last executing test programs:

3.950180494s ago: executing program 1 (id=17182):
mount$bpf(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x440, &(0x7f0000000b00)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000000010,mode=00000000000000000004000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB=',appraise,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973652c66756e633d43524544535f434845434b2c6d6561737572652c6673757569643d63303231313830322d656236372d353633352d353156342d31653563330032652c6673757569643d31063963393136352d613339342d346534652d043862392d65366462313830322c6d6561737572652c0055a2f30aed7cbedefb84974a3a3c938d83b0b1e955bebd1224cf200b2f60c254ebf3f0414c3eb7f75e7e7e64950f2dcff0ff6b5cd10c5ca5fd479d045a6d98c4963390bded34cb6aa24175f37d4474f07251e308261b1e4083d1c74cb69b314212b41fa1e6ac9f20cb0f62cb1a023836e8cffcd0ee737b561cbcb044933eb4cf0245f7492648e495af6652841456d600a5c52d6d03ae867f9ddc18d237861da295a668c4e4a61053af46f3137a745d50dc1636eb5401712680d6279cc25071c4132ec28789366d41b94e7d660d487177b0663eb500e942dded9c546df679624e046ae8755ee5012d3081b3"])
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0xc0, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@private=0xa010101, @broadcast, 0xff, 0x0, 'pimreg\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x84, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "c6f0", 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@ip={@broadcast, @private=0xa010102, 0xff000000, 0xffffffff, 'veth0_to_batadv\x00', 'ip6gretap0\x00', {}, {0xff}, 0x4, 0x1, 0x28}, 0x0, 0xe0, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x6]}}, @common=@set={{0x40}, {{0x3, [0x3, 0x2, 0x7, 0x1, 0x1, 0x3], 0x4}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x2, 0x5, 0x0, 0x0, "da6ae0c23cf5df9d390c6f073b6506b7fa1be0c10d8d9071f8db0779fe49c44e512361cad3aa2cf51d6084a95a8e851448026998673cf6d62f93ee20c9b704c8"}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x1, [0x6, 0x6, 0x3, 0x5, 0x3, 0x6], 0x1, 0x6}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x2, 0x4, [0x2b, 0x27, 0x2f, 0x29, 0x7, 0x8, 0xe, 0x5, 0xf, 0x2b, 0x8, 0x8, 0x26, 0x2a, 0x34, 0x24], 0x0, 0x101, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438)
socket$packet(0x11, 0x3, 0x300)
fstat(r4, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000e00)=[{&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000000980)="4355da6f49d394388f2ad8b241d4f24f34eca505160bd78a15f2e58be6970ad4f6a4b0709d2bbbba1b017e0cde8c59e4eeff48f99a7ab1576a60549cfea7c085495ad8c0291103dd2217270395c8fdafd177ba603f5994f8efb2bde630a9b97f484d846c29b377e74940dd5abfe4f3a511f9feebb715e98943ef23b6594bc9bb83ed4dbb294a0bb3ed9b649ffd012a3fc2d579a3fe1f160a3b4c7fca50", 0x9d}, {&(0x7f00000001c0)="d6f832c34e8cace79fb8650e", 0xc}, {&(0x7f0000000a40)="b66c76b3789d9a0eced8c094b20c5f76ed32af5ce5037268c099d6ffd796726a634a16eda27df2c888eac4838bff16a32445eb6fa16b87b4f5623a1a3e8fa5655df8fc2bccbada56e599f2b901b2bf4eac8af9f9a6af911d9d3bd9cd4b3abf3f17aa56f6d0788364bf7aba7fa124b4257e3a75a7610498d7745640", 0x7b}, {&(0x7f0000000d40)="7ff7ee22588f31592704a1dc91d783456c34f32cb22eacd96b4ac13083f5a27f4f2829e65c9d257b7d05414955409ddd59329f7b4dd940af32f4c3599d1bf88eac0b804a2dce678ffcf59809ca9f78bed80d71e4a1bc48e8a1267ab1f154531bc5362eb19df2cbedcaf1ad6cbbeacf8407f82bb6f75897a45d2e870ebf059e792185d9677ffbd5992ce4cdef", 0x8c}], 0x5, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [r5, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r6}}}], 0x40, 0x4000800}, 0x48011)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)=r8}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r9, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
mkdir(&(0x7f0000000140)='./file0\x00', 0xd)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000000)={{0x4}, 0x54}, 0x10)

3.608752793s ago: executing program 1 (id=17192):
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
r0 = syz_io_uring_setup(0x2213, &(0x7f0000000100)={0x0, 0x817d, 0x8, 0x0, 0x162}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ad, 0x80, 0x4, 0x1e6, 0x0, r0}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1], 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r4, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.451067977s ago: executing program 1 (id=17195):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_io_uring_setup(0x74, &(0x7f0000000000)={0x0, 0xce94, 0x10, 0x3, 0x40004334}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x421, @empty, 0x401, 0x4}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x847ba, 0x67e9, 0xe, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

3.348094291s ago: executing program 1 (id=17196):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x173e, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/pids.max\x00', 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000200)=""/107, 0x6b}], &(0x7f0000000180)}, 0x20)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6)
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30)

3.221233173s ago: executing program 1 (id=17198):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100001c, 0x12, r5, 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req={0x80000413, 0x9, 0x8, 0x9}, 0x10)

2.845159723s ago: executing program 1 (id=17201):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f08f110200000040000a118000200e01d000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24048890)

1.690834612s ago: executing program 0 (id=17215):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00ffff2382767a00b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1af0, 0x100, 0x2, 0xbfdffffe}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x25}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xf7, &(0x7f0000001e40)=""/4093}, 0x21)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000000580)="ddfc05c445ed6d9eda34511831c58b36cb8f69facb05ca98b80ad3ec32104fdee7311b69e727d32481ddfa7f0047c0e575e978560e93e3497457c45514088f46dea763ab3f2c10e4169e72a0615e2aaa37c73ad3382c95f264e81a3dad4ef6991c4fba154770fa7998b952f9e49d0f0d27e7099ac6a8e67afe8a95abfee10af5a15a51483f4438cd1a2881813af9bfaeedbc4febc3d4df271927d0480ffb3cd31cdc39bea895ecd3fc3ac84d397f7f26ae4d65cfed7efcc970291cd8cb8f9cad77e7f7832e5b8cd16cbb5b90e1097f1ea1"}, 0x20)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = syz_io_uring_setup(0x238, &(0x7f0000000380)={0x0, 0x80fd, 0x800, 0x2, 0x265}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}})
io_uring_enter(r5, 0x6855, 0x32c9, 0x45, 0x0, 0xfffffffffffffff0)

1.547333427s ago: executing program 2 (id=17216):
r0 = socket(0x1000000000000010, 0x80802, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14ef00001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

