last executing test programs:

5m17.314526713s ago: executing program 1 (id=2921):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5e4, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5b0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x420, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x919f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0xf, 0x9, 0x0, 0x8, 0x7, 0x0, 0x4, 0x9, 0x6, 0x8, 0xe59b, 0x7, 0xf, 0x2, 0x7, 0x9, 0x2, 0x3, 0x9f, 0x100, 0x3, 0x1, 0x80000001, 0x9, 0x0, 0x0, 0x7, 0x1ff, 0xfffffffb, 0x1000, 0x2, 0x9, 0xd, 0x5, 0xe, 0x79a098fb, 0x7ff, 0x2, 0x6, 0xdce3, 0x4, 0x7c2f, 0x100, 0x5, 0x100000, 0x9, 0x3, 0x7ff, 0x9, 0x47b7, 0x10000, 0x2cf2ebd6, 0x8, 0x7, 0x5, 0x8, 0x6933, 0xb, 0x6, 0x3, 0x2, 0xd64, 0x7, 0x4, 0x4, 0x4, 0x6005, 0x4, 0x8d31, 0xffff, 0x4, 0x4, 0x80, 0xc, 0x7, 0x4, 0x0, 0x5391, 0x1, 0xa2a, 0x3, 0x5, 0x200, 0x0, 0x9, 0x8d, 0x5, 0x8, 0x4da, 0xfffffffa, 0x9, 0x7, 0x10000, 0x9, 0x0, 0x7, 0x120000, 0xd44, 0x253, 0x5, 0x6, 0x80, 0x2, 0x6, 0x3ff, 0xb42, 0x7, 0x6, 0x9, 0x7, 0x1, 0x0, 0x800000, 0x8, 0x400, 0xb95, 0xff, 0x775, 0x1, 0x3bae, 0x1, 0xc, 0x340000, 0x9, 0x200, 0x58, 0x1000, 0x10001, 0x7d43, 0x8d, 0x6, 0x6, 0x36d, 0x8, 0x1, 0x6e94, 0x0, 0xbc, 0xfff, 0xffffffe3, 0x1, 0xc99, 0x1000, 0x4, 0x3, 0x8, 0x1000, 0x4, 0x2, 0xfffffffd, 0x7fffffff, 0xa5, 0x4, 0x5, 0x0, 0x8, 0x3, 0x2, 0x3, 0x5, 0x80, 0x5, 0x4, 0x8, 0x3ff, 0x270d, 0x7, 0x10f, 0x800, 0xfaf, 0xfffffffb, 0x4, 0xffffff01, 0x2c, 0x1, 0x9, 0x2, 0x4, 0x24b, 0x4, 0x1, 0x1, 0x6, 0x4, 0x6, 0x2, 0x3, 0x9, 0xb, 0x3, 0x2, 0x6, 0x111b, 0xffffffff, 0x3, 0xff, 0x101, 0xfffffff9, 0x94, 0x0, 0x401, 0x5, 0x1, 0xe4, 0xfffffffd, 0x2, 0xffff, 0x3, 0x4, 0x4, 0x9, 0x5, 0x2, 0x8000, 0x11f, 0x153f, 0x4, 0x2, 0x5, 0xd5b5, 0xd71e, 0x800, 0x3ff, 0x869, 0x26, 0x9, 0x9, 0x8, 0x24, 0x3, 0x3, 0xf70, 0x4, 0x8, 0xfffffff7, 0x80, 0x4, 0x2, 0xfffffff8, 0x4, 0x7fffffff, 0x0, 0x5, 0x5, 0x6000000, 0x51, 0x2, 0x10, 0x95f, 0x6, 0x7, 0x6e, 0x7fffffff, 0x1]}]}, @TCA_BPF_ACT={0x184, 0x1, [@m_mirred={0x180, 0x11, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x8, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0xff000000, 0x8, 0xffff0001, 0xff}, 0x2}}]}, {0xd1, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d35eeee9461545ee2dd6d5371b63e2755d125610f6fb5c23db3466b1c9e7b9a79e2f269e7e897258f89199853270075498a6c432"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

5m17.264938251s ago: executing program 1 (id=2922):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='8', 0x1)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100))

5m16.413055458s ago: executing program 1 (id=2947):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0xe, 'nZ'}], 0x18}, 0x0)

5m16.412658448s ago: executing program 1 (id=2949):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

5m16.363450762s ago: executing program 1 (id=2951):
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0x26)

5m16.193734661s ago: executing program 1 (id=2960):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=r0, @ANYBLOB="08000f"], 0x2c}}, 0x60800)

5m16.131033549s ago: executing program 32 (id=2960):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=r0, @ANYBLOB="08000f"], 0x2c}}, 0x60800)

1.269676184s ago: executing program 3 (id=12721):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000003c0)={0x1}, 0x1)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r11, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}, 0x10)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r14=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r14, @ANYBLOB="08001500", @ANYRES32=r12, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.181674332s ago: executing program 3 (id=12723):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00d07762385fab0b228624bb857e0257510000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000019000100feffffff000008001d01070015000300020000400002000058fd7ce912ab6f3decfb000008000500f70402cc"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)

660.55587ms ago: executing program 0 (id=12738):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'b', ' *:* ', 'rw\x00'}, 0x9)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040))
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x7b, &(0x7f0000000140)="bcaa6474e9d54628e6026754bd45a934ffdd7aa700c15046a15f437c227291c2d0ea20e503a6e7d42a8298a73d76cda52cd234cd8e912c4ab3b37b6cf34792b5397956d5469406cd12733c4bb02bb7c821ca9913db1b0570a1e55d2a88266d513d679aa313a3295579941d5eed966b33f1ad212832e67296130c68", 0x54, 0x0, &(0x7f00000001c0)="181cc4565d6eeb357c0d2c1511f49daff37b7b454cb489bd5715107f0c80bf9ce52f75cf4694740b922970754323c1246011957e60656a0e8f5006ee21b1a0ef19db5a213b0342351704553dc7c6e88177772739"})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)={0x3, [0x0, <r2=>0x0, 0x0]}, &(0x7f0000000300)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={r2, 0x9}, 0x8)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r3, &(0x7f0000000380), 0x12)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000003c0)=0x800000)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3e9, 0x400, 0x70bd2d, 0x25dfdbfc, {0x8, 0x0, 0x2, 0x0, 0x0, 0x3c0, 0x7f, 0x5, 0x0, 0x9, 0x1}}, 0x3c}}, 0xc814)
r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x800)
connect$tipc(r5, &(0x7f0000000580)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}, 0x4}}, 0x10)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='net_cls.classid\x00', 0x2, 0x0)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000600)={0x8, 0x2, 0x4, 0x0, 0x0, [{{r5}, 0x9}, {{r6}, 0x3}, {{r8}, 0x7}, {{r4}}]})
r9 = socket(0xf, 0x4, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r9, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000007c0)={0x42, 0x1, 0x3}, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r9)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r10, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000810)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000980)={0x0, ""/256, 0x0, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000b80)={{r3}, r12, 0x18, @unused=[0x100, 0x4, 0x9, 0x8], @subvolid=0x1})
r13 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r13, 0x4040942c, &(0x7f0000001b80)={0x0, 0x8, [0x2, 0x7, 0x8001, 0x72a, 0x4, 0x5]})

591.786444ms ago: executing program 0 (id=12739):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x3, 0x0, 0x0, 0x5, 0x0, 0x1c38}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x1e]}}, 0x0, 0x2a, 0x0, 0x1, 0x9}, 0x28)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000240600fe8000000000000000000000000000bbfe800000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="94c2000090"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000001006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280050016000000000006000e"], 0x48}}, 0x0)

591.260831ms ago: executing program 0 (id=12740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1)
shutdown(r2, 0x1)

518.084809ms ago: executing program 0 (id=12742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=<r2=>r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c220000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f0000001500)=ANY=[@ANYRES8=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket(0x1f, 0x0, 0x4)
getpeername$packet(r5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e23, 0x6, 'nq\x00', 0x1, 0x5, 0x4a}, 0x2c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f00000012c0), 0x8)

251.352948ms ago: executing program 2 (id=12749):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x36, 0x0, &(0x7f00000004c0)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e000000000000d403f88aefc7c2d572f3be8fb2c8496f93b35fb2", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0xb8, 0x30, 0x10, 0x70bd28, 0x0, {}, [{0xa4, 0x1, [@m_simple={0xa0, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4b, 0x6, "9cdd2685ea9fd55ad6620945208ea75a78e8204a88b81ea5f65e61ad0e37f3a60a551eae0881dda13a37a3441e912c96177bbf593a9c0ed520b5502922452f88ef2eb92dc73e54"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

250.734735ms ago: executing program 3 (id=12750):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

250.594359ms ago: executing program 2 (id=12751):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0xff05, 0x70bd25, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x74620}, [@IFLA_TXQLEN={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404d843}, 0xdffb7d76792d9c8a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500030000000c001680080001"], 0x38}}, 0x10)
r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @bcast}, [@null, @remote, @default, @null, @netrom, @bcast, @rose, @rose]}, &(0x7f0000000040)=0x48, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r7 = getgid()
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={r3, r6, r7}, 0xc)

171.770218ms ago: executing program 2 (id=12752):
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0)
recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0xfffffebb, &(0x7f0000000280), 0x48}, 0x2000000)

171.083465ms ago: executing program 2 (id=12753):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1200000078000106000000000000000007"], 0x18}], 0x1}, 0x0) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1200000078000106000000000000000007"], 0x18}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="14000000c571000000000000000000000000000a200000000000000000050000000900010073797a300000000048000000030a01030000000000000000050008000900010073797a30000000003700030073797a300000000008000a4000000043140004169a707318061402a436800800024000000012080001400000000014000000070001000000"], 0x90}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000800000000b2000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000001c0)) (async)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
socket$kcm(0x11, 0xa, 0x300) (async)
socket$kcm(0x11, 0xa, 0x300)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) (async)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaa04f5a0021ebd6bb35941834f0180c200000208004518005800f4ffffff2f906a7fd30d01ac1e01010420880b0000000000000800040086dd080088be790000000010000000002000c0000200000000000000000000000800655800"/114], 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), 0x0, 0x2}, 0x20)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f00000028c0)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}], 0x5}, 0x40004) (async)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f00000028c0)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}], 0x5}, 0x40004)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x8800)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48)
accept4$alg(r2, 0x0, 0x0, 0x0) (async)
r8 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001480)="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", 0x12c}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000015c0)="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", 0x120}], 0x3}}], 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000105a00010429bd700000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000001c0012800900010069706970000000000c00028008001400ff010000"], 0x3c}}, 0x80)

121.327475ms ago: executing program 2 (id=12754):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x44055}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, <r3=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={r3, 0x9, 0xb5}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
r8 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7e, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0xffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@ipmr_newroute={0x30, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0x80, 0x0, 0x0, 0xd9, 0xfe, 0x7, 0xfe, 0x8, 0x200}, [@RTA_NH_ID={0x8, 0x1e, 0xe}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4810)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r12, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r13, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x44}}, 0x40048a4)
r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r15=>0x0})
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x30, r16, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c000)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r6, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040804}, 0xc0)
socket$kcm(0x11, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

120.972861ms ago: executing program 2 (id=12755):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r1, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006003200000002000000ffffffff000000000000000008001900000000000a00"], 0xc0}}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000002000000080003007d6018b3ac33d063ea9f45489e821b10778e", @ANYRES32=r4, @ANYBLOB="0c00990002000000250000000800a0009e09000008009f00030000000800260080090000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
getsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000700000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000b70900000000000055090100000000009500000000000000bf91010000000000b702000000000000850000008c000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000))
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0x4}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0xffffffffffffffff, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)

120.697933ms ago: executing program 3 (id=12756):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0xfffffee4, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r2, @ANYBLOB="200050800500050000000000080003003f67b15202ac0f00090001007ee5d52ffd000000"], 0x3c}}, 0x0)

51.83928ms ago: executing program 3 (id=12757):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffffb7bd7000fbfbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a6a9e131561a0500240012800e00010069703465727370616e00000010000280040012000800050000040000"], 0x44}}, 0x48800)

51.636508ms ago: executing program 3 (id=12758):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x7)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
accept$netrom(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44090}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @remote})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x9d64bec1cf14bd0e)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=[{0x10, 0x115, 0x8}, {0x408, 0x1, 0x1, "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"}], 0x418}}], 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xe2, 0x0, &(0x7f0000000180)="466e772b67d05dd81bf6d68672f279b7eb323b136b8db72e3b46ddfb2b1385537a1dc80128c9df326efddd7e20a1b6c03e80763a1b5c9a7e7bb8adb0835e37dc418055e0fd3a7c7badb03f25f70c57fe0e852fbb9a1d7598b691d1542b9653153d138c99578631b8c80269329a510a6f55e9a87ad6c1efaa7e71e16d5cebaa295a7b7c695c7838cfe99b7fcf21fd38d1a75f0fe7dfe7fff93a88621a9ba1aaabd1a88fb66971c559e26d35be57c4945ce4574725980881858095641255666769739fd3cddc6805e43fe1a8499f7167d4973914fee09196dad54d0788e569f6e4362b", 0x0, 0x7, 0x0, 0xfa, 0x0, &(0x7f0000000280)="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", 0x0, 0x2, 0x0, 0xa1b}, 0x50)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0)

261.779µs ago: executing program 0 (id=12759):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffef4)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], 0x7c}}, 0x8000)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="1400000010000100000000000000000000ffb00e4781387d5900010000000000000008000300000a"], 0x28}}, 0x0)
sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r4, 0x0, r3, 0x0, 0xfea7, 0x6)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYRES64=r4], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000440), 0x10)
listen(r8, 0x0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
close(r9)
close(0x4)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88888220100140012800b0001006970766c616e00000400028008000500", @ANYRES32=r10, @ANYBLOB="6c3db4c4d354ae4321bc0352057faa5155a3579580ac89283fbf9eb503529957fe63326b2532b142b3f4698aecca366d"], 0x3c}}, 0x40000)
socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0)

0s ago: executing program 0 (id=12760):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="20f9a299", @ANYRES16=r3, @ANYBLOB="01000000000000000000030202000900010073797a3100000000"], 0x20}, 0x1, 0x40030000000000}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0xdf, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @remote, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)

kernel console output (not intermixed with test programs):

