last executing test programs:

2.066191876s ago: executing program 2 (id=4661):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x8010, r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettaction={0x38, 0x32, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f7d}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x20b1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24004010)
close(r2) (async)
close(r2)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000ec0))
pipe(&(0x7f00000045c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
accept4(r6, 0x0, 0x0, 0x0) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000002", @ANYRES16=0x0, @ANYBLOB="991f2abd7000ffdbdf250c000000"], 0x14}}, 0x20008010)
splice(r4, 0x0, r7, 0x0, 0x2, 0xe) (async)
splice(r4, 0x0, r7, 0x0, 0x2, 0xe)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1, 0x0, 0x0, 0x0, 0xfffe}, 0x20)
socket$inet6(0xa, 0x2, 0x0) (async)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x35}, 0x800, 0x0, 0x0, 0x1, 0x8, 0xfffc}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x35}, 0x800, 0x0, 0x0, 0x1, 0x8, 0xfffc}, 0x20)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010029de00000008000300", @ANYRES32=r11, @ANYBLOB="0a000600080211000001000010001180040006000400040004000300"], 0x38}, 0x1, 0x0, 0x0, 0x68040}, 0x4)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="0c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x20c}}, 0x0) (async)
sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="0c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x20c}}, 0x0)

1.966356424s ago: executing program 2 (id=4663):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002140)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x6}, {0x2, 0x1, 0x9}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], [0xff, 0xff, 0xffffff00, 0xffffffff], 'veth0\x00', 'ip_vti0\x00', {0xff}, {}, 0x33, 0x5e, 0x1, 0x68}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x44, 0xd0, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1)
syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @random="015a37cb9737", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @private1}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x5, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, &(0x7f0000000e00)="fd", 0x0}, 0x20)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x4c, r4, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1d, 0xc7, {[{0x2, 0x1}, {0x73, 0x6}, {0x5, 0x3}, {0x7a, 0x2}, {0xf, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x0, 0x4}, {0x8, 0x2}, {0xe8, 0x6}, {0x3, 0x7}, {0x8, 0x1}, {0x7}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x1, 0x1}], "7ecd4163b8fccf09"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

1.815995987s ago: executing program 2 (id=4665):
r0 = socket(0xa, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022100000000000014000300766c616e30000000000000000000000008000a00", @ANYBLOB="14001680100001"], 0x50}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x8000}, 0x20000000)
sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x49ae57ea648cf403)

963.632299ms ago: executing program 2 (id=4669):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0xc0, 0x110, 0xe, "3d1375d54d6b714cb556706ece97994adbbeeaa379e3fe85c3f2927be4068b6b3f94977e7c7a9233e70042263da29475dd63dd611c5c7aa3c4feb08614c220b40c7b6343444794737ba4eca7a5e11757b8fdbf33c8f1b3e64c46b9c4ef593276db2d04ee795c79c07cdefdbb9c9ab2bff29459a361f67e75553bed96cc420cc1e84189e5c7c76ed1a8eb4a8a40b3e45730c90e9c39f9ffa5eaf5bb2778f48695fd6ea5ddb6e7ecac5b"}, {0x170, 0x110, 0xe, "32ed51ae4b9a6af5125b64a4cbb2975ffb2f9b7b576cadce1cc0700af20848825f1d1a417feb6ef9e9a6920f5c701a9cc4a8041d95f2778ce5ffb36b78a5c3ed8ef49659e4d1fbf33938366328a6fee71fb64b13a1819577cb385dda052fe84b1c2400aa23d6c997cfe3a8163a28b28ae8462fed08e7dfa621094316ac55f6e0da0d33fcb00d5c92ecae61f22fdec566eaec6f7cd091505aecdfbea0f9c92b2dc93a44ae0593eb8254da5daf63081844905b646ff4b2d0e5b778e3bbad72da56ceaeb8645071f0396e5a5a35766e64a5667347d3696800083e4814ac5866dda10c848baf2b4be48df06c00000000000000d1aa473a1bd9030a478f1c70a21a6c17569f3b47b817fcb1b2a9b95797e852cb6ed22b1a83f63e6cdfff38e2be3f7f5d6bd59116c937606f9fa0312a80ce803f894b65b74e490e0f6d07f1de1053b53ecd58779cee433aeacd645accbf5c10714d6dc3a84b4182d1"}, {0x50, 0x107, 0x7, "918fc469d561cda696c0aeaacb7c2977f45aedce7fe1261963b545a6bcb5f3f25bfae701078044592c76a41cb25173ed7696bb395aeb6c6dca15d63c0045"}], 0x280}, 0x8000)

895.599376ms ago: executing program 2 (id=4671):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4085, 0xff5}, {&(0x7f00000028c0)=""/249, 0xf9}], 0x2}}, {{&(0x7f0000000180)=@pppol2tpv3in6, 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f00000014c0)=""/116, 0x74}], 0x5, &(0x7f00000027c0)=""/121, 0x79}, 0xe5c}], 0x2, 0x2, 0x0)

842.90585ms ago: executing program 2 (id=4673):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10)
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="00020100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @null, @default]}, 0x40)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000000f06010100000000000000000a00000a06000b000400000005000100070000004456d5b97dadcdb0490b05b4acd6fc6c2c1e6f8dd88cf8b2"], 0x24}}, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r9 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000027c0)="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", 0x2d1}, {&(0x7f0000000280)="b02e389f95c7b20cc20dda0fa6d17d03c815bf677719d6f99c2d0a299a44521a70e3712cbd9a16280a707d352717b1c51ce1663e053e3ab46714575012b9eee3d962e953893a59292c92c4837dc30ff1ceaa411089e0e9235a7b3306462463ebdfe8bb7d73a8a216c3068d27cfe6ebe3dd0aa9d9a959ce57ee3d6c0da9e6b5be32b44e401a56eb76cf9c13c268d11adb7539bb520bcda1a3193c8c8bcbff080ed5cfd5ff4c756543dc6e7b61f18e2c6fa509bdedcdd70f1af76f6e9372746076c877f909103333ab2ca9a471c00f27ef82b96f499e32", 0xd6}, {&(0x7f0000000500)="f5924708539fa9a79919b0227237e27d96dd9d74bb01201c3ae065b27aed9ca68d80cde90d758fb26d9ceac71abf44ee8867eea86cd300727c6f374469c4a9bbdf492a9518136505efd884aace6153fe6689318128413e791594ee32171932eb6511e04bdec33e2fe3e17a30352be00ee5ab02f93f4a39980580877ea70e64290b94c95e85e8c48e3c57782b234a959ee1f446e168a7948bfc97ec9ef4d1cebc1328ee8dfb0282690020", 0xaa}, {&(0x7f00000005c0)="c03f6c11c06a9e6568f08b701b31c483e8dcbcd1b1ed46ef7bb1713343605312059368e227cccfbf85", 0x29}], 0x4}, 0x4081)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r6, r8})
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001380)={<r10=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r10)

579.727234ms ago: executing program 1 (id=4675):
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000001300)={0x180, 0x1, 0xa, 0x700, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x3a, 0x6, "44f3dbdeb8380b5a1f755f7101d6094c814d153ff74f75db171fcad56bf30d98416ef091fd69d812d5137ddec9cd340f4426aefff857"}, @NFTA_TABLE_USERDATA={0x7f, 0x6, "83250739d14c722cb4fea94848ab055b29e3951ca50366c2546f93034862ed3ad4a2c0a0524a73c85100bd6ed0bc68d6f2937d565780bdefca01307121fafcf9ae399ee6a773311ee666b8edddf177ed230608910d08c299be05959af052c8c03cb2ed380595d8ff852102cb55b347202bd3c415b1315a5baa19cd"}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "8a8db7e581021a6a5b2d594158670c13699cd31f50a222c2850af75e2ab4bf88b2bb31969937c20a80b5bd62bb6094c5463ff0e03324b5d7af85afe4bb6e1fc7e8e2f72fe3e6349ad8682bd7ae896c4f126b92a0f71dc18e1d68fd702816ea6e1a94fec9e110ceca8c257a4b231c917712bd2fba0a0e603dcd417ccb2d4ff62d85ab272968cd777e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x180}, 0x1, 0x0, 0x0, 0x4001}, 0x44000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x31)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

436.442461ms ago: executing program 1 (id=4677):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f00000003c0))
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0xd7, "1115ab65f210f2d75649841499bf5e52041bc181f08d8164b2cc5962189d6e5ae7796e529adb876c0c0fe590eca2bc881fb72adcf54b8cd246144c959ec391098fd0d5ec084e0594cef1551e32053cf95109fada92452c402bd11a1e7c17dc72049117eac46d6d772a02fe4954d3253fe269f4d4a063a7ca04f6d15a67921179c10739efa7c1bf281855aec676fe58b61205e5f54cdcce12baccf6ac2cc4be678368cd468d946b71eacb545da350c1a946515062ec54e4d70ad37d2f1bb553f0f58b78ccce211839cd5fa06014ab7e05b086d6b972c0ec"}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000003c000000030a01020000000000020000020000000900010073797a30000000001a000300"], 0x98}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x475c}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x103}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

435.128168ms ago: executing program 0 (id=4678):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) (async, rerun: 32)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x20000002})
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0xe0}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000108dd4e77cf509454700000000010100eaff005e0800d50200000009000123bf507d34551a1e002b00024000b200e82b000000030a01030000e6ff00000000020080000900010073697a300030f5d4c8ff4bff1c6e8ab1865a44c98e217100852509"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x1ac, 0x9, 0xa, 0x304, 0x0, 0x0, {0x7, 0x0, 0x8002}, [@NFTA_SET_USERDATA={0xec, 0xd, 0x1, 0x0, "2265068ecd8fd2636fc0659e2b506fb48170cf43bbdd4d61e686a03b67f77c67ad777c954031e1ad798beb54e2b88475b497f7c32aea95809d2380bbfe625eedc9d4a78c4daa7b942c15bf40331d11e25621ac721b3f2843a503142f4ab6af7b95519f5670c047b73f8564d4b2510f287c33ec32d9f7ef58ae403957af6c40ea45593fa32183cf31a5d9e3f10bc377dc668764baeb8736b86688d29e26a08ba8e4790e87aed571ef78001f2d7e32e43b211995a381872595bcc681f39e6141a0288b88369cda0d567d74c15318f5b7fad56000bfcee67e692a12f720ea480ef0c23d166d758cf411"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_USERDATA={0x7d, 0xd, 0x1, 0x0, "fccdbe50d3ebfcd4ead4756a0e4bc83e7b2f1b4e0e4e8a7fe05f47e3ed03445c3049b7edd1710c4b20c5da42922a1afdcec216886d92332335cec5c2dc59c914ce6f4060b9a73cbdbaf4bbccc3a3213182729b26f64490c606a5f15f26e46d510fee6f3c24bc019cfd3573b97d1ed35aca9fad10f11d40d3c1"}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x1d4}, 0x1, 0x0, 0x0, 0x20014}, 0x40)

433.998093ms ago: executing program 1 (id=4679):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4085, 0xff5}, {&(0x7f00000028c0)=""/249, 0xf9}], 0x2}}, {{&(0x7f0000000180)=@pppol2tpv3in6, 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f00000014c0)=""/116, 0x74}], 0x5, &(0x7f00000027c0)=""/121, 0x79}, 0x5c0e}], 0x2, 0x2, 0x0)

339.173704ms ago: executing program 1 (id=4680):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x4e25, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x53, 0xad5dbe9, 0x0, 0xfffffffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@broadcast, 0x0, 0x32}, 0xa, @in=@loopback, 0x1, 0x4, 0x2, 0x0, 0x0, 0x2, 0x9}}, 0xe8)
getsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)

286.029175ms ago: executing program 1 (id=4681):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003800600060065580000040502"], 0x528}}, 0xc000)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="c000000000000000100100000e0000003d1375d54d6b714cb556706ece97994adbbeeaa379e3fe85c3f2927ba059624b71ad0f5e7c7a9233e70042263da29475dd63dd611c5c7aa3c4feb08614c220b40c7b6343444794737ba4eca7a5e11757b8fdbf33c8f1b3e64c46b9c4ef593276db2d04ee795c79c07cdefdbb118b3146b08784df61f67e75553bed96cc420cc1e84189e5c7c76ed1a8eb4a8a40b3e45730c90e9c39f9ffa5eaf5bb2778f48695fd6ea5ddb6e7ecac5b000000000000007001000000000000100100000e00000032ed51ae4b9a6af5125b64a4cbb2975ffb2f9b7b576cadce1cc0700af20848825f1d1a417feb6ef9e9a6920f5c701a9cc4a8041d95f2778ce5ffb36b78a5c3ed8ef49659e4d1fbf33938366328a6fee71fb64b13a1819577cb385dda052fe84b1c2400aa23d6c997cfe3a8163a28b28ae8462fed08e7dfa621094316ac55f6e0da0d33fcb00d5c92ecae61f22fdec566eaec6f7cd091505aecdfbea0f9c92b2dc93a44ae0593eb8254da5daf63081844905b646ff4b2d0e5b778e3bbad72da56ceaeb8645071f0396e5a5a35766e64a5667347d3696800083e4814ac5866dda10c848baf2b4be48df06c00000000000000d1aa473a1bd9030a478f1c70a21a6c17569f3b47b817fcb1b2a9b95797e852cb6ed22b1a83f63e6cdfff38e2be3f7f5d6bd59116c937606f9fa0312a80ce803f894b65b74e490e0f6d07f1de1053b53ecd58779cee433aeacd645accbf5c10714d6dc3a84b4182d100000000000000"], 0x230}, 0x8000)

285.699727ms ago: executing program 0 (id=4682):
socketpair(0x1e, 0xa, 0x4, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xfff2, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9201}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc000)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x180, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xbea5}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x180}}, 0x20040051)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

225.121614ms ago: executing program 1 (id=4683):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000)
unshare(0x2c060000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400680, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x8040000)
r3 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0xa) (async)
setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0xa)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="ec000000c1380e5547a6d102e8c90f662558", @ANYRES16=r4, @ANYBLOB="000428bd7000fbdbdf250c0000001400038008000100000400000800010004000000140009800800010007000000080001000a0000009c00068097000300fd55ce25cc3f02a883b134b1f5d58e3e658c6a6fd2a48950eeb154662dc0d5aa1f0a840579c1ce1040950b20877f85d182c482a074fea850b82423dbc8f2839358c7f55b6d4bfe82a5beca44c0059f1135ce6b0fa04a5d412fb0e5ae701c67eb71414629807c0781a428d8e725833b1570e4708df56e19f30234a3cf2e69dbbd39b606e64be3ee1fafa5732565f183ccd9423f000c0003800800"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
socket(0x10, 0x803, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x110, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x34, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x15, 0x5, "d128be47491207a500026fa0e16dde76bb"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xfffffee9, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800)
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

224.728806ms ago: executing program 0 (id=4684):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)

116.175088ms ago: executing program 0 (id=4685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x4}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x8000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000080))
setsockopt(r0, 0x2, 0x9, &(0x7f0000000200)="5979126ca9d42e6b3bfc552493759713570dbbb2607f5424d6e53db554a57123bcce56a0749374532873e79bf6b87f6b6f23aa30f23b020657092553c747ab598badd4fb804d0fcec99164db8034247f72874709ff76e22ecd8c4e9d846e4ec1b4ea09d6baa185da855bf42e44717a9e2010cd35bbb29d96c855faa4b9e133406ae2ebe4ebb6a1b83fa61fdadd967118aa9c9523eb26d8be7344c9e3a6", 0x9d)

105.471451ms ago: executing program 0 (id=4686):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b15000000000000000000004000", @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0)