1.547045474s ago: executing program 0 (id=17217):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1f00000000000000000000000080000004000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b86923baeec6902bc1cef383c628a0fadf52ae567a4284ceaf09e9afb24227bfbc75a14fe9ed2360f0fad3af8d60461eb1b0c9db801ed5fc965fe4ef53f0ff3824fd75eed4f54d5eb7021f577f3d8ffe92fb8f67d7f25ab096", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0114802a0102"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00'})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x8000})

1.36897466s ago: executing program 2 (id=17218):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x341282, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x28, &(0x7f00000011c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffd63}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @generic={0x1f, 0x0, 0x4, 0x2, 0xf}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, @map_val={0x18, 0xc, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000001140)='syzkaller\x00', 0x2, 0xa9, &(0x7f0000001300)=""/169, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x1, 0x10, 0x8, 0x2461000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001440)=[r2], &(0x7f0000001480)=[{0x4, 0x2, 0x9, 0x6}, {0x3, 0x1, 0x10, 0x3}], 0x10, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x32600)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff)

1.230611368s ago: executing program 2 (id=17219):
r0 = syz_io_uring_setup(0x5c3, &(0x7f00000002c0)={0x0, 0x4009839, 0x0, 0x2, 0x7b}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127})
io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, r0, 0x31, {0x5, 0x2000001}, 0x1}, 0x1)

560.853726ms ago: executing program 0 (id=17220):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4)
close(0x3)

440.095555ms ago: executing program 0 (id=17221):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x64)
sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000240)=@qipcrtr={0x2a, 0x2, 0x1}, 0x80, 0x0}, 0x88c1)

371.131001ms ago: executing program 0 (id=17222):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