62622][T23874] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 58711 - 0
[  270.645131][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 58711 - 0
[  270.649280][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 43413 - 0
[  270.673853][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 58711 - 0
[  270.678599][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 43413 - 0
[  270.692440][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 58711 - 0
[  270.697402][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 43413 - 0
[  270.708373][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 58711 - 0
[  270.711387][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 43413 - 0
[  270.902029][T23941] lo speed is unknown, defaulting to 1000
[  270.922357][T23950] netlink: 'syz.0.7982': attribute type 5 has an invalid length.
[  271.143267][T23980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.152711][T23980] syzkaller0: entered promiscuous mode
[  271.155092][T23980] syzkaller0: entered allmulticast mode
[  271.161607][T23980] tipc: Resetting bearer <eth:syzkaller0>
[  271.165548][T23979] tipc: Resetting bearer <eth:syzkaller0>
[  271.171553][T23979] tipc: Disabling bearer <eth:syzkaller0>
[  271.323020][T23997] netlink: 'syz.2.8004': attribute type 10 has an invalid length.
[  271.683257][T24018] netlink: 'syz.2.8014': attribute type 18 has an invalid length.
[  271.746976][T24026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.751020][T24026] syzkaller0: entered promiscuous mode
[  271.753496][T24026] syzkaller0: entered allmulticast mode
[  271.762168][T24026] tipc: Resetting bearer <eth:syzkaller0>
[  271.765586][T24025] tipc: Resetting bearer <eth:syzkaller0>
[  271.770963][T24025] tipc: Disabling bearer <eth:syzkaller0>
[  272.361411][T24079] nbd: must specify at least one socket
[  272.642470][T24100] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  272.646581][T24100] tipc: Enabled bearer <udp:syz0>, priority 26
[  273.291653][T24159] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  273.295078][T24159] batman_adv: batadv0: Removing interface: ip6gretap1
[  273.320870][T24159] team0: Mode changed to "activebackup"
[  273.465049][T24173] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode
[  273.468009][T24173] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  274.605419][T24219] __nla_validate_parse: 3 callbacks suppressed
[  274.605438][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8100'.
[  274.818055][T24244] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8111'.
[  274.853401][T24249] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  275.289812][T24281] netlink: 'syz.2.8127': attribute type 6 has an invalid length.
[  275.356471][T24289] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8130'.
[  275.466120][T24303] openvswitch: netlink: Key type 251 is out of range max 32
[  275.474979][T24303] lo speed is unknown, defaulting to 1000
[  275.809595][T24326] netlink: 'syz.3.8145': attribute type 1 has an invalid length.
[  275.818851][T24326] netlink: 15 bytes leftover after parsing attributes in process `syz.3.8145'.
[  276.272987][T24353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8157'.
[  276.278213][T24353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8157'.
[  277.215542][T24431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.218547][T24431] syzkaller0: entered promiscuous mode
[  277.220616][T24431] syzkaller0: entered allmulticast mode
[  277.224827][T24431] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  277.229854][T24431] tipc: Resetting bearer <eth:syzkaller0>
[  277.232888][T24430] tipc: Resetting bearer <eth:syzkaller0>
[  277.238623][T24430] tipc: Disabling bearer <eth:syzkaller0>
[  277.404700][T24444] team0: Mode changed to "broadcast"
[  277.407406][T24444] vlan0: entered promiscuous mode
[  277.410901][T24444] tipc: Enabled bearer <eth:team0>, priority 0
[  277.586286][T24466] ip6gretap0: entered promiscuous mode
[  277.588470][T24466] macsec3: entered allmulticast mode
[  277.590541][T24466] ip6gretap0: entered allmulticast mode
[  277.593588][T24466] ip6gretap0: left allmulticast mode
[  277.596487][T24466] ip6gretap0: left promiscuous mode
[  278.011572][T24427] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  278.121674][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8216'.
[  278.803977][T24517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8226'.
[  278.855699][T24521] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8228'.
[  278.859528][T24521] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8228'.
[  279.112407][T24545] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  279.167450][T24553] vlan0: entered promiscuous mode
[  279.169313][T24553] team0: entered promiscuous mode
[  279.770756][T24595] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  280.344428][T24633] block nbd3: server does not support multiple connections per device.
[  280.350841][T24633] block nbd3: shutting down sockets
[  280.610116][T24643] __nla_validate_parse: 4 callbacks suppressed
[  280.610160][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8284'.
[  280.623643][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8284'.
[  280.761033][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8290'.
[  280.916636][T24673] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8296'.
[  280.987660][T24682] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  281.118476][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8299'.
[  281.400973][T24711] erspan1: entered promiscuous mode
[  281.724919][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8320'.
[  282.076975][T24777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  282.153048][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  282.159218][T24786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8338'.
[  283.926070][T24877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8378'.
[  283.929697][T24877] netlink: 'syz.2.8378': attribute type 7 has an invalid length.
[  283.933048][T24877] netlink: 'syz.2.8378': attribute type 8 has an invalid length.
[  283.936770][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8378'.
[  283.982163][T24881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8380'.
[  284.138798][T24893] IPVS: Unknown mcast interface: bridge0
[  284.169621][T24895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.172892][T24895] syzkaller0: entered promiscuous mode
[  284.176246][T24895] syzkaller0: entered allmulticast mode
[  284.183301][T24895] tipc: Resetting bearer <eth:syzkaller0>
[  284.186931][T24894] tipc: Resetting bearer <eth:syzkaller0>
[  284.191662][T24894] tipc: Disabling bearer <eth:syzkaller0>
[  284.333923][T24903] tap0: tun_chr_ioctl cmd 1074025677
[  284.336608][T24903] tap0: linktype set to 774
[  284.530594][T24871] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  284.656753][T24842] Failed to register nexthop notifier
[  284.736888][T24936] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.231165][T25009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.826234][T25095] __nla_validate_parse: 7 callbacks suppressed
[  285.826251][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8478'.
[  285.937343][T25121] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode
[  285.939965][T25121] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  286.005074][T25132] lo speed is unknown, defaulting to 1000
[  286.211482][T25159] netlink: 'syz.2.8503': attribute type 1 has an invalid length.
[  286.227274][T25159] 8021q: adding VLAN 0 to HW filter on device bond6
[  286.257304][T25159] 8021q: adding VLAN 0 to HW filter on device bond6
[  286.259269][T25163] netlink: 'syz.3.8506': attribute type 1 has an invalid length.
[  286.261433][T25159] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  286.267658][T25159] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  286.324419][T25159] veth11: entered promiscuous mode
[  286.333374][T25159] bond6: (slave veth11): Enslaving as an active interface with a down link
[  286.718199][T25205] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8524'.
[  286.722068][T25205] NCSI netlink: No device for ifindex 0
[  286.920968][T25214] lo speed is unknown, defaulting to 1000
[  287.122352][T25218] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8529'.
[  287.238192][T25228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.846385][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8560'.
[  288.097482][T25325] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  288.166783][T25331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8578'.
[  288.223353][T25337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8581'.
[  288.230730][T25337] hsr_slave_1 (unregistering): left promiscuous mode
[  288.433898][T25348] macsec0: entered promiscuous mode
[  288.501720][T25350] lo speed is unknown, defaulting to 1000
[  288.757495][T25374] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8595'.
[  288.766989][T25376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8596'.
[  288.913414][T25390] netlink: 'syz.3.8603': attribute type 1 has an invalid length.
[  289.179160][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  289.182486][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  289.193884][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  289.197669][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  289.278121][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8626'.
[  289.324340][T25447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8628'.
[  289.396199][T25454] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  289.499240][T25461] lo speed is unknown, defaulting to 1000
[  289.678402][T25476] netlink: 'syz.3.8640': attribute type 21 has an invalid length.
[  289.685118][T25476] ipvlan3: entered promiscuous mode
[  289.688284][T25476] bridge0: port 1(ipvlan3) entered blocking state
[  289.691150][T25476] bridge0: port 1(ipvlan3) entered disabled state
[  289.694084][T25476] ipvlan3: entered allmulticast mode
[  289.699598][T25476] gretap0: entered allmulticast mode
[  289.702342][T25476] ipvlan3: left allmulticast mode
[  289.704604][T25476] gretap0: left allmulticast mode
[  289.958183][T25487] vlan0: entered promiscuous mode
[  290.022447][T25489] netlink: 'syz.2.8646': attribute type 1 has an invalid length.
[  290.413549][T25523] veth0_to_bond: entered allmulticast mode
[  290.450177][   T33] audit: type=1800 audit(1756156569.934:10): pid=25527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8665" name="memory.events" dev="tmpfs" ino=14838 res=0 errno=0
[  290.465553][   T33] audit: type=1804 audit(1756156569.944:11): pid=25527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.8665" name="memory.events" dev="tmpfs" ino=14838 res=1 errno=0
[  290.486362][T25529] lo speed is unknown, defaulting to 1000
[  290.793589][T25563] netlink: 'syz.2.8682': attribute type 1 has an invalid length.
[  290.807381][T25563] 8021q: adding VLAN 0 to HW filter on device bond7
[  290.822995][T25563] bond7: (slave bridge0): making interface the new active one
[  290.832155][T25563] bond7: (slave bridge0): Enslaving as an active interface with an up link
[  290.840102][T25563] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  290.849994][T25572] netlink: 'syz.3.8686': attribute type 12 has an invalid length.
[  290.856553][T25574] __nla_validate_parse: 4 callbacks suppressed
[  290.856562][T25574] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8687'.
[  291.004436][T25596] netlink: 'syz.0.8698': attribute type 3 has an invalid length.
[  291.010551][T25596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8698'.
[  291.145262][T25624] netlink: 'syz.2.8712': attribute type 1 has an invalid length.
[  291.147934][T25624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8712'.
[  291.175538][T25618] macvlan4: entered allmulticast mode
[  291.179453][T25618] veth1_vlan: entered allmulticast mode
[  291.183489][T25618] veth1_vlan: left allmulticast mode
[  291.292745][T25632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8715'.
[  291.302736][T25632] netlink: 'syz.3.8715': attribute type 2 has an invalid length.
[  291.366511][T25638] tap0: tun_chr_ioctl cmd 1074025677
[  291.369090][T25638] tap0: linktype set to 800
[  291.448856][T25651] tun0: tun_chr_ioctl cmd 1074025681
[  291.638368][T25682] bridge0: port 1(erspan0) entered blocking state
[  291.640758][T25682] bridge0: port 1(erspan0) entered disabled state
[  291.643003][T25682] erspan0: entered allmulticast mode
[  291.647087][T25682] erspan0: left allmulticast mode
[  291.706846][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8742'.
[  291.828989][T25717] netlink: 'syz.2.8754': attribute type 1 has an invalid length.
[  292.267965][T25780] IPVS: length: 163 != 8
[  292.523793][T25828] lo speed is unknown, defaulting to 1000
[  292.539480][T25833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8809'.
[  292.618747][T25846] netlink: 'syz.3.8814': attribute type 4 has an invalid length.
[  292.625967][T25846] netlink: 'syz.3.8814': attribute type 4 has an invalid length.
[  292.739910][T25871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8825'.
[  293.829927][T25953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8859'.
[  294.289152][T25996] lo speed is unknown, defaulting to 1000
[  294.405924][T26016] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8889'.
[  294.739063][T26079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8918'.
[  294.944428][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  295.544565][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  295.961113][T26190] __nla_validate_parse: 2 callbacks suppressed
[  295.961128][T26190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8967'.
[  296.227080][T26226] validate_nla: 5 callbacks suppressed
[  296.227095][T26226] netlink: 'syz.3.8983': attribute type 10 has an invalid length.
[  296.328304][T26232] lo speed is unknown, defaulting to 1000
[  296.559310][T26255] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8997'.
[  296.762644][T26277] team0: Device macvlan0 is already an upper device of the team interface
[  296.831284][T26285] lo speed is unknown, defaulting to 1000
[  296.833540][T26287] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9011'.
[  297.922133][T26351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9038'.
[  297.927394][T26351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9038'.
[  297.931407][T26351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9038'.
[  297.935503][T26351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9038'.
[  298.112202][T26353] vlan2: entered promiscuous mode
[  298.114577][T26353] batadv0: entered promiscuous mode
[  298.837808][T26429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.220603][T26444] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9081'.
[  299.325470][T26450] netlink: 'syz.0.9084': attribute type 1 has an invalid length.
[  299.336519][T26450] 8021q: adding VLAN 0 to HW filter on device bond4
[  299.345461][T26450] bond4: (slave geneve3): making interface the new active one
[  299.349089][T26450] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  299.352092][   T12] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  299.356744][   T12] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  299.361154][   T12] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  299.364597][   T12] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  300.552175][T26555] netlink: 'syz.3.9131': attribute type 1 has an invalid length.
[  300.562199][T26555] 8021q: adding VLAN 0 to HW filter on device bond7
[  300.618306][T26565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.621294][T26565] syzkaller0: entered promiscuous mode
[  300.623276][T26565] syzkaller0: entered allmulticast mode
[  300.629884][T26565] tipc: Resetting bearer <eth:syzkaller0>
[  300.632512][T26564] tipc: Resetting bearer <eth:syzkaller0>
[  300.642176][T26564] tipc: Disabling bearer <eth:syzkaller0>
[  301.241790][T26616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9155'.
[  301.251560][T26616] macvtap2: entered promiscuous mode
[  301.253917][T26616] bond0: entered promiscuous mode
[  301.256260][T26616] macvtap2: entered allmulticast mode
[  301.258471][T26616] bond0: entered allmulticast mode
[  301.260627][T26616] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  301.313212][T26623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9157'.
[  301.316694][T26623] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  301.375128][T26627] lo speed is unknown, defaulting to 1000
[  301.980029][T26662] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  301.983397][T26662] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  302.029068][T26662] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.032532][T26662] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  302.089193][T26662] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.092969][T26662] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  302.148767][T26662] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.152076][T26662] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  302.219369][T22321] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.223057][T22321] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  302.231849][T22321] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.236515][T22321] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  302.242837][T22321] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.246463][T22321] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  302.257096][T22321] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  302.260636][T22321] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  302.511855][T26683] dummy0: entered promiscuous mode
[  302.514629][T26683] macsec2: entered promiscuous mode
[  302.517047][T26683] macsec2: entered allmulticast mode
[  302.519324][T26683] dummy0: entered allmulticast mode
[  302.522290][T26683] dummy0: left allmulticast mode
[  302.524658][T26683] dummy0: left promiscuous mode
[  302.754481][T26658] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  302.929186][T26718] netlink: 'syz.0.9196': attribute type 1 has an invalid length.
[  303.093134][T26729] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode
[  303.097734][T26729] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  303.282851][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9210'.
[  303.401032][T26755] bridge12: entered promiscuous mode
[  303.405557][T26755] bridge12: entered allmulticast mode
[  303.452911][T26760] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  303.625515][T26775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9222'.
[  304.112556][T26785] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  304.118352][T26785] syzkaller0: entered promiscuous mode
[  304.120689][T26785] syzkaller0: entered allmulticast mode
[  304.195217][T26787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9227'.
[  304.307371][T26802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9233'.