0s ago: executing program 0 (id=4687):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "f6bb75dd876207bbfae4a10600", "7839c770c63ffccd45633ff12f50e479b6af9696cd5ae0302ca85c505fa0b4b3", "ba255d1364e33235886300871ba12a432aae081fa83684b0b75d0e3f0b356b07", "cdc8b034d728a34cc4bce0b5841bf0a29523cae74325ddc8df308ed2c59f683f", "aeb8bd111c399b64f9c242587e0d3fb316610318f67345d8df995f402d8c79bc", "c6ad7d8e553c85c31ffa52d3", 0x2, 0x1, 0xd, 0xbb5, 0x5}}) (async)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x8c612f044f7ba963, &(0x7f0000000080)={0xa, 0x4e20, 0x4000, @mcast1, 0x80000001}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @private0, 0x6}, 0x1c)

kernel console output (not intermixed with test programs):

rocess `syz.2.2472'.
[  237.689094][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'.
[  237.693342][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'.
[  237.955067][T14629] openvswitch: netlink: Message has 20 unknown bytes.
[  237.958293][T14629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.491037][T14661] sit0 speed is unknown, defaulting to 1000
[  238.498060][T14663] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  238.635594][T14668] batman_adv: batadv0: Adding interface: dummy0
[  238.637937][T14668] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.646895][T14668] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  238.785698][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  239.584959][T14697] batman_adv: batadv0: Removing interface: dummy0
[  239.832066][T14711] Cannot find add_set index 0 as target
[  240.131238][T14735] dvmrp0: left allmulticast mode
[  240.132935][T14735] syz_tun: left allmulticast mode
[  240.191446][T14734] openvswitch: netlink: IP tunnel dst address not specified
[  241.167385][T14760] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.177592][T14760] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  241.182080][T14760] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  241.185045][T14760] tipc: Resetting bearer <eth:syzkaller0>
[  241.254796][T14766] netlink: 'syz.1.2523': attribute type 1 has an invalid length.
[  241.981688][ T6226] tipc: Resetting bearer <eth:syzkaller0>
[  242.061921][T14780] netlink: 'syz.0.2528': attribute type 1 has an invalid length.
[  242.092765][T14780] bond9 (unregistering): Released all slaves
[  242.126442][T14786] __nla_validate_parse: 14 callbacks suppressed
[  242.126462][T14786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2530'.
[  242.259936][T14803] sit0 speed is unknown, defaulting to 1000
[  242.374355][T14813] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.435699][T14820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2538'.
[  242.442553][T14820] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.446022][T14820] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  242.448487][T14820] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  242.457227][T14820] netlink: 'syz.0.2538': attribute type 1 has an invalid length.
[  242.460444][T14820] netlink: 'syz.0.2538': attribute type 10 has an invalid length.
[  242.463563][T14820] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2538'.
[  242.975752][T14845] netlink: 'syz.0.2544': attribute type 1 has an invalid length.
[  243.250897][T14849] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2545'.
[  243.426078][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2546'.
[  243.696005][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2550'.
[  243.701600][T14866] netlink: 'syz.1.2549': attribute type 1 has an invalid length.
[  243.761623][T14866] bond14: entered promiscuous mode
[  243.763561][T14866] bond14: entered allmulticast mode
[  243.834645][T14875] batadv_slave_0: entered promiscuous mode
[  243.871668][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'.
[  243.875498][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2553'.
[  243.890069][T14877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'.
[  243.947856][T14881] erspan0: left allmulticast mode
[  243.960509][T14881] batadv_slave_0: left promiscuous mode
[  243.962749][T14881] batadv_slave_0: left allmulticast mode
[  243.966602][T14881] 0: left allmulticast mode
[  243.984402][T14881] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  243.989726][T14881] xfrm1: left promiscuous mode
[  243.991649][T14881] xfrm1: left allmulticast mode
[  243.994655][T14881] vxlan0: left promiscuous mode
[  243.996722][T14881] vxlan0: left allmulticast mode
[  244.000888][T14883] Cannot find del_set index 4 as target
[  244.004297][T14881] ip6erspan0: left allmulticast mode
[  244.006614][T14881] xfrm2: left allmulticast mode
[  244.015332][T14881] geneve2: left promiscuous mode
[  244.025940][T14881] bridge3: left allmulticast mode
[  244.050381][T14881] wireguard0: left promiscuous mode
[  244.052621][T14881] wireguard0: left allmulticast mode
[  244.056622][T14881] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  244.059852][T14881] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  244.061922][T14886] set match dimension is over the limit!
[  244.067891][T14881] gtp0: left promiscuous mode
[  244.069829][T14881] gtp0: left allmulticast mode
[  244.269916][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'.
[  244.320309][ T6145] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  244.323976][ T6145] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  244.349688][T11897] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  244.747668][T14936] sit0 speed is unknown, defaulting to 1000
[  244.915184][T14954] netlink: 'syz.0.2571': attribute type 7 has an invalid length.
[  244.945792][T14960] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  244.954909][T14961] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  245.016586][T14959] bond0: entered promiscuous mode
[  245.020256][T14959] batadv0: entered promiscuous mode
[  245.022863][T14959] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  245.025629][T14959] Cannot create hsr debugfs directory
[  245.027894][T14959] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  245.033245][T14959] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  245.036512][T14959] hsr1: entered allmulticast mode
[  245.038061][T14959] bond0: entered allmulticast mode
[  245.039836][T14959] batadv0: entered allmulticast mode
[  245.042161][T14959] 8021q: adding VLAN 0 to HW filter on device hsr1
[  245.046084][T14959] bond0: left promiscuous mode
[  245.052320][T14959] batadv0: left promiscuous mode
[  245.060626][T11897] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  245.074048][T14964] netlink: 'syz.2.2579': attribute type 1 has an invalid length.
[  245.179493][T11897] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  245.436690][T14976] pim6reg1: entered promiscuous mode
[  245.439558][T14976] pim6reg1: entered allmulticast mode
[  245.954491][T14991] sit0 speed is unknown, defaulting to 1000
[  246.055752][T14996] netlink: 'syz.0.2589': attribute type 10 has an invalid length.
[  246.055760][T14995] netlink: 'syz.0.2589': attribute type 10 has an invalid length.
[  246.192412][T15005] sit0 speed is unknown, defaulting to 1000
[  246.322805][T15009] xt_hashlimit: size too large, truncated to 1048576
[  246.613781][T15016] netlink: 'syz.1.2593': attribute type 13 has an invalid length.
[  246.616827][T15016] netlink: 'syz.1.2593': attribute type 17 has an invalid length.
[  246.858181][T15011] bond0 (unregistering): Released all slaves
[  246.902578][T15016] gretap0: refused to change device tx_queue_len
[  246.905449][T15016] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  247.113610][T15025] netlink: 'syz.1.2597': attribute type 1 has an invalid length.
[  247.535565][T15040] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20001
[  247.545990][T15040] netlink: 'syz.2.2602': attribute type 1 has an invalid length.
[  247.611051][T15043] __nla_validate_parse: 11 callbacks suppressed
[  247.611077][T15043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2603'.
[  247.617653][T15043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2603'.
[  247.626733][T15043] gretap0: entered promiscuous mode
[  247.630585][T15043] gretap0: left promiscuous mode
[  247.692358][T15043] netlink: 212392 bytes leftover after parsing attributes in process `syz.2.2603'.
[  247.697290][T15043] netlink: 'syz.2.2603': attribute type 3 has an invalid length.
[  247.701251][T15043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2603'.
[  247.773355][T15047] sit0 speed is unknown, defaulting to 1000
[  247.977565][T15055] netlink: 'syz.0.2607': attribute type 1 has an invalid length.
[  248.094881][T15046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  248.163946][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'.
[  248.167193][T15060] netlink: 'syz.0.2609': attribute type 20 has an invalid length.
[  248.170489][T15060] netlink: 'syz.0.2609': attribute type 21 has an invalid length.
[  248.217207][T15062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2610'.
[  248.221271][T15062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2610'.
[  248.224939][T15062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2610'.
[  248.378938][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  248.476355][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'.
[  248.483053][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2612'.
[  248.491373][T15074] pim6reg: entered allmulticast mode
[  248.494803][T15074] pim6reg: left allmulticast mode
[  249.994837][T15137] openvswitch: netlink: IP tunnel dst address not specified
[  250.154239][T15153] tap0: tun_chr_ioctl cmd 1074025677
[  250.156278][T15153] tap0: linktype set to 0
[  251.246898][T15180] bridge41: entered allmulticast mode
[  251.714556][T15204] netlink: 'syz.1.2654': attribute type 1 has an invalid length.
[  251.933893][T15216] IPVS: length: 8 != 446622349272
[  252.192673][   T33] audit: type=1800 audit(1752973184.280:3): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2660" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4453 res=0 errno=0
[  252.233545][T15221] xt_CT: No such helper "pptp"
[  252.238081][T15221] --map-set only usable from mangle table
[  252.313355][T15228] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  252.316510][T15228] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  252.321789][T15228] tipc: Resetting bearer <eth:syzkaller0>
[  252.995493][T15237] netlink: 'syz.0.2663': attribute type 13 has an invalid length.
[  252.998289][T15237] __nla_validate_parse: 15 callbacks suppressed
[  252.998296][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'.
[  253.126598][T15247] sit0 speed is unknown, defaulting to 1000
[  253.315880][T15266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2672'.
[  253.403598][T15273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2674'.
[  253.459664][T15274] bond9: (slave bridge0): Enslaving as an active interface with an up link
[  253.712140][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2679'.
[  253.735052][T15291] smc: removing ib device syz!
[  253.881604][T15299] xt_bpf: check failed: parse error
[  254.296676][T15321] netlink: 'syz.1.2687': attribute type 29 has an invalid length.
[  254.412804][T15328] xt_CT: You must specify a L4 protocol and not use inversions on it
[  255.091738][T15347] x_tables: duplicate underflow at hook 1
[  255.197567][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2698'.
[  255.222958][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2698'.
[  255.227515][T15356] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2698'.
[  255.440607][T15363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2700'.
[  255.635579][T15380] veth0_to_bond: left allmulticast mode
[  255.637671][T15380] veth0_to_bond: left promiscuous mode
[  255.646070][T15380] bridge0: port 2(veth0_to_bond) entered disabled state
[  255.652093][T15380] tipc: Resetting bearer <eth:syzkaller0>
[  255.654944][T15380] veth11: left allmulticast mode
[  255.656657][T15380] veth11: left promiscuous mode
[  255.658480][T15380] bridge0: port 1(veth11) entered disabled state
[  255.739507][T15382] netlink: zone id is out of range
[  255.741553][T15382] netlink: zone id is out of range
[  255.743119][T15382] netlink: zone id is out of range
[  255.753804][T15382] netlink: zone id is out of range
[  255.767615][T15382] netlink: zone id is out of range
[  255.776946][T15382] netlink: zone id is out of range
[  255.786925][T15382] netlink: zone id is out of range
[  255.799046][T15382] netlink: zone id is out of range
[  255.801466][T15382] netlink: zone id is out of range
[  255.803895][T15382] netlink: zone id is out of range
[  256.035541][T15394] tipc: Resetting bearer <eth:syzkaller0>
[  256.062151][ T5866] sit0 speed is unknown, defaulting to 1000
[  256.064320][ T5866] syz2: Port: 1 Link DOWN
[  256.065926][ T5866] sit0 speed is unknown, defaulting to 1000
[  256.335831][T15446] netlink: 'syz.1.2726': attribute type 1 has an invalid length.
[  256.339084][T15446] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2726'.
[  256.458417][T15461] netlink: 'syz.2.2731': attribute type 1 has an invalid length.
[  256.527898][T15469] netlink: 'syz.1.2733': attribute type 11 has an invalid length.
[  256.532669][T15469] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2733'.
[  256.698777][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  256.703236][T15482] netlink: 'syz.0.2737': attribute type 23 has an invalid length.
[  256.916634][T15500] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  256.920041][T15500] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  256.923481][T15500] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  256.926371][T15500] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.201731][T15523] xt_recent: Unsupported userspace flags (00000048)
[  257.207214][T15517] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  257.219007][T15523] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  257.311782][T15531] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  257.314418][T15531] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  257.317662][T15531] tipc: Resetting bearer <eth:syzkaller0>
[  258.032361][T15547] netlink: 'syz.1.2754': attribute type 1 has an invalid length.
[  258.034784][T15547] __nla_validate_parse: 4 callbacks suppressed
[  258.034792][T15547] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2754'.
[  258.156988][T15558] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  258.163306][T15560] bridge0: entered promiscuous mode
[  258.173881][T15560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.210355][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2761'.
[  258.213133][T15562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2761'.
[  258.219607][T15562] gtp1: entered promiscuous mode
[  258.221566][T15562] gtp1: entered allmulticast mode
[  258.424386][T15570] netlink: 'syz.0.2764': attribute type 20 has an invalid length.
[  258.549918][T15580] netlink: 'syz.2.2767': attribute type 4 has an invalid length.
[  258.594864][T15583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2768'.
[  258.930001][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2775'.
[  259.210662][T15623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2782'.
[  259.331419][T15631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2785'.
[  259.424219][T15641] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  259.430995][T15641] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  259.434467][T15641] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  259.437509][T15641] tipc: Resetting bearer <eth:syzkaller0>
[  259.477033][T15649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.485217][T15649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.493059][T15650] netlink: 'syz.0.2789': attribute type 4 has an invalid length.
[  259.499767][T15642] netlink: 'syz.0.2789': attribute type 4 has an invalid length.
[  259.595529][T15656] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2792'.
[  259.662753][T15661] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  259.674352][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2794'.
[  259.704884][T15667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2796'.
[  259.754946][T15670] syzkaller1: entered allmulticast mode
[  260.155170][T15711] dummy0: entered allmulticast mode
[  260.162548][T15711] batman_adv: batadv0: Interface activated: dummy0
[  260.297621][T15726] tipc: Resetting bearer <eth:syzkaller0>
[  260.346444][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.347544][T15729] netlink: 'syz.0.2815': attribute type 3 has an invalid length.
[  260.353224][T15729] netlink: 'syz.0.2815': attribute type 3 has an invalid length.
[  260.357952][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.363682][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.373376][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.379983][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.395768][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.407502][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.412818][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.416628][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.421444][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.434756][T15733] IPv6: sit3: Disabled Multicast RS
[  260.647503][T15749] netlink: 'syz.2.2823': attribute type 1 has an invalid length.
[  261.102789][T15767] netlink: 'syz.1.2829': attribute type 3 has an invalid length.
[  261.470407][T15785] syzkaller1: entered promiscuous mode
[  261.472209][T15785] syzkaller1: entered allmulticast mode
[  261.972796][T15795] netlink: 'syz.0.2839': attribute type 7 has an invalid length.
[  262.075381][T15803] tipc: Can't bind to reserved service type 0
[  262.590441][T15823] tipc: Resetting bearer <eth:syzkaller0>
[  262.593089][T15823] tipc: Resetting bearer <eth:syzkaller0>
[  262.598392][T15824] tipc: Resetting bearer <eth:syzkaller0>
[  262.783020][T15834] net_ratelimit: 10 callbacks suppressed
[  262.783040][T15834] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.282813][T15854] __nla_validate_parse: 23 callbacks suppressed
[  263.282867][T15854] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2858'.
[  263.424746][T15868] x_tables: duplicate underflow at hook 2