369.9413ms ago: executing program 2 (id=17223):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = syz_clone(0x4000000, &(0x7f0000000040)="133aa5eb064ba76406c786d3c7191c816bc6bbfb73e09647c24401418603f13a4bc55db0b0a83476eadb376dcc1cd3dca44aaef3c41588c0a1fc3706561fcc06a2125441", 0x44, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="ff6a906140e2ca5a81189034574be86ecbd6a8e3f85b96175c910d1cd9316840f2ea038ed05c234f3b067e1ed8bb4c4e0f88e7841a8f3df698015f4b943df5dc8de88d47a1f71a45d2c9fe93a758")
sendmsg$AUDIT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x800, 0x70bd25, 0x25dfdbfc, {0x20, 0x0, 0x2, r1, 0x8, 0x3, 0xd5, 0x1, 0x0, 0x1, 0x3}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x84)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x430, 0x3f4, 0x400, 0x70bd26, 0x25dfdbfe, {0x5, 0x1, 0xf, [0xaf, 0x1, 0x8, 0x5, 0xcd5, 0x8, 0x2, 0xfffffffa, 0x6, 0x0, 0x1d, 0x9, 0xf, 0x69, 0x2, 0xfffffffe, 0x6, 0x800, 0x3, 0x7fffffff, 0x9, 0x5, 0x1dfa8278, 0x7f, 0x8, 0x6, 0x10001, 0x9, 0x2, 0x7, 0x7f, 0x1, 0x8000, 0x1, 0xfffffc37, 0x2, 0x0, 0x6, 0x9, 0x8, 0xe, 0x1ff, 0xf, 0x7ff, 0x5, 0x8001, 0x48b, 0x40d, 0x9, 0x1, 0x7, 0x2372, 0x9, 0x7ff, 0x7, 0x101, 0x3ff, 0x8, 0x526, 0x4, 0xf8de, 0x0, 0x7ff, 0x2], [0x1, 0x10, 0x9, 0x9, 0x1, 0x10001, 0x0, 0xffff, 0x0, 0x7fffffff, 0x7fffffff, 0x7, 0x1ff, 0x70c, 0x9, 0x10000, 0x2, 0x61bf77e1, 0xa4, 0x3ff, 0x8, 0x7, 0xddc6, 0x2, 0x5, 0x4, 0xb, 0x55a8, 0xfffffffb, 0x8, 0x6, 0x7fffffff, 0x4, 0xfa, 0x8, 0x2, 0x5, 0x0, 0x2, 0x22, 0x6, 0x1, 0x4, 0x3ff, 0x8, 0x9, 0x5, 0x10001, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x2, 0x400, 0x6, 0x7ff, 0x2, 0x4, 0x5, 0xfffffffb, 0x9, 0xa0f7, 0x10], [0x4, 0x7fff, 0xfffffffb, 0x10000, 0xe0, 0x800, 0x10001, 0x10, 0x10ea, 0x29f, 0x1a2, 0x4, 0x3ff, 0xa97b, 0x9, 0x1, 0x8d, 0x800, 0x0, 0x100, 0x3, 0x9, 0x6, 0x194, 0x9, 0x5, 0x2, 0x3ff, 0x401, 0x6, 0x3, 0x8, 0x1, 0x9, 0x6, 0x80000000, 0x2, 0x3, 0x1, 0x3, 0x40000000, 0x7f, 0x1ff, 0x1, 0x100, 0x3, 0x0, 0x3, 0x1, 0x8323618f, 0x225, 0x4, 0x1000, 0x2, 0xa0d, 0x0, 0x8, 0x1, 0xffffffff, 0xfffffff9, 0x8, 0x241, 0x0, 0xffff], [0xeee, 0xc, 0x8, 0x9, 0x10001, 0x6, 0x1, 0x1, 0xcf, 0x7, 0x6, 0x401, 0x2, 0x5, 0x7, 0x100, 0x7fff, 0x400, 0x5, 0x6, 0x8000, 0x3e, 0x7, 0x800, 0xc1, 0x7, 0x9, 0x5, 0x200, 0x87, 0xfffeffff, 0x2, 0x0, 0x3, 0x6, 0x7, 0x1, 0x4, 0x2, 0x40, 0x5, 0x9, 0x5, 0xfff, 0x1, 0xfffffffa, 0x1, 0xb2f, 0x3, 0x1, 0x81, 0x2997, 0x3, 0x3ff, 0xf515, 0x9, 0x5, 0x5, 0x400, 0x7, 0x4, 0xc, 0x4, 0x6], 0xd, ['\x00', '/^\x00', '##!@:]!-\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x430, 0x3f4, 0x400, 0x70bd26, 0x25dfdbfe, {0x5, 0x1, 0xf, [0xaf, 0x1, 0x8, 0x5, 0xcd5, 0x8, 0x2, 0xfffffffa, 0x6, 0x0, 0x1d, 0x9, 0xf, 0x69, 0x2, 0xfffffffe, 0x6, 0x800, 0x3, 0x7fffffff, 0x9, 0x5, 0x1dfa8278, 0x7f, 0x8, 0x6, 0x10001, 0x9, 0x2, 0x7, 0x7f, 0x1, 0x8000, 0x1, 0xfffffc37, 0x2, 0x0, 0x6, 0x9, 0x8, 0xe, 0x1ff, 0xf, 0x7ff, 0x5, 0x8001, 0x48b, 0x40d, 0x9, 0x1, 0x7, 0x2372, 0x9, 0x7ff, 0x7, 0x101, 0x3ff, 0x8, 0x526, 0x4, 0xf8de, 0x0, 0x7ff, 0x2], [0x1, 0x10, 0x9, 0x9, 0x1, 0x10001, 0x0, 0xffff, 0x0, 0x7fffffff, 0x7fffffff, 0x7, 0x1ff, 0x70c, 0x9, 0x10000, 0x2, 0x61bf77e1, 0xa4, 0x3ff, 0x8, 0x7, 0xddc6, 0x2, 0x5, 0x4, 0xb, 0x55a8, 0xfffffffb, 0x8, 0x6, 0x7fffffff, 0x4, 0xfa, 0x8, 0x2, 0x5, 0x0, 0x2, 0x22, 0x6, 0x1, 0x4, 0x3ff, 0x8, 0x9, 0x5, 0x10001, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x2, 0x400, 0x6, 0x7ff, 0x2, 0x4, 0x5, 0xfffffffb, 0x9, 0xa0f7, 0x10], [0x4, 0x7fff, 0xfffffffb, 0x10000, 0xe0, 0x800, 0x10001, 0x10, 0x10ea, 0x29f, 0x1a2, 0x4, 0x3ff, 0xa97b, 0x9, 0x1, 0x8d, 0x800, 0x0, 0x100, 0x3, 0x9, 0x6, 0x194, 0x9, 0x5, 0x2, 0x3ff, 0x401, 0x6, 0x3, 0x8, 0x1, 0x9, 0x6, 0x80000000, 0x2, 0x3, 0x1, 0x3, 0x40000000, 0x7f, 0x1ff, 0x1, 0x100, 0x3, 0x0, 0x3, 0x1, 0x8323618f, 0x225, 0x4, 0x1000, 0x2, 0xa0d, 0x0, 0x8, 0x1, 0xffffffff, 0xfffffff9, 0x8, 0x241, 0x0, 0xffff], [0xeee, 0xc, 0x8, 0x9, 0x10001, 0x6, 0x1, 0x1, 0xcf, 0x7, 0x6, 0x401, 0x2, 0x5, 0x7, 0x100, 0x7fff, 0x400, 0x5, 0x6, 0x8000, 0x3e, 0x7, 0x800, 0xc1, 0x7, 0x9, 0x5, 0x200, 0x87, 0xfffeffff, 0x2, 0x0, 0x3, 0x6, 0x7, 0x1, 0x4, 0x2, 0x40, 0x5, 0x9, 0x5, 0xfff, 0x1, 0xfffffffa, 0x1, 0xb2f, 0x3, 0x1, 0x81, 0x2997, 0x3, 0x3ff, 0xf515, 0x9, 0x5, 0x5, 0x400, 0x7, 0x4, 0xc, 0x4, 0x6], 0xd, ['\x00', '/^\x00', '##!@:]!-\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x800}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000000780), {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xffffff00, 0xff, 0xff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 'batadv_slave_0\x00', 'wg2\x00', {0xff}, {}, 0x2f, 0x6, 0x1, 0x4}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xff000000, 0x8000007f, 0xff], [0xff, 0xff, 0xff], 'vxcan1\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x3a, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2f}, 'pim6reg\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b00), 0x450400, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000040)
write$cgroup_pid(r2, &(0x7f0000000c40)=r1, 0x12)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000c80)=0x8, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000cc0)="e03825c5dd71499e41b2218608b0d728eac47e693d92c27c4837f87bff743bd8bc22c63400d4c292f6f7a1f816cfc456c83fd6faa2ee49b94758251795d1a9068d692e67fcc2e206b8d3b5d77630be2baf6a022e31b46760e4b8d0c49986f3d15ea5f9ed09f79fe8ddfcfa9523cbfe255a1da80ce447fe8a9c3621feffc469c7cf67bb70e37d96065e40f6dfe23810b998e9a38cfb163ec1ee68fb3a230c3f92df15c5cd72ec387e22ff1540e7c408bd2e9c5d89afdb8321478c79de6a6964befb2e7a996e88895481bbacec3ec8316b3fd9b5e6d49c0a8a7ccc1d50042647a06563736b0e68ebccd4", 0xe9)
setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000dc0)=0x4, 0x4) (async)
setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000dc0)=0x4, 0x4)
write$cgroup_freezer_state(r2, &(0x7f0000000e00)='FROZEN\x00', 0x7)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x810, r2, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x810, r2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000e40)={r2})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000e80)=0x1e5, 0x4)
socket$tipc(0x1e, 0x2, 0x0) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, 0x3fa, 0x10, 0x70bd26, 0x25dfdbfe, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1010}, 0x8000) (async)
sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, 0x3fa, 0x10, 0x70bd26, 0x25dfdbfe, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1010}, 0x8000)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r2, 0x8000000) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r2, 0x8000000)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x4000000)
io_uring_enter(r2, 0x4505, 0xf2cd, 0x4, &(0x7f0000001100)={[0x80000000]}, 0x8) (async)
io_uring_enter(r2, 0x4505, 0xf2cd, 0x4, &(0x7f0000001100)={[0x80000000]}, 0x8)
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x10, 0x3f5, 0x8, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x30000800}, 0x8040) (async)
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x10, 0x3f5, 0x8, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x30000800}, 0x8040)
sendmsg$AUDIT_USER(r2, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x3ed, 0x4, 0x70bd2c, 0x25dfdbfc, "8ea91aaaea6f3ca26bb0e4"}, 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x800) (async)
sendmsg$AUDIT_USER(r2, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x3ed, 0x4, 0x70bd2c, 0x25dfdbfc, "8ea91aaaea6f3ca26bb0e4"}, 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x800)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x11c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_PAYLOAD={0xde, 0xa, "92e888d8cf93eca886c513c71eb509ec8f914bb9a58b35245afbc11a72c8988905d2bb953f9f802274764437357f846cc501518faf801b91221c3d02a038e95548420a390705ed6ff6a96f2ecce0a5252c9bde2c0e3a52b0fc2b6b559d8e0fdbdecec7b6480474573a9ef9f458dd9cd7cae1ee826a64ecafa2575dcbb589d701f98f212c39d922a138f0c099ef6926770595a89698380f4a0358c44cf4f373e249d71b32847e531b0102cf8eb8097a9a6fdefdbf6aedaf07a424df37562deb25bd6b5d67a26db27d165dd074c9489606e95d24f83ae38c8a668c"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40041}, 0x40c1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000001540)=[{{0x3, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}], 0x28)
socket$nl_generic(0x10, 0x3, 0x10)

229.438172ms ago: executing program 0 (id=17224):
r0 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0x334e, 0x10, 0x3, 0x2f5}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x208100})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0xffff0700, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f)

149.586334ms ago: executing program 2 (id=17225):
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x2000000, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
r3 = socket(0x25, 0x1, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r4}, 0x50)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81})
io_uring_enter(r0, 0x2d3e, 0x0, 0x8, 0x0, 0x0)