[  304.388648][T26804] netlink: 'syz.2.9235': attribute type 1 has an invalid length.
[  304.391306][T26804] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9235'.
[  304.450118][T26820] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9241'.
[  304.453898][T26820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9241'.
[  304.559941][T26834] netlink: 'syz.0.9249': attribute type 11 has an invalid length.
[  304.658378][T26848] netlink: 'syz.2.9256': attribute type 1 has an invalid length.
[  304.663768][T26850] gtp1: entered promiscuous mode
[  304.666113][T26850] gtp1: entered allmulticast mode
[  305.003994][T26889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9273'.
[  305.056885][T26893] sit0: entered promiscuous mode
[  305.059118][T26893] netlink: 'syz.3.9275': attribute type 1 has an invalid length.
[  305.623703][T26935] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  305.628289][T26935] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  306.488979][T26945] netlink: 'syz.2.9298': attribute type 29 has an invalid length.
[  306.493033][T26945] netlink: 'syz.2.9298': attribute type 29 has an invalid length.
[  306.503223][T26945] netlink: 'syz.2.9298': attribute type 40 has an invalid length.
[  306.600238][T26959] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58711 - 0
[  306.605029][T26959] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 43413 - 0
[  306.609203][T26959] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  306.642339][T26965] __nla_validate_parse: 4 callbacks suppressed
[  306.642354][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9307'.
[  306.667005][T26959] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58711 - 0
[  306.670925][T26959] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 43413 - 0
[  306.692661][T26959] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  306.736680][T26959] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58711 - 0
[  306.740359][T26959] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 43413 - 0
[  306.743775][T26959] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  306.769332][T26988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9315'.
[  306.798140][T26959] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 58711 - 0
[  306.801865][T26959] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 43413 - 0
[  306.808504][T26959] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  306.878269][T27006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9325'.
[  306.890671][T22321] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.893421][T22321] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 58711 - 0
[  306.897295][T22321] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 43413 - 0
[  306.900344][T22321] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.903360][T22321] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 58711 - 0
[  306.907180][T22321] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 43413 - 0
[  306.915848][T22321] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.919332][T22321] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 58711 - 0
[  306.923012][T22321] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 43413 - 0
[  306.927024][T22321] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.929811][T22321] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 58711 - 0
[  306.932577][T22321] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 43413 - 0
[  306.936698][T27010] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  307.086995][T27026] bridge10: entered promiscuous mode
[  307.445688][T27065] nbd3: detected capacity change from 0 to 63
[  307.449770][T27071] block nbd3: NBD_DISCONNECT
[  307.451829][T27071] block nbd3: Disconnected due to user request.
[  307.455337][T27071] block nbd3: shutting down sockets
[  307.565520][T27079] erspan0: left allmulticast mode
[  307.598703][T27079] bond0: left allmulticast mode
[  307.601416][T27079] bond0: left promiscuous mode
[  307.607965][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.615657][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 58711 - 0
[  307.619851][   T12] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 43413 - 0
[  307.623445][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.628563][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 58711 - 0
[  307.632323][   T12] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 43413 - 0
[  307.636278][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.640172][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 58711 - 0
[  307.643682][   T12] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 43413 - 0
[  307.650504][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.653807][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 58711 - 0
[  307.657511][   T12] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 43413 - 0
[  308.658454][T27150] netlink: 51 bytes leftover after parsing attributes in process `syz.0.9376'.
[  309.061273][T27168] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9382'.
[  309.207067][T27182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9388'.
[  310.312620][T27243] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9417'.
[  310.325689][T27248] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  310.332160][T27248] syzkaller0: entered promiscuous mode
[  310.334287][T27248] syzkaller0: entered allmulticast mode
[  310.516690][T27284] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9436'.
[  310.680973][T27313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.732717][T27322] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  311.318931][T27405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9493'.
[  312.320586][T27440] lo speed is unknown, defaulting to 1000
[  312.563009][T27449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9511'.
[  312.566953][T27449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9511'.
[  312.661971][T27460] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9517'.
[  312.840228][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9526'.
[  312.892534][T27486] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.897019][T27486] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode
[  312.899796][T27486] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  313.196746][T27505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9538'.
[  313.564721][T27553] lo speed is unknown, defaulting to 1000
[  313.597234][T27558] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  313.689076][T27568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9565'.
[  313.778261][T27579] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9570'.
[  313.919120][T27574] lo speed is unknown, defaulting to 1000
[  314.396912][T27623] syzkaller0: entered promiscuous mode
[  314.398860][T27623] syzkaller0: entered allmulticast mode
[  315.165235][T27627] lo speed is unknown, defaulting to 1000
[  315.311127][T27657] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9605'.
[  315.698852][T27693] netlink: 'syz.3.9615': attribute type 16 has an invalid length.
[  315.702232][T27693] netlink: 'syz.3.9615': attribute type 17 has an invalid length.
[  315.720418][T27693] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.725261][T27693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  316.658655][T27746] pim6reg1: entered promiscuous mode
[  316.660815][T27746] pim6reg1: entered allmulticast mode
[  316.738933][T27752] pim6reg: entered allmulticast mode
[  316.741985][T27752] pim6reg: left allmulticast mode
[  316.828653][T27754] netlink: 'syz.2.9649': attribute type 11 has an invalid length.
[  316.996137][T27758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9651'.
[  317.066061][T27768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.225511][T27777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9657'.
[  317.550969][T27792] syzkaller0: entered promiscuous mode
[  317.553261][T27792] syzkaller0: entered allmulticast mode
[  317.942642][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9675'.
[  317.949536][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9675'.
[  318.301903][T27850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9687'.
[  318.308655][T27850] netlink: 'syz.0.9687': attribute type 1 has an invalid length.
[  318.351272][T27855] netlink: 'syz.0.9689': attribute type 1 has an invalid length.
[  318.355325][T27855] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9689'.
[  318.660452][T27884] openvswitch: netlink: Message has 16 unknown bytes.
[  318.810823][T27895] pimreg: left allmulticast mode
[  319.437162][T27924] netlink: 'syz.3.9716': attribute type 13 has an invalid length.
[  319.440711][T27924] netlink: 'syz.3.9716': attribute type 17 has an invalid length.
[  319.454663][T27924] sit0: left promiscuous mode
[  319.462554][T27924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  319.514794][T27924] lo speed is unknown, defaulting to 1000
[  319.948623][T27976] netlink: 'syz.0.9736': attribute type 1 has an invalid length.
[  319.966080][T27979] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  320.036524][T27988] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  320.437228][T28050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9764'.
[  320.834342][T28091] block nbd3: server does not support multiple connections per device.
[  320.838118][T28091] block nbd3: shutting down sockets
[  321.653212][T28133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9799'.
[  321.656499][T28133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9799'.
[  321.723377][T28147] C: renamed from team_slave_0
[  321.726358][T28147] netlink: 'syz.3.9805': attribute type 3 has an invalid length.
[  321.729188][T28147] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9805'.
[  321.729657][T28141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9803'.
[  321.732277][T28147] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  322.058619][ T6718] lo speed is unknown, defaulting to 1000
[  323.043926][T28257] lo speed is unknown, defaulting to 1000
[  323.378675][T28279] lo speed is unknown, defaulting to 1000
[  323.874212][T28314] lo speed is unknown, defaulting to 1000
[  323.976023][T28324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9879'.
[  324.099945][T28328] lo: entered allmulticast mode
[  324.103526][T28328] lo: left allmulticast mode
[  324.118528][T28330] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  324.122634][T28330] syzkaller0: entered promiscuous mode
[  324.125196][T28330] syzkaller0: entered allmulticast mode
[  324.323945][T28345] ip6gre2: entered promiscuous mode
[  324.587073][T28384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  324.613958][T28382] veth0_to_bridge: entered promiscuous mode
[  324.623908][T28381] veth0_to_bridge: left promiscuous mode
[  324.751662][T28402] openvswitch: netlink: Key type 277 is out of range max 32
[  324.813705][T28410] 8021q: adding VLAN 0 to HW filter on device bond5
[  324.824770][T28416] netlink: 'syz.3.9917': attribute type 1 has an invalid length.
[  324.827066][T28410] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  324.831621][T28410] bond5: (slave macvlan0): Enslaving as a backup interface with a down link
[  324.869047][T28416] 8021q: adding VLAN 0 to HW filter on device bond8
[  324.873963][T28413] lo speed is unknown, defaulting to 1000
[  324.888659][T28416] bond8: (slave gretap3): making interface the new active one
[  324.893280][T28416] bond8: (slave gretap3): Enslaving as an active interface with an up link
[  325.302074][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9935'.
[  325.686137][T28522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9960'.
[  326.967745][T28598] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9996'.
[  327.015901][T28594] bridge0: entered allmulticast mode
[  327.018853][T28594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9995'.
[  327.029467][T28594] bridge0 (unregistering): left allmulticast mode
[  327.407163][T28647] lo speed is unknown, defaulting to 1000
[  328.533574][T28703] netlink: 'syz.3.10041': attribute type 1 has an invalid length.
[  328.544759][T28703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10041'.
[  328.658806][T28711] lo speed is unknown, defaulting to 1000
[  328.786315][T28711] netlink: 248 bytes leftover after parsing attributes in process `syz.3.10044'.
[  329.091787][T28725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10049'.
[  329.266192][T28748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10060'.
[  329.453884][T28776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10072'.
[  329.458125][T28776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10072'.
[  329.462010][T28776] netlink: 'syz.3.10072': attribute type 3 has an invalid length.
[  330.663696][T28823] lo speed is unknown, defaulting to 1000
[  331.046369][T28865] syzkaller1: entered promiscuous mode
[  331.048306][T28865] syzkaller1: entered allmulticast mode
[  331.273872][T28878] lo speed is unknown, defaulting to 1000
[  331.726823][T28931] lo speed is unknown, defaulting to 1000
[  331.851360][T28947] netlink: 'syz.0.10147': attribute type 30 has an invalid length.
[  331.991943][T28963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10154'.
[  332.050286][T28966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.709617][T28981] netlink: 'syz.3.10162': attribute type 1 has an invalid length.
[  332.712915][T28981] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10162'.
[  332.736726][T28983] sctp: [Deprecated]: syz.3.10163 (pid 28983) Use of struct sctp_assoc_value in delayed_ack socket option.
[  332.736726][T28983] Use struct sctp_sack_info instead
[  333.338901][T29060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10198'.
[  333.342212][T29060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10198'.
[  334.440179][T29103] sock: sock_timestamping_bind_phc: sock not bind to device
[  334.492554][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10217'.
[  334.850580][T29155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10239'.
[  335.013832][T29180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10250'.
[  335.318372][T29200] netlink: 'syz.0.10258': attribute type 3 has an invalid length.
[  335.825332][T29217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10265'.
[  335.955177][T29225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10268'.
[  335.997874][T29237] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  336.002110][T29237] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  336.006542][T29237] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  336.159246][T29263] dvmrp1: entered allmulticast mode
[  336.266262][T29261] batman_adv: batadv0: Adding interface: ip6gretap1
[  336.269303][T29261] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.281006][T29261] batman_adv: batadv0: Interface activated: ip6gretap1
[  337.368171][T29302] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10302'.
[  337.372480][T29301] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10302'.
[  337.562496][T29318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10309'.
[  338.120554][T29344] siw: device registration error -23
[  338.126169][T29344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10321'.
[  338.227479][    C1] vcan0: j1939_tp_rxtimer: 0xffff88813470e400: rx timeout, send abort
[  338.518132][T29372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10335'.
[  338.621974][T29384] netlink: 'syz.2.10341': attribute type 1 has an invalid length.
[  338.626489][T29384] netlink: 'syz.2.10341': attribute type 1 has an invalid length.
[  338.730302][    C1] vcan0: j1939_tp_rxtimer: 0xffff88813470e400: abort rx timeout. Force session deactivation
[  338.801282][T29406] netlink: 'syz.2.10352': attribute type 10 has an invalid length.
[  338.861177][T29420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.863722][T29420] syzkaller0: entered promiscuous mode
[  338.868301][T29420] syzkaller0: entered allmulticast mode
[  338.880758][T29420] tipc: Resetting bearer <eth:syzkaller0>
[  338.883903][T29419] tipc: Resetting bearer <eth:syzkaller0>
[  338.894391][T29419] tipc: Disabling bearer <eth:syzkaller0>
[  338.940744][T29428] netlink: 'syz.0.10362': attribute type 1 has an invalid length.
[  339.033502][T29436] netlink: 'syz.0.10365': attribute type 10 has an invalid length.
[  339.053464][T29445] netlink: 'syz.0.10369': attribute type 10 has an invalid length.
[  339.228132][    C1] vcan0: j1939_tp_rxtimer: 0xffff88813470e800: rx timeout, send abort
[  339.731530][    C1] vcan0: j1939_tp_rxtimer: 0xffff88813470e800: abort rx timeout. Force session deactivation
[  339.739250][T29492] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  339.925072][T29496] __nla_validate_parse: 2 callbacks suppressed
[  339.925087][T29496] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10391'.
[  339.966263][T29525] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 4, id = 0
[  339.999958][T29533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.025533][T29539] syzkaller1: tun_chr_ioctl cmd 1074025673
[  340.038819][T29541] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  340.100257][T29553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10417'.
[  340.106417][T29553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10417'.
[  340.215206][T29570] netlink: 'syz.3.10425': attribute type 10 has an invalid length.
[  340.218862][T29570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10425'.
[  340.222856][T29570] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  340.442179][T29605] netlink: 'syz.2.10441': attribute type 15 has an invalid length.
[  340.471520][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10443'.
[  340.474716][T29611] netlink: 'syz.0.10444': attribute type 11 has an invalid length.
[  340.524001][T29617] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10447'.
[  340.607208][T29627] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  340.611559][T29627] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  340.638737][T29627] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  340.642814][T29627] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  340.727441][T29627] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  340.731861][T29627] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  340.796918][T29627] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  340.801337][T29627] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  340.859806][T22321] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  340.863459][T22321] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  340.870914][T22321] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  340.875663][T22321] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  340.883637][T22321] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  340.887225][T22321] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  340.895689][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  340.900172][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  341.087454][T29650] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10463'.