[  263.537323][T15871] No such timeout policy "syz1"
[  263.554972][T15868] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2861'.
[  263.623855][T15861] validate_nla: 3 callbacks suppressed
[  263.623880][T15861] netlink: 'syz.0.2861': attribute type 10 has an invalid length.
[  263.642922][T15861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2861'.
[  263.652377][T15861] dummy0: left allmulticast mode
[  263.666328][T15861] batman_adv: batadv0: Interface deactivated: dummy0
[  263.682663][T15861] batman_adv: batadv0: Removing interface: dummy0
[  263.749390][T15861] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  263.966126][T15884] tipc: Resetting bearer <eth:syzkaller0>
[  263.970272][T15884] netlink: 'syz.2.2865': attribute type 10 has an invalid length.
[  264.235559][T15892] IPVS: set_ctl: invalid protocol: 47 172.20.20.52:20002
[  264.334818][T15903] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2872'.
[  264.341489][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'.
[  264.354163][T15903] macvtap0: entered promiscuous mode
[  264.356546][T15903] macvtap0: entered allmulticast mode
[  264.359927][T15903] dummy0: entered allmulticast mode
[  264.364015][T15905] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  264.367485][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'.
[  264.377023][T15903] dummy0: left allmulticast mode
[  264.425428][T15910] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  264.516333][T15916] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  264.525074][T15916] tipc: Resetting bearer <eth:syzkaller0>
[  264.530036][T15916] netlink: 'syz.2.2876': attribute type 10 has an invalid length.
[  264.533207][T15916] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  264.655667][T15923] x_tables: duplicate underflow at hook 1
[  264.784789][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'.
[  265.028854][   T60] block nbd1: Possible stuck request ffff888022d58000: control (read@0,1024B). Runtime 60 seconds
[  265.032617][   T60] block nbd1: Possible stuck request ffff888022d58200: control (read@1024,1024B). Runtime 60 seconds
[  265.036603][   T60] block nbd1: Possible stuck request ffff888022d58400: control (read@2048,1024B). Runtime 60 seconds
[  265.040990][   T60] block nbd1: Possible stuck request ffff888022d58600: control (read@3072,1024B). Runtime 60 seconds
[  265.351180][T15951] syzkaller1: entered promiscuous mode
[  265.354486][T15951] syzkaller1: entered allmulticast mode
[  265.391798][T15953] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.397105][T15953] syzkaller0: mtu less than device minimum
[  265.521494][T15958] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  265.630392][T15962] SET target dimension over the limit!
[  265.814819][T15970] _Z`Ԁ@: entered promiscuous mode
[  265.852217][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2895'.
[  265.907129][T15984] openvswitch: netlink: IP tunnel dst address not specified
[  266.542129][T15989] xt_hashlimit: size too large, truncated to 1048576
[  266.545077][T15989] xt_hashlimit: max too large, truncated to 1048576
[  266.626824][T15993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2900'.
[  266.660753][T15993] 8021q: adding VLAN 0 to HW filter on device bond13
[  266.689140][T15993] macvlan0: entered promiscuous mode
[  266.691376][T15993] macvlan0: entered allmulticast mode
[  266.695062][T15993] bond13: entered promiscuous mode
[  266.704342][T15993] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  266.714238][T15993] bond13: left promiscuous mode
[  266.830030][T16003] netlink: 'syz.0.2902': attribute type 2 has an invalid length.
[  266.864691][T16005] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2904'.
[  266.895942][T16009] syzkaller1: entered promiscuous mode
[  266.897886][T16009] syzkaller1: entered allmulticast mode
[  267.105035][T16028] xt_hashlimit: size too large, truncated to 1048576
[  267.182916][ T5279] udevd[5279]: worker [11622] /devices/virtual/block/nbd1 is taking a long time
[  267.318011][T16045] sit0 speed is unknown, defaulting to 1000
[  267.705206][T16064] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  268.230612][T16105] sit0 speed is unknown, defaulting to 1000
[  268.371406][T16124] netlink: 'syz.2.2935': attribute type 11 has an invalid length.
[  269.143599][T16142] netlink: 'syz.1.2939': attribute type 1 has an invalid length.
[  269.166319][T16142] 8021q: adding VLAN 0 to HW filter on device bond15
[  269.191004][T16142] 8021q: adding VLAN 0 to HW filter on device bond15
[  269.194470][T16142] bond15: (slave vxcan9): The slave device specified does not support setting the MAC address
[  269.200560][T16142] bond15: (slave vxcan9): Error -95 calling set_mac_address
[  269.231951][T16144] gretap3: entered promiscuous mode
[  269.376136][T16158] __nla_validate_parse: 11 callbacks suppressed
[  269.376147][T16158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2945'.
[  269.433436][T16165] netlink: 'syz.0.2947': attribute type 1 has an invalid length.
[  269.452028][T16165] 8021q: adding VLAN 0 to HW filter on device bond10
[  269.477056][T16165] 8021q: adding VLAN 0 to HW filter on device bond10
[  269.479690][T16165] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  269.484050][T16165] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  269.636346][T16180] netlink: 'syz.0.2951': attribute type 7 has an invalid length.
[  269.637624][T16181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2950'.
[  269.647667][T16181] netlink: 'syz.1.2950': attribute type 1 has an invalid length.
[  269.653588][T16181] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2950'.
[  269.715329][T16185] netlink: 'syz.1.2953': attribute type 30 has an invalid length.
[  269.715485][T16186] netlink: 'syz.1.2953': attribute type 30 has an invalid length.
[  269.853174][T16196] netlink: 'syz.0.2956': attribute type 13 has an invalid length.
[  269.856816][T16196] C: entered promiscuous mode
[  269.859017][T16196] C: entered allmulticast mode
[  269.863296][T16196] tunl0: entered promiscuous mode
[  269.864901][T16196] tunl0: entered allmulticast mode
[  269.867045][T16196] gre0: entered promiscuous mode
[  269.870829][T16196] gre0: entered allmulticast mode
[  269.873979][T16196] gretap0: entered promiscuous mode
[  269.875898][T16196] gretap0: entered allmulticast mode
[  269.883530][T16196] erspan0: entered promiscuous mode
[  269.885661][T16196] erspan0: entered allmulticast mode
[  269.892240][T16196] ip_vti0: entered promiscuous mode
[  269.893936][T16196] ip_vti0: entered allmulticast mode
[  269.896011][T16196] ip6_vti0: entered promiscuous mode
[  269.897711][T16196] ip6_vti0: entered allmulticast mode
[  269.900487][T16196] sit0: entered promiscuous mode
[  269.902045][T16196] sit0: entered allmulticast mode
[  269.903910][T16196] ip6tnl0: entered promiscuous mode
[  269.906138][T16196] ip6tnl0: entered allmulticast mode
[  269.909995][T16196] ip6gre0: entered promiscuous mode
[  269.911806][T16196] ip6gre0: entered allmulticast mode
[  269.913650][T16196] syz_tun: entered promiscuous mode
[  269.915437][T16196] syz_tun: entered allmulticast mode
[  269.924883][T16196] ip6gretap0: entered allmulticast mode
[  269.932695][T16196] team0: entered promiscuous mode
[  269.934413][T16196] team0: entered allmulticast mode
[  269.936450][T16196] dummy0: entered allmulticast mode
[  269.941140][T16196] nlmon0: entered promiscuous mode
[  269.943044][T16196] nlmon0: entered allmulticast mode
[  269.944951][T16196] : entered promiscuous mode
[  269.946514][T16196] : entered allmulticast mode
[  269.948324][T16196] batadv0: entered promiscuous mode
[  269.950209][T16196] batadv0: entered allmulticast mode
[  269.952455][T16196] wg0: entered promiscuous mode
[  269.954041][T16196] wg0: entered allmulticast mode
[  269.956029][T16196] wg1: entered promiscuous mode
[  269.957587][T16196] wg1: entered allmulticast mode
[  269.960044][T16196] wg2: entered promiscuous mode
[  269.961999][T16196] wg2: entered allmulticast mode
[  269.963999][T16196] veth0_to_bridge: entered promiscuous mode
[  269.966026][T16196] veth0_to_bridge: entered allmulticast mode
[  269.968209][T16196] bridge_slave_0: entered promiscuous mode
[  269.970787][T16196] bridge_slave_0: entered allmulticast mode
[  269.983506][T16196] veth1_to_bridge: entered promiscuous mode
[  269.985604][T16196] veth1_to_bridge: entered allmulticast mode
[  269.988324][T16196] bridge_slave_1: entered promiscuous mode
[  269.990974][T16196] bridge_slave_1: entered allmulticast mode
[  269.993722][T16196] veth0_to_bond: entered promiscuous mode
[  269.995798][T16196] veth0_to_bond: entered allmulticast mode
[  269.997969][T16196] @: entered promiscuous mode
[  270.000071][T16196] @: entered allmulticast mode
[  270.002110][T16196] veth1_to_bond: entered promiscuous mode
[  270.004175][T16196] veth1_to_bond: entered allmulticast mode
[  270.006582][T16196] bond_slave_1: entered promiscuous mode
[  270.008551][T16196] bond_slave_1: entered allmulticast mode
[  270.011111][T16196] veth0_to_team: entered promiscuous mode
[  270.013456][T16196] veth0_to_team: entered allmulticast mode
[  270.015841][T16196] team_slave_0: entered promiscuous mode
[  270.017808][T16196] team_slave_0: entered allmulticast mode
[  270.020279][T16196] veth1_to_team: entered promiscuous mode
[  270.022257][T16196] veth1_to_team: entered allmulticast mode
[  270.024550][T16196] team_slave_1: entered promiscuous mode
[  270.026591][T16196] team_slave_1: entered allmulticast mode
[  270.029124][T16196] veth0_to_batadv: entered promiscuous mode
[  270.031608][T16196] veth0_to_batadv: entered allmulticast mode
[  270.033957][T16196] batadv_slave_0: entered promiscuous mode
[  270.036393][T16196] batadv_slave_0: entered allmulticast mode
[  270.039650][T16196] veth1_to_batadv: entered promiscuous mode
[  270.041915][T16196] veth1_to_batadv: entered allmulticast mode
[  270.044821][T16196] batadv_slave_1: entered allmulticast mode
[  270.047605][T16196] xfrm0: entered promiscuous mode
[  270.050211][T16196] xfrm0: entered allmulticast mode
[  270.052962][T16196] veth0_to_hsr: entered promiscuous mode
[  270.055484][T16196] veth0_to_hsr: entered allmulticast mode
[  270.058240][T16196] hsr_slave_0: entered promiscuous mode
[  270.060844][T16196] hsr_slave_0: entered allmulticast mode
[  270.063254][T16196] veth1_to_hsr: entered promiscuous mode
[  270.065311][T16196] veth1_to_hsr: entered allmulticast mode
[  270.067703][T16196] 0: entered promiscuous mode
[  270.069816][T16196] 0: entered allmulticast mode
[  270.072770][T16196] veth1_virt_wifi: entered promiscuous mode
[  270.075416][T16196] veth1_virt_wifi: entered allmulticast mode
[  270.078412][T16196] veth0_virt_wifi: entered promiscuous mode
[  270.080927][T16196] veth0_virt_wifi: entered allmulticast mode
[  270.084310][T16196] geneve0: entered promiscuous mode
[  270.086713][T16196] geneve0: entered allmulticast mode
[  270.090646][T16196] geneve1: entered promiscuous mode
[  270.092862][T16196] geneve1: entered allmulticast mode
[  270.095589][T16196] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  270.098485][T16196] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  270.102404][T16196] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  270.105536][T16196] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  270.109107][T16196] bridge1: entered promiscuous mode
[  270.111418][T16196] bridge1: entered allmulticast mode
[  270.114117][T16196] xfrm1: entered promiscuous mode
[  270.116468][T16196] xfrm1: entered allmulticast mode
[  270.119702][T16196] ipip0: entered promiscuous mode
[  270.121925][T16196] ipip0: entered allmulticast mode
[  270.124613][T16196] erspan1: entered promiscuous mode
[  270.126848][T16196] erspan1: entered allmulticast mode
[  270.129918][T16196] syztnl2: entered promiscuous mode
[  270.132253][T16196] syztnl2: entered allmulticast mode
[  270.134895][T16196] ip6tnl1: entered promiscuous mode
[  270.137174][T16196] ip6tnl1: entered allmulticast mode
[  270.140557][T16196] vxlan0: entered promiscuous mode
[  270.143206][T16196] vxlan0: entered allmulticast mode
[  270.145822][T16196] vlan2: entered promiscuous mode
[  270.148148][T16196] vlan2: entered allmulticast mode
[  270.151925][T16196] gre1: entered promiscuous mode
[  270.154175][T16196] gre1: entered allmulticast mode
[  270.156794][T16196] veth2: entered promiscuous mode
[  270.159379][T16196] veth2: entered allmulticast mode
[  270.161997][T16196] veth3: entered promiscuous mode
[  270.164176][T16196] veth3: entered allmulticast mode
[  270.166745][T16196] bond1: entered promiscuous mode
[  270.183533][T16196] bond1: entered allmulticast mode
[  270.187246][T16196] bridge2: entered promiscuous mode
[  270.189560][T16196] bridge2: entered allmulticast mode
[  270.192785][T16196] ip6erspan0: entered promiscuous mode
[  270.194985][T16196] ip6erspan0: entered allmulticast mode
[  270.197612][T16196] xfrm2: entered promiscuous mode
[  270.200544][T16196] xfrm2: entered allmulticast mode
[  270.202951][T16196] bond2: entered promiscuous mode
[  270.204925][T16196] bond2: entered allmulticast mode
[  270.212633][T16196] netdevsim netdevsim0 eth0: entered promiscuous mode
[  270.217226][T16196] netdevsim netdevsim0 eth0: entered allmulticast mode
[  270.222860][T16196] netdevsim netdevsim0 eth1: entered promiscuous mode
[  270.225887][T16196] netdevsim netdevsim0 eth1: entered allmulticast mode
[  270.230828][T16196] netdevsim netdevsim0 eth2: entered promiscuous mode
[  270.235381][T16196] netdevsim netdevsim0 eth2: entered allmulticast mode
[  270.237845][T16196] netdevsim netdevsim0 eth3: entered promiscuous mode
[  270.241105][T16196] netdevsim netdevsim0 eth3: entered allmulticast mode
[  270.244865][T16196] syztnl1: entered promiscuous mode
[  270.247142][T16196] syztnl1: entered allmulticast mode
[  270.250027][T16196] hsr1: entered promiscuous mode
[  270.252148][T16196] hsr1: entered allmulticast mode
[  270.254726][T16196] geneve2: entered promiscuous mode
[  270.256850][T16196] geneve2: entered allmulticast mode
[  270.259125][T16196] bond0: entered promiscuous mode
[  270.261238][T16196] bond0: entered allmulticast mode
[  270.263176][T16196] ip6gretap1: entered promiscuous mode
[  270.265025][T16196] ip6gretap1: entered allmulticast mode
[  270.271803][T16196] bond3: entered promiscuous mode
[  270.273486][T16196] bond3: entered allmulticast mode
[  270.275770][T16196] bond4: entered promiscuous mode
[  270.277705][T16196] veth0: entered promiscuous mode
[  270.280195][T16196] veth0: entered allmulticast mode
[  270.282748][T16196] veth1: entered promiscuous mode
[  270.284843][T16196] veth1: entered allmulticast mode
[  270.287267][T16196] bridge3: entered promiscuous mode
[  270.289518][T16196] bridge3: entered allmulticast mode
[  270.291945][T16196] bridge4: entered promiscuous mode
[  270.294181][T16196] bridge4: entered allmulticast mode
[  270.296823][T16196] mac80211_hwsim hwsim18 wlan2: entered promiscuous mode
[  270.299779][T16196] mac80211_hwsim hwsim18 wlan2: entered allmulticast mode
[  270.302621][T16196] bond5: entered promiscuous mode
[  270.304189][T16196] bond5: entered allmulticast mode
[  270.307482][T16196] gretap1: entered promiscuous mode
[  270.310718][T16196] gretap1: entered allmulticast mode
[  270.392374][T16196] ip6gretap2: entered promiscuous mode
[  270.394848][T16196] ip6gretap2: entered allmulticast mode
[  270.404545][T16196] bond6: entered promiscuous mode
[  270.406686][T16196] bond6: entered allmulticast mode
[  270.409285][T16196] wireguard0: entered promiscuous mode
[  270.411595][T16196] wireguard0: entered allmulticast mode
[  270.414421][T16196] bridge5: entered promiscuous mode
[  270.416427][T16196] bridge5: entered allmulticast mode
[  270.418546][T16196] bridge6: entered promiscuous mode
[  270.421549][T16196] bridge6: entered allmulticast mode
[  270.424096][T16196] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  270.426886][T16196] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  270.430070][T16196] vti0: entered promiscuous mode
[  270.432451][T16196] vti0: entered allmulticast mode
[  270.435097][T16196] : entered allmulticast mode
[  270.437685][T16196] bond7: entered promiscuous mode
[  270.440002][T16196] bond7: entered allmulticast mode
[  270.442543][T16196] macvlan1: entered promiscuous mode
[  270.444759][T16196] macvlan1: entered allmulticast mode
[  270.447598][T16196] gtp0: entered promiscuous mode
[  270.450220][T16196] gtp0: entered allmulticast mode
[  270.452931][T16196] gretap2: entered promiscuous mode
[  270.455248][T16196] gretap2: entered allmulticast mode
[  270.457842][T16196] bond8: entered promiscuous mode
[  270.460155][T16196] bond8: entered allmulticast mode
[  270.462679][T16196] : entered allmulticast mode
[  270.465367][T16196] vxlan1: entered promiscuous mode
[  270.467599][T16196] vxlan1: entered allmulticast mode
[  270.470386][T16196] bond9: entered promiscuous mode
[  270.472696][T16196] bridge0: entered promiscuous mode
[  270.475233][T16196] bond9: entered allmulticast mode
[  270.477526][T16196] bridge0: entered allmulticast mode
[  270.488077][T16196] veth4: entered promiscuous mode
[  270.491738][T16196] veth4: entered allmulticast mode
[  270.494217][T16196] veth5: entered promiscuous mode
[  270.496300][T16196] veth5: entered allmulticast mode
[  270.499191][T16196] ip6gretap3: entered promiscuous mode
[  270.501565][T16196] ip6gretap3: entered allmulticast mode
[  270.511387][T16196] mac80211_hwsim hwsim29 wlan3: entered promiscuous mode
[  270.514153][T16196] mac80211_hwsim hwsim29 wlan3: entered allmulticast mode
[  270.517523][T16196] bond10: entered promiscuous mode
[  270.520054][T16196] bond10: entered allmulticast mode
[  270.522764][T16196] pimreg0: entered promiscuous mode
[  270.524954][T16196] pimreg0: entered allmulticast mode
[  270.553615][T16208] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.585499][T16211] netlink: 'syz.1.2961': attribute type 3 has an invalid length.
[  270.617808][T16208] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.721247][T16208] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.801532][T16208] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.812884][T16225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2965'.