0s ago: executing program 2 (id=17226):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c)
r1 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x2000, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400d4800400bf800400398008001b00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04001a8008002b009252044c2e35d8190ed94020def422564aba4142d12879cfbd8c0e15bec558fb4019263a68a0a350a114087817d16a10e2b571d7226827e512303483ae20a69148cd2d0ca54254af50e5fe07672e38067e17300748252879fe1a6c4425e2405b54245233158cd67f96beb4e204187833c752ebb96c6210153ad62ab05f632aa2ca84553b528f257b24feb8a34f08798adbf5eda84890bcd4adf2125d6efa16e39373b9", @ANYRES32, @ANYBLOB="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"], 0x168c}}, 0x4000040)

kernel console output (not intermixed with test programs):

ocess `syz.0.14062'.
[  846.782257][T16543] netlink: 'syz.1.14061': attribute type 10 has an invalid length.
[  846.783550][T16545] openvswitch: netlink: EtherType 0 is less than min 600
[  846.784711][T16543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14061'.
[  846.791214][T16543] veth0_vlan: entered allmulticast mode
[  846.800327][T16543] bridge0: port 3(veth0_vlan) entered blocking state
[  846.803037][T16543] bridge0: port 3(veth0_vlan) entered disabled state
[  846.808138][T16543] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  846.829200][T16543] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  847.278472][T16589] dummy0: entered allmulticast mode
[  847.287539][T16589] Cannot find set identified by id 3 to match
[  847.295209][T16590] ip6t_rpfilter: unknown options
[  847.312496][T16587] dummy0: left allmulticast mode
[  847.392631][T16596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.393656][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14077'.
[  847.396268][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.435697][T16596] netlink: 'syz.0.14076': attribute type 1 has an invalid length.
[  847.453421][T16594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.457546][T12796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.576192][T16607] x_tables: (null)_tables: NFQUEUE.3 target: invalid size 8 (kernel) != (user) 88
[  847.608623][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14081'.
[  847.657434][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14081'.
[  847.723513][T16615] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14085'.
[  847.730347][T16615] netlink: 'syz.0.14085': attribute type 4 has an invalid length.
[  847.771607][T16617] --map-set only usable from mangle table
[  847.966873][T16632] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  848.119024][   T33] audit: type=1800 audit(1771867878.140:15): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14094" name=FCFFFFFF dev="tmpfs" ino=1985 res=0 errno=0
[  848.558708][T16667] netlink: 'syz.2.14104': attribute type 7 has an invalid length.
[  848.568760][T16667] netlink: 'syz.2.14104': attribute type 8 has an invalid length.
[  848.633600][T16667] netlink: 'syz.2.14104': attribute type 13 has an invalid length.
[  848.701905][T16677] netlink: 'syz.1.14105': attribute type 29 has an invalid length.
[  848.726997][T12943] IPVS: starting estimator thread 0...
[  848.744827][T16675] random: crng reseeded on system resumption
[  848.826102][T16679] IPVS: using max 67 ests per chain, 160800 per kthread
[  849.144599][T16698] netlink: 'syz.0.14113': attribute type 29 has an invalid length.
[  849.148963][T16698] netlink: 'syz.0.14113': attribute type 29 has an invalid length.
[  849.325726][T16703] nbd: couldn't find a device at index 17
[  849.736646][T16726] netlink: 'syz.0.14123': attribute type 10 has an invalid length.
[  849.833460][T16731] netlink: 'syz.0.14125': attribute type 21 has an invalid length.
[  851.766664][T16789] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  852.393121][T16809] __nla_validate_parse: 7 callbacks suppressed
[  852.393139][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14151'.
[  852.398577][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14151'.
[  852.411703][T16809] net_ratelimit: 12 callbacks suppressed
[  852.411720][T16809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  852.943035][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14142'.
[  853.080851][T16832] openvswitch: netlink: Message has 8 unknown bytes.
[  853.385254][T16848] SET target dimension over the limit!
[  853.946880][T16864] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  854.263115][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14170'.
[  854.395268][T16887] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0
[  854.402993][T16888] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 1
[  854.407497][T16889] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 2
[  854.421993][T16890] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 3
[  854.425985][T16891] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 4
[  854.432093][T16892] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 5
[  854.461994][T16893] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 6
[  854.471340][T16896] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 7
[  854.515153][T16886] IPVS: Unknown mcast interface: pim6reg0
[  854.517479][T16886] IPVS: stopping master sync thread 16896 ...
[  854.522589][T16886] IPVS: stopping master sync thread 16893 ...
[  854.539564][T16886] IPVS: stopping master sync thread 16892 ...
[  854.542616][T16886] IPVS: stopping master sync thread 16891 ...
[  854.545520][T16886] IPVS: stopping master sync thread 16890 ...
[  854.555768][T16886] IPVS: stopping master sync thread 16889 ...
[  854.562191][T16886] IPVS: stopping master sync thread 16888 ...
[  854.565920][T16886] IPVS: stopping master sync thread 16887 ...
[  854.579135][T16899] netlink: 'syz.2.14178': attribute type 13 has an invalid length.
[  855.782032][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14183'.
[  855.855168][T16942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  856.022765][T16951] netlink: 'syz.0.14196': attribute type 61 has an invalid length.
[  856.025974][T16951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14196'.
[  856.095708][T16955] nbd: illegal input index -1502784405
[  857.157184][   T33] audit: type=1800 audit(1771867887.170:16): pid=16974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14203" name="file2" dev="tmpfs" ino=13049 res=0 errno=0
[  857.586572][T16996] netlink: 'syz.1.14212': attribute type 1 has an invalid length.
[  857.589598][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14212'.
[  858.454736][T17037] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.14228'.
[  858.474887][T17039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  859.220586][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14233'.
[  859.225521][T17060] netlink: 'syz.2.14233': attribute type 1 has an invalid length.
[  859.228548][T17060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14233'.
[  859.419679][T17069] netlink: 'syz.1.14236': attribute type 21 has an invalid length.
[  859.516377][   T33] audit: type=1800 audit(1771867889.540:17): pid=17072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14237" name=FCFFFFFF dev="tmpfs" ino=2238 res=0 errno=0
[  859.888992][   T33] audit: type=1800 audit(1771867889.910:18): pid=17087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14244" name=FCFFFFFF dev="tmpfs" ino=13106 res=0 errno=0
[  859.904071][T17088] netlink: 'syz.1.14243': attribute type 29 has an invalid length.
[  859.906825][T17088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14243'.
[  859.950709][T17090] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0
[  859.958845][T17091] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 1
[  859.966418][T17092] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 2
[  859.975857][T17094] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 3
[  859.980832][T17095] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 4
[  859.987968][T17096] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 5
[  859.995635][T17097] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 6
[  860.012064][T17099] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 7
[  860.679860][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14246'.
[  861.132737][T17121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14252'.
[  861.136101][T17121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14252'.
[  861.316264][T17128] x_tables: duplicate underflow at hook 4