[  341.091313][T29650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10463'.
[  341.238980][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  341.248657][T29675] netlink: 'syz.3.10473': attribute type 10 has an invalid length.
[  342.295102][T29765] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10508'.
[  342.340135][T29773] netlink: 'syz.2.10512': attribute type 15 has an invalid length.
[  342.718132][T29814] netlink: zone id is out of range
[  342.725999][T29814] netlink: zone id is out of range
[  342.727739][T29814] netlink: zone id is out of range
[  342.729710][T29814] netlink: zone id is out of range
[  342.731601][T29814] netlink: zone id is out of range
[  342.733434][T29814] netlink: zone id is out of range
[  342.762356][T29817] bond5: option mode: unable to set because the bond device has slaves
[  342.775695][T29817] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  342.939382][T29835] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  343.135450][T29850] netlink: 19 bytes leftover after parsing attributes in process `syz.3.10546'.
[  344.097348][T29859] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  344.239334][T29918] bond1: (slave gretap1): Releasing active interface
[  344.243689][T29918] bond2: (slave bridge2): Releasing active interface
[  344.247926][T29918] bond3: (slave gretap2): Releasing active interface
[  344.252039][T29918] bond4: (slave bridge4): Releasing backup interface
[  344.254777][T29918] bridge4: left promiscuous mode
[  344.259041][T29918] bond8: (slave gretap3): Releasing active interface
[  344.264725][T29918] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  344.267986][T29918] batman_adv: batadv0: Removing interface: ip6gretap1
[  344.526052][T29929] lo speed is unknown, defaulting to 1000
[  344.919129][T29953] net_ratelimit: 5 callbacks suppressed
[  344.919141][T29953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.987457][T29958] netlink: 'syz.2.10586': attribute type 10 has an invalid length.
[  345.821664][T29998] netlink: 'syz.2.10603': attribute type 8 has an invalid length.
[  345.824552][T29998] __nla_validate_parse: 1 callbacks suppressed
[  345.824560][T29998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10603'.
[  346.007033][T30032] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10616'.
[  346.786786][T30066] netlink: 'syz.3.10631': attribute type 1 has an invalid length.
[  346.789846][T30066] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10631'.
[  346.792984][T30066] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10631'.
[  346.810749][T30068] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10632'.
[  347.110674][T30099] lo speed is unknown, defaulting to 1000
[  347.151611][T30104] netlink: 'syz.0.10648': attribute type 1 has an invalid length.
[  347.164170][T30104] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10648'.
[  347.168150][T30104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10648'.
[  347.237844][T30114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10652'.
[  347.430430][T30143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10663'.
[  347.449528][T30148] netlink: 'syz.3.10665': attribute type 2 has an invalid length.
[  347.452854][T30148] netlink: 'syz.3.10665': attribute type 1 has an invalid length.
[  347.465466][T30148] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10665'.
[  348.211828][T30180] lo speed is unknown, defaulting to 1000
[  348.389327][T30192] ip6gretap0: entered promiscuous mode
[  348.391654][T30192] macsec2: entered allmulticast mode
[  348.393781][T30192] ip6gretap0: entered allmulticast mode
[  348.397350][T30192] ip6gretap0: left allmulticast mode
[  348.399597][T30192] ip6gretap0: left promiscuous mode
[  348.576376][T30200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.439190][T30300] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  349.627537][T30318] netlink: 'syz.2.10742': attribute type 1 has an invalid length.
[  350.164616][T30365] tunl0: entered promiscuous mode
[  350.167702][T30365] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  350.579175][T30403] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  350.680629][T30407] lo speed is unknown, defaulting to 1000
[  350.782453][T30423] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  350.882572][T30437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.113248][T30466] netlink: 'syz.3.10800': attribute type 5 has an invalid length.
[  351.206161][T30473] gretap0: left promiscuous mode
[  351.211580][T30473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  351.218068][ T6715] lo speed is unknown, defaulting to 1000
[  351.221743][ T6715] syz1: Port: 1 Link ACTIVE
[  352.209935][T30507] __nla_validate_parse: 8 callbacks suppressed
[  352.209945][T30507] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10814'.
[  352.278910][T30498] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10814'.
[  353.286716][T30552] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.10839'.
[  353.364809][T30558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10842'.
[  354.109483][T30581] netlink: 'syz.0.10852': attribute type 21 has an invalid length.
[  354.112092][T30581] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10852'.
[  354.345326][T30611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10867'.
[  354.746199][T30679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10898'.
[  354.804071][T30687] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  354.988262][T30711] netlink: 'syz.2.10914': attribute type 4 has an invalid length.
[  355.002466][ T5888] lo speed is unknown, defaulting to 1000
[  355.010548][ T5888] syz1: Port: 1 Link DOWN
[  355.052138][T30719] netlink: 'syz.0.10913': attribute type 10 has an invalid length.
[  355.058870][T30719] team0: Port device dummy0 added
[  355.269338][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10933'.
[  355.273517][T30753] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10933'.
[  356.178534][T30776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10943'.
[  356.305831][T30790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.618446][T30825] netlink: 'syz.0.10966': attribute type 1 has an invalid length.
[  356.656701][T30828] bond0: option use_carrier: invalid value (6)
[  357.171447][T30901] netlink: 'syz.3.10996': attribute type 13 has an invalid length.
[  357.327722][T30915] bond0: entered promiscuous mode
[  357.459178][T30919] mac80211_hwsim hwsim14 syzkaller0: Caught tx_queue_len zero misconfig
[  357.653220][T30937] netlink: 'syz.3.11012': attribute type 5 has an invalid length.
[  357.849909][T30952] bond0: entered promiscuous mode
[  357.852659][T30952] bond0: left promiscuous mode
[  357.941335][T30962] __nla_validate_parse: 3 callbacks suppressed
[  357.941346][T30962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11024'.
[  357.948254][T30962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11024'.
[  358.192667][T31003] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  358.198437][T31003] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode
[  358.201446][T31003] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode
[  358.281742][T31011] lo speed is unknown, defaulting to 1000
[  358.555367][T31030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11054'.
[  358.562961][T31030] macvtap1: entered promiscuous mode
[  358.565843][T31030] macvtap1: entered allmulticast mode
[  358.568125][T31030] batadv0: entered allmulticast mode
[  358.573159][T31030] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  358.580022][T31030] batadv0: left allmulticast mode
[  358.717073][T31043] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  359.372125][T31072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11072'.
[  359.413797][T31074] lo speed is unknown, defaulting to 1000
[  359.472524][T31079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11075'.
[  359.495753][T31081] lo speed is unknown, defaulting to 1000
[  359.772783][T31129] netlink: 'syz.3.11097': attribute type 1 has an invalid length.
[  359.776651][T31129] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11097'.
[  360.347137][   T33] audit: type=1800 audit(1756156639.834:12): pid=31189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11124" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=13818 res=0 errno=0
[  360.385883][T31195] pimreg: entered allmulticast mode
[  360.396446][T31195] dvmrp8: entered allmulticast mode
[  360.402106][T31197] pimreg: entered allmulticast mode
[  360.405230][T31195] pimreg: left allmulticast mode
[  360.406938][T31195] dvmrp8: left allmulticast mode
[  360.536417][T31212] batadv_slave_0: left promiscuous mode
[  360.538664][T31212] batadv_slave_0: left allmulticast mode
[  360.541200][T31212] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  360.922533][T31255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11152'.
[  360.928295][T31255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11152'.
[  360.932635][T31255] netlink: 'syz.3.11152': attribute type 1 has an invalid length.
[  360.936271][T31255] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11152'.
[  361.338476][   T33] audit: type=1800 audit(1756156640.824:13): pid=31313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11180" name="memory.events" dev="tmpfs" ino=13984 res=0 errno=0
[  361.348191][   T33] audit: type=1804 audit(1756156640.824:14): pid=31313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.11180" name="memory.events" dev="tmpfs" ino=13984 res=1 errno=0
[  361.882630][T31377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11209'.
[  361.915731][T31383] netlink: 'syz.3.11212': attribute type 1 has an invalid length.
[  361.981209][T31391] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  362.033215][T31397] netlink: 'syz.2.11219': attribute type 3 has an invalid length.
[  362.060233][T31401] openvswitch: netlink: IP tunnel dst address not specified
[  362.077819][T31403] netlink: 'syz.3.11222': attribute type 1 has an invalid length.
[  362.134347][T31407] tap0: tun_chr_ioctl cmd 1074025677
[  362.136830][T31407] tap0: linktype set to 800
[  362.411982][T31434] veth0_to_bond: left allmulticast mode
[  362.418221][T31434] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  362.422027][T31434] bond0: left promiscuous mode
[  362.423861][T31434] bond0: left allmulticast mode
[  362.428890][T31434] veth7: left promiscuous mode
[  362.447317][T31434] veth11: left promiscuous mode
[  362.460441][T31434] bridge10: left promiscuous mode
[  362.473731][T31434] macvtap1: left promiscuous mode
[  362.476139][T31434] macvtap1: left allmulticast mode
[  362.478617][ T5873] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.481672][ T5873] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  362.487278][ T5873] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.490870][ T5873] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  362.493965][ T5873] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.504464][ T5873] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  362.508570][ T5873] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.511802][ T5873] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  362.753203][T31488] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  362.893584][T31507] IPVS: length: 163 != 8
[  362.921674][T31509] tap0: tun_chr_ioctl cmd 35108
[  363.995704][T31555] netlink: 'syz.0.11290': attribute type 1 has an invalid length.
[  363.998489][T31555] __nla_validate_parse: 3 callbacks suppressed
[  363.998498][T31555] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11290'.
[  364.038500][T31559] netlink: 'syz.2.11289': attribute type 14 has an invalid length.
[  364.936648][T31575] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11295'.
[  364.943491][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.947874][T31575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11295'.
[  364.952383][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.956662][T31575] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  365.039196][T31579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.089507][T31584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11298'.
[  365.656657][T31591] netlink: 'syz.3.11301': attribute type 10 has an invalid length.
[  365.661167][T31591] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11301'.
[  365.683644][T31596] syzkaller0: mtu less than device minimum
[  365.688613][T31596] syzkaller0: mtu less than device minimum
[  365.691321][T31596] syzkaller0: mtu less than device minimum
[  365.693962][T31596] syzkaller0: mtu less than device minimum
[  365.697769][T31596] syzkaller0: mtu less than device minimum
[  365.700451][T31596] syzkaller0: mtu less than device minimum
[  365.702715][T31596] syzkaller0: mtu less than device minimum
[  365.706264][T31596] syzkaller0: mtu less than device minimum
[  365.852751][T31617] netlink: 388 bytes leftover after parsing attributes in process `syz.3.11307'.
[  365.871910][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11309'.
[  366.795613][T31653] netlink: 'syz.0.11315': attribute type 6 has an invalid length.
[  366.808849][T31653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11315'.
[  366.881387][T31665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11320'.
[  366.886685][T31665] netlink: 7 bytes leftover after parsing attributes in process `syz.3.11320'.
[  366.920729][T31671] netlink: 'syz.0.11321': attribute type 1 has an invalid length.
[  366.923562][T31671] netlink: 'syz.0.11321': attribute type 1 has an invalid length.
[  366.927520][T31674] netlink: 'syz.0.11321': attribute type 1 has an invalid length.
[  366.931225][T31674] netlink: 'syz.0.11321': attribute type 1 has an invalid length.
[  366.957470][T31679] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  366.960590][T31680] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  366.990672][T31686] syzkaller1: entered promiscuous mode
[  366.993146][T31686] syzkaller1: entered allmulticast mode
[  367.157601][T31711] netlink: 'syz.0.11329': attribute type 1 has an invalid length.
[  367.427098][T31724] lo speed is unknown, defaulting to 1000
[  367.582804][T31730] netlink: 'syz.0.11334': attribute type 1 has an invalid length.
[  367.586909][T31730] netlink: 'syz.0.11334': attribute type 2 has an invalid length.
[  367.591198][T31730] net_ratelimit: 25 callbacks suppressed
[  367.591210][T31730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.646359][T31734] netlink: 'syz.0.11336': attribute type 3 has an invalid length.
[  367.820095][T31751] netlink: 'syz.0.11342': attribute type 1 has an invalid length.
[  367.927791][T31758] macvtap3: entered promiscuous mode
[  367.930806][T31758] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode
[  368.017774][T31770] netlink: 'syz.0.11347': attribute type 1 has an invalid length.
[  368.022426][T31770] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  368.119529][T31772] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  368.132231][T31772] netlink: 'syz.0.11348': attribute type 4 has an invalid length.
[  368.199817][T31772] mac80211_hwsim hwsim18 wlan1: left promiscuous mode
[  368.210536][T31782] tunl0: left promiscuous mode
[  368.217892][T31782] bond0: left promiscuous mode
[  368.220861][T31782] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.228794][T31782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.331866][T31795] netlink: 'syz.2.11353': attribute type 12 has an invalid length.
[  368.974716][T31819] Bluetooth: MGMT ver 1.23
[  369.129777][T31828] IPv6: sit4: Disabled Multicast RS
[  369.207580][T31838] __nla_validate_parse: 18 callbacks suppressed
[  369.207599][T31838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11364'.
[  369.411807][T31855] netlink: 212048 bytes leftover after parsing attributes in process `syz.0.11370'.
[  369.609074][T31868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11373'.
[  369.898178][T31882] lo speed is unknown, defaulting to 1000
[  370.041325][T31894] geneve5: entered promiscuous mode
[  370.044393][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.047522][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.059954][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.076596][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.130927][T31901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11383'.
[  370.133189][T31903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11384'.
[  370.137574][T31903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11384'.
[  370.221360][T31914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11387'.
[  370.263636][T31916] netem: change failed
[  370.393572][T31938] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11393'.
[  370.399561][T31938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11393'.
[  370.469265][T31942] 8021q: adding VLAN 0 to HW filter on device bond9
[  370.479360][T31942] ipvlan3: entered allmulticast mode
[  370.481678][T31942] bond9: entered allmulticast mode
[  370.647770][T31970] veth3: entered allmulticast mode
[  370.702765][T31977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11405'.
[  370.755530][T31987] tipc: Enabled bearer <eth:gre0>, priority 10
[  370.859259][T32001] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  371.366870][T32051] xt_l2tp: unknown flags: 51
[  371.398100][T32054] netlink: 'syz.0.11431': attribute type 11 has an invalid length.
[  371.401633][T32054] netlink: 'syz.0.11431': attribute type 11 has an invalid length.
[  371.489837][T32071] lo speed is unknown, defaulting to 1000
[  371.562499][T32077] bond0: entered promiscuous mode
[  371.699032][T32094] lo speed is unknown, defaulting to 1000
[  372.419103][T32108] lo speed is unknown, defaulting to 1000
[  372.506743][T32114] lo speed is unknown, defaulting to 1000
[  372.634899][T32140] nbd: must specify a size in bytes for the device
[  372.725520][T32159] syzkaller1: entered allmulticast mode
[  372.728751][T32157] validate_nla: 10 callbacks suppressed
[  372.728762][T32157] netlink: 'syz.0.11456': attribute type 1 has an invalid length.
[  372.729638][T32159] syzkaller1: left allmulticast mode
[  372.751550][T32164] syzkaller1: entered allmulticast mode
[  372.756090][T32165] syzkaller1: left allmulticast mode
[  372.807492][T32179] _Z`Ԁ@: entered promiscuous mode
[  372.911473][T32197] netlink: 'syz.0.11465': attribute type 1 has an invalid length.
[  372.997755][T32210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.000507][T32210] syzkaller0: entered promiscuous mode
[  373.002436][T32210] syzkaller0: entered allmulticast mode
[  373.007472][T32210] tipc: Resetting bearer <eth:syzkaller0>
[  373.010049][T32209] tipc: Resetting bearer <eth:syzkaller0>
[  373.013423][T32209] tipc: Disabling bearer <eth:syzkaller0>
[  373.251037][T32244] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  373.276897][T32249] openvswitch: netlink: Message has 24 unknown bytes.