[  270.912549][T16208] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.926322][T16208] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.946115][T16208] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.957564][T16231] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  270.965368][T16208] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.987070][T16231] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2968'.
[  270.997866][T16231] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2968'.
[  271.076511][T16238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'.
[  271.096873][T16234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2969'.
[  271.374619][T16253] bond0: (slave rose0): Error: Device can not be enslaved while up
[  271.571717][T16260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2974'.
[  271.630440][T16265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2975'.
[  272.074930][T16291] netlink: 'syz.0.2984': attribute type 22 has an invalid length.
[  272.078854][T16289] syzkaller1: entered promiscuous mode
[  272.082486][T16289] syzkaller1: entered allmulticast mode
[  272.419356][T16322] xt_bpf: check failed: parse error
[  272.559084][T16329] xt_l2tp: missing protocol rule (udp|l2tpip)
[  272.699015][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  273.982689][T16390] netlink: 'syz.1.3012': attribute type 4 has an invalid length.
[  274.207554][T16414] nft_compat: unsupported protocol 0
[  275.133882][T16440] validate_nla: 1 callbacks suppressed
[  275.133894][T16440] netlink: 'syz.0.3025': attribute type 3 has an invalid length.
[  275.444677][T16453] __nla_validate_parse: 26 callbacks suppressed
[  275.444688][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'.
[  275.454606][T16453] gtp2: entered promiscuous mode
[  275.456257][T16453] gtp2: entered allmulticast mode
[  275.545793][T16457] macsec2: entered promiscuous mode
[  275.548123][T16457] macsec2: entered allmulticast mode
[  275.550614][T16457] ip6gretap0: entered allmulticast mode
[  275.782076][T16474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3037'.
[  275.796585][T16474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3037'.
[  275.841021][T16476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3038'.
[  275.844040][T16476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3038'.
[  275.901811][T16483] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3040'.
[  276.024734][T16487] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  276.073223][T16489] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3042'.
[  276.076353][T16489] nbd: illegal input index 65508
[  276.250460][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'.
[  276.418535][T16506] syzkaller1: entered promiscuous mode
[  276.425736][T16506] syzkaller1: entered allmulticast mode
[  276.697151][T16511] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.802827][T16520] netlink: 'syz.2.3053': attribute type 1 has an invalid length.
[  276.806566][T16521] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3051'.
[  276.955274][T16530] netlink: 'syz.2.3056': attribute type 1 has an invalid length.
[  277.162765][T16542] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  277.167955][T16542] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  277.178292][T16542] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  277.213596][T16545] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3060'.
[  277.316653][T16556] netlink: 'syz.1.3063': attribute type 1 has an invalid length.
[  277.321115][T16555] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 54141 - 0
[  277.324044][T16555] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 54141 - 0
[  277.326860][T16555] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 54141 - 0
[  277.331905][T16555] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 54141 - 0
[  277.334750][T16555] geneve4: entered promiscuous mode
[  277.336649][T16555] geneve4: entered allmulticast mode
[  277.362705][T16556] 8021q: adding VLAN 0 to HW filter on device bond16
[  277.784076][T16591] rdma_op ffff8881232599f0 conn xmit_rdma 0000000000000000
[  277.893253][T16600] sit0 speed is unknown, defaulting to 1000
[  278.030109][T16598] sit0 speed is unknown, defaulting to 1000
[  278.883407][T16645] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000
[  278.886469][T16645] sctp: [Deprecated]: syz.0.3091 (pid 16645) Use of int in max_burst socket option.
[  278.886469][T16645] Use struct sctp_assoc_value instead
[  278.887061][T16650] netlink: 'syz.2.3093': attribute type 1 has an invalid length.
[  278.918395][T16650] 8021q: adding VLAN 0 to HW filter on device bond14
[  278.950509][T16656] Set syz0 is full, maxelem 0 reached
[  278.971745][T16662] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  278.974374][T16662] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  279.319525][T16690] tc_dump_action: action bad kind
[  279.454186][T16699] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  279.628249][T16703] netlink: 'syz.2.3109': attribute type 5 has an invalid length.
[  280.050947][T16720] sit0 speed is unknown, defaulting to 1000
[  280.325225][T16741] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.591092][T16745] batadv_slave_0: left promiscuous mode
[  280.595042][T16745] tipc: Resetting bearer <eth:syzkaller0>
[  280.602175][T16745] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  280.605264][T16745] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  280.614040][T16745] mac80211_hwsim hwsim19 wlan0: left promiscuous mode
[  280.618067][T16745] bridge41: left allmulticast mode
[  280.623323][T16745] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.626097][T16745] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.629049][T16745] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.631828][T16745] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.642206][T16745] ip6gretap0: left allmulticast mode
[  280.644259][T16745] macsec2: left promiscuous mode
[  280.646134][T16745] macsec2: left allmulticast mode
[  280.651945][T16745] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 54141 - 0
[  280.655325][T16745] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 54141 - 0
[  280.658444][T16745] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 54141 - 0
[  280.662066][T16745] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 54141 - 0
[  280.665635][T16745] geneve4: left promiscuous mode
[  280.667229][T16745] geneve4: left allmulticast mode
[  280.791813][T16755] __nla_validate_parse: 20 callbacks suppressed
[  280.791831][T16755] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.3124'.
[  280.856213][T16757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'.
[  280.895306][T16759] syzkaller1: entered promiscuous mode
[  280.897273][T16759] syzkaller1: entered allmulticast mode
[  281.167344][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3131'.
[  281.183749][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3131'.
[  281.243156][T16784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3132'.
[  281.327128][T16790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3135'.
[  281.334097][T16790] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3135'.
[  281.436001][T16803] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  281.634747][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3142'.
[  281.644365][T16815] netlink: 'syz.0.3143': attribute type 5 has an invalid length.
[  281.651000][T16815] netlink: 'syz.0.3143': attribute type 7 has an invalid length.
[  281.700024][T16824] xt_ipcomp: unknown flags F7
[  281.715754][T16826] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3146'.
[  281.763076][T16830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3148'.
[  282.994885][T16878] netlink: 'syz.2.3160': attribute type 9 has an invalid length.
[  283.464675][T16900] netlink: 'syz.2.3167': attribute type 1 has an invalid length.
[  283.522858][T16902] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (592314370)
[  283.527194][T16902] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  283.777567][T16917] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  283.938493][T16931] Cannot find add_set index 3 as target
[  284.023953][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.027267][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.421968][T16967] openvswitch: netlink: VXLAN extension message has 5 unknown bytes.
[  284.873371][T16981] sit0 speed is unknown, defaulting to 1000
[  285.093711][T16981] ip6gretap0: left promiscuous mode
[  285.371752][T16989] delete_channel: no stack
[  285.811911][T17015] __nla_validate_parse: 15 callbacks suppressed
[  285.811934][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'.
[  285.863277][T17030] IPVS: Error connecting to the multicast addr
[  285.944556][T17032] netlink: 'syz.1.3207': attribute type 3 has an invalid length.
[  285.947877][T17032] netlink: 'syz.1.3207': attribute type 3 has an invalid length.
[  285.953767][T17032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3207'.
[  286.073664][T17035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3208'.
[  286.076981][T17052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3212'.
[  286.077172][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3208'.
[  287.081264][T17064] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  287.153221][T17069] sit0 speed is unknown, defaulting to 1000
[  287.198471][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'.
[  287.535464][T17096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3226'.
[  287.834543][T17118] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3230'.
[  287.941898][T17125] xt_TCPMSS: Only works on TCP SYN packets
[  287.997777][T17128] xt_ct_set_helper: 55 callbacks suppressed
[  287.997795][T17128] xt_CT: You must specify a L4 protocol and not use inversions on it
[  288.051736][T17130] !: renamed from dummy0
[  288.514442][T17190] syzkaller1: entered promiscuous mode
[  288.516430][T17190] syzkaller1: entered allmulticast mode
[  288.668404][T17201] netlink: 'syz.2.3247': attribute type 2 has an invalid length.
[  288.671947][T17201] netlink: 'syz.2.3247': attribute type 8 has an invalid length.
[  288.675706][T17201] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3247'.
[  288.826988][T17212] sit0 speed is unknown, defaulting to 1000
[  288.897969][   T33] audit: type=1800 audit(1752973220.980:4): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5690 res=0 errno=0
[  288.909097][   T33] audit: type=1800 audit(1752973220.980:5): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5690 res=0 errno=0
[  288.921622][   T33] audit: type=1800 audit(1752973220.980:6): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5690 res=0 errno=0
[  288.942625][   T33] audit: type=1800 audit(1752973220.990:7): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5690 res=0 errno=0
[  288.957701][   T33] audit: type=1800 audit(1752973220.990:8): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5690 res=0 errno=0
[  288.976818][   T33] audit: type=1800 audit(1752973220.990:9): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5690 res=0 errno=0
[  288.987055][   T33] audit: type=1800 audit(1752973220.990:10): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5690 res=0 errno=0
[  289.000468][   T33] audit: type=1800 audit(1752973220.990:11): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5690 res=0 errno=0
[  289.007632][   T33] audit: type=1800 audit(1752973220.990:12): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5690 res=0 errno=0
[  289.017765][   T33] audit: type=1800 audit(1752973220.990:13): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5690 res=0 errno=0
[  289.101282][T17232] sit0 speed is unknown, defaulting to 1000
[  289.394198][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'.
[  289.500952][T17246] nbd: nbd1 already in use
[  289.988442][T17279] netlink: 'syz.0.3268': attribute type 1 has an invalid length.
[  290.049060][T17280] nbd2: detected capacity change from 0 to 127
[  290.055834][   T56] block nbd2: Receive control failed (result -104)
[  290.125834][T17294] netlink: 'syz.1.3273': attribute type 9 has an invalid length.
[  290.204609][T17300] netlink: 'syz.1.3275': attribute type 1 has an invalid length.
[  290.484844][T17331] syz_tun: entered allmulticast mode
[  290.490944][T17329] syz_tun: left allmulticast mode
[  290.620848][T17336] netlink: 'syz.2.3286': attribute type 1 has an invalid length.
[  290.883779][T17347] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  291.117693][T17357] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  291.158266][T17360] __nla_validate_parse: 12 callbacks suppressed
[  291.158282][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3296'.
[  291.232654][T17362] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  291.270779][T17364] C: left promiscuous mode
[  291.272395][T17364] C: left allmulticast mode
[  291.295276][T17366] netlink: 'syz.1.3299': attribute type 21 has an invalid length.
[  291.298117][T17366] IPv6: NLM_F_CREATE should be specified when creating new route
[  291.312901][T17369] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  291.541245][T17383] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  291.646391][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'.
[  291.709537][T17389] netlink: 'syz.1.3306': attribute type 29 has an invalid length.
[  291.712365][T17390] netlink: 'syz.1.3306': attribute type 29 has an invalid length.
[  291.714942][T17390] netlink: 'syz.1.3306': attribute type 29 has an invalid length.
[  291.813579][T17392] syzkaller1: entered promiscuous mode
[  291.815847][T17392] syzkaller1: entered allmulticast mode
[  291.820010][T17392] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  291.976647][T17395] x_tables: duplicate underflow at hook 3
[  292.184307][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3311'.
[  292.284824][T17405] syzkaller0: mtu less than device minimum
[  292.317480][T17409] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.400520][T17411] 8021q: adding VLAN 0 to HW filter on device bond16
[  292.448499][T17416] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3317'.
[  292.472900][T17416] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3317'.
[  292.711302][T17435] sctp: [Deprecated]: syz.1.3324 (pid 17435) Use of struct sctp_assoc_value in delayed_ack socket option.
[  292.711302][T17435] Use struct sctp_sack_info instead
[  292.846950][T17444] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3326'.
[  292.926528][T17450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3328'.
[  292.934231][T17450] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3328'.
[  292.994023][T17453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3329'.
[  293.693425][T17466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3333'.
[  293.989113][T17484] bond9: (slave bridge0): Releasing backup interface
[  295.102372][   T60] block nbd1: Possible stuck request ffff888022d58000: control (read@0,1024B). Runtime 90 seconds
[  295.106628][   T60] block nbd1: Possible stuck request ffff888022d58200: control (read@1024,1024B). Runtime 90 seconds
[  295.110939][   T60] block nbd1: Possible stuck request ffff888022d58400: control (read@2048,1024B). Runtime 90 seconds
[  295.115297][   T60] block nbd1: Possible stuck request ffff888022d58600: control (read@3072,1024B). Runtime 90 seconds
[  295.271789][T17538] validate_nla: 52 callbacks suppressed
[  295.271802][T17538] netlink: 'syz.2.3354': attribute type 10 has an invalid length.
[  295.279463][T17538] team0: entered promiscuous mode
[  295.281863][T17538] team0: entered allmulticast mode
[  295.285449][T17538] 8021q: adding VLAN 0 to HW filter on device team0
[  295.289436][T17538] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  295.347149][T17540] netlink: 'syz.2.3355': attribute type 3 has an invalid length.
[  295.351858][T17540] netlink: 'syz.2.3355': attribute type 1 has an invalid length.
[  295.355914][T17540] NCSI netlink: No device for ifindex 0
[  295.724179][T17561] xt_CT: You must specify a L4 protocol and not use inversions on it
[  296.180344][T17594] __nla_validate_parse: 15 callbacks suppressed
[  296.180357][T17594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'.
[  296.373405][T17615] netlink: 'syz.1.3375': attribute type 1 has an invalid length.
[  296.375935][T17615] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3375'.
[  296.383255][T17615] NCSI netlink: No device for ifindex 813332851
[  296.453737][T17619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3377'.
[  296.505837][T17621] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  296.592159][T17631] netlink: 'syz.1.3381': attribute type 4 has an invalid length.
[  296.618261][T17623] netlink: 'syz.2.3379': attribute type 64 has an invalid length.
[  296.673955][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3379'.
[  296.731617][T17643] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20003
[  296.772722][T17647] netlink: 'syz.2.3386': attribute type 1 has an invalid length.
[  296.851524][T17654] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3389'.
[  296.870151][T17652] IPVS: length: 148 != 24
[  297.044295][T17677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3394'.
[  297.076526][T17682] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[  297.281258][T17710] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  297.311647][T17708] xt_CT: No such helper "syz0"
[  297.397715][T17719] sctp: [Deprecated]: syz.1.3405 (pid 17719) Use of int in max_burst socket option deprecated.
[  297.397715][T17719] Use struct sctp_assoc_value instead
[  297.821420][T17739] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3412'.
[  297.831530][T17739] vlan5: entered allmulticast mode
[  297.834454][T17739] ip6gretap0: entered allmulticast mode
[  297.885809][T17741] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3412'.
[  297.936089][T17760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3417'.
[  297.953663][T17760] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  297.965302][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3418'.
[  298.021010][T17772] netlink: 'syz.2.3420': attribute type 13 has an invalid length.
[  298.024120][T17772] netlink: 'syz.2.3420': attribute type 17 has an invalid length.
[  298.052218][T17775] openvswitch: netlink: Flow actions attr not present in new flow.