[  861.764798][T17136] x_tables: ip_tables: icmp match: only valid for protocol 1
[  861.800612][T17138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  862.178360][T17151] xt_hashlimit: size too large, truncated to 1048576
[  862.220521][   T33] audit: type=1800 audit(1771867892.240:19): pid=17154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14264" name=FCFFFFFF dev="tmpfs" ino=12685 res=0 errno=0
[  862.677175][   T33] audit: type=1800 audit(1771867892.700:20): pid=17172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14271" name=FCFFFFFF dev="tmpfs" ino=13148 res=0 errno=0
[  865.157416][T17297] netlink: 'syz.0.14311': attribute type 1 has an invalid length.
[  865.160412][T17297] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14311'.
[  865.180106][T17297] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14311'.
[  865.190278][T17297] netlink: 'syz.0.14311': attribute type 1 has an invalid length.
[  865.200421][T17297] netlink: 'syz.0.14311': attribute type 8 has an invalid length.
[  865.213823][T17297] netlink: 606 bytes leftover after parsing attributes in process `syz.0.14311'.
[  866.043791][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14321'.
[  866.051989][T17352] openvswitch: netlink: nsh attr 16383 is out of range max 3
[  867.710690][T17394] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14330'.
[  869.309945][T17401] netlink: 'syz.2.14333': attribute type 2 has an invalid length.
[  869.314029][T17401] netlink: 'syz.2.14333': attribute type 8 has an invalid length.
[  869.322240][T17401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14333'.
[  869.597061][T17415] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.14340'.
[  869.674433][T17417] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14341'.
[  869.748894][T17422] netlink: 'syz.2.14340': attribute type 7 has an invalid length.
[  869.800341][T17426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14344'.
[  869.805825][T17426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14344'.
[  869.854955][T17429] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  869.879577][T17431] openvswitch: netlink: Multiple metadata blocks provided
[  869.954659][T17435] netlink: zone id is out of range
[  869.956625][T17435] netlink: zone id is out of range
[  869.958540][T17435] netlink: zone id is out of range
[  869.960565][T17435] netlink: zone id is out of range
[  871.042389][T17473] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  871.223862][T17479] __nla_validate_parse: 1 callbacks suppressed
[  871.223875][T17479] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.14365'.
[  871.907883][T17538] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  872.371654][ T5813] Bluetooth: hci2: command 0x0406 tx timeout
[  872.627904][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14387'.
[  873.247715][T17588] netlink: 100 bytes leftover after parsing attributes in process `syz.0.14398'.
[  873.485586][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14399'.
[  873.652541][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14397'.
[  874.578000][T17625] syzkaller0: entered promiscuous mode
[  874.579668][T17625] syzkaller0: entered allmulticast mode
[  874.598075][T17625] SET target dimension over the limit!
[  874.905854][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14414'.
[  875.207730][T17654] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14420'.
[  875.417210][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  875.419677][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  877.271765][T17779] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14460'.
[  877.327637][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14463'.
[  877.376318][T17784] bond0: (slave bond_slave_0): Releasing backup interface
[  877.544828][T17787] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  877.547311][T17787] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  877.549958][T17787] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  877.553109][T17787] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  877.573766][T17798] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.14465'.
[  878.617530][T17835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14479'.
[  879.567486][ T8055] Bluetooth: hci2: command 0x0406 tx timeout
[  879.567550][ T5813] Bluetooth: hci1: command 0x0c1a tx timeout
[  879.569849][ T8055] Bluetooth: hci0: command 0x0c1a tx timeout
[  879.788486][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14484'.
[  880.571177][T17890] netlink: 140 bytes leftover after parsing attributes in process `syz.2.14499'.
[  880.577618][T17890] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14499'.
[  880.654648][T17893] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14500'.
[  880.759758][T17895] xt_bpf: check failed: parse error
[  880.917146][T17904] netlink: 'syz.2.14503': attribute type 21 has an invalid length.
[  880.923428][T17904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14503'.
[  881.145348][T17914] bpf: Bad value for 'uid'
[  881.348193][T17922] netlink: 840 bytes leftover after parsing attributes in process `syz.0.14511'.
[  881.414291][T17912] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  881.429451][T17929] netlink: 'syz.0.14513': attribute type 4 has an invalid length.
[  881.547903][T17940] x_tables: duplicate underflow at hook 1
[  881.641462][T17853] Bluetooth: hci2: command 0x0406 tx timeout
[  882.115591][T17962] netlink: 'syz.1.14525': attribute type 1 has an invalid length.
[  882.746964][T17994] xt_l2tp: unknown flags: 1f
[  883.823569][T18035] __nla_validate_parse: 3 callbacks suppressed
[  883.823588][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14552'.
[  883.907540][T18037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  884.111588][T18046] netlink: 'syz.2.14556': attribute type 7 has an invalid length.
[  884.507118][T18073] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.14564'.
[  885.126990][T18093] netlink: 'syz.2.14572': attribute type 16 has an invalid length.
[  885.129692][T18093] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14572'.
[  885.548123][T18127] pimreg: left allmulticast mode
[  885.936364][T18135] netlink: 180 bytes leftover after parsing attributes in process `syz.0.14584'.
[  885.939851][T18135] netlink: 'syz.0.14584': attribute type 2 has an invalid length.
[  885.942734][T18135] netlink: 'syz.0.14584': attribute type 1 has an invalid length.
[  886.708681][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14594'.
[  886.867230][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14597'.
[  886.945544][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14599'.
[  886.998883][T18177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14599'.
[  887.004559][T18177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14599'.
[  889.215788][T18244] netlink: 'syz.2.14619': attribute type 2 has an invalid length.
[  889.218749][T18244] netlink: 'syz.2.14619': attribute type 8 has an invalid length.
[  889.226394][T18244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14619'.
[  889.909800][T18278] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14630'.
[  891.959261][T18379] x_tables: unsorted underflow at hook 3
[  892.545105][T18413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14678'.
[  892.829340][T18420] netlink: 'syz.2.14680': attribute type 21 has an invalid length.
[  895.074976][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14691'.
[  895.425061][T18471] netlink: 468 bytes leftover after parsing attributes in process `syz.0.14698'.
[  895.444872][T18469] tun0: tun_chr_ioctl cmd 1074025677
[  895.446545][T18469] tun0: linktype set to 6
[  895.448138][T18469] tun0: tun_chr_ioctl cmd 1074025680
[  895.565471][T18476] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  895.742165][T18491] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14706'.
[  895.763663][   T33] audit: type=1107 audit(1771867925.790:21): pid=18490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='pI`S&'
[  895.821009][T18498] netlink: 'syz.2.14708': attribute type 1 has an invalid length.
[  895.880176][T18507] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14711'.
[  897.205412][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14725'.
[  897.686048][T18558] netlink: 'syz.2.14728': attribute type 11 has an invalid length.