[  373.279281][T32249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.297697][T32249] netlink: 'syz.2.11480': attribute type 2 has an invalid length.
[  373.352743][T32256] lo speed is unknown, defaulting to 1000
[  374.186497][T32281] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  374.421374][T32289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  374.589391][T32308] __nla_validate_parse: 28 callbacks suppressed
[  374.589460][T32308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11495'.
[  374.767345][T32318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11498'.
[  374.791235][T32320] netlink: 'syz.0.11499': attribute type 1 has an invalid length.
[  374.795164][T32320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.818696][T32322] wg1 speed is unknown, defaulting to 1000
[  374.820823][T32322] wg1 speed is unknown, defaulting to 1000
[  374.823063][T32322] wg1 speed is unknown, defaulting to 1000
[  374.828541][T32322] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  374.837067][T32322] wg1 speed is unknown, defaulting to 1000
[  374.840140][T32322] wg1 speed is unknown, defaulting to 1000
[  374.842551][T32322] wg1 speed is unknown, defaulting to 1000
[  374.898186][T32324] netlink: 277 bytes leftover after parsing attributes in process `syz.0.11501'.
[  375.078780][T32339] lo speed is unknown, defaulting to 1000
[  375.082557][T32339] wg1 speed is unknown, defaulting to 1000
[  375.137550][T32339] geneve0: entered allmulticast mode
[  375.450903][T32363] netlink: 'syz.2.11513': attribute type 13 has an invalid length.
[  375.464897][T32363] netlink: 'syz.2.11513': attribute type 17 has an invalid length.
[  375.519766][T32363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.529188][ T6716] lo speed is unknown, defaulting to 1000
[  375.540941][ T6716] syz1: Port: 1 Link ACTIVE
[  375.572514][T32364] lo speed is unknown, defaulting to 1000
[  375.577755][T32364] wg1 speed is unknown, defaulting to 1000
[  375.847444][T32377] netlink: 'syz.3.11517': attribute type 13 has an invalid length.
[  375.850525][T32377] netlink: 'syz.3.11517': attribute type 17 has an invalid length.
[  375.864050][T32377] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.868267][T32377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  376.038532][T32397] sctp: [Deprecated]: syz.0.11522 (pid 32397) Use of struct sctp_assoc_value in delayed_ack socket option.
[  376.038532][T32397] Use struct sctp_sack_info instead
[  376.057931][T32397] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  376.061910][T32397] CPU: 1 UID: 0 PID: 32397 Comm: syz.0.11522 Not tainted syzkaller #0 PREEMPT(full) 
[  376.061923][T32397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.061928][T32397] Call Trace:
[  376.061933][T32397]  <TASK>
[  376.061947][T32397]  dump_stack_lvl+0x189/0x250
[  376.061965][T32397]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.061974][T32397]  ? __pfx__printk+0x10/0x10
[  376.061986][T32397]  ? kernfs_root+0x1c/0x230
[  376.061999][T32397]  ? kernfs_path_from_node+0x2f/0x290
[  376.062008][T32397]  ? kernfs_path_from_node+0x250/0x290
[  376.062017][T32397]  ? kernfs_path_from_node+0x2f/0x290
[  376.062027][T32397]  sysfs_warn_dup+0x8e/0xa0
[  376.062036][T32397]  sysfs_do_create_link_sd+0xc0/0x110
[  376.062045][T32397]  device_add_class_symlinks+0x1cf/0x240
[  376.062056][T32397]  device_add+0x475/0xb50
[  376.062063][T32397]  wiphy_register+0x1ba6/0x28d0
[  376.062079][T32397]  ? __pfx_wiphy_register+0x10/0x10
[  376.062090][T32397]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  376.062104][T32397]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  376.062114][T32397]  ieee80211_register_hw+0x3425/0x4080
[  376.062128][T32397]  ? ieee80211_register_hw+0x1401/0x4080
[  376.062139][T32397]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  376.062148][T32397]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  376.062161][T32397]  ? __hrtimer_setup+0x187/0x210
[  376.062168][T32397]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  376.062180][T32397]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  376.062197][T32397]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  376.062207][T32397]  ? trace_kmalloc+0x1f/0xd0
[  376.062218][T32397]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  376.062251][T32397]  ? kstrndup+0xbf/0x160
[  376.062266][T32397]  hwsim_new_radio_nl+0xea4/0x1b10
[  376.062281][T32397]  ? __pfx___nla_validate_parse+0x10/0x10
[  376.062304][T32397]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  376.062321][T32397]  ? __nla_parse+0x40/0x60
[  376.062339][T32397]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  376.062356][T32397]  genl_family_rcv_msg_doit+0x215/0x300
[  376.062371][T32397]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  376.062389][T32397]  ? bpf_lsm_capable+0x9/0x20
[  376.062406][T32397]  ? security_capable+0x7e/0x2e0
[  376.062425][T32397]  genl_rcv_msg+0x60e/0x790
[  376.062441][T32397]  ? __pfx_genl_rcv_msg+0x10/0x10
[  376.062451][T32397]  ? __kasan_slab_alloc+0x6c/0x80
[  376.062461][T32397]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  376.062469][T32397]  ? __netlink_lookup+0xbd/0x810
[  376.062476][T32397]  ? rcu_is_watching+0x15/0xb0
[  376.062485][T32397]  netlink_rcv_skb+0x208/0x470
[  376.062495][T32397]  ? __pfx_genl_rcv_msg+0x10/0x10
[  376.062503][T32397]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  376.062515][T32397]  ? lock_release+0x4b/0x3e0
[  376.062526][T32397]  ? down_read+0x1ad/0x2e0
[  376.062533][T32397]  genl_rcv+0x28/0x40
[  376.062541][T32397]  netlink_unicast+0x82f/0x9e0
[  376.062551][T32397]  ? __pfx_netlink_unicast+0x10/0x10
[  376.062560][T32397]  ? netlink_sendmsg+0x642/0xb30
[  376.062569][T32397]  ? skb_put+0x11b/0x210
[  376.062578][T32397]  netlink_sendmsg+0x805/0xb30
[  376.062589][T32397]  ? __pfx_netlink_sendmsg+0x10/0x10
[  376.062600][T32397]  ? aa_sock_msg_perm+0xf1/0x1d0
[  376.062607][T32397]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  376.062615][T32397]  ? __pfx_netlink_sendmsg+0x10/0x10
[  376.062626][T32397]  __sock_sendmsg+0x21c/0x270
[  376.062637][T32397]  ____sys_sendmsg+0x505/0x830
[  376.062653][T32397]  ? __pfx_____sys_sendmsg+0x10/0x10
[  376.062663][T32397]  ? import_iovec+0x74/0xa0
[  376.062674][T32397]  ___sys_sendmsg+0x21f/0x2a0
[  376.062682][T32397]  ? __pfx____sys_sendmsg+0x10/0x10
[  376.062692][T32397]  ? futex_wake+0x4b2/0x560
[  376.062709][T32397]  ? __fget_files+0x2a/0x420
[  376.062717][T32397]  ? __fget_files+0x3a0/0x420
[  376.062726][T32397]  __x64_sys_sendmsg+0x19b/0x260
[  376.062736][T32397]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  376.062747][T32397]  ? rcu_is_watching+0x15/0xb0
[  376.062756][T32397]  ? rcu_is_watching+0x15/0xb0
[  376.062764][T32397]  do_syscall_64+0xfa/0x3b0
[  376.062772][T32397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.062779][T32397]  ? exc_page_fault+0x9f/0xf0
[  376.062789][T32397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.062796][T32397] RIP: 0033:0x7f0a5218ebe9
[  376.062805][T32397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.062812][T32397] RSP: 002b:00007f0a52f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  376.062822][T32397] RAX: ffffffffffffffda RBX: 00007f0a523b5fa0 RCX: 00007f0a5218ebe9
[  376.062828][T32397] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  376.062834][T32397] RBP: 00007f0a52211e19 R08: 0000000000000000 R09: 0000000000000000
[  376.062839][T32397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.062844][T32397] R13: 00007f0a523b6038 R14: 00007f0a523b5fa0 R15: 00007fff81a767d8
[  376.062853][T32397]  </TASK>
[  376.341502][T32404] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.363248][T32394] lo speed is unknown, defaulting to 1000
[  376.366746][T32394] wg1 speed is unknown, defaulting to 1000
[  376.402265][T32404] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.447264][T32404] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.512124][T32404] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.580752][T32415] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11526'.
[  376.586342][T13966] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.591003][T13966] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.603142][T13966] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.646291][T13966] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.853902][T32419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11528'.
[  377.234097][T32436] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.11533'.
[  377.269173][T32436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11533'.
[  377.272092][T32436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.182799][T32467] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode
[  378.186401][T32467] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  378.191472][T32471] netlink: 'syz.2.11542': attribute type 1 has an invalid length.
[  378.245422][T32475] tipc: New replicast peer: 208.253.78.183
[  378.247597][T32475] tipc: Enabled bearer <udp:s>, priority 26
[  378.389615][T32492] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  378.441106][T32492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11548'.
[  378.450023][T32492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11548'.
[  378.496144][T32503] lo speed is unknown, defaulting to 1000
[  378.499705][T32503] wg1 speed is unknown, defaulting to 1000
[  378.631667][T32513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11555'.
[  378.914976][T32529] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma?
[  379.213091][T32537] netlink: 'syz.2.11564': attribute type 4 has an invalid length.
[  379.270376][T32540] netlink: 'syz.2.11564': attribute type 4 has an invalid length.
[  379.364331][T12993] tipc: Node number set to 3785665392
[  379.998549][   T47] lo speed is unknown, defaulting to 1000
[  380.001138][ T6715] lo speed is unknown, defaulting to 1000
[  380.128361][T32555] __nla_validate_parse: 4 callbacks suppressed
[  380.128374][T32555] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11566'.
[  380.137312][T32554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11568'.
[  380.187184][T32560] netlink: 'syz.2.11569': attribute type 58 has an invalid length.
[  380.189812][T32560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11569'.
[  380.255648][T32565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11571'.
[  380.393407][T32588] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  380.419862][T32582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11576'.
[  380.423062][T32582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11576'.
[  380.508978][T32593] netlink: 'syz.3.11578': attribute type 10 has an invalid length.
[  380.531334][T32597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11579'.
[  380.539951][T32597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11579'.
[  380.546673][T32598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11577'.
[  380.550531][T32598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11577'.
[  380.858420][T32625] openvswitch: netlink: Flow actions attr not present in new flow.
[  381.102706][T32635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  381.264794][T32639] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  381.333339][T32645] netlink: 'syz.2.11593': attribute type 1 has an invalid length.
[  381.348424][T32645] bond11: entered promiscuous mode
[  381.350890][T32645] 8021q: adding VLAN 0 to HW filter on device bond11
[  381.387125][T32639] mac80211_hwsim hwsim18 syzkaller0: Caught tx_queue_len zero misconfig
[  381.390667][T32639] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  381.569418][T32663] sctp: [Deprecated]: syz.0.11598 (pid 32663) Use of int in maxseg socket option.
[  381.569418][T32663] Use struct sctp_assoc_value instead
[  381.582805][T32663] vlan0: left promiscuous mode
[  381.596491][T32663] geneve2: left promiscuous mode
[  381.601453][T32663] geneve2: left allmulticast mode
[  381.607669][T32663] gretap3: left promiscuous mode
[  381.613368][T32663] ip6gre1: left allmulticast mode
[  381.618483][T32663] veth9: left promiscuous mode
[  381.623023][T32663] macvtap1: left promiscuous mode
[  381.628709][T32663] macvtap1: left allmulticast mode
[  381.632217][T32663] macvtap2: left promiscuous mode
[  381.635065][T32663] macvtap2: left allmulticast mode
[  381.637146][T32663] ip6gre2: left promiscuous mode
[  381.660406][T32663] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode
[  381.663409][T32663] mac80211_hwsim hwsim18 syzkaller0: left allmulticast mode
[  381.669530][T32663] macvtap3: left promiscuous mode
[  381.696033][T32669] netlink: 'syz.0.11601': attribute type 1 has an invalid length.
[  381.705080][T32669] 8021q: adding VLAN 0 to HW filter on device bond8
[  381.725363][T32669] veth11: entered promiscuous mode
[  381.730552][T32669] bond8: (slave veth11): Enslaving as an active interface with a down link
[  381.738941][T32669] erspan0: entered allmulticast mode
[  381.886224][T32671] lo speed is unknown, defaulting to 1000
[  381.889891][T32671] wg1 speed is unknown, defaulting to 1000
[  382.678260][T32711] netlink: 'syz.3.11612': attribute type 6 has an invalid length.
[  382.853986][T32727] lo speed is unknown, defaulting to 1000
[  382.860017][T32727] wg1 speed is unknown, defaulting to 1000
[  383.451634][T32747] syzkaller1: entered promiscuous mode
[  383.454899][T32747] syzkaller1: entered allmulticast mode
[  383.523207][T32754] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode
[  383.527977][T32754] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  383.531125][T32755] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  383.973444][  T314] lo speed is unknown, defaulting to 1000
[  383.977036][  T314] wg1 speed is unknown, defaulting to 1000
[  384.047554][  T314] syzkaller0: entered promiscuous mode
[  384.049786][  T314] syzkaller0: entered allmulticast mode
[  384.053282][  T314] tipc: Started in network mode
[  384.057451][  T314] tipc: Node identity 1aad8935aed7, cluster identity 4711
[  384.060231][  T314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.066704][  T313] tipc: Resetting bearer <eth:syzkaller0>
[  384.079104][  T313] tipc: Disabling bearer <eth:syzkaller0>
[  384.209419][  T328] lo speed is unknown, defaulting to 1000
[  384.211880][  T328] wg1 speed is unknown, defaulting to 1000
[  384.240208][   T12] tipc: Left network mode
[  384.276894][  T323] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  384.326473][  T323] mac80211_hwsim hwsim14 syzkaller0: Caught tx_queue_len zero misconfig
[  384.356364][  T323] netlink: 'syz.3.11633': attribute type 11 has an invalid length.
[  384.907505][  T350] lo speed is unknown, defaulting to 1000
[  384.913783][  T350] wg1 speed is unknown, defaulting to 1000
[  385.232939][  T367] netlink: 'syz.2.11647': attribute type 1 has an invalid length.
[  385.237231][  T367] netlink: 'syz.2.11647': attribute type 4 has an invalid length.
[  385.241226][  T367] __nla_validate_parse: 13 callbacks suppressed
[  385.241236][  T367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11647'.
[  385.247239][  T367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11647'.
[  385.280660][  T373] syzkaller0: entered promiscuous mode
[  385.283456][  T373] syzkaller0: entered allmulticast mode
[  385.286383][  T369] netlink: 'syz.3.11649': attribute type 8 has an invalid length.
[  385.360349][  T379] netlink: 360 bytes leftover after parsing attributes in process `syz.0.11653'.
[  385.413332][  T384] netlink: 'syz.2.11656': attribute type 1 has an invalid length.
[  385.416608][  T384] netlink: 'syz.2.11656': attribute type 2 has an invalid length.
[  385.420329][  T384] netlink: 'syz.2.11656': attribute type 1 has an invalid length.
[  385.481921][  T390] macsec2: entered promiscuous mode
[  385.483807][  T390] team0: entered promiscuous mode
[  385.485646][  T390] dummy0: entered promiscuous mode
[  385.544482][  T397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11659'.
[  385.551764][  T393] netlink: 'syz.3.11658': attribute type 10 has an invalid length.
[  385.555346][  T393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11658'.
[  385.644801][  T384] 8021q: adding VLAN 0 to HW filter on device bond12
[  385.700391][  T393] !: entered promiscuous mode
[  385.703096][  T393] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  385.760891][  T394] bond12 (unregistering): Released all slaves
[  385.768061][  T399] mac80211_hwsim hwsim18 syzkaller0: Caught tx_queue_len zero misconfig
[  385.785506][  T397] vlan2: entered allmulticast mode
[  385.787335][  T397] bridge0: entered allmulticast mode
[  385.841925][  T406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11662'.
[  385.848215][  T406] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.853728][  T406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11662'.
[  385.903222][  T411] netlink: 'syz.3.11664': attribute type 2 has an invalid length.
[  386.028396][  T426] netlink: 'syz.3.11667': attribute type 4 has an invalid length.
[  386.069969][  T433] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode
[  386.073468][  T433] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode
[  386.078766][  T432] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  386.128533][  T441] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11672'.
[  386.159107][  T441] IPVS: length: 49 != 24
[  386.365960][  T454] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11675'.
[  386.563408][  T470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11681'.
[  386.606572][  T470] batadv_slave_0: entered promiscuous mode
[  386.802928][  T479] team0 (unregistering): left promiscuous mode
[  386.805754][  T479] dummy0: left promiscuous mode
[  386.807759][  T479] tipc: Disabling bearer <eth:team0>
[  386.815665][  T479] team0 (unregistering): Port device dummy0 removed
[  386.908157][  T482] openvswitch: netlink: Flow actions attr not present in new flow.
[  387.186216][  T502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.227188][  T503] tipc: Disabling bearer <eth:syzkaller0>
[  387.332269][  T512] veth5: entered allmulticast mode
[  387.908238][  T567] bond12: (slave gretap3): making interface the new active one
[  387.911615][  T567] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  387.921833][  T567] vlan0: entered allmulticast mode
[  387.923977][  T567] bond12: entered allmulticast mode
[  387.926589][  T567] gretap3: entered allmulticast mode
[  387.929441][  T567] bond12: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  388.217002][  T621] pim6reg1: entered promiscuous mode
[  388.219339][  T621] pim6reg1: entered allmulticast mode
[  388.282322][  T630] openvswitch: netlink: Missing key (keys=40, expected=80)
[  388.302176][  T625] tipc: Resetting bearer <eth:gre0>
[  388.361848][  T625] !: left promiscuous mode
[  388.373201][  T625] veth0_to_bond: left allmulticast mode
[  388.378578][  T625] veth1_to_team: left allmulticast mode
[  388.382525][  T625] bond4: left promiscuous mode
[  388.385798][  T625] ip6gre1: left promiscuous mode