[  298.063014][T17772] team0: left promiscuous mode
[  298.064546][T17772] team0: left allmulticast mode
[  298.082296][T17772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  298.090611][ T5893] sit0 speed is unknown, defaulting to 1000
[  298.092958][ T5893] syz2: Port: 1 Link ACTIVE
[  298.094784][ T5893] sit0 speed is unknown, defaulting to 1000
[  298.115980][T17778] sit0 speed is unknown, defaulting to 1000
[  298.338021][T17769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.203355][T17807] dvmrp8: entered allmulticast mode
[  299.325834][T17816] bridge43: port 1(veth17) entered blocking state
[  299.328387][T17816] bridge43: port 1(veth17) entered disabled state
[  299.331666][T17816] veth17: entered allmulticast mode
[  299.334468][T17816] veth17: entered promiscuous mode
[  299.340189][T17816] bridge43: port 2(veth0_to_bond) entered blocking state
[  299.342854][T17816] bridge43: port 2(veth0_to_bond) entered disabled state
[  299.345769][T17816] veth0_to_bond: entered allmulticast mode
[  299.350580][T17816] veth0_to_bond: entered promiscuous mode
[  300.634371][T17856] netlink: 'syz.0.3449': attribute type 9 has an invalid length.
[  301.243691][T17905] netlink: 'syz.1.3462': attribute type 25 has an invalid length.
[  301.293395][T17907] netlink: 'syz.2.3463': attribute type 23 has an invalid length.
[  301.333751][T17914] __nla_validate_parse: 14 callbacks suppressed
[  301.333768][T17914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3466'.
[  301.384567][T17921] netlink: 'syz.1.3468': attribute type 1 has an invalid length.
[  301.387816][T17921] netlink: 'syz.1.3468': attribute type 10 has an invalid length.
[  301.393464][T17921] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3468'.
[  301.397714][T17922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3468'.
[  301.464639][T17926] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3470'.
[  301.467979][T17926] openvswitch: netlink: Flow key attr not present in new flow.
[  301.553404][T17934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3474'.
[  301.811974][T17956] x_tables: duplicate underflow at hook 1
[  301.814024][T17956] x_tables: duplicate underflow at hook 1
[  301.816560][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3478'.
[  301.858440][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3482'.
[  301.927634][T17961] netlink: 'syz.2.3483': attribute type 2 has an invalid length.
[  301.931117][T17961] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3483'.
[  301.942136][T17967] netlink: 'syz.0.3485': attribute type 23 has an invalid length.
[  302.138551][T17982] xt_hashlimit: size too large, truncated to 1048576
[  302.145601][T17982] xt_hashlimit: max too large, truncated to 1048576
[  302.175808][T17982] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  302.273938][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3491'.
[  302.377580][T17994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3494'.
[  302.758356][T18019] unknown channel width for channel at 909000KHz?
[  302.761446][T18019] unknown channel width for channel at 909000KHz?
[  302.764141][T18019] unknown channel width for channel at 909000KHz?
[  303.027808][T18035] sit0 speed is unknown, defaulting to 1000
[  303.112869][T18034] syzkaller1: entered promiscuous mode
[  303.115230][T18034] syzkaller1: entered allmulticast mode
[  303.319165][T18038] netlink: 'syz.2.3507': attribute type 21 has an invalid length.
[  303.322102][T18038] netlink: 'syz.2.3507': attribute type 1 has an invalid length.
[  303.419032][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  303.550788][T18058] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  303.937473][T18074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.067864][T18078] netlink: 'syz.0.3519': attribute type 2 has an invalid length.
[  304.715287][T18106] xt_CT: No such helper "snmp"
[  305.733845][T18150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.252185][T18174] validate_nla: 2 callbacks suppressed
[  306.252202][T18174] netlink: 'syz.0.3548': attribute type 1 has an invalid length.
[  306.356502][T18174] __nla_validate_parse: 9 callbacks suppressed
[  306.356520][T18174] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3548'.
[  306.375611][T18174] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  306.384210][T18174] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  306.880305][T18200] tipc: Resetting bearer <eth:syzkaller0>
[  306.906566][T18203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'.
[  306.964037][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3560'.
[  306.979797][T18213] netlink: 'syz.2.3561': attribute type 13 has an invalid length.
[  306.984921][T18213] 8021q: adding VLAN 0 to HW filter on device team0
[  306.988329][T18213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  307.235517][   T10] sit0 speed is unknown, defaulting to 1000
[  307.237467][   T10] syz2: Port: 1 Link DOWN
[  307.239285][   T10] sit0 speed is unknown, defaulting to 1000
[  307.357371][T18246] netlink: 'syz.2.3571': attribute type 3 has an invalid length.
[  307.361406][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3571'.
[  307.494238][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3575'.
[  307.557778][T18263] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3576'.
[  307.574444][T18263] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3576'.
[  307.597230][T18260] can: request_module (can-proto-3) failed.
[  307.675146][T18272] v: renamed from ip6_vti0
[  307.840596][T18284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3584'.
[  307.844724][T18285] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3584'.
[  307.990360][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3587'.
[  308.004012][T18287] bridge0: entered promiscuous mode
[  308.006429][T18287] bridge0: entered allmulticast mode
[  308.022773][T18287] team0: Port device bridge0 added
[  308.234974][T18287] team0 (unregistering): Port device bridge0 removed
[  308.411176][T18319] netlink: 'syz.2.3592': attribute type 7 has an invalid length.
[  308.458056][T18325] tc_dump_action: action bad kind
[  308.517956][T18334] xt_TPROXY: Can be used only with -p tcp or -p udp
[  308.679403][T18356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.911393][T18384] x_tables: duplicate underflow at hook 1
[  309.281052][T18414] sit0 speed is unknown, defaulting to 1000
[  309.356369][T18424] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  309.394157][T18424] tipc: Resetting bearer <eth:syzkaller0>
[  309.430421][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  309.654025][T18437] sit0 speed is unknown, defaulting to 1000
[  310.112167][T18467] pim6reg1: entered promiscuous mode
[  310.114731][T18467] pim6reg1: entered allmulticast mode
[  310.124170][T18467] IPv6: NLM_F_CREATE should be specified when creating new route
[  310.321055][T18487] 8021q: VLANs not supported on syzkaller1
[  310.561664][T18505] delete_channel: no stack
[  310.657136][T18514] netlink: 'syz.2.3651': attribute type 9 has an invalid length.
[  310.676803][T18516] netlink: 'syz.0.3652': attribute type 21 has an invalid length.
[  310.682691][T18514] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  310.690050][T18514] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  310.694792][T18514] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  310.702120][T18514] tipc: Resetting bearer <eth:syzkaller0>
[  311.150924][T18552] netlink: 'syz.2.3661': attribute type 12 has an invalid length.
[  311.249289][T18557] xfrm2: entered allmulticast mode
[  311.777648][T18576] __nla_validate_parse: 77 callbacks suppressed
[  311.777662][T18576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3667'.
[  312.047845][T12337] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  312.151032][T18592] netlink: 'syz.1.3669': attribute type 1 has an invalid length.
[  312.202317][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'.
[  312.205979][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'.
[  312.393263][T18607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'.
[  312.476098][T18610] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3674'.
[  312.492119][T18610] x_tables: duplicate underflow at hook 1
[  312.870756][T18614] sit0 speed is unknown, defaulting to 1000
[  313.114531][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3676'.
[  313.327857][T18630] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3679'.
[  313.331107][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3680'.
[  313.385301][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3679'.
[  313.617408][T18645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3685'.
[  313.780898][T18658] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.785023][T18658] syzkaller0: mtu less than device minimum
[  313.815879][T18661] netlink: 'syz.2.3690': attribute type 4 has an invalid length.
[  313.897567][T18671] gretap0: entered promiscuous mode
[  314.001020][T18673] sit0 speed is unknown, defaulting to 1000
[  314.149879][T18685] xt_bpf: check failed: parse error
[  314.154087][T18685] netlink: del zone limit has 4 unknown bytes
[  314.245260][T18690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.675770][T18718] netlink: 'syz.2.3712': attribute type 15 has an invalid length.
[  314.685297][T18718] netlink: 'syz.2.3712': attribute type 18 has an invalid length.
[  314.692105][ T5866] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  314.844302][T18732] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  314.858156][T18732] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  315.028046][T18749] tipc: Disabling bearer <udp:syz2>
[  315.279335][ T5866] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  315.865559][T18753] netlink: 'syz.2.3722': attribute type 32 has an invalid length.
[  315.873170][T18753] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  316.009823][T18771] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  316.014447][T18771] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  316.091946][T18772] sit0 speed is unknown, defaulting to 1000
[  316.451779][T18780] netlink: 'syz.0.3726': attribute type 1 has an invalid length.
[  316.464191][T18800] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  316.478820][T18800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.083211][T18819] __nla_validate_parse: 18 callbacks suppressed
[  317.083232][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'.
[  317.106361][T18819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3738'.
[  317.115996][T18819] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3738'.
[  317.508861][T18846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'.
[  317.594329][T18850] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3748'.
[  317.656403][T18859] netlink: 'syz.2.3747': attribute type 27 has an invalid length.
[  317.944011][T18865] infiniband syz!: set down
[  317.946063][T18865] infiniband syz!: added team_slave_0
[  317.946208][T18872] syz_tun: entered allmulticast mode
[  317.964543][T18872] syz_tun: left allmulticast mode
[  317.998068][T18878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3755'.
[  318.011694][T18865] RDS/IB: syz!: added
[  318.013448][T18865] smc: adding ib device syz! with port count 1
[  318.028061][T18865] smc:    ib device syz! port 1 has pnetid 
[  318.104599][T18884] sit0 speed is unknown, defaulting to 1000
[  318.611832][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3758'.
[  319.045180][T18906] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3762'.
[  319.193452][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'.
[  319.196903][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3765'.
[  319.200601][T18913] netlink: 'syz.1.3765': attribute type 19 has an invalid length.
[  319.206615][T18911] netlink: 'syz.2.3764': attribute type 11 has an invalid length.
[  319.369446][T18931] netlink: 'syz.2.3770': attribute type 1 has an invalid length.
[  320.037429][T18986] netlink: 'syz.2.3787': attribute type 1 has an invalid length.
[  320.049447][T18986] netlink: 'syz.2.3787': attribute type 2 has an invalid length.
[  320.060515][ T1230] block nbd2: Possible stuck request ffff888022d88000: control (read@0,1024B). Runtime 30 seconds
[  320.063898][ T1230] block nbd2: Possible stuck request ffff888022d88200: control (read@1024,1024B). Runtime 30 seconds
[  320.067457][ T1230] block nbd2: Possible stuck request ffff888022d88400: control (read@2048,1024B). Runtime 30 seconds
[  320.071473][ T1230] block nbd2: Possible stuck request ffff888022d88600: control (read@3072,1024B). Runtime 30 seconds
[  320.104576][T18988] xt_HMARK: spi-set and port-set can't be combined
[  320.152561][T18993] netlink: 'syz.2.3789': attribute type 4 has an invalid length.
[  320.162178][T18993] netlink: 'syz.2.3789': attribute type 4 has an invalid length.
[  320.555352][T19005] netlink: 'syz.1.3795': attribute type 39 has an invalid length.
[  320.604683][T19005] netlink: 'syz.1.3795': attribute type 1 has an invalid length.
[  320.907937][T19027] 8021q: adding VLAN 0 to HW filter on device bond18
[  320.978402][T19033] macvlan3: entered promiscuous mode
[  320.980455][T19033] macvlan3: entered allmulticast mode
[  320.983642][T19033] bond18: entered promiscuous mode
[  320.986363][T19033] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  320.993946][T19033] bond18: left promiscuous mode
[  321.256688][T19045] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  321.365926][T19056] xt_socket: unknown flags 0x8
[  322.508516][T19091] __nla_validate_parse: 22 callbacks suppressed
[  322.508534][T19091] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3820'.
[  322.672410][T19095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3822'.
[  322.677180][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3822'.
[  322.928989][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3828'.
[  323.056888][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3829'.
[  323.061454][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3829'.
[  323.063775][T19122] openvswitch: netlink: Missing key (keys=40, expected=80)
[  323.112238][T19125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3830'.
[  323.282690][T19137] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  323.285129][T19137] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  323.362673][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3838'.
[  323.459809][T19155] validate_nla: 1 callbacks suppressed
[  323.459823][T19155] netlink: 'syz.2.3841': attribute type 26 has an invalid length.
[  323.487513][T19156] sit0 speed is unknown, defaulting to 1000
[  323.505953][T19158] IPVS: length: 81 != 24
[  324.315615][T19175] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20001
[  324.322035][T19174] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20001
[  324.328720][T19177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3845'.
[  324.620912][T19192] netlink: 'syz.0.3848': attribute type 10 has an invalid length.
[  324.755812][T19198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3849'.
[  325.012054][T19216] netlink: 'syz.0.3855': attribute type 5 has an invalid length.
[  325.198857][   T60] block nbd1: Possible stuck request ffff888022d58000: control (read@0,1024B). Runtime 120 seconds
[  325.203574][   T60] block nbd1: Possible stuck request ffff888022d58200: control (read@1024,1024B). Runtime 120 seconds
[  325.208049][   T60] block nbd1: Possible stuck request ffff888022d58400: control (read@2048,1024B). Runtime 120 seconds
[  325.212653][   T60] block nbd1: Possible stuck request ffff888022d58600: control (read@3072,1024B). Runtime 120 seconds
[  325.474473][T19240] vlan1: entered allmulticast mode
[  325.476337][T19240] mac80211_hwsim hwsim19 nicvf0: entered allmulticast mode
[  325.924271][T19287] sit0 speed is unknown, defaulting to 1000
[  325.986973][T19294] xt_CT: You must specify a L4 protocol and not use inversions on it
[  326.198059][T19313] netlink: 'syz.2.3886': attribute type 4 has an invalid length.
[  326.518362][T19331] IPVS: Scheduler module ip_vs_sip not found
[  326.945108][T19337] netlink: 'syz.0.3891': attribute type 32 has an invalid length.
[  327.247889][T19350] bridge7: entered promiscuous mode
[  327.252545][T19350] bridge7: entered allmulticast mode
[  327.601211][T19373] __nla_validate_parse: 21 callbacks suppressed
[  327.601232][T19373] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3899'.
[  327.607614][T19373] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3899'.
[  327.709294][T19383] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3903'.
[  327.746019][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3904'.
[  327.795877][T19390] syzkaller1: entered promiscuous mode
[  327.798161][T19390] syzkaller1: entered allmulticast mode
[  327.887985][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'.
[  327.995503][T19403] ipvlan2: entered promiscuous mode
[  327.997768][T19403] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  328.003452][T19403] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  328.103528][T19411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3911'.
[  328.107396][T19411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3911'.
[  328.123185][T19413] syzkaller1: entered promiscuous mode
[  328.125130][T19413] syzkaller1: entered allmulticast mode
[  328.132072][T19413] openvswitch: netlink: IPv4 tun info is not correct
[  328.306537][T19416] sit0 speed is unknown, defaulting to 1000
[  328.959439][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3921'.
[  329.088103][T19456] bridge7: entered promiscuous mode
[  329.234223][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3929'.
[  329.283719][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3931'.
[  329.417203][T19469] x_tables: duplicate underflow at hook 3
[  329.446901][T19478] nftables ruleset with unbound chain
[  329.534937][T19480] tipc: Resetting bearer <eth:syzkaller0>
[  329.604597][T19485] bridge0: port 1(macvlan1) entered blocking state
[  329.608854][T19485] bridge0: port 1(macvlan1) entered disabled state
[  329.611231][T19485] macvlan1: entered allmulticast mode
[  329.613010][T19485] bridge0: entered allmulticast mode
[  329.630351][T19485] macvlan1: left allmulticast mode