[  898.107498][T18585] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  898.109847][T18585] batman_adv: batadv0: Removing interface: batadv_slave_0
[  898.113870][T18585] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  898.116066][T18585] batman_adv: batadv0: Removing interface: batadv_slave_1
[  898.231207][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14734'.
[  898.235661][T18591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14734'.
[  898.239075][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14734'.
[  898.244154][T18591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14734'.
[  898.247692][T18591] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14734'.
[  898.381040][T18601] bpf: Bad value for 'gid'
[  900.991883][T18711] __nla_validate_parse: 1 callbacks suppressed
[  900.991898][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14775'.
[  900.999397][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14775'.
[  901.200960][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14774'.
[  901.888317][T18726] netlink: 'syz.1.14781': attribute type 2 has an invalid length.
[  901.904053][T18725] netlink: 'syz.2.14782': attribute type 29 has an invalid length.
[  901.906963][T18725] netlink: 'syz.2.14782': attribute type 29 has an invalid length.
[  901.939632][T18725] netlink: 500 bytes leftover after parsing attributes in process `syz.2.14782'.
[  902.404945][T18756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14792'.
[  902.812477][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14796'.
[  902.825802][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14796'.
[  903.615681][T18789] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14803'.
[  903.637804][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14803'.
[  903.656448][T18789] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  903.702630][T18789] batman_adv: batadv0: Removing interface: batadv_slave_1
[  905.189982][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14815'.
[  905.357882][T20243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.470983][T20243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.519561][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  905.525257][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  905.528865][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  905.537573][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  905.541066][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  905.585712][T20243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.650316][T18840] vxcan1 speed is unknown, defaulting to 1000
[  905.714461][T20243] bond0: (slave netdevsim0): Releasing backup interface
[  905.729351][T20243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.006070][T18840] chnl_net:caif_netlink_parms(): no params data found
[  906.118590][T18840] bridge0: port 1(bridge_slave_0) entered blocking state
[  906.122548][T18840] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.125583][T18840] bridge_slave_0: entered allmulticast mode
[  906.129316][T18840] bridge_slave_0: entered promiscuous mode
[  906.136317][T18840] bridge0: port 2(bridge_slave_1) entered blocking state
[  906.139042][T18840] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.146055][T18840] bridge_slave_1: entered allmulticast mode
[  906.149808][T18840] bridge_slave_1: entered promiscuous mode
[  906.189741][T18840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  906.195931][T18840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  906.236319][T18840] team0: Port device team_slave_0 added
[  906.283260][T18861] netlink: 'syz.0.14826': attribute type 15 has an invalid length.
[  906.291800][T18861] netlink: 'syz.0.14826': attribute type 7 has an invalid length.
[  906.297682][T18840] team0: Port device team_slave_1 added
[  906.346013][T18840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  906.348932][T18840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  906.360043][T18840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  906.405339][T18840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  906.408005][T18840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  906.432209][T18840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  906.999691][T20243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  907.014183][T20243] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  907.025001][T20243] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  907.030483][T20243] bond0 (unregistering): Released all slaves
[  907.047447][T18840] hsr_slave_0: entered promiscuous mode
[  907.050297][T18840] hsr_slave_1: entered promiscuous mode
[  907.052674][T18840] debugfs: 'hsr0' already exists in 'hsr'
[  907.054301][T18840] Cannot create hsr debugfs directory
[  907.095465][T18886] netlink: 'syz.1.14833': attribute type 1 has an invalid length.
[  907.122269][T18886] syzkaller0: entered promiscuous mode
[  907.124485][T18886] syzkaller0: entered allmulticast mode
[  907.647716][T17853] Bluetooth: hci0: command tx timeout
[  908.040774][T18840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  908.055477][T18840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  908.059989][T18840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  908.090401][T18840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  908.110315][T20243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  908.113743][T20243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  908.192953][T20243] pimreg (unregistering): left allmulticast mode
[  908.276163][T20243] team0 (unregistering): Port device team_slave_1 removed
[  908.325100][T20243] team0 (unregistering): Port device team_slave_0 removed
[  908.810910][T18840] 8021q: adding VLAN 0 to HW filter on device bond0
[  908.821108][T18840] 8021q: adding VLAN 0 to HW filter on device team0
[  908.826332][T18108] bridge0: port 1(bridge_slave_0) entered blocking state
[  908.828496][T18108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  908.840533][T18108] bridge0: port 2(bridge_slave_1) entered blocking state
[  908.843326][T18108] bridge0: port 2(bridge_slave_1) entered forwarding state
[  908.930299][T18840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  908.936259][T18840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  909.041081][T20243] IPVS: stop unused estimator thread 0...
[  909.220152][T18840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  909.292649][T18840] veth0_vlan: entered promiscuous mode
[  909.300761][T18840] veth1_vlan: entered promiscuous mode
[  909.341676][T18840] veth0_macvtap: entered promiscuous mode
[  909.347475][T18840] veth1_macvtap: entered promiscuous mode
[  909.362244][T18840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  909.386444][T18840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  909.403738][T20243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  909.407202][T20243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  909.410478][T20243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  909.440446][T20243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  909.518582][ T7463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.530043][ T7463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  909.555153][T17765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.558029][T17765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  909.639918][T18968] syzkaller0: entered promiscuous mode
[  909.643932][T18968] syzkaller0: entered allmulticast mode
[  909.721673][T17853] Bluetooth: hci0: command tx timeout
[  909.976394][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14856'.
[  909.979513][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14856'.
[  910.206575][T18983] netlink: 'syz.1.14855': attribute type 1 has an invalid length.
[  910.455688][T19004] netlink: 'syz.0.14861': attribute type 1 has an invalid length.
[  910.941768][T19023] netlink: 'syz.1.14870': attribute type 2 has an invalid length.
[  910.944702][T19023] netlink: 'syz.1.14870': attribute type 8 has an invalid length.
[  910.947602][T19023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14870'.
[  911.075504][T19034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14875'.
[  911.078896][T19034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14875'.
[  911.122036][T19035] syzkaller0: entered allmulticast mode
[  911.135380][T19035] syzkaller0 (unregistering): left allmulticast mode
[  911.680038][T19063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14883'.