[  388.388227][  T625] bridge5: left promiscuous mode
[  388.390462][  T625] bridge5: left allmulticast mode
[  388.392812][  T625] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode
[  388.396608][  T625] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  388.400256][  T625] ipvlan2: left promiscuous mode
[  388.402628][  T625] erspan1: left promiscuous mode
[  388.405473][  T625] bridge12: left promiscuous mode
[  388.407681][  T625] bridge12: left allmulticast mode
[  388.410036][  T625] gtp1: left promiscuous mode
[  388.412181][  T625] gtp1: left allmulticast mode
[  388.414831][  T625] ipvlan3: left allmulticast mode
[  388.416605][  T625] bond9: left allmulticast mode
[  388.418461][  T625] veth3: left allmulticast mode
[  388.422934][  T625] veth5: left allmulticast mode
[  388.426834][  T637] : renamed from bond_slave_0
[  388.432455][  T621] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode
[  388.442054][  T621] mac80211_hwsim hwsim18 syzkaller0: left allmulticast mode
[  388.470587][  T621] bond9 (unregistering): Released all slaves
[  388.557707][  T656] bridge0: port 1(erspan0) entered blocking state
[  388.560575][  T656] bridge0: port 1(erspan0) entered disabled state
[  388.563442][  T656] erspan0: entered allmulticast mode
[  388.567545][  T656] erspan0: left allmulticast mode
[  389.714537][  T702] validate_nla: 10 callbacks suppressed
[  389.714549][  T702] netlink: 'syz.0.11749': attribute type 39 has an invalid length.
[  389.869290][  T711] netlink: 'syz.3.11751': attribute type 9 has an invalid length.
[  389.876449][  T711] macvlan4: entered promiscuous mode
[  389.878587][  T711] hsr0: entered promiscuous mode
[  389.880864][  T711] macvlan4: entered allmulticast mode
[  389.882947][  T711] hsr0: entered allmulticast mode
[  389.884729][  T711] hsr_slave_0: entered allmulticast mode
[  389.923510][  T713] netlink: 'syz.3.11752': attribute type 3 has an invalid length.
[  389.928329][  T713] netlink: 'syz.3.11752': attribute type 1 has an invalid length.
[  389.975878][  T724] bridge14: port 1(veth13) entered blocking state
[  389.978773][  T724] bridge14: port 1(veth13) entered disabled state
[  389.981772][  T724] veth13: entered allmulticast mode
[  389.985064][  T724] veth13: entered promiscuous mode
[  389.993534][  T724] vlan2: entered allmulticast mode
[  389.996041][  T724] veth0_to_hsr: entered allmulticast mode
[  389.998743][  T724] bridge14: port 2(vlan2) entered blocking state
[  390.001493][  T724] bridge14: port 2(vlan2) entered disabled state
[  390.005559][  T724] vlan2: entered promiscuous mode
[  390.007926][  T724] veth0_to_hsr: entered promiscuous mode
[  390.287442][  T738] bond5: option mode: unable to set because the bond device has slaves
[  390.295987][  T738] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  390.302168][  T738] bond5: (slave macvlan2): Enslaving as a backup interface with a down link
[  390.312476][  T738] bond4: (slave geneve3): Releasing active interface
[  390.319510][  T738] bond5: (slave macvlan0): Releasing backup interface
[  390.322609][  T738] bond5: (slave macvlan0): the permanent HWaddr of slave - f2:78:86:34:87:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  390.332550][  T738] bond5: (slave ip6gretap2): Removing an active aggregator
[  390.336539][  T738] bond5: (slave ip6gretap2): Releasing backup interface
[  390.341291][  T738] bond8: (slave veth11): Releasing active interface
[  390.348153][  T738] veth13: left allmulticast mode
[  390.350335][  T738] veth13: left promiscuous mode
[  390.352575][  T738] bridge14: port 1(veth13) entered disabled state
[  390.358406][  T738] vlan2: left promiscuous mode
[  390.360475][  T738] veth0_to_hsr: left promiscuous mode
[  390.362989][  T738] bridge14: port 2(vlan2) entered disabled state
[  390.368933][  T738] bond5: (slave macvlan2): Releasing backup interface
[  390.454533][  T748] __nla_validate_parse: 28 callbacks suppressed
[  390.454552][  T748] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11765'.
[  390.461221][  T748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11765'.
[  390.465320][  T748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.506287][  T752] netlink: 'syz.0.11766': attribute type 1 has an invalid length.
[  390.514500][  T752] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11766'.
[  390.547715][  T753] syzkaller1: entered allmulticast mode
[  390.553231][  T753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11764'.
[  390.831842][  T764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.842782][  T764] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode
[  390.851635][  T764] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode
[  390.856426][  T764] netlink: 'syz.0.11770': attribute type 1 has an invalid length.
[  391.207581][  T792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11776'.
[  391.298564][  T794] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.305950][  T794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  391.487017][  T801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11778'.
[  391.540425][  T803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11779'.
[  391.580228][  T805] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  391.691075][  T805] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.921938][  T815] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11782'.
[  392.061563][  T825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11785'.
[  392.207390][  T825] netlink: 'syz.0.11785': attribute type 4 has an invalid length.
[  392.264328][  T824] netlink: 'syz.0.11785': attribute type 4 has an invalid length.
[  392.341248][  T842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11789'.
[  392.415193][  T853] netlink: 'syz.0.11789': attribute type 10 has an invalid length.
[  392.652139][  T894] dvmrp1: left allmulticast mode
[  392.681563][  T901] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode
[  392.683967][  T901] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  392.690853][  T900] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.701508][  T894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  392.741803][  T910] netlink: 'syz.3.11807': attribute type 17 has an invalid length.
[  392.749123][  T910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  392.829921][  T925] lo speed is unknown, defaulting to 1000
[  392.839705][  T925] wg1 speed is unknown, defaulting to 1000
[  392.895484][  T908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  393.275715][  T981] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  393.853297][ T1044] erspan0: left promiscuous mode
[  393.855119][ T1044] erspan0: left allmulticast mode
[  393.861145][ T1044] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.863994][ T1044] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  393.904663][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  394.440874][ T1069] IPVS: Scheduler module ip_vs_sip not found
[  394.865079][T13966] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  394.944691][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  395.120815][ T1106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  395.490786][ T1134] openvswitch: netlink: IPv4 tun info is not correct
[  395.559638][ T1138] __nla_validate_parse: 21 callbacks suppressed
[  395.559653][ T1138] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11875'.
[  395.567037][ T1138] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  395.575971][ T1138] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11875'.
[  395.579342][ T1138] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  395.647024][ T1144] bond0: left promiscuous mode
[  395.651154][ T1144] geneve5: left promiscuous mode
[  395.655758][ T1144] bond11: left promiscuous mode
[  395.679540][ T6716] lo speed is unknown, defaulting to 1000
[  395.681615][ T6716] syz1: Port: 1 Link DOWN
[  395.683019][T13966] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.686641][T13966] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.689567][T13966] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.692839][T13966] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.781764][ T1153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11880'.
[  395.875817][ T1160] lo speed is unknown, defaulting to 1000
[  395.878902][ T1160] wg1 speed is unknown, defaulting to 1000
[  395.904824][T13966] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  395.908253][T13966] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  395.999229][ T1160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11883'.
[  396.003603][ T1160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11883'.
[  396.248298][ T1179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  396.302733][ T1186] batadv_slave_0: left promiscuous mode
[  396.309069][ T1186] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode
[  396.312970][ T1186] veth11: left promiscuous mode
[  396.324403][ T6718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  396.363435][ T1190] lo speed is unknown, defaulting to 1000
[  396.367281][ T1190] wg1 speed is unknown, defaulting to 1000
[  396.396778][ T1193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11895'.
[  396.415508][ T1193] vlan2: entered allmulticast mode
[  396.417499][ T1193] bridge0: entered allmulticast mode
[  396.424589][ T1193] bridge0: port 1(vlan2) entered blocking state
[  396.429724][ T1193] bridge0: port 1(vlan2) entered disabled state
[  396.537545][ T6718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  396.707796][T12993] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  396.713172][ T1220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11901'.
[  396.756652][ T1227] syzkaller1: entered promiscuous mode
[  396.758502][ T1227] syzkaller1: entered allmulticast mode
[  396.841117][ T1238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11911'.
[  396.885864][ T1243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11910'.
[  396.889149][ T1243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11910'.
[  397.079364][ T1257] syzkaller1: entered promiscuous mode
[  397.081640][ T1257] syzkaller1: entered allmulticast mode
[  398.092265][ T1279] validate_nla: 4 callbacks suppressed
[  398.092275][ T1279] netlink: 'syz.2.11925': attribute type 39 has an invalid length.
[  399.179388][ T1311] netlink: 'syz.2.11934': attribute type 26 has an invalid length.
[  399.205642][ T1313] pim6reg1: entered promiscuous mode
[  399.207587][ T1313] pim6reg1: entered allmulticast mode
[  399.430786][ T1322] syzkaller1: entered promiscuous mode
[  399.433093][ T1322] syzkaller1: entered allmulticast mode
[  399.584511][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  400.389430][ T1392] netlink: 'syz.0.11967': attribute type 1 has an invalid length.
[  400.433399][ T1396] bond0 (unregistering): Released all slaves
[  400.456814][ T1394] netlink: 'syz.3.11968': attribute type 12 has an invalid length.
[  400.466574][ T1398] batadv_slave_0: entered promiscuous mode
[  400.469114][ T1398] batadv_slave_0: entered allmulticast mode
[  400.549705][ T1396] nbd: must specify at least one socket
[  400.609081][ T1407] __nla_validate_parse: 18 callbacks suppressed
[  400.609100][ T1407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11971'.
[  400.630081][ T1404] netlink: 'syz.3.11972': attribute type 178 has an invalid length.
[  401.540031][ T1430] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  401.650217][ T1446] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  401.653973][ T1446] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode
[  401.659147][ T1447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11987'.
[  401.663336][ T1446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11987'.
[  401.674651][ T1447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11987'.
[  401.743743][ T1453] netlink: 'syz.3.11989': attribute type 1 has an invalid length.
[  401.751506][ T1455] netlink: 'syz.0.11990': attribute type 1 has an invalid length.
[  401.758584][ T1453] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11989'.
[  401.767855][ T1453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11989'.
[  401.772470][ T1453] 8021q: adding VLAN 0 to HW filter on device bond10
[  401.776391][ T1455] bond0: entered promiscuous mode
[  401.778755][ T1455] bond0: entered allmulticast mode
[  401.781369][ T1455] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.791107][ T1455] bridge16: entered promiscuous mode
[  401.793418][ T1455] bridge16: entered allmulticast mode
[  401.798541][ T1455] bond0: (slave bridge16): Enslaving as a backup interface with an up link
[  401.842467][ T1455] tipc: Resetting bearer <eth:syzkaller0>
[  401.863402][ T1459] tap0: tun_chr_ioctl cmd 1074025677
[  401.866081][ T1459] tap0: linktype set to 768
[  401.876194][ T1459] lo speed is unknown, defaulting to 1000
[  401.879779][ T1459] wg1 speed is unknown, defaulting to 1000
[  401.930012][ T1468] netlink: 'syz.0.11993': attribute type 142 has an invalid length.
[  402.038884][ T1479] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  402.161847][ T1489] netlink: 'syz.0.12000': attribute type 13 has an invalid length.
[  402.166297][ T1489] netlink: 'syz.0.12000': attribute type 17 has an invalid length.
[  402.198945][ T1489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  402.207601][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  402.210507][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  402.227887][ T1484] lo speed is unknown, defaulting to 1000
[  402.230451][ T1484] wg1 speed is unknown, defaulting to 1000
[  402.235336][ T6718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  402.429121][ T1501] netem: change failed
[  402.549377][ T1509] IPVS: set_ctl: invalid protocol: 143 172.20.20.187:20000
[  402.592140][ T1513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12012'.
[  402.597413][ T1513] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12012'.
[  402.601944][ T1513] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12012'.
[  402.608562][ T1513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12012'.
[  402.949514][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  403.182515][ T1574] lo speed is unknown, defaulting to 1000
[  403.194721][ T1574] wg1 speed is unknown, defaulting to 1000
[  403.282497][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  403.352286][ T1590] lo speed is unknown, defaulting to 1000
[  403.356435][ T1590] wg1 speed is unknown, defaulting to 1000
[  404.068036][ T1641] lo speed is unknown, defaulting to 1000
[  404.070795][ T1641] wg1 speed is unknown, defaulting to 1000
[  404.638027][ T1653] _Z`Ԁ@: entered promiscuous mode
[  404.706210][ T1663] netlink: 'syz.2.12057': attribute type 1 has an invalid length.
[  404.756314][ T1670] tipc: Enabled bearer <eth:gre0>, priority 10
[  404.785932][ T1673] netlink: 'syz.3.12054': attribute type 6 has an invalid length.
[  404.873552][ T1687] netlink: 'syz.0.12066': attribute type 1 has an invalid length.
[  404.878475][ T1687] netlink: 'syz.0.12066': attribute type 1 has an invalid length.
[  404.905172][ T1692] netlink: 'syz.0.12068': attribute type 2 has an invalid length.
[  405.189536][ T1692] syzkaller1: entered promiscuous mode
[  405.191767][ T1692] syzkaller1: entered allmulticast mode
[  405.290044][ T1728] netlink: 'syz.2.12078': attribute type 2 has an invalid length.
[  405.796263][ T1733] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  405.829472][ T1935] tipc: Resetting bearer <eth:syzkaller0>
[  405.908570][ T1748] netlink: 'syz.3.12082': attribute type 13 has an invalid length.
[  405.911271][ T1748] netlink: 'syz.3.12082': attribute type 17 has an invalid length.
[  405.917975][ T1748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  405.951536][ T1751] __nla_validate_parse: 13 callbacks suppressed
[  405.951554][ T1751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12083'.
[  405.981616][ T1753] netlink: 'syz.3.12084': attribute type 1 has an invalid length.
[  405.986543][ T1753] netlink: 236 bytes leftover after parsing attributes in process `syz.3.12084'.
[  405.990916][ T1753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12084'.
[  405.995245][ T1753] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12084'.
[  405.999376][ T1753] 8021q: VLANs not supported on ip_vti0
[  406.025019][ T1755] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.12085'.
[  406.054389][ T1759] tipc: Resetting bearer <eth:syzkaller0>
[  406.157433][ T1768] syzkaller1: entered promiscuous mode
[  406.159783][ T1768] syzkaller1: entered allmulticast mode
[  406.167972][ T1768] netlink: 'syz.3.12091': attribute type 11 has an invalid length.
[  406.390292][ T1793] IPVS: Scheduler module ip_vs_sip not found
[  406.569801][ T1813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12105'.
[  406.624345][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  406.800506][ T1827] netlink: 'syz.3.12110': attribute type 4 has an invalid length.
[  406.980502][ T1845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12117'.
[  406.986159][ T1845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12117'.
[  407.044037][ T1851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.053082][ T1851] syzkaller0: entered promiscuous mode
[  407.055575][ T1851] syzkaller0: entered allmulticast mode
[  407.069768][ T1850] tipc: Resetting bearer <eth:syzkaller0>
[  407.082405][ T1850] tipc: Disabling bearer <eth:syzkaller0>
[  408.064198][ T1883] veth11: entered promiscuous mode
[  408.318410][ T1891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12136'.
[  408.857493][ T1876] Set syz1 is full, maxelem 65536 reached
[  409.203696][ T1936] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12148'.
[  409.872266][ T1939] bridge0: entered allmulticast mode
[  409.931023][ T1947] syzkaller1: entered promiscuous mode
[  409.933028][ T1947] syzkaller1: entered allmulticast mode
[  409.958081][ T1952] dvmrp1: entered allmulticast mode
[  410.019240][ T1956] lo speed is unknown, defaulting to 1000
[  410.021598][ T1956] wg1 speed is unknown, defaulting to 1000
[  410.048808][ T1951] validate_nla: 1 callbacks suppressed
[  410.048823][ T1951] netlink: 'syz.3.12154': attribute type 12 has an invalid length.
[  410.100028][ T1951] pimreg: left allmulticast mode
[  410.153777][ T1967] netlink: 'syz.2.12160': attribute type 1 has an invalid length.
[  410.219123][ T1981] bridge0: port 1(erspan0) entered blocking state
[  410.221366][ T1981] bridge0: port 1(erspan0) entered disabled state
[  410.223581][ T1981] erspan0: entered allmulticast mode
[  410.227092][ T1981] erspan0: left allmulticast mode
[  410.245509][ T1983] syzkaller0: entered promiscuous mode
[  410.248025][ T1983] syzkaller0: entered allmulticast mode
[  410.299033][ T1991] pim6reg1: entered promiscuous mode
[  410.301329][ T1991] pim6reg1: entered allmulticast mode
[  410.395786][ T1995] nft_compat: unsupported protocol 0
[  410.476815][ T2004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.486476][ T1993] siw: device registration error -23
[  410.563179][ T2012] syzkaller1: entered promiscuous mode