[  329.632522][T19485] bridge0: left allmulticast mode
[  329.712074][T19492] tc_dump_action: action bad kind
[  330.443178][T19519] openvswitch: netlink: IPv4 tunnel dst address is zero
[  330.960618][T19547] xt_cgroup: xt_cgroup: no path or classid specified
[  331.338395][T19584] netlink: 'syz.1.3962': attribute type 1 has an invalid length.
[  331.381020][T19584] 8021q: adding VLAN 0 to HW filter on device bond19
[  331.439975][T19603] netlink: 'syz.1.3966': attribute type 13 has an invalid length.
[  331.577921][T19610] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.582608][T19610] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  331.585185][T19610] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  331.688536][T19615] warn_alloc: 1 callbacks suppressed
[  331.688556][T19615] syz.1.3969: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  331.704224][T19615] CPU: 0 UID: 0 PID: 19615 Comm: syz.1.3969 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  331.704251][T19615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  331.704264][T19615] Call Trace:
[  331.704270][T19615]  <TASK>
[  331.704280][T19615]  dump_stack_lvl+0x189/0x250
[  331.704310][T19615]  ? __pfx_dump_stack_lvl+0x10/0x10
[  331.704329][T19615]  ? __pfx__printk+0x10/0x10
[  331.704351][T19615]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  331.704374][T19615]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  331.704392][T19615]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  331.704411][T19615]  warn_alloc+0x214/0x310
[  331.704426][T19615]  ? stack_depot_save_flags+0x40/0x900
[  331.704445][T19615]  ? __pfx_warn_alloc+0x10/0x10
[  331.704461][T19615]  ? kasan_save_track+0x4f/0x80
[  331.704483][T19615]  ? xskq_create+0x56/0x170
[  331.704497][T19615]  ? xsk_init_queue+0xb0/0x110
[  331.704508][T19615]  ? xsk_setsockopt+0x43f/0x710
[  331.704528][T19615]  ? do_sock_setsockopt+0x17c/0x1b0
[  331.704551][T19615]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  331.704573][T19615]  ? do_syscall_64+0xfa/0x3b0
[  331.704590][T19615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.704610][T19615]  __vmalloc_node_range_noprof+0x125/0x12f0
[  331.704656][T19615]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  331.704684][T19615]  ? __kasan_kmalloc+0x93/0xb0
[  331.704708][T19615]  vmalloc_user_noprof+0xad/0xf0
[  331.704732][T19615]  ? xskq_create+0xbf/0x170
[  331.704747][T19615]  xskq_create+0xbf/0x170
[  331.704764][T19615]  xsk_init_queue+0xb0/0x110
[  331.704790][T19615]  xsk_setsockopt+0x43f/0x710
[  331.704816][T19615]  ? __pfx_xsk_setsockopt+0x10/0x10
[  331.704844][T19615]  ? __fget_files+0x2a/0x420
[  331.704860][T19615]  ? aa_sock_opt_perm+0x74/0x110
[  331.704881][T19615]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  331.704898][T19615]  ? __pfx_xsk_setsockopt+0x10/0x10
[  331.704922][T19615]  do_sock_setsockopt+0x17c/0x1b0
[  331.704946][T19615]  __x64_sys_setsockopt+0x13f/0x1b0
[  331.705004][T19615]  do_syscall_64+0xfa/0x3b0
[  331.705021][T19615]  ? lockdep_hardirqs_on+0x9c/0x150
[  331.705038][T19615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.705053][T19615]  ? exc_page_fault+0x9f/0xf0
[  331.705071][T19615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.705087][T19615] RIP: 0033:0x7f4e9278e9a9
[  331.705105][T19615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.705120][T19615] RSP: 002b:00007f4e905d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  331.705141][T19615] RAX: ffffffffffffffda RBX: 00007f4e929b6080 RCX: 00007f4e9278e9a9
[  331.705153][T19615] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  331.705163][T19615] RBP: 00007f4e92810d69 R08: 0000000000000004 R09: 0000000000000000
[  331.705171][T19615] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.705180][T19615] R13: 0000000000000000 R14: 00007f4e929b6080 R15: 00007ffea23be108
[  331.705204][T19615]  </TASK>
[  331.705211][T19615] Mem-Info:
[  331.825504][T19615] active_anon:16544 inactive_anon:0 isolated_anon:0
[  331.825504][T19615]  active_file:1283 inactive_file:38317 isolated_file:0
[  331.825504][T19615]  unevictable:1768 dirty:147 writeback:0
[  331.825504][T19615]  slab_reclaimable:10648 slab_unreclaimable:144730
[  331.825504][T19615]  mapped:18376 shmem:2464 pagetables:1269
[  331.825504][T19615]  sec_pagetables:0 bounce:0
[  331.825504][T19615]  kernel_misc_reclaimable:0
[  331.825504][T19615]  free:186386 free_pcp:20564 free_cma:0
[  331.840521][T19615] Node 0 active_anon:37928kB inactive_anon:0kB active_file:3204kB inactive_file:10680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47768kB dirty:448kB writeback:0kB shmem:4768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8848kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  331.852073][T19615] Node 1 active_anon:28248kB inactive_anon:0kB active_file:1928kB inactive_file:142588kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25804kB dirty:140kB writeback:0kB shmem:5088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5200kB pagetables:2648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  331.864903][T19615] Node 0 DMA free:14500kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:616kB local_pcp:336kB free_cma:0kB
[  331.874247][T19615] lowmem_reserve[]: 0 812 812 812 812
[  331.876274][T19615] Node 0 DMA32 free:254748kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37928kB inactive_anon:0kB active_file:3204kB inactive_file:10680kB unevictable:3536kB writepending:448kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:34504kB local_pcp:15472kB free_cma:0kB
[  331.889164][T19615] lowmem_reserve[]: 0 0 0 0 0
[  331.890889][T19615] Node 1 DMA32 free:228772kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:260kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:4kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:19800kB local_pcp:8232kB free_cma:0kB
[  331.902318][T19615] lowmem_reserve[]: 0 0 854 854 854
[  331.904110][T19615] Node 1 Normal free:247460kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27988kB inactive_anon:0kB active_file:1852kB inactive_file:142588kB unevictable:3536kB writepending:136kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:27088kB local_pcp:16452kB free_cma:0kB
[  331.915526][T19615] lowmem_reserve[]: 0 0 0 0 0
[  331.917438][T19615] Node 0 DMA: 7*4kB (U) 7*8kB (U) 7*16kB (U) 29*32kB (UM) 29*64kB (UM) 12*128kB (UM) 5*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 14500kB
[  331.924142][T19615] Node 0 DMA32: 113*4kB (UME) 107*8kB (UME) 82*16kB (ME) 133*32kB (UME) 343*64kB (UME) 217*128kB (UME) 108*256kB (UM) 49*512kB (UM) 26*1024kB (UM) 4*2048kB (U) 27*4096kB (U) = 254748kB
[  331.930823][T19615] Node 1 DMA32: 151*4kB (UM) 145*8kB (UME) 132*16kB (UME) 142*32kB (UME) 131*64kB (UME) 120*128kB (UME) 108*256kB (UME) 108*512kB (UM) 95*1024kB (UME) 6*2048kB (UM) 1*4096kB (U) = 228772kB
[  331.938069][T19615] Node 1 Normal: 861*4kB (UM) 216*8kB (UME) 309*16kB (UM) 414*32kB (UME) 444*64kB (UME) 207*128kB (U) 140*256kB (UM) 88*512kB (UM) 80*1024kB (UM) 1*2048kB (U) 1*4096kB (U) = 247236kB
[  331.945940][T19615] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  331.949979][T19615] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  331.953502][T19615] 42064 total pagecache pages
[  331.962235][T19615] 0 pages in swap cache
[  331.963798][T19615] Free swap  = 124996kB
[  331.965281][T19615] Total swap = 124996kB
[  331.966747][T19615] 786301 pages RAM
[  331.968115][T19615] 0 pages HighMem/MovableOnly
[  331.970803][T19615] 241056 pages reserved
[  331.972329][T19615] 0 pages cma reserved
[  332.161432][T19638] xt_policy: neither incoming nor outgoing policy selected
[  332.357958][T19661] netlink: 'syz.2.3979': attribute type 3 has an invalid length.
[  332.366795][T19661] netlink: 'syz.2.3979': attribute type 2 has an invalid length.
[  332.370577][T19661] netlink: 'syz.2.3979': attribute type 2 has an invalid length.
[  332.439427][T19658] netlink: 'syz.1.3978': attribute type 1 has an invalid length.
[  332.891019][T19684] sit0 speed is unknown, defaulting to 1000
[  333.133787][T19690] __nla_validate_parse: 24 callbacks suppressed
[  333.133801][T19690] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3986'.
[  333.251229][T19694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3988'.
[  333.376044][T19699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3990'.
[  333.711459][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3997'.
[  333.899013][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  334.152246][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4000'.
[  334.155493][T19738] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  334.159069][T19738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.382653][T19743] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4002'.
[  334.492924][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4003'.
[  334.615318][T19751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4005'.
[  334.631450][T19751] mac80211_hwsim hwsim19 ": renamed from wlan0
[  334.718314][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4004'.
[  335.016800][T19766] netlink: 'syz.1.4009': attribute type 4 has an invalid length.
[  335.032389][T19766] netlink: 'syz.1.4009': attribute type 4 has an invalid length.
[  335.176886][T19781] tap0: tun_chr_ioctl cmd 1074025677
[  335.184941][T19781] tap0: linktype set to 769
[  335.294280][T19788] netlink: 'syz.1.4014': attribute type 1 has an invalid length.
[  335.513669][T19810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4021'.
[  335.913004][T19861] xt_SECMARK: invalid mode: 0
[  336.738399][T19895] netlink: 'syz.1.4037': attribute type 1 has an invalid length.
[  336.992190][T19923] IPVS: length: 148 != 24
[  337.131070][T19932] delete_channel: no stack
[  337.183152][T19939] netlink: 'syz.0.4050': attribute type 23 has an invalid length.
[  337.454381][T19961] netlink: 'syz.1.4059': attribute type 1 has an invalid length.
[  337.456970][T19961] netlink: 'syz.1.4059': attribute type 1 has an invalid length.
[  337.710683][T19985] netlink: 'syz.1.4067': attribute type 10 has an invalid length.
[  337.714038][T19985] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  337.742347][T19988] netlink: 'syz.2.4068': attribute type 12 has an invalid length.
[  338.247176][T20010] macsec2: entered allmulticast mode
[  338.249597][T20010] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  338.544360][T20031] pim6reg: entered allmulticast mode
[  338.551783][T20031] pim6reg: left allmulticast mode
[  338.940562][T20046] __nla_validate_parse: 8 callbacks suppressed
[  338.940574][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4083'.
[  338.995082][T20048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4084'.
[  339.106216][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4088'.
[  339.112406][T20060] vlan0: entered promiscuous mode
[  339.114927][T20060] veth1: entered promiscuous mode
[  339.276538][T20064] netlink: 'syz.0.4089': attribute type 1 has an invalid length.
[  339.280374][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4089'.
[  339.296696][T20064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4089'.
[  339.372257][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'.
[  339.377984][T20068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4090'.
[  339.427304][T20070] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4091'.
[  339.701829][T20092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4097'.
[  339.777739][T20100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4100'.
[  339.943459][T20115] netlink: 'syz.0.4106': attribute type 10 has an invalid length.
[  339.946104][T20115] geneve0: left promiscuous mode
[  339.947704][T20115] geneve0: left allmulticast mode
[  339.950616][T20115] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  340.098363][T20138] netlink: 'syz.2.4111': attribute type 1 has an invalid length.
[  340.101982][T20138] netlink: 'syz.2.4111': attribute type 2 has an invalid length.
[  340.217815][T20156] 8021q: adding VLAN 0 to HW filter on device bond19
[  340.237406][T20156] 8021q: adding VLAN 0 to HW filter on device bond19
[  340.242499][T20156] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address
[  340.246724][T20156] bond19: (slave vxcan1): Error -95 calling set_mac_address
[  340.314779][T20156] veth19: entered promiscuous mode
[  340.317762][T20156] erspan0: entered allmulticast mode
[  340.323744][T20156] bond19: (slave erspan0): making interface the new active one
[  340.326668][T20156] bond19: (slave erspan0): Enslaving as an active interface with an up link
[  340.473147][T20183] veth1_to_bond: entered allmulticast mode
[  340.486097][T20187] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  340.629926][T20199] IPVS: length: 163 != 8
[  340.642057][T20181] veth1_to_bond: left allmulticast mode
[  340.840477][T20220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  340.843714][T20220] IPv6: NLM_F_CREATE should be set when creating new route
[  340.846802][T20220] IPv6: NLM_F_CREATE should be set when creating new route
[  341.747782][T20243] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  344.213300][T20266] __nla_validate_parse: 15 callbacks suppressed
[  344.213313][T20266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4154'.
[  344.342727][T20277] sit0 speed is unknown, defaulting to 1000
[  344.397627][T20287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4160'.
[  344.510130][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4162'.
[  344.513805][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4162'.
[  344.517620][T20293] A link change request failed with some changes committed already. Interface " may have been left with an inconsistent configuration, please check.
[  344.552712][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4162'.
[  344.555643][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4162'.
[  344.558528][T20293] A link change request failed with some changes committed already. Interface " may have been left with an inconsistent configuration, please check.
[  344.575700][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4162'.
[  344.584026][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4162'.
[  344.587666][T20293] A link change request failed with some changes committed already. Interface " may have been left with an inconsistent configuration, please check.
[  344.593729][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4162'.
[  344.600873][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4162'.
[  344.603754][T20293] A link change request failed with some changes committed already. Interface " may have been left with an inconsistent configuration, please check.
[  344.619044][T20293] A link change request failed with some changes committed already. Interface " may have been left with an inconsistent configuration, please check.
[  344.624290][T20293] A link change request failed with some changes committed already. Interface " may have been left with an inconsistent configuration, please check.
[  344.639522][T20293] A link change request failed with some changes committed already. Interface " may have been left with an inconsistent configuration, please check.
[  344.740225][T20307] validate_nla: 5 callbacks suppressed
[  344.740238][T20307] netlink: 'syz.1.4166': attribute type 29 has an invalid length.
[  344.851478][T20311] netlink: 'syz.1.4167': attribute type 5 has an invalid length.
[  345.038014][T20334] netlink: 'syz.1.4171': attribute type 13 has an invalid length.
[  345.040942][T20334] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  345.218207][T20346] sit0 speed is unknown, defaulting to 1000
[  346.100810][T20363] sctp: [Deprecated]: syz.0.4179 (pid 20363) Use of int in maxseg socket option.
[  346.100810][T20363] Use struct sctp_assoc_value instead
[  346.165586][T20366] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  346.566245][T20400] netlink: 'syz.2.4186': attribute type 3 has an invalid length.
[  346.604387][T20402] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.607526][T20402] net_ratelimit: 26 callbacks suppressed
[  346.607537][T20402] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  346.778814][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  347.192306][T20416] netlink: zone id is out of range
[  347.194012][T20416] netlink: zone id is out of range
[  347.199782][T20416] netlink: zone id is out of range
[  347.201574][T20416] netlink: get zone limit has 8 unknown bytes
[  347.301694][T20423] netlink: 'syz.1.4194': attribute type 5 has an invalid length.
[  347.304310][T20424] netlink: 'syz.1.4194': attribute type 5 has an invalid length.
[  347.449420][T20437] SET target dimension over the limit!
[  347.455102][T20437] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  347.586568][T20454] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.637908][T20458] netlink: 'syz.1.4206': attribute type 11 has an invalid length.
[  347.655293][T20460] ipt_ECN: cannot use operation on non-tcp rule
[  348.043581][T20486] netlink: 'syz.1.4215': attribute type 1 has an invalid length.
[  348.069080][T20486] 8021q: adding VLAN 0 to HW filter on device bond20
[  348.087045][T20486] 8021q: adding VLAN 0 to HW filter on device bond20
[  348.091032][T20486] bond20: (slave vxcan9): The slave device specified does not support setting the MAC address
[  348.096763][T20486] bond20: (slave vxcan9): Error -95 calling set_mac_address
[  348.136527][T20493] veth13: entered promiscuous mode
[  348.153973][T20493] bond20: (slave veth13): Enslaving as an active interface with a down link
[  348.171819][T20486] erspan0: entered allmulticast mode
[  348.178929][T20486] bond20: (slave erspan0): making interface the new active one
[  348.182087][T20486] bond20: (slave erspan0): Enslaving as an active interface with an up link
[  348.272915][T20503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.653641][T20523] netlink: 'syz.0.4228': attribute type 4 has an invalid length.
[  348.711535][T20530] netlink: 'syz.2.4230': attribute type 2 has an invalid length.
[  348.806424][T20539] x_tables: duplicate underflow at hook 2
[  349.018130][T20554] tipc: MTU too low for tipc bearer
[  349.280359][T20571] __nla_validate_parse: 81 callbacks suppressed
[  349.280374][T20571] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4243'.
[  349.301014][T20571] batadv0: entered promiscuous mode