[  911.697202][T19065] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  911.801829][T17853] Bluetooth: hci0: command tx timeout
[  911.860822][T19073] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14885'.
[  911.948140][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14886'.
[  911.952215][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14886'.
[  913.078599][T19095] x_tables: (null)_tables: NFQUEUE.3 target: invalid size 8 (kernel) != (user) 88
[  913.620157][T19107] x_tables: duplicate underflow at hook 1
[  913.847101][T19114] vxcan1 speed is unknown, defaulting to 1000
[  913.881778][T17853] Bluetooth: hci0: command tx timeout
[  914.514356][T19121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  914.517014][T19121] IPv6: NLM_F_CREATE should be set when creating new route
[  914.519742][T19121] IPv6: NLM_F_CREATE should be set when creating new route
[  914.522555][T19121] IPv6: NLM_F_CREATE should be set when creating new route
[  914.808532][T19138] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.14907'.
[  915.152506][T19146] netlink: 'syz.2.14911': attribute type 10 has an invalid length.
[  915.161661][T19146] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14911'.
[  915.164754][T19146] team0: entered promiscuous mode
[  915.166571][T19146] team_slave_0: entered promiscuous mode
[  915.168739][T19146] team_slave_1: entered promiscuous mode
[  915.171071][T19146] bridge0: port 3(team0) entered blocking state
[  915.221932][T19146] bridge0: port 3(team0) entered disabled state
[  915.224472][T19146] team0: entered allmulticast mode
[  915.226426][T19146] team_slave_0: entered allmulticast mode
[  915.228585][T19146] team_slave_1: entered allmulticast mode
[  915.285071][T19146] bridge0: port 3(team0) entered blocking state
[  915.287540][T19146] bridge0: port 3(team0) entered forwarding state
[  915.416389][T19157] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  915.437532][T19157] syzkaller0: entered promiscuous mode
[  915.439484][T19157] syzkaller0: entered allmulticast mode
[  917.318191][T19186] xt_TCPMSS: Only works on TCP SYN packets
[  917.421174][T19192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14926'.
[  918.648443][T19235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14940'.
[  918.705858][T19234] openvswitch: netlink: Tunnel attr 20 out of range max 16
[  918.893281][T19249] netlink: 'syz.2.14945': attribute type 21 has an invalid length.
[  918.895985][T19249] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14945'.
[  919.288737][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14952'.
[  919.865291][T19285] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  919.903867][T19285] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14958'.
[  919.987454][T19285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  920.067199][T19285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  920.090721][T19285] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  920.096983][T19285] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.099281][T19285] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.116417][T19285] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  920.130023][T19285] bond0 (unregistering): Released all slaves
[  920.403905][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14963'.
[  920.764498][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14965'.
[  920.996864][T19316] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  921.031890][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14965'.
[  921.039415][T19311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14965'.
[  921.417348][T19332] xt_policy: too many policy elements
[  921.593362][T19337] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  921.974033][T19361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14978'.
[  923.052547][T19391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14989'.
[  923.627741][T19409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14996'.
[  923.637143][T19411] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  923.732242][T19413] netlink: 200 bytes leftover after parsing attributes in process `syz.2.14998'.
[  924.100078][T19421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15000'.
[  924.103832][T19421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15000'.
[  925.471149][T19469] __nla_validate_parse: 3 callbacks suppressed
[  925.471165][T19469] netlink: 248 bytes leftover after parsing attributes in process `syz.0.15014'.
[  925.951014][T19480] netlink: 84 bytes leftover after parsing attributes in process `syz.1.15018'.
[  926.344583][T19483] openvswitch: netlink: Flow key attribute not present in set flow.
[  926.620524][T19492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15021'.
[  926.771524][T19495] netlink: 'syz.0.15022': attribute type 7 has an invalid length.
[  926.774338][T19495] netlink: 'syz.0.15022': attribute type 8 has an invalid length.
[  926.777105][T19495] netlink: 'syz.0.15022': attribute type 13 has an invalid length.
[  926.827852][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15023'.
[  926.929506][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15024'.
[  927.329599][T19512] SET target dimension over the limit!
[  927.332588][T19513] SET target dimension over the limit!
[  927.338946][T19512] netlink: 'syz.0.15029': attribute type 1 has an invalid length.
[  927.345269][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15029'.
[  927.609955][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15030'.
[  927.884689][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15035'.
[  928.199784][T19540] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15038'.
[  928.716919][T19552] netlink: 'syz.2.15043': attribute type 1 has an invalid length.
[  928.720044][T19552] netlink: 5220 bytes leftover after parsing attributes in process `syz.2.15043'.
[  928.793337][T19552] nbd: illegal input index 1769516
[  929.303494][T19576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  929.581919][T19589] IPVS: Unknown mcast interface: pim6reg1
[  929.631892][T19589] IPVS: Unknown mcast interface: pim6reg1
[  929.634126][T19589] IPVS: Unknown mcast interface: pim6reg1
[  929.636284][T19589] IPVS: Unknown mcast interface: pim6reg1
[  929.677014][T19589] IPVS: Unknown mcast interface: pim6reg1
[  929.687739][T19593] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001
[  929.689842][T19589] IPVS: Unknown mcast interface: pim6reg1
[  930.743071][T19638] __nla_validate_parse: 1 callbacks suppressed
[  930.743085][T19638] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15071'.
[  930.796575][T19646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15072'.
[  930.975888][T19653] openvswitch: netlink: Flow actions attr not present in new flow.
[  931.037767][T19655] netlink: 'syz.2.15077': attribute type 29 has an invalid length.
[  931.260207][T19672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15081'.
[  931.271977][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15081'.
[  931.578490][T19683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15085'.
[  931.693599][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15087'.
[  932.006232][T19702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15095'.
[  932.426429][T19723] bpf: Bad value for 'gid'
[  932.600460][T19727] openvswitch: netlink: Message has 1 unknown bytes.
[  932.880171][T19731] netlink: 830 bytes leftover after parsing attributes in process `syz.0.15105'.
[  933.180207][T19746] netlink: 'syz.1.15109': attribute type 4 has an invalid length.
[  933.254175][T19749] netlink: 'syz.1.15111': attribute type 21 has an invalid length.
[  933.257160][T19749] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15111'.
[  933.260824][T19749] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15111'.
[  933.479000][   T33] audit: type=1800 audit(1771867963.500:22): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15114" name=FCFFFFFF dev="tmpfs" ino=572 res=0 errno=0
[  933.780588][T19767] netlink: 'syz.2.15118': attribute type 29 has an invalid length.
[  934.675560][T19793] netlink: 'syz.0.15126': attribute type 21 has an invalid length.
[  936.541815][T19852] __nla_validate_parse: 5 callbacks suppressed
[  936.541829][T19852] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15143'.
[  936.610854][T19852] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15143'.