[  410.565490][ T2012] syzkaller1: entered allmulticast mode
[  410.711521][ T2014] lo speed is unknown, defaulting to 1000
[  410.714087][ T2014] wg1 speed is unknown, defaulting to 1000
[  411.300853][ T2039] netlink: 'syz.3.12186': attribute type 7 has an invalid length.
[  411.305032][ T2039] netlink: 'syz.3.12186': attribute type 8 has an invalid length.
[  411.311693][ T2039] __nla_validate_parse: 7 callbacks suppressed
[  411.311707][ T2039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12186'.
[  411.318328][ T2039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12186'.
[  411.331622][ T2034] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  411.424098][ T2054] netlink: 'syz.0.12192': attribute type 4 has an invalid length.
[  411.430846][ T2054] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12192'.
[  411.506290][ T2058] lo speed is unknown, defaulting to 1000
[  411.510603][ T2058] wg1 speed is unknown, defaulting to 1000
[  411.540116][ T2067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12197'.
[  411.556770][ T2073] netlink: 'syz.0.12198': attribute type 4 has an invalid length.
[  411.610450][ T2078] nbd: must specify a device to reconfigure
[  411.867455][ T2099] netlink: 'syz.2.12208': attribute type 3 has an invalid length.
[  411.919492][ T2105] netlink: 'syz.2.12211': attribute type 1 has an invalid length.
[  412.176115][ T2121] IPv6: sit3: Disabled Multicast RS
[  412.258362][ T2125] _Z`Ԁ@: entered promiscuous mode
[  412.333140][ T2133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12222'.
[  412.516688][ T2146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12227'.
[  412.522218][ T2146] netlink: 'syz.3.12227': attribute type 10 has an invalid length.
[  412.851177][ T2164] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode
[  412.856843][ T2164] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  412.958983][ T2097] Set syz1 is full, maxelem 65536 reached
[  412.998325][ T2175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12238'.
[  413.012490][ T2177] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12239'.
[  413.078906][ T2183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12242'.
[  413.118531][ T2190] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  413.237325][ T2218] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.12252'.
[  413.370832][ T2245] IPv4: Oversized IP packet from 127.202.26.0
[  413.398503][ T2251] netlink: 'syz.0.12265': attribute type 1 has an invalid length.
[  413.433720][ T2261] !: renamed from dummy0 (while UP)
[  413.670632][ T2264] lo speed is unknown, defaulting to 1000
[  413.673629][ T2264] wg1 speed is unknown, defaulting to 1000
[  414.200407][ T2284] syzkaller0: entered promiscuous mode
[  414.202281][ T2284] syzkaller0: entered allmulticast mode
[  414.205977][ T2283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.212426][ T2285] tipc: Resetting bearer <eth:syzkaller0>
[  414.217847][ T2282] tipc: Resetting bearer <eth:syzkaller0>
[  414.221233][ T2282] tipc: Disabling bearer <eth:syzkaller0>
[  414.369492][ T2297] tipc: New replicast peer: 0.0.0.0
[  414.372181][ T2297] tipc: Enabled bearer <udp:syz2>, priority 26
[  414.374778][ T2297] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  414.520567][ T2318] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  414.579778][ T2321] syzkaller1: entered promiscuous mode
[  414.581836][ T2321] syzkaller1: entered allmulticast mode
[  414.682638][ T2325] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.686058][ T2325] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode
[  414.688543][ T2325] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  414.771982][ T2331] pim6reg1: entered promiscuous mode
[  414.773791][ T2331] pim6reg1: entered allmulticast mode
[  415.349676][ T2340] validate_nla: 1 callbacks suppressed
[  415.349687][ T2340] netlink: 'syz.2.12298': attribute type 29 has an invalid length.
[  415.357172][ T2340] netlink: 'syz.2.12298': attribute type 29 has an invalid length.
[  415.359936][ T2340] netlink: 'syz.2.12298': attribute type 29 has an invalid length.
[  415.362660][ T2340] netlink: 'syz.2.12298': attribute type 29 has an invalid length.
[  415.366099][ T2340] netlink: 'syz.2.12298': attribute type 29 has an invalid length.
[  415.369240][ T2340] netlink: 'syz.2.12298': attribute type 29 has an invalid length.
[  415.372683][ T2340] netlink: 'syz.2.12298': attribute type 29 has an invalid length.
[  415.376233][ T2340] netlink: 'syz.2.12298': attribute type 29 has an invalid length.
[  415.379040][ T2340] netlink: 'syz.2.12298': attribute type 29 has an invalid length.
[  415.382030][ T2340] netlink: 'syz.2.12298': attribute type 29 has an invalid length.
[  415.584309][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  415.742403][ T2355] lo speed is unknown, defaulting to 1000
[  415.744938][ T2355] wg1 speed is unknown, defaulting to 1000
[  415.795547][ T2361] ip6gre2: entered allmulticast mode
[  415.798718][ T2361] openvswitch: netlink: Message has 8 unknown bytes.
[  416.203197][ T2392] openvswitch: netlink: Message has 1 unknown bytes.
[  416.206321][ T2392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.553569][ T2415] syzkaller1: entered promiscuous mode
[  416.556745][ T2415] syzkaller1: entered allmulticast mode
[  416.561514][ T2415] __nla_validate_parse: 18 callbacks suppressed
[  416.561527][ T2415] netlink: 148 bytes leftover after parsing attributes in process `syz.2.12323'.
[  416.709750][ T2425] batadv_slave_0: left promiscuous mode
[  416.849253][ T2439] can: request_module (can-proto-5) failed.
[  416.854698][ T2439] netem: incorrect gi model size
[  416.857174][ T2439] netem: change failed
[  416.884744][ T2442] net veth1_virt_wifi : renamed from virt_wifi0
[  416.967725][ T2461] netlink: 248 bytes leftover after parsing attributes in process `syz.3.12338'.
[  417.183157][ T2489] lo speed is unknown, defaulting to 1000
[  417.188729][ T2489] wg1 speed is unknown, defaulting to 1000
[  417.194036][ T2491] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12349'.
[  417.466267][ T2515] lo speed is unknown, defaulting to 1000
[  417.468629][ T2515] wg1 speed is unknown, defaulting to 1000
[  417.605530][ T2534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12358'.
[  417.958476][ T2570] bridge0: port 1(ipvlan4) entered blocking state
[  417.960787][ T2570] bridge0: port 1(ipvlan4) entered disabled state
[  417.963120][ T2570] ipvlan4: entered allmulticast mode
[  417.965972][ T2570] ipvlan4: left allmulticast mode
[  418.074540][ T2578] lo speed is unknown, defaulting to 1000
[  418.077103][ T2578] wg1 speed is unknown, defaulting to 1000
[  418.198416][ T2584] IPVS: Scheduler module ip_vs_sip not found
[  418.236022][ T2587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12374'.
[  418.239660][ T2587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12374'.
[  418.436164][ T2602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12379'.
[  418.480648][ T2612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12381'.
[  418.799977][ T2659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12398'.
[  419.722729][ T2670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12400'.
[  419.804680][ T2690] lo speed is unknown, defaulting to 1000
[  419.807922][ T2690] wg1 speed is unknown, defaulting to 1000
[  420.128943][ T2710] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004
[  420.133053][ T2712] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004
[  420.157351][ T2715] pim6reg1: entered promiscuous mode
[  420.159187][ T2715] pim6reg1: entered allmulticast mode
[  420.234008][ T2717] lo speed is unknown, defaulting to 1000
[  420.236610][ T2717] wg1 speed is unknown, defaulting to 1000
[  420.318549][ T2723] gtp3: entered promiscuous mode
[  420.450942][ T2727] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  420.622707][ T2745] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  420.886739][ T2766] validate_nla: 53 callbacks suppressed
[  420.886750][ T2766] netlink: 'syz.2.12426': attribute type 12 has an invalid length.
[  420.941123][ T2771] netlink: 'syz.3.12427': attribute type 4 has an invalid length.
[  421.033610][ T2786] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  421.796847][ T2803] netlink: 'syz.2.12435': attribute type 13 has an invalid length.
[  421.917736][ T2805] __nla_validate_parse: 67 callbacks suppressed
[  421.917746][ T2805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12436'.
[  421.923770][ T2806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12436'.
[  421.929104][ T2805] netlink: 'syz.0.12436': attribute type 4 has an invalid length.
[  421.936331][ T2806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.966511][ T2811] netlink: 'syz.2.12438': attribute type 11 has an invalid length.
[  421.971894][ T2812] netlink: 'syz.2.12438': attribute type 11 has an invalid length.
[  421.989649][ T2811] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  422.069061][ T2825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'.
[  422.075456][ T2825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12442'.
[  422.182259][ T2848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  422.199078][ T2850] bond6: (slave veth11): Releasing active interface
[  422.203903][ T2850] bond7: (slave bridge0): Releasing active interface
[  422.209543][ T2850] bond12: (slave gretap3): Releasing active interface
[  422.212562][ T2850] gretap3: left allmulticast mode
[  422.250398][ T2850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12451'.
[  422.265215][ T2857] lo speed is unknown, defaulting to 1000
[  422.274927][ T2857] wg1 speed is unknown, defaulting to 1000
[  422.313216][ T2865] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  423.133646][ T2896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12461'.
[  423.139096][ T2896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12461'.
[  423.185175][ T2912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12463'.
[  423.188411][ T2912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12463'.
[  423.193572][ T2912] netlink: 'syz.0.12463': attribute type 1 has an invalid length.
[  423.226011][ T2915] veth15: entered promiscuous mode
[  423.271919][ T2919] netlink: 140 bytes leftover after parsing attributes in process `syz.0.12466'.
[  424.002973][ T2966] tipc: Resetting bearer <eth:syzkaller0>
[  424.042382][ T2970] netlink: 'syz.3.12481': attribute type 1 has an invalid length.
[  424.574580][ T2996] geneve0: entered promiscuous mode
[  424.578578][ T5714] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.586738][ T5714] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.591706][ T5714] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.596759][ T5714] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.669286][ T3005] tipc: Resetting bearer <eth:gre0>
[  424.683321][ T3005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  424.690307][   T47] lo speed is unknown, defaulting to 1000
[  424.697000][   T47] syz1: Port: 1 Link ACTIVE
[  425.074725][ T3023] lo speed is unknown, defaulting to 1000
[  425.077410][ T3023] wg1 speed is unknown, defaulting to 1000
[  425.199501][ T3030] xfrm0: entered allmulticast mode
[  425.274287][ T3036] netlink: 'syz.3.12504': attribute type 1 has an invalid length.
[  425.289709][ T3038] wireguard0: entered promiscuous mode
[  425.292263][ T3038] wireguard0: entered allmulticast mode
[  425.405987][ T3045] lo speed is unknown, defaulting to 1000
[  425.409389][ T3045] wg1 speed is unknown, defaulting to 1000
[  425.567957][ T3060] netlink: 'syz.2.12512': attribute type 21 has an invalid length.
[  426.226979][ T3099] netlink: 'syz.2.12524': attribute type 1 has an invalid length.
[  426.293563][ T3107] tipc: Resetting bearer <eth:gre0>
[  426.300268][ T3107] netlink: 'syz.2.12528': attribute type 10 has an invalid length.
[  426.305427][ T3107] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  426.309552][ T3107] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  426.335843][ T3109] gre0: entered allmulticast mode
[  426.340782][ T3109] dvmrp1: entered allmulticast mode
[  426.346086][ T3108] gre0: left allmulticast mode
[  427.073741][ T3128] __nla_validate_parse: 14 callbacks suppressed
[  427.073781][ T3128] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.12536'.
[  427.312279][ T3146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.438045][ T3164] sctp: [Deprecated]: syz.0.12550 (pid 3164) Use of int in max_burst socket option.
[  427.438045][ T3164] Use struct sctp_assoc_value instead
[  427.511279][ T3178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12557'.
[  427.525038][ T3178] netlink: 'syz.3.12557': attribute type 2 has an invalid length.
[  427.531595][ T3178] k*]: entered promiscuous mode
[  427.534849][ T3181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.596347][ T3190] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12560'.
[  427.786364][ T3204] netlink: 248 bytes leftover after parsing attributes in process `syz.3.12565'.
[  427.920666][ T3215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12568'.
[  427.941444][ T3217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.323876][ T3219] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  428.330426][ T3219] nbd: must specify a size in bytes for the device
[  428.501532][ T3231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12575'.
[  428.510528][ T3231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12575'.
[  428.520702][ T3231] bridge0: port 1(vlan2) entered blocking state
[  428.523097][ T3231] bridge0: port 1(vlan2) entered disabled state
[  428.526336][ T3231] vlan2: entered allmulticast mode
[  428.528582][ T3231] vlan2: left allmulticast mode
[  428.536241][ T3237] syzkaller0: entered promiscuous mode
[  428.538849][ T3237] syzkaller0: entered allmulticast mode
[  428.543852][ T3240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12578'.
[  428.621336][ T3248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.653449][ T3255] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12583'.
[  428.661012][ T3259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12583'.
[  428.811791][ T3279] netlink: 'syz.0.12591': attribute type 6 has an invalid length.
[  428.851506][ T3281] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  428.907158][ T3287] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  428.939528][ T3287] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  428.954782][ T3293] netlink: 'syz.0.12596': attribute type 9 has an invalid length.
[  429.221074][ T3329] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  429.506626][ T3358] netlink: 'syz.2.12617': attribute type 1 has an invalid length.
[  429.527406][ T3358] bond15: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  429.539511][ T3358] veth17: entered promiscuous mode
[  429.630940][ T3367] lo speed is unknown, defaulting to 1000
[  429.633934][ T3367] wg1 speed is unknown, defaulting to 1000
[  429.676601][ T3375] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  429.679962][ T3375] syzkaller0: entered promiscuous mode
[  429.681831][ T3375] syzkaller0: entered allmulticast mode
[  429.692132][ T3378] netlink: 'syz.3.12623': attribute type 13 has an invalid length.
[  429.694890][ T3378] netlink: 'syz.3.12623': attribute type 17 has an invalid length.
[  429.700610][ T3378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  429.736387][ T3378] lo speed is unknown, defaulting to 1000
[  429.738925][ T3378] wg1 speed is unknown, defaulting to 1000
[  429.800015][ T3383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.997438][ T3395] netlink: 'syz.2.12629': attribute type 2 has an invalid length.
[  430.085697][ T3408] pim6reg1: entered promiscuous mode
[  430.087560][ T3408] pim6reg1: entered allmulticast mode
[  430.252288][ T3425] tipc: Resetting bearer <eth:gre0>
[  430.258495][ T3425] bond15: (slave ip6gretap2): Releasing backup interface
[  430.309615][ T3425] vlan0: entered promiscuous mode
[  430.311887][ T3425] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  430.549361][ T3452] netlink: 'syz.2.12647': attribute type 14 has an invalid length.
[  431.178959][ T3498] lo speed is unknown, defaulting to 1000
[  431.181750][ T3498] wg1 speed is unknown, defaulting to 1000
[  431.280032][ T3508] pim6reg1: entered promiscuous mode
[  431.281831][ T3508] pim6reg1: entered allmulticast mode
[  431.295553][ T3508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  431.451198][ T3526] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  431.661838][ T3548] IPVS: length: 27 != 8
[  431.907569][ T3568] openvswitch: netlink: IPv4 tunnel dst address is zero
[  432.272774][ T3585] __nla_validate_parse: 42 callbacks suppressed
[  432.272787][ T3585] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12690'.
[  432.541813][ T3608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12699'.
[  432.628172][ T3626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12704'.
[  432.864354][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  433.059196][ T3643] lo speed is unknown, defaulting to 1000
[  433.061669][ T3643] wg1 speed is unknown, defaulting to 1000
[  433.360660][ T3664] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12717'.
[  433.470434][ T3672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12721'.
[  433.482779][ T3672] bridge15: port 1(veth13) entered blocking state
[  433.486292][ T3672] bridge15: port 1(veth13) entered disabled state
[  433.488955][ T3672] veth13: entered allmulticast mode
[  433.491522][ T3672] veth13: entered promiscuous mode
[  433.500959][ T3672] bridge15: port 2(veth0_to_bond) entered blocking state
[  433.503520][ T3672] bridge15: port 2(veth0_to_bond) entered disabled state
[  433.508126][ T3672] veth0_to_bond: entered allmulticast mode
[  433.511505][ T3672] veth0_to_bond: entered promiscuous mode
[  433.517142][ T3674] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12722'.
[  433.522065][ T3672] vlan2: entered allmulticast mode
[  433.525756][ T3672] veth0_to_hsr: entered allmulticast mode
[  433.528489][ T3674] 1: renamed from 70
[  433.531317][ T3674] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  433.535288][ T3674] 1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  433.538599][ T3674] 1: entered allmulticast mode
[  433.540885][ T3674] hsr_slave_0: entered allmulticast mode
[  433.543005][ T3674] hsr_slave_1: entered allmulticast mode
[  433.545773][ T3674] 8021q: adding VLAN 0 to HW filter on device 71
[  433.548792][ T3674] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check.
[  433.613583][ T3681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12723'.
[  433.625398][ T3681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12723'.
[  433.661049][ T3685] lo speed is unknown, defaulting to 1000
[  433.663745][ T3685] wg1 speed is unknown, defaulting to 1000
[  434.171645][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12739'.
[  434.246362][ T3732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12744'.
[  434.533080][ T3748] validate_nla: 2 callbacks suppressed