[  349.302701][T20571] batadv0: entered allmulticast mode
[  349.439454][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4246'.
[  349.442916][T20582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4246'.
[  349.603179][T20594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4249'.
[  350.101279][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4256'.
[  350.139045][ T1230] block nbd2: Possible stuck request ffff888022d88000: control (read@0,1024B). Runtime 60 seconds
[  350.143887][ T1230] block nbd2: Possible stuck request ffff888022d88200: control (read@1024,1024B). Runtime 60 seconds
[  350.148047][ T1230] block nbd2: Possible stuck request ffff888022d88400: control (read@2048,1024B). Runtime 60 seconds
[  350.153100][ T1230] block nbd2: Possible stuck request ffff888022d88600: control (read@3072,1024B). Runtime 60 seconds
[  350.199822][T20574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.242925][T20626] validate_nla: 2 callbacks suppressed
[  350.242938][T20626] netlink: 'syz.2.4258': attribute type 11 has an invalid length.
[  350.388453][T20634] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4262'.
[  350.447143][T20637] GUP no longer grows the stack in syz.2.4263 (20637): 200000006000-20000000a000 (200000005000)
[  350.452733][T20637] CPU: 1 UID: 0 PID: 20637 Comm: syz.2.4263 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  350.452752][T20637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  350.452759][T20637] Call Trace:
[  350.452764][T20637]  <TASK>
[  350.452770][T20637]  dump_stack_lvl+0x189/0x250
[  350.452792][T20637]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.452803][T20637]  ? __pfx__printk+0x10/0x10
[  350.452816][T20637]  ? find_vma+0xe7/0x160
[  350.452836][T20637]  __get_user_pages+0x2a60/0x30b0
[  350.452864][T20637]  ? __pfx___get_user_pages+0x10/0x10
[  350.452874][T20637]  ? __gup_longterm_locked+0xbf7/0x15b0
[  350.452886][T20637]  ? down_read_killable+0x1d1/0x350
[  350.452896][T20637]  ? try_get_folio+0x633/0x660
[  350.452909][T20637]  __gup_longterm_locked+0xd66/0x15b0
[  350.452923][T20637]  ? try_grab_folio_fast+0x1be/0x4f0
[  350.452940][T20637]  ? gup_fast_fallback+0x1afc/0x2260
[  350.452953][T20637]  gup_fast_fallback+0x1cd4/0x2260
[  350.452984][T20637]  ? __pfx_gup_fast_fallback+0x10/0x10
[  350.452994][T20637]  ? trace_contention_end+0x39/0x120
[  350.453007][T20637]  ? __mutex_lock+0x330/0xe80
[  350.453016][T20637]  ? futex_unqueue+0x22/0x240
[  350.453026][T20637]  ? futex_unqueue+0x22/0x240
[  350.453035][T20637]  ? futex_unqueue+0x22/0x240
[  350.453044][T20637]  ? is_valid_gup_args+0x11f/0x200
[  350.453056][T20637]  ? get_user_pages_fast+0x4d/0xb0
[  350.453067][T20637]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  350.453083][T20637]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  350.453091][T20637]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  350.453106][T20637]  ? wait_for_space+0x24d/0x2d0
[  350.453122][T20637]  iov_iter_get_pages2+0x5e/0xa0
[  350.453135][T20637]  __se_sys_vmsplice+0x548/0x10d0
[  350.453157][T20637]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  350.453170][T20637]  ? __pfx_futex_wait+0x10/0x10
[  350.453184][T20637]  ? __lock_acquire+0xab9/0xd20
[  350.453210][T20637]  ? do_pipe2+0xf7/0x170
[  350.453223][T20637]  ? do_syscall_64+0xbe/0x3b0
[  350.453235][T20637]  do_syscall_64+0xfa/0x3b0
[  350.453243][T20637]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.453251][T20637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.453260][T20637]  ? exc_page_fault+0x9f/0xf0
[  350.453269][T20637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.453278][T20637] RIP: 0033:0x7f83b5d8e9a9
[  350.453289][T20637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.453298][T20637] RSP: 002b:00007f83b6c12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  350.453308][T20637] RAX: ffffffffffffffda RBX: 00007f83b5fb5fa0 RCX: 00007f83b5d8e9a9
[  350.453314][T20637] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d
[  350.453319][T20637] RBP: 00007f83b5e10d69 R08: 0000000000000000 R09: 0000000000000000
[  350.453324][T20637] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  350.453329][T20637] R13: 0000000000000000 R14: 00007f83b5fb5fa0 R15: 00007fffc7f09628
[  350.453343][T20637]  </TASK>
[  350.640945][T20641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4265'.
[  350.642373][T20639] sit0 speed is unknown, defaulting to 1000
[  350.829888][T20642] sit0 speed is unknown, defaulting to 1000
[  350.922473][T20658] netlink: 'syz.1.4269': attribute type 49 has an invalid length.
[  351.067069][T20665] netlink: 'syz.0.4270': attribute type 8 has an invalid length.
[  351.197543][T20671] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  351.241731][T20673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4274'.
[  351.536860][T20683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4278'.
[  351.760353][T20689] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  352.542574][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4289'.
[  352.657821][T20730] bond0: Device is already in use.
[  352.722317][T20732] tipc: Resetting bearer <eth:syzkaller0>
[  352.797068][T20745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.839560][T20750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.064393][T20775] netlink: 'syz.0.4307': attribute type 10 has an invalid length.
[  353.085973][T20775] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  353.274090][T20784] netlink: 'syz.0.4311': attribute type 21 has an invalid length.
[  353.490894][T20811] netlink: 'syz.1.4318': attribute type 7 has an invalid length.
[  353.494182][T20810] netlink: 'syz.1.4318': attribute type 7 has an invalid length.
[  353.497458][T20811] netlink: 'syz.1.4318': attribute type 8 has an invalid length.
[  353.501341][T20810] netlink: 'syz.1.4318': attribute type 8 has an invalid length.
[  353.665244][T20831] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20002
[  353.697448][T20828] netlink: 'syz.1.4323': attribute type 1 has an invalid length.
[  354.055135][T20862] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  354.502235][T20880] __nla_validate_parse: 20 callbacks suppressed
[  354.502251][T20880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4339'.
[  354.507662][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4339'.
[  354.557957][T20887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4341'.
[  354.599941][T20892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4338'.
[  354.606900][T20892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4338'.
[  354.727708][T20896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4341'.
[  354.784437][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4344'.
[  354.871460][T20906] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  354.957034][T20913] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4348'.
[  355.268977][   T60] block nbd1: Possible stuck request ffff888022d58000: control (read@0,1024B). Runtime 150 seconds
[  355.273424][   T60] block nbd1: Possible stuck request ffff888022d58200: control (read@1024,1024B). Runtime 150 seconds
[  355.277912][   T60] block nbd1: Possible stuck request ffff888022d58400: control (read@2048,1024B). Runtime 150 seconds
[  355.282439][   T60] block nbd1: Possible stuck request ffff888022d58600: control (read@3072,1024B). Runtime 150 seconds
[  355.338927][T20931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4353'.
[  355.387228][T20934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4356'.
[  355.404200][T20932] syzkaller1: entered promiscuous mode
[  355.406512][T20932] syzkaller1: entered allmulticast mode
[  355.426021][T20936] bridge9: entered promiscuous mode
[  355.464589][T20940] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  355.852840][T20984] validate_nla: 4 callbacks suppressed
[  355.852854][T20984] netlink: 'syz.2.4371': attribute type 4 has an invalid length.
[  355.912108][T20992] xt_TCPMSS: Only works on TCP SYN packets
[  355.927419][T20992] tipc: Resetting bearer <eth:syzkaller0>
[  355.991338][T20998] bridge47: entered promiscuous mode
[  358.036008][ T5279] udevd[5279]: worker [13470] /devices/virtual/block/nbd2 is taking a long time
[  380.230382][ T1230] block nbd2: Possible stuck request ffff888022d88000: control (read@0,1024B). Runtime 90 seconds
[  380.235627][ T1230] block nbd2: Possible stuck request ffff888022d88200: control (read@1024,1024B). Runtime 90 seconds
[  380.241010][ T1230] block nbd2: Possible stuck request ffff888022d88400: control (read@2048,1024B). Runtime 90 seconds
[  380.246477][ T1230] block nbd2: Possible stuck request ffff888022d88600: control (read@3072,1024B). Runtime 90 seconds
[  385.073140][ T5279] udevd[5279]: worker [11622] /devices/virtual/block/nbd1 timeout; kill it
[  385.077930][ T5279] udevd[5279]: seq 15874 '/devices/virtual/block/nbd1' killed
[  385.338976][   T60] block nbd1: Possible stuck request ffff888022d58000: control (read@0,1024B). Runtime 180 seconds
[  385.342976][   T60] block nbd1: Possible stuck request ffff888022d58200: control (read@1024,1024B). Runtime 180 seconds
[  385.347477][   T60] block nbd1: Possible stuck request ffff888022d58400: control (read@2048,1024B). Runtime 180 seconds
[  385.353100][   T60] block nbd1: Possible stuck request ffff888022d58600: control (read@3072,1024B). Runtime 180 seconds
[  392.661815][T21020] __nla_validate_parse: 9 callbacks suppressed
[  392.661835][T21020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4384'.
[  392.669993][T21020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4384'.
[  392.673855][T21020] netlink: 'syz.2.4384': attribute type 83 has an invalid length.
[  392.724845][T21025] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  392.871492][T21041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4390'.
[  392.946309][T21037] bpq0: entered promiscuous mode
[  392.948406][T21037] bpq0: entered allmulticast mode
[  393.163769][T21063] netlink: del zone limit has 4 unknown bytes
[  393.178208][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4396'.
[  393.305910][T21068] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4397'.
[  393.309828][T21068] 0: renamed from hsr0
[  393.314427][T21068] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  393.321020][T21068] 0: entered allmulticast mode
[  393.323329][T21068] hsr_slave_0: entered allmulticast mode
[  393.326970][T21068] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  393.542457][T21081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4400'.
[  393.610609][T21081] SET target dimension over the limit!
[  393.967746][T21118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4411'.
[  393.973237][T21117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4411'.
[  394.057262][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4414'.
[  394.132316][T21128] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4415'.
[  394.136466][T21128] sctp: [Deprecated]: syz.1.4415 (pid 21128) Use of struct sctp_assoc_value in delayed_ack socket option.
[  394.136466][T21128] Use struct sctp_sack_info instead
[  394.395101][T21145] : renamed from batadv_slave_1
[  394.698810][T21021] Bluetooth: hci2: command 0x0405 tx timeout
[  394.702299][T21164] syzkaller1: entered promiscuous mode
[  394.704769][T21164] syzkaller1: entered allmulticast mode
[  394.778742][ T5220] Bluetooth: hci0: command tx timeout
[  395.145077][T21178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  395.148135][T21178] IPv6: NLM_F_CREATE should be set when creating new route
[  395.151109][T21178] IPv6: NLM_F_CREATE should be set when creating new route
[  395.155557][T21178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  395.560469][T21203] netlink: 'syz.1.4436': attribute type 1 has an invalid length.
[  395.572262][T21203] netlink: 'syz.1.4436': attribute type 1 has an invalid length.
[  395.574878][T21203] netlink: 'syz.1.4436': attribute type 4 has an invalid length.
[  395.764466][T21216] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  395.768018][T21216] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  395.770726][T21216] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  395.773921][T21216] tipc: Resetting bearer <eth:syzkaller0>
[  396.805148][T21288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.987428][T21323] tipc: Resetting bearer <eth:syzkaller0>
[  397.240705][T21352] sit0 speed is unknown, defaulting to 1000
[  397.773161][T21372] __nla_validate_parse: 21 callbacks suppressed
[  397.773182][T21372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'.
[  397.789946][T21372] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  397.798747][T21372] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  398.092814][T21383] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4485'.
[  398.096000][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4485'.
[  398.140585][T21383] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4485'.
[  398.143505][T21383] tc_dump_action: action bad kind
[  398.145572][T21383] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4485'.
[  398.200801][T21388] tipc: Bearer <eth:gre0>: already 2 bearers with priority 10
[  398.203276][T21388] tipc: Bearer <eth:gre0>: trying with adjusted priority
[  398.205460][T21388] tipc: Enabling of bearer <eth:gre0> rejected, max 3 bearers permitted
[  398.211310][T21389] tipc: Bearer <eth:gre0>: already 2 bearers with priority 10
[  398.213623][T21389] tipc: Bearer <eth:gre0>: trying with adjusted priority
[  398.216131][T21389] tipc: Enabling of bearer <eth:gre0> rejected, max 3 bearers permitted
[  398.251403][T21392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4487'.
[  398.350883][T21395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4488'.
[  398.360958][T21395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4488'.
[  398.415945][T21398] tipc: Resetting bearer <eth:syzkaller0>
[  398.432911][T21398] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  398.650657][T21408] ip6gre2: entered allmulticast mode
[  398.745757][T21420] sctp: [Deprecated]: syz.2.4494 (pid 21420) Use of int in max_burst socket option.
[  398.745757][T21420] Use struct sctp_assoc_value instead
[  398.756673][T21419] netlink: 'syz.1.4496': attribute type 1 has an invalid length.
[  398.785200][T21419] xt_bpf: check failed: parse error
[  398.933018][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4498'.
[  398.945032][T21432] sctp: [Deprecated]: syz.1.4498 (pid 21432) Use of int in max_burst socket option.
[  398.945032][T21432] Use struct sctp_assoc_value instead
[  399.011112][T21441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4500'.
[  399.127044][T21448] pim6reg1: entered promiscuous mode
[  399.129469][T21448] pim6reg1: entered allmulticast mode
[  399.284146][T21453] xt_CT: No such helper "pptp"
[  399.633495][T21476] netlink: 'syz.1.4511': attribute type 10 has an invalid length.
[  399.636615][T21476] team0: entered allmulticast mode
[  399.640238][T21476] 8021q: adding VLAN 0 to HW filter on device team0
[  399.643107][T21476] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  399.831684][T21487] netlink: 'syz.2.4515': attribute type 31 has an invalid length.
[  400.104096][T21509] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  400.119785][T21509] tipc: Resetting bearer <eth:syzkaller0>
[  400.794447][T21530] erspan0: left promiscuous mode
[  400.796417][T21530] erspan0: left allmulticast mode
[  400.888515][T21536] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  400.964957][T21542] syzkaller1: entered promiscuous mode
[  400.967498][T21542] syzkaller1: entered allmulticast mode
[  401.020129][ T5220] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  401.134993][T21561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.204144][T21568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.208817][T21568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.217026][T21568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.301791][T21579] x_tables: duplicate underflow at hook 1
[  401.501755][T21600] tunl0: entered promiscuous mode
[  401.667853][T21617] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[  402.129578][T21636] block nbd3: server does not support multiple connections per device.
[  402.134501][T21636] block nbd3: shutting down sockets
[  402.493200][T21661] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  402.533343][T21665] netlink: 'syz.2.4565': attribute type 3 has an invalid length.
[  402.813113][T21686] tipc: Resetting bearer <eth:syzkaller0>
[  402.821619][T21686] openvswitch: netlink: Duplicate or invalid key (type 0).
[  402.824636][T21686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.030048][T21697] __nla_validate_parse: 27 callbacks suppressed
[  403.030062][T21697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4575'.
[  403.133814][T21714] netlink: 'syz.0.4579': attribute type 1 has an invalid length.
[  403.133932][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4581'.
[  403.314756][T21736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4586'.
[  403.417223][T21745] netlink: 'syz.2.4588': attribute type 13 has an invalid length.
[  404.191759][T21742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.255441][T21752] pim6reg: entered allmulticast mode
[  404.261109][T21752] pim6reg: left allmulticast mode
[  404.369625][T21765] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4591'.
[  404.448220][T21772] netlink: 79 bytes leftover after parsing attributes in process `syz.0.4597'.
[  404.474609][T21774] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4598'.
[  404.661818][T21788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.674737][T21778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4597'.
[  404.677578][T21778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4597'.
[  404.721397][T21788] IPVS: persistence engine module ip_vs_pe_ not found
[  405.311214][T21800] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4604'.
[  405.444561][T21808] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4606'.
[  405.462306][T21808] vlan0: entered allmulticast mode
[  405.529605][T21816] netlink: 'syz.2.4609': attribute type 10 has an invalid length.
[  405.533242][T21816] team0: entered promiscuous mode
[  405.535823][T21816] team0: entered allmulticast mode
