fba1c7a8909
XMM08=52511e1f2520f413 8e916a4a2bb9b8fc XMM09=0000000000000000 00007efefc611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bec60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df6590 RSP=ffffc900001dfd90
R8 =ffff888021780237 R9 =1ffff110042f0046 R10=dffffc0000000000 R11=ffffffff85461c50
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461cc7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa1e10ac6c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffff88813652602a CR3=000000011fa20000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7810a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