[  434.533096][ T3748] netlink: 'syz.2.12751': attribute type 1 has an invalid length.
[  434.784161][    C1] ==================================================================
[  434.787301][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  434.790188][    C1] Read of size 2 at addr ffff888106b2a42a by task syz-executor/12584
[  434.793935][    C1] 
[  434.794705][    C1] CPU: 1 UID: 0 PID: 12584 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  434.794716][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  434.794721][    C1] Call Trace:
[  434.794726][    C1]  <IRQ>
[  434.794731][    C1]  dump_stack_lvl+0x189/0x250
[  434.794743][    C1]  ? rcu_is_watching+0x15/0xb0
[  434.794751][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  434.794758][    C1]  ? rcu_is_watching+0x15/0xb0
[  434.794764][    C1]  ? lock_release+0x4b/0x3e0
[  434.794775][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  434.794784][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  434.794792][    C1]  print_report+0xca/0x240
[  434.794798][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  434.794807][    C1]  kasan_report+0x118/0x150
[  434.794818][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  434.794827][    C1]  rose_timer_expiry+0x471/0x4b0
[  434.794837][    C1]  call_timer_fn+0x17e/0x5f0
[  434.794847][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  434.794855][    C1]  ? call_timer_fn+0xbe/0x5f0
[  434.794863][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  434.794873][    C1]  ? rcu_is_watching+0x15/0xb0
[  434.794880][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  434.794888][    C1]  __run_timer_base+0x61a/0x860
[  434.794896][    C1]  ? ktime_get+0x3e/0x1f0
[  434.794905][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  434.794912][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  434.794922][    C1]  run_timer_softirq+0xb7/0x180
[  434.794931][    C1]  handle_softirqs+0x286/0x870
[  434.794939][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  434.794946][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  434.794953][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  434.794962][    C1]  __irq_exit_rcu+0xca/0x1f0
[  434.794968][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  434.794976][    C1]  irq_exit_rcu+0x9/0x30
[  434.794981][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  434.794993][    C1]  </IRQ>
[  434.794995][    C1]  <TASK>
[  434.794998][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  434.795006][    C1] RIP: 0010:rcu_is_watching+0x4e/0xb0
[  434.795013][    C1] Code: ff df 4c 8d 34 dd 10 fd bd 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 1c b7 7c 00 48 c7 c3 98 af a1 92 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d a9
[  434.795019][    C1] RSP: 0018:ffffc90006f7f530 EFLAGS: 00000283
[  434.795027][    C1] RAX: 1ffffffff1b7bfa3 RBX: ffff888136632f98 RCX: f08cc4dc86aa8d00
[  434.795032][    C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620
[  434.795037][    C1] RBP: 0000000000000000 R08: ffffc90006f7f6ef R09: 0000000000000000
[  434.795041][    C1] R10: ffffc90006f7f6a0 R11: fffff52000defede R12: dffffc0000000000
[  434.795046][    C1] R13: ffff88801ddf53b0 R14: ffffffff8dbdfd18 R15: dffffc0000000000
[  434.795055][    C1]  ? tomoyo_realpath_from_path+0xd6/0x5d0
[  434.795062][    C1]  kfree+0x4d/0x440
[  434.795072][    C1]  tomoyo_realpath_from_path+0xd6/0x5d0
[  434.795081][    C1]  tomoyo_check_open_permission+0x1c1/0x3b0
[  434.795090][    C1]  ? tomoyo_check_open_permission+0x16a/0x3b0
[  434.795099][    C1]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  434.795107][    C1]  ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0
[  434.795121][    C1]  ? rcu_is_watching+0x15/0xb0
[  434.795128][    C1]  ? tomoyo_file_open+0x165/0x220
[  434.795135][    C1]  security_file_open+0xb1/0x270
[  434.795144][    C1]  do_dentry_open+0x384/0x13f0
[  434.795152][    C1]  ? vfs_open+0x31/0x340
[  434.795159][    C1]  vfs_open+0x3b/0x340
[  434.795165][    C1]  ? path_openat+0x2ecd/0x3830
[  434.795173][    C1]  path_openat+0x2ee5/0x3830
[  434.795180][    C1]  ? arch_stack_walk+0xfc/0x150
[  434.795191][    C1]  ? stack_depot_save_flags+0x40/0x860
[  434.795202][    C1]  ? __pfx_path_openat+0x10/0x10
[  434.795209][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.795218][    C1]  do_filp_open+0x1fa/0x410
[  434.795226][    C1]  ? __pfx_do_filp_open+0x10/0x10
[  434.795237][    C1]  ? _raw_spin_unlock+0x28/0x50
[  434.795246][    C1]  ? alloc_fd+0x64c/0x6c0
[  434.795256][    C1]  do_sys_openat2+0x121/0x1c0
[  434.795264][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  434.795270][    C1]  ? do_mkdirat+0x54e/0x590
[  434.795278][    C1]  ? __pfx_do_mkdirat+0x10/0x10
[  434.795286][    C1]  __x64_sys_openat+0x138/0x170
[  434.795294][    C1]  do_syscall_64+0xfa/0x3b0
[  434.795300][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.795307][    C1]  ? exc_page_fault+0x9f/0xf0
[  434.795316][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.795322][    C1] RIP: 0033:0x7f443298d550
[  434.795329][    C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  434.795335][    C1] RSP: 002b:00007fffcfe84cd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  434.795342][    C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f443298d550
[  434.795346][    C1] RDX: 0000000000000002 RSI: 00007fffcfe84de0 RDI: 00000000ffffff9c
[  434.795351][    C1] RBP: 00007fffcfe84de0 R08: 0000000000000000 R09: 00007fffcfe84a97
[  434.795355][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000cd6
[  434.795359][    C1] R13: 00000000000927c0 R14: 000000000006a1ad R15: 00007fffcfe84de0
[  434.795372][    C1]  </TASK>
[  434.795375][    C1] 
[  434.977318][    C1] Allocated by task 3498:
[  434.978857][    C1]  kasan_save_track+0x3e/0x80
[  434.980776][    C1]  __kasan_kmalloc+0x93/0xb0
[  434.982552][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  434.984543][    C1]  __ipv6_dev_mc_inc+0x44f/0xa50
[  434.986477][    C1]  ipv6_add_dev+0xe54/0x1370
[  434.988278][    C1]  addrconf_notify+0x794/0x1010
[  434.990226][    C1]  notifier_call_chain+0x1b6/0x3e0
[  434.992274][    C1]  register_netdevice+0x1608/0x1ae0
[  434.994416][    C1]  register_netdev+0x40/0x60
[  434.996274][    C1]  ip6_tnl_init_net+0x259/0x3b0
[  434.998152][    C1]  ops_init+0x35c/0x5c0
[  434.999663][    C1]  setup_net+0x10c/0x320
[  435.001357][    C1]  copy_net_ns+0x31b/0x4d0
[  435.003042][    C1]  create_new_namespaces+0x3f3/0x720
[  435.005002][    C1]  unshare_nsproxy_namespaces+0x11c/0x170
[  435.006933][    C1]  ksys_unshare+0x4c8/0x8c0
[  435.008488][    C1]  __x64_sys_unshare+0x38/0x50
[  435.010185][    C1]  do_syscall_64+0xfa/0x3b0
[  435.011754][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.013889][    C1] 
[  435.014851][    C1] Freed by task 1935:
[  435.016458][    C1]  kasan_save_track+0x3e/0x80
[  435.018385][    C1]  kasan_save_free_info+0x46/0x50
[  435.020460][    C1]  __kasan_slab_free+0x5b/0x80
[  435.022428][    C1]  kmem_cache_free_bulk+0x2d1/0x520
[  435.024281][    C1]  kvfree_rcu_bulk+0xe5/0x1f0
[  435.025859][    C1]  kfree_rcu_monitor+0x211/0x2a0
[  435.027517][    C1]  process_scheduled_works+0xae1/0x17b0
[  435.029336][    C1]  worker_thread+0x8a0/0xda0
[  435.030976][    C1]  kthread+0x711/0x8a0
[  435.032571][    C1]  ret_from_fork+0x3fc/0x770
[  435.034215][    C1]  ret_from_fork_asm+0x1a/0x30
[  435.036178][    C1] 
[  435.037143][    C1] Last potentially related work creation:
[  435.039258][    C1]  kasan_save_stack+0x3e/0x60
[  435.040940][    C1]  kasan_record_aux_stack+0xbd/0xd0
[  435.042835][    C1]  kvfree_call_rcu+0xbb/0x410
[  435.044793][    C1]  ipv6_mc_destroy_dev+0x3c5/0x5a0
[  435.046658][    C1]  addrconf_ifdown+0x139e/0x1880
[  435.048603][    C1]  addrconf_notify+0x1bc/0x1010
[  435.050699][    C1]  notifier_call_chain+0x1b6/0x3e0
[  435.052851][    C1]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  435.055547][    C1]  ops_undo_list+0x3dc/0x990
[  435.057533][    C1]  cleanup_net+0x4c5/0x800
[  435.059415][    C1]  process_scheduled_works+0xae1/0x17b0
[  435.061774][    C1]  worker_thread+0x8a0/0xda0
[  435.063746][    C1]  kthread+0x711/0x8a0
[  435.065448][    C1]  ret_from_fork+0x3fc/0x770
[  435.067260][    C1]  ret_from_fork_asm+0x1a/0x30
[  435.068911][    C1] 
[  435.069749][    C1] The buggy address belongs to the object at ffff888106b2a400
[  435.069749][    C1]  which belongs to the cache kmalloc-512 of size 512
[  435.074403][    C1] The buggy address is located 42 bytes inside of
[  435.074403][    C1]  freed 512-byte region [ffff888106b2a400, ffff888106b2a600)
[  435.079843][    C1] 
[  435.080848][    C1] The buggy address belongs to the physical page:
[  435.083298][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888106b2b800 pfn:0x106b28
[  435.087475][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  435.090632][    C1] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  435.093636][    C1] page_type: f5(slab)
[  435.095070][    C1] raw: 057ff00000000240 ffff88801a441c80 ffffea00041c6110 ffffea00041fea10
[  435.097852][    C1] raw: ffff888106b2b800 0000000000100006 00000000f5000000 0000000000000000
[  435.101138][    C1] head: 057ff00000000240 ffff88801a441c80 ffffea00041c6110 ffffea00041fea10
[  435.104324][    C1] head: ffff888106b2b800 0000000000100006 00000000f5000000 0000000000000000
[  435.107481][    C1] head: 057ff00000000002 ffffea00041aca01 00000000ffffffff 00000000ffffffff
[  435.110696][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  435.114136][    C1] page dumped because: kasan: bad access detected
[  435.116875][    C1] page_owner tracks the page as allocated
[  435.119274][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5844, tgid 5844 (syz-executor), ts 47015019636, free_ts 46910475354
[  435.128035][    C1]  post_alloc_hook+0x240/0x2a0
[  435.130105][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  435.132434][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  435.134829][    C1]  alloc_pages_mpol+0x232/0x4a0
[  435.136951][    C1]  allocate_slab+0x8a/0x370
[  435.138897][    C1]  ___slab_alloc+0xbeb/0x1410
[  435.140841][    C1]  __kmalloc_noprof+0x305/0x4f0
[  435.142608][    C1]  fib6_info_alloc+0x30/0xf0
[  435.144081][    C1]  ip6_route_info_create+0x142/0x860
[  435.145997][    C1]  ip6_route_add+0x49/0x1b0
[  435.147745][    C1]  addrconf_add_dev+0x24f/0x340
[  435.149693][    C1]  inet6_addr_add+0x1a1/0xc00
[  435.151312][    C1]  inet6_rtm_newaddr+0x93d/0xd20
[  435.152964][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  435.154892][    C1]  netlink_rcv_skb+0x208/0x470
[  435.156642][    C1]  netlink_unicast+0x82f/0x9e0
[  435.158313][    C1] page last free pid 5844 tgid 5844 stack trace:
[  435.160471][    C1]  __free_frozen_pages+0xbc4/0xd30
[  435.162299][    C1]  __slab_free+0x303/0x3c0
[  435.163960][    C1]  qlist_free_all+0x97/0x140
[  435.165655][    C1]  kasan_quarantine_reduce+0x148/0x160
[  435.167689][    C1]  __kasan_slab_alloc+0x22/0x80
[  435.169523][    C1]  __kmalloc_noprof+0x224/0x4f0
[  435.171245][    C1]  __register_sysctl_table+0x72/0x1340
[  435.173268][    C1]  __addrconf_sysctl_register+0x328/0x4c0
[  435.175231][    C1]  addrconf_sysctl_register+0x168/0x1c0
[  435.177243][    C1]  ipv6_add_dev+0xd46/0x1370
[  435.178874][    C1]  ipv6_find_idev+0xc1/0x1d0
[  435.180468][    C1]  inet6_rtm_newaddr+0x734/0xd20
[  435.182190][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  435.184126][    C1]  netlink_rcv_skb+0x208/0x470
[  435.185858][    C1]  netlink_unicast+0x82f/0x9e0
[  435.187693][    C1]  netlink_sendmsg+0x805/0xb30
[  435.189468][    C1] 
[  435.190443][    C1] Memory state around the buggy address:
[  435.192505][    C1]  ffff888106b2a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  435.195566][    C1]  ffff888106b2a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  435.198334][    C1] >ffff888106b2a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  435.201087][    C1]                                   ^
[  435.202953][    C1]  ffff888106b2a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  435.206020][    C1]  ffff888106b2a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  435.208857][    C1] ==================================================================
[  435.212333][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  435.214935][    C1] CPU: 1 UID: 0 PID: 12584 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  435.218433][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  435.221964][    C1] Call Trace:
[  435.223134][    C1]  <IRQ>
[  435.224270][    C1]  dump_stack_lvl+0x99/0x250
[  435.226072][    C1]  ? __asan_memcpy+0x40/0x70
[  435.227876][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  435.229821][    C1]  ? __pfx__printk+0x10/0x10
[  435.231701][    C1]  vpanic+0x281/0x750
[  435.233327][    C1]  ? __pfx_vpanic+0x10/0x10
[  435.234832][    C1]  ? rcu_is_watching+0x15/0xb0
[  435.236589][    C1]  panic+0xb9/0xc0
[  435.238155][    C1]  ? __pfx_panic+0x10/0x10
[  435.239658][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  435.241696][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  435.243689][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  435.245442][    C1]  check_panic_on_warn+0x89/0xb0
[  435.247149][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  435.248908][    C1]  end_report+0x78/0x160
[  435.250367][    C1]  kasan_report+0x129/0x150
[  435.251873][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  435.253725][    C1]  rose_timer_expiry+0x471/0x4b0
[  435.255635][    C1]  call_timer_fn+0x17e/0x5f0
[  435.257447][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  435.259538][    C1]  ? call_timer_fn+0xbe/0x5f0
[  435.261430][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  435.263217][    C1]  ? rcu_is_watching+0x15/0xb0
[  435.264772][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  435.266514][    C1]  __run_timer_base+0x61a/0x860
[  435.268108][    C1]  ? ktime_get+0x3e/0x1f0
[  435.269723][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  435.271606][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  435.273897][    C1]  run_timer_softirq+0xb7/0x180
[  435.275868][    C1]  handle_softirqs+0x286/0x870
[  435.277684][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  435.279371][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  435.281394][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  435.283557][    C1]  __irq_exit_rcu+0xca/0x1f0
[  435.285452][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  435.287563][    C1]  irq_exit_rcu+0x9/0x30
[  435.289278][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  435.291509][    C1]  </IRQ>
[  435.292688][    C1]  <TASK>
[  435.293861][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  435.296091][    C1] RIP: 0010:rcu_is_watching+0x4e/0xb0
[  435.298218][    C1] Code: ff df 4c 8d 34 dd 10 fd bd 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 1c b7 7c 00 48 c7 c3 98 af a1 92 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d a9
[  435.305549][    C1] RSP: 0018:ffffc90006f7f530 EFLAGS: 00000283
[  435.307696][    C1] RAX: 1ffffffff1b7bfa3 RBX: ffff888136632f98 RCX: f08cc4dc86aa8d00
[  435.310414][    C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620
[  435.313153][    C1] RBP: 0000000000000000 R08: ffffc90006f7f6ef R09: 0000000000000000
[  435.316108][    C1] R10: ffffc90006f7f6a0 R11: fffff52000defede R12: dffffc0000000000
[  435.318906][    C1] R13: ffff88801ddf53b0 R14: ffffffff8dbdfd18 R15: dffffc0000000000
[  435.321581][    C1]  ? tomoyo_realpath_from_path+0xd6/0x5d0
[  435.323611][    C1]  kfree+0x4d/0x440
[  435.324956][    C1]  tomoyo_realpath_from_path+0xd6/0x5d0
[  435.327010][    C1]  tomoyo_check_open_permission+0x1c1/0x3b0
[  435.329049][    C1]  ? tomoyo_check_open_permission+0x16a/0x3b0
[  435.331123][    C1]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  435.333570][    C1]  ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0
[  435.335986][    C1]  ? rcu_is_watching+0x15/0xb0
[  435.337844][    C1]  ? tomoyo_file_open+0x165/0x220
[  435.339903][    C1]  security_file_open+0xb1/0x270
[  435.341933][    C1]  do_dentry_open+0x384/0x13f0
[  435.343720][    C1]  ? vfs_open+0x31/0x340
[  435.345419][    C1]  vfs_open+0x3b/0x340
[  435.347078][    C1]  ? path_openat+0x2ecd/0x3830
[  435.349016][    C1]  path_openat+0x2ee5/0x3830
[  435.350563][    C1]  ? arch_stack_walk+0xfc/0x150
[  435.352396][    C1]  ? stack_depot_save_flags+0x40/0x860
[  435.354535][    C1]  ? __pfx_path_openat+0x10/0x10
[  435.356513][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.358910][    C1]  do_filp_open+0x1fa/0x410
[  435.360577][    C1]  ? __pfx_do_filp_open+0x10/0x10
[  435.362488][    C1]  ? _raw_spin_unlock+0x28/0x50
[  435.364369][    C1]  ? alloc_fd+0x64c/0x6c0
[  435.366063][    C1]  do_sys_openat2+0x121/0x1c0
[  435.367813][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  435.369647][    C1]  ? do_mkdirat+0x54e/0x590
[  435.371131][    C1]  ? __pfx_do_mkdirat+0x10/0x10
[  435.372795][    C1]  __x64_sys_openat+0x138/0x170
[  435.374746][    C1]  do_syscall_64+0xfa/0x3b0
[  435.376652][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.379182][    C1]  ? exc_page_fault+0x9f/0xf0
[  435.381091][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.383585][    C1] RIP: 0033:0x7f443298d550
[  435.385460][    C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  435.392752][    C1] RSP: 002b:00007fffcfe84cd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  435.395985][    C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f443298d550
[  435.398852][    C1] RDX: 0000000000000002 RSI: 00007fffcfe84de0 RDI: 00000000ffffff9c
[  435.401526][    C1] RBP: 00007fffcfe84de0 R08: 0000000000000000 R09: 00007fffcfe84a97
[  435.404570][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000cd6
[  435.407633][    C1] R13: 00000000000927c0 R14: 000000000006a1ad R15: 00007fffcfe84de0
[  435.410713][    C1]  </TASK>
[  435.412709][    C1] Kernel Offset: disabled
[  435.414412][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:18:34  Registers:
info registers vcpu 0

CPU#0
RAX=ab66511fd93a9e00 RBX=ffffffff819683b8 RCX=ab66511fd93a9e00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38530 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdb930e6440 CR3=000000010fc70000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33be460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df2670 RSP=ffffc900001e0410
R8 =ffff888020840237 R9 =1ffff11004108046 R10=dffffc0000000000 R11=ffffffff854f1f70
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f1fe7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555580b7f500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555580b9a5c8 CR3=0000000035d0e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0a52212e53
XMM06=0000000000000000 00007f0a52212e4d XMM07=0000000000000000 00007f0a52212e61
XMM08=0000000000000000 00007f0a52212ee7 XMM09=0000000000000000 00007f0a52212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