[  405.546170][T21816] 8021q: adding VLAN 0 to HW filter on device team0
[  405.551592][T21816] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  405.672290][T21831] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  405.677400][T21831] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  405.856385][T21852] netlink: 'syz.0.4617': attribute type 2 has an invalid length.
[  406.087391][T21867] tunl0: left promiscuous mode
[  406.094486][T21867] gretap0: left promiscuous mode
[  406.100773][T21867] erspan0: left allmulticast mode
[  406.111032][T21867] tipc: Resetting bearer <ib:ip6gre0>
[  406.113741][T21867] tipc: Resetting bearer <ib:ip6gre0>
[  406.121606][T21867] team0: left promiscuous mode
[  406.123886][T21867] team0: left allmulticast mode
[  406.130056][T21867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  406.251550][T21878] netlink: 'syz.0.4627': attribute type 2 has an invalid length.
[  406.405877][T21880] xt_CT: You must specify a L4 protocol and not use inversions on it
[  408.667131][T21923] __nla_validate_parse: 7 callbacks suppressed
[  408.667151][T21923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4639'.
[  408.799937][T21939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4643'.
[  408.919623][T21951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4648'.
[  408.984125][T21955] syz_tun: left promiscuous mode
[  408.986507][T21955] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  409.125019][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4654'.
[  409.173095][T21980] sit0 speed is unknown, defaulting to 1000
[  409.228271][T21984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4656'.
[  409.319806][T21978] sit0 speed is unknown, defaulting to 1000
[  409.697987][T21991] netlink: 'syz.2.4658': attribute type 10 has an invalid length.
[  410.303998][ T1230] block nbd2: Possible stuck request ffff888022d88000: control (read@0,1024B). Runtime 120 seconds
[  410.309052][ T1230] block nbd2: Possible stuck request ffff888022d88200: control (read@1024,1024B). Runtime 120 seconds
[  410.315094][ T1230] block nbd2: Possible stuck request ffff888022d88400: control (read@2048,1024B). Runtime 120 seconds
[  410.319843][ T1230] block nbd2: Possible stuck request ffff888022d88600: control (read@3072,1024B). Runtime 120 seconds
[  412.794112][T22003] netlink: 340 bytes leftover after parsing attributes in process `syz.2.4661'.
[  412.801036][T22002] netlink: 340 bytes leftover after parsing attributes in process `syz.2.4661'.
[  412.801394][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4662'.
[  412.808245][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4662'.
[  412.814674][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4662'.
[  413.261704][T22021] SET target dimension over the limit!
[  413.943839][T22035] __nla_validate_parse: 129 callbacks suppressed
[  413.943854][T22035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4670'.
[  414.037664][T22041] bpq0: left promiscuous mode
[  414.041286][T22041] bpq0: left allmulticast mode
[  414.100664][T22043] bpq0: entered promiscuous mode
[  414.102764][T22043] bpq0: entered allmulticast mode
[  414.110868][T22043] netlink: 'syz.1.4674': attribute type 1 has an invalid length.
[  414.253345][T22050] netlink: 'syz.1.4675': attribute type 39 has an invalid length.
[  414.275167][T22053] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.278411][T22053] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  414.282980][T22053] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  414.354018][T22056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4676'.
[  414.440447][   T33] kauditd_printk_skb: 22 callbacks suppressed
[  414.440465][   T33] audit: type=1800 audit(1752973346.530:36): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4678" name="memory.events" dev="tmpfs" ino=7787 res=0 errno=0
[  414.451932][   T33] audit: type=1800 audit(1752973346.530:37): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4678" name="memory.events" dev="tmpfs" ino=7787 res=0 errno=0
[  414.460310][   T33] audit: type=1800 audit(1752973346.530:38): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4678" name="memory.events" dev="tmpfs" ino=7787 res=0 errno=0
[  414.467011][   T33] audit: type=1800 audit(1752973346.530:39): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4678" name="memory.events" dev="tmpfs" ino=7787 res=0 errno=0
[  414.475076][   T33] audit: type=1800 audit(1752973346.530:40): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4678" name="memory.events" dev="tmpfs" ino=7787 res=0 errno=0
[  414.483956][   T33] audit: type=1800 audit(1752973346.530:41): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4678" name="memory.events" dev="tmpfs" ino=7787 res=0 errno=0
[  414.493162][   T33] audit: type=1800 audit(1752973346.530:42): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4678" name="memory.events" dev="tmpfs" ino=7787 res=0 errno=0
[  414.501390][   T33] audit: type=1800 audit(1752973346.530:43): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4678" name="memory.events" dev="tmpfs" ino=7787 res=0 errno=0
[  414.509394][   T33] audit: type=1800 audit(1752973346.530:44): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4678" name="memory.events" dev="tmpfs" ino=7787 res=0 errno=0
[  414.517846][   T33] audit: type=1800 audit(1752973346.530:45): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4678" name="memory.events" dev="tmpfs" ino=7787 res=0 errno=0
[  414.560199][T22069] netlink: 'syz.1.4681': attribute type 2 has an invalid length.
[  414.685811][T22074] sit0 speed is unknown, defaulting to 1000
[  414.729868][T22082] netlink: 'syz.0.4685': attribute type 1 has an invalid length.
[  414.778345][T22085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4686'.
[  414.877338][T22041] ==================================================================
[  414.880166][T22041] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  414.882629][T22041] Read of size 1 at addr ffff88802fcb9032 by task syz.2.4673/22041
[  414.885773][T22041] 
[  414.886774][T22041] CPU: 0 UID: 0 PID: 22041 Comm: syz.2.4673 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  414.886788][T22041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  414.886796][T22041] Call Trace:
[  414.886801][T22041]  <TASK>
[  414.886806][T22041]  dump_stack_lvl+0x189/0x250
[  414.886825][T22041]  ? __kasan_check_byte+0x12/0x40
[  414.886846][T22041]  ? __pfx_dump_stack_lvl+0x10/0x10
[  414.886856][T22041]  ? lock_release+0x4b/0x3e0
[  414.886869][T22041]  ? __virt_addr_valid+0x4a5/0x5c0
[  414.886881][T22041]  print_report+0xd2/0x2b0
[  414.886890][T22041]  ? rose_transmit_link+0x5c3/0x740
[  414.886898][T22041]  kasan_report+0x118/0x150
[  414.886909][T22041]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  414.886925][T22041]  ? rose_transmit_link+0x5c3/0x740
[  414.886936][T22041]  rose_transmit_link+0x5c3/0x740
[  414.886944][T22041]  ? skb_put+0x11b/0x210
[  414.886958][T22041]  rose_write_internal+0x11dc/0x1ac0
[  414.886971][T22041]  ? __pfx_rose_write_internal+0x10/0x10
[  414.886982][T22041]  ? __timer_delete+0x5d/0x390
[  414.886997][T22041]  rose_release+0x24e/0x520
[  414.887010][T22041]  sock_close+0xc3/0x240
[  414.887020][T22041]  ? __pfx_sock_close+0x10/0x10
[  414.887028][T22041]  __fput+0x44c/0xa70
[  414.887039][T22041]  task_work_run+0x1d4/0x260
[  414.887053][T22041]  ? __pfx_task_work_run+0x10/0x10
[  414.887090][T22041]  ? task_work_add+0x377/0x420
[  414.887104][T22041]  ? __pfx_task_work_add+0x10/0x10
[  414.887118][T22041]  get_signal+0x11ed/0x1340
[  414.887134][T22041]  arch_do_signal_or_restart+0x9a/0x750
[  414.887152][T22041]  ? __pfx___sys_connect+0x10/0x10
[  414.887163][T22041]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  414.887181][T22041]  ? exit_to_user_mode_loop+0x40/0x110
[  414.887192][T22041]  exit_to_user_mode_loop+0x75/0x110
[  414.887202][T22041]  do_syscall_64+0x2bd/0x3b0
[  414.887212][T22041]  ? lockdep_hardirqs_on+0x9c/0x150
[  414.887220][T22041]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.887229][T22041]  ? exc_page_fault+0x9f/0xf0
[  414.887239][T22041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.887248][T22041] RIP: 0033:0x7f83b5d8e9a9
[  414.887258][T22041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  414.887266][T22041] RSP: 002b:00007f83b6c12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  414.887277][T22041] RAX: fffffffffffffe00 RBX: 00007f83b5fb5fa0 RCX: 00007f83b5d8e9a9
[  414.887284][T22041] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000c
[  414.887290][T22041] RBP: 00007f83b5e10d69 R08: 0000000000000000 R09: 0000000000000000
[  414.887295][T22041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  414.887301][T22041] R13: 0000000000000000 R14: 00007f83b5fb5fa0 R15: 00007fffc7f09628
[  414.887312][T22041]  </TASK>
[  414.887315][T22041] 
[  414.973828][T22041] Allocated by task 22041:
[  414.975307][T22041]  kasan_save_track+0x3e/0x80
[  414.976800][T22041]  __kasan_kmalloc+0x93/0xb0
[  414.978253][T22041]  __kmalloc_cache_noprof+0x230/0x3d0
[  414.979899][T22041]  rose_add_node+0x23a/0xde0
[  414.981363][T22041]  rose_rt_ioctl+0xa48/0xfb0
[  414.982789][T22041]  rose_ioctl+0x3ce/0x8b0
[  414.984167][T22041]  sock_do_ioctl+0xdc/0x300
[  414.986017][T22041]  sock_ioctl+0x576/0x790
[  414.987573][T22041]  __se_sys_ioctl+0xfc/0x170
[  414.989025][T22041]  do_syscall_64+0xfa/0x3b0
[  414.990565][T22041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.992466][T22041] 
[  414.993228][T22041] Freed by task 22043:
[  414.994493][T22041]  kasan_save_track+0x3e/0x80
[  414.995975][T22041]  kasan_save_free_info+0x46/0x50
[  414.997648][T22041]  __kasan_slab_free+0x62/0x70
[  414.999164][T22041]  kfree+0x18e/0x440
[  415.000391][T22041]  rose_rt_device_down+0x473/0x4c0
[  415.002011][T22041]  rose_device_event+0x603/0x6a0
[  415.003581][T22041]  notifier_call_chain+0x1b6/0x3e0
[  415.005197][T22041]  __dev_notify_flags+0x18d/0x2e0
[  415.006775][T22041]  netif_change_flags+0xe8/0x1a0
[  415.008669][T22041]  dev_change_flags+0x130/0x260
[  415.010440][T22041]  dev_ioctl+0x7b4/0x1150
[  415.011806][T22041]  sock_do_ioctl+0x22c/0x300
[  415.013254][T22041]  sock_ioctl+0x576/0x790
[  415.014611][T22041]  __se_sys_ioctl+0xfc/0x170
[  415.016312][T22041]  do_syscall_64+0xfa/0x3b0
[  415.017863][T22041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.019703][T22041] 
[  415.020466][T22041] The buggy address belongs to the object at ffff88802fcb9000
[  415.020466][T22041]  which belongs to the cache kmalloc-512 of size 512
[  415.024720][T22041] The buggy address is located 50 bytes inside of
[  415.024720][T22041]  freed 512-byte region [ffff88802fcb9000, ffff88802fcb9200)
[  415.028851][T22041] 
[  415.029613][T22041] The buggy address belongs to the physical page:
[  415.031741][T22041] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fcb8
[  415.034303][T22041] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  415.036844][T22041] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  415.039215][T22041] page_type: f5(slab)
[  415.040548][T22041] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  415.043506][T22041] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  415.046169][T22041] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  415.048822][T22041] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  415.051361][T22041] head: 00fff00000000002 ffffea0000bf2e01 00000000ffffffff 00000000ffffffff
[  415.054001][T22041] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  415.056670][T22041] page dumped because: kasan: bad access detected
[  415.058572][T22041] page_owner tracks the page as allocated
[  415.060338][T22041] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5829, tgid 5829 (syz-executor), ts 63666052472, free_ts 0
[  415.066566][T22041]  post_alloc_hook+0x240/0x2a0
[  415.068076][T22041]  get_page_from_freelist+0x21e4/0x22c0
[  415.069780][T22041]  __alloc_frozen_pages_noprof+0x181/0x370
[  415.071572][T22041]  alloc_pages_mpol+0x232/0x4a0
[  415.073110][T22041]  allocate_slab+0x8a/0x3b0
[  415.074516][T22041]  ___slab_alloc+0xbfc/0x1480
[  415.075893][T22041]  __kmalloc_noprof+0x305/0x4f0
[  415.077347][T22041]  __alloc_workqueue+0x103/0x1b70
[  415.078849][T22041]  alloc_workqueue+0xd4/0x210
[  415.080309][T22041]  wg_newlink+0x29e/0x650
[  415.081599][T22041]  rtnl_newlink_create+0x310/0xb00
[  415.083135][T22041]  rtnl_newlink+0x16d6/0x1c70
[  415.084775][T22041]  rtnetlink_rcv_msg+0x7cf/0xb70
[  415.086366][T22041]  netlink_rcv_skb+0x208/0x470
[  415.087775][T22041]  netlink_unicast+0x75c/0x8e0
[  415.089348][T22041]  netlink_sendmsg+0x805/0xb30
[  415.090797][T22041] page_owner free stack trace missing
[  415.092673][T22041] 
[  415.093514][T22041] Memory state around the buggy address:
[  415.095593][T22041]  ffff88802fcb8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  415.098083][T22041]  ffff88802fcb8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  415.100569][T22041] >ffff88802fcb9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  415.103153][T22041]                                      ^
[  415.105086][T22041]  ffff88802fcb9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  415.107919][T22041]  ffff88802fcb9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  415.110427][T22041] ==================================================================
[  415.158680][T22041] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  415.160982][T22041] CPU: 0 UID: 0 PID: 22041 Comm: syz.2.4673 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  415.165021][T22041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  415.168321][T22041] Call Trace:
[  415.169386][T22041]  <TASK>
[  415.170329][T22041]  dump_stack_lvl+0x99/0x250
[  415.171793][T22041]  ? __asan_memcpy+0x40/0x70
[  415.173290][T22041]  ? __pfx_dump_stack_lvl+0x10/0x10
[  415.174979][T22041]  ? __pfx__printk+0x10/0x10
[  415.176445][T22041]  panic+0x2db/0x790
[  415.177655][T22041]  ? __pfx_preempt_schedule+0x10/0x10
[  415.179446][T22041]  ? __pfx_panic+0x10/0x10
[  415.180958][T22041]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  415.182868][T22041]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  415.184897][T22041]  ? rose_transmit_link+0x5c3/0x740
[  415.186582][T22041]  check_panic_on_warn+0x89/0xb0
[  415.188156][T22041]  ? rose_transmit_link+0x5c3/0x740
[  415.189774][T22041]  end_report+0x78/0x160
[  415.191122][T22041]  kasan_report+0x129/0x150
[  415.192628][T22041]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  415.194790][T22041]  ? rose_transmit_link+0x5c3/0x740
[  415.196583][T22041]  rose_transmit_link+0x5c3/0x740
[  415.198282][T22041]  ? skb_put+0x11b/0x210
[  415.199636][T22041]  rose_write_internal+0x11dc/0x1ac0
[  415.201294][T22041]  ? __pfx_rose_write_internal+0x10/0x10
[  415.203205][T22041]  ? __timer_delete+0x5d/0x390
[  415.204836][T22041]  rose_release+0x24e/0x520
[  415.206287][T22041]  sock_close+0xc3/0x240
[  415.207604][T22041]  ? __pfx_sock_close+0x10/0x10
[  415.209124][T22041]  __fput+0x44c/0xa70
[  415.210363][T22041]  task_work_run+0x1d4/0x260
[  415.211828][T22041]  ? __pfx_task_work_run+0x10/0x10
[  415.213419][T22041]  ? task_work_add+0x377/0x420
[  415.215220][T22041]  ? __pfx_task_work_add+0x10/0x10
[  415.217232][T22041]  get_signal+0x11ed/0x1340
[  415.218923][T22041]  arch_do_signal_or_restart+0x9a/0x750
[  415.220872][T22041]  ? __pfx___sys_connect+0x10/0x10
[  415.222679][T22041]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  415.225120][T22041]  ? exit_to_user_mode_loop+0x40/0x110
[  415.227285][T22041]  exit_to_user_mode_loop+0x75/0x110
[  415.228956][T22041]  do_syscall_64+0x2bd/0x3b0
[  415.230626][T22041]  ? lockdep_hardirqs_on+0x9c/0x150
[  415.232274][T22041]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.234145][T22041]  ? exc_page_fault+0x9f/0xf0
[  415.235562][T22041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.237415][T22041] RIP: 0033:0x7f83b5d8e9a9
[  415.238817][T22041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  415.244783][T22041] RSP: 002b:00007f83b6c12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  415.247428][T22041] RAX: fffffffffffffe00 RBX: 00007f83b5fb5fa0 RCX: 00007f83b5d8e9a9
[  415.249874][T22041] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000c
[  415.252312][T22041] RBP: 00007f83b5e10d69 R08: 0000000000000000 R09: 0000000000000000
[  415.254752][T22041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  415.257209][T22041] R13: 0000000000000000 R14: 00007f83b5fb5fa0 R15: 00007fffc7f09628
[  415.259577][T22041]  </TASK>
[  415.261159][T22041] Kernel Offset: disabled
[  415.262491][T22041] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:02:27  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000148f RDI=0000000000001490 RBP=00000000000003f8 RSP=ffffc90002eaf210
R8 =ffff888021680237 R9 =1ffff110042d0046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8d2 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f83b6c126c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fedbaec1440 CR3=0000000049190000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=7269642065676e61 68632074276e6163 XMM01=2e36312e3627206f 742079726f746365
XMM02=2d72656c6c616b7a 79732d3563722d30 XMM03=3866366235333766 39672d3231323030
XMM04=2779747269642d37 3761386636623533 XMM05=376639672d323132 30302d72656c6c61
XMM06=6b7a79732d356372 2d302e36312e3627 XMM07=206f742079726f74 6365726964206567
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81746eb5 RBX=0000000125a01380 RCX=ffff888024f4b980 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc90002dbfc18 RSP=ffffc90002dbf9d0
R8 =ffff888125a01403 R9 =1ffff11024b40280 R10=dffffc0000000000 R11=ffffed1024b40281
R12=0000000000000048 R13=ffffea0000000000 R14=0000000000000028 R15=0000000000000000
RIP=ffffffff81746eb5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff9a2f7c380 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff9a2ff8440 CR3=0000000110c66000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000001df8a
XMM02=0000000001ffffff ffffffffffe50814 XMM03=30030002002e0300 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=00005555588adf89 00005555588ac290
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000001 ffffffffffffffff
XMM08=e508140300020012 0303f8020010030e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