[  936.851975][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  936.854377][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  937.177811][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15151'.
[  937.770788][   T31] IPVS: starting estimator thread 0...
[  937.775161][T19908] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15159'.
[  937.882531][T19911] IPVS: using max 45 ests per chain, 108000 per kthread
[  937.981058][T19919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15161'.
[  937.987437][T19919] netlink: 'syz.2.15161': attribute type 12 has an invalid length.
[  937.990413][T19919] netlink: 120 bytes leftover after parsing attributes in process `syz.2.15161'.
[  938.612524][T19943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15167'.
[  938.889369][T19956] dummy0: entered allmulticast mode
[  938.910312][T19956] openvswitch: netlink: Message has 1 unknown bytes.
[  938.926094][T19956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  938.945827][T19956] dummy0: left allmulticast mode
[  938.983900][T19946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15169'.
[  938.987213][T19946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15169'.
[  938.998692][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15169'.
[  939.126847][T19966] netlink: 'syz.2.15175': attribute type 4 has an invalid length.
[  939.424798][T19982] sysfs: cannot create duplicate filename '/class/ieee80211/&%Q0@æjʫ}!'
[  939.430163][T19982] CPU: 1 UID: 0 PID: 19982 Comm: syz.0.15181 Not tainted syzkaller #0 PREEMPT(full) 
[  939.430182][T19982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  939.430190][T19982] Call Trace:
[  939.430197][T19982]  <TASK>
[  939.430205][T19982]  dump_stack_lvl+0xe8/0x150
[  939.430231][T19982]  sysfs_warn_dup+0x8e/0xa0
[  939.430249][T19982]  sysfs_do_create_link_sd+0xc0/0x110
[  939.430266][T19982]  device_add_class_symlinks+0x1cf/0x240
[  939.430289][T19982]  device_add+0x475/0xb70
[  939.430308][T19982]  wiphy_register+0x1d73/0x2d50
[  939.430331][T19982]  ? __pfx_wiphy_register+0x10/0x10
[  939.430376][T19982]  ? __pfx_netdev_run_todo+0x10/0x10
[  939.430390][T19982]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  939.430408][T19982]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  939.430431][T19982]  ieee80211_register_hw+0x3571/0x4220
[  939.430451][T19982]  ? ieee80211_register_hw+0x14a1/0x4220
[  939.430468][T19982]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  939.430490][T19982]  ? __hrtimer_setup+0x181/0x200
[  939.430506][T19982]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  939.430522][T19982]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  939.430559][T19982]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  939.430576][T19982]  ? kstrndup+0xbf/0x160
[  939.430597][T19982]  hwsim_new_radio_nl+0xf35/0x1bd0
[  939.430627][T19982]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  939.430650][T19982]  ? rcu_is_watching+0x15/0xb0
[  939.430667][T19982]  ? trace_kmalloc+0x2a/0x110
[  939.430681][T19982]  ? __nla_parse+0x40/0x60
[  939.430698][T19982]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  939.430720][T19982]  genl_family_rcv_msg_doit+0x22a/0x330
[  939.430741][T19982]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  939.430765][T19982]  ? bpf_lsm_capable+0x9/0x20
[  939.430779][T19982]  ? security_capable+0x7e/0x2c0
[  939.430796][T19982]  genl_rcv_msg+0x61c/0x7a0
[  939.430816][T19982]  ? __pfx_genl_rcv_msg+0x10/0x10
[  939.430831][T19982]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  939.430872][T19982]  ? __lock_acquire+0x6b5/0x2cf0
[  939.430896][T19982]  netlink_rcv_skb+0x232/0x4b0
[  939.430913][T19982]  ? __pfx_genl_rcv_msg+0x10/0x10
[  939.430929][T19982]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  939.430958][T19982]  ? down_read+0x272/0x2e0
[  939.430970][T19982]  ? genl_rcv+0xd/0x40
[  939.430986][T19982]  genl_rcv+0x28/0x40
[  939.431000][T19982]  netlink_unicast+0x80f/0x9b0
[  939.431017][T19982]  ? __pfx_netlink_unicast+0x10/0x10
[  939.431029][T19982]  ? netlink_sendmsg+0x650/0xb40
[  939.431041][T19982]  ? skb_put+0x11b/0x210
[  939.431058][T19982]  netlink_sendmsg+0x813/0xb40
[  939.431078][T19982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  939.431093][T19982]  ? aa_sock_msg_perm+0xf1/0x1b0
[  939.431109][T19982]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  939.431125][T19982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  939.431139][T19982]  ____sys_sendmsg+0xa68/0xad0
[  939.431156][T19982]  ? futex_unqueue+0x211/0x240
[  939.431174][T19982]  ? __pfx_____sys_sendmsg+0x10/0x10
[  939.431195][T19982]  ? import_iovec+0x73/0xa0
[  939.431215][T19982]  ___sys_sendmsg+0x2a5/0x360
[  939.431235][T19982]  ? __pfx____sys_sendmsg+0x10/0x10
[  939.431254][T19982]  ? futex_wait+0x29a/0x380
[  939.431286][T19982]  ? __fget_files+0x2a/0x420
[  939.431300][T19982]  ? __fget_files+0x3a0/0x420
[  939.431321][T19982]  __x64_sys_sendmsg+0x1bd/0x2a0
[  939.431339][T19982]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  939.431390][T19982]  ? rcu_is_watching+0x15/0xb0
[  939.431415][T19982]  do_syscall_64+0x14d/0xf80
[  939.431433][T19982]  ? trace_irq_disable+0x3b/0x150
[  939.431450][T19982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.431464][T19982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.431475][T19982] RIP: 0033:0x7f254799c629
[  939.431489][T19982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.431500][T19982] RSP: 002b:00007f254876f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  939.431514][T19982] RAX: ffffffffffffffda RBX: 00007f2547c15fa0 RCX: 00007f254799c629
[  939.431524][T19982] RDX: 0000000000004810 RSI: 0000200000000000 RDI: 000000000000000a
[  939.431532][T19982] RBP: 00007f2547a32b39 R08: 0000000000000000 R09: 0000000000000000
[  939.431539][T19982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  939.431547][T19982] R13: 00007f2547c16038 R14: 00007f2547c15fa0 R15: 00007fff1fd79158
[  939.431566][T19982]  </TASK>
[  941.047423][T20052] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  943.023293][T20087] __nla_validate_parse: 8 callbacks suppressed
[  943.023313][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15218'.
[  943.041985][T20094] delete_channel: no stack
[  943.044389][T20094] delete_channel: no stack
[  943.121135][T20100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15222'.
[  943.342629][T20110] netlink: 'syz.0.15225': attribute type 11 has an invalid length.
[  943.345420][T20110] netlink: 80 bytes leftover after parsing attributes in process `syz.0.15225'.
[  944.799624][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15241'.
[  945.283128][T20177] dummy0: entered allmulticast mode
[  945.290498][T20177] dummy0: left allmulticast mode
[  945.826901][T20207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15260'.
[  945.980062][T20216] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  946.461832][T20223] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.15266'.
[  946.664959][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15269'.
[  946.700711][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15270'.
[  946.711014][T20231] netlink: 34 bytes leftover after parsing attributes in process `syz.1.15270'.
[  946.817777][T20237] netlink: 284 bytes leftover after parsing attributes in process `syz.2.15271'.
[  947.027119][T20252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  947.088495][T20260] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  947.596415][T20285] netlink: 'syz.2.15291': attribute type 2 has an invalid length.
[  947.599715][T20285] netlink: 'syz.2.15291': attribute type 8 has an invalid length.
[  947.677106][T20273] lo speed is unknown, defaulting to 1000
[  947.679158][T20273] lo speed is unknown, defaulting to 1000
[  947.681768][T20273] lo speed is unknown, defaulting to 1000
[  947.693031][T20273] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  947.709905][T20273] lo speed is unknown, defaulting to 1000
[  947.719527][T20273] lo speed is unknown, defaulting to 1000
[  947.724894][T20273] lo speed is unknown, defaulting to 1000
[  948.269074][T20310] __nla_validate_parse: 1 callbacks suppressed
[  948.269085][T20310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15299'.
[  948.535012][T20316] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  948.540610][T20316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15303'.
[  948.946269][T20340] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15309'.
[  949.479557][T20373] netlink: 92 bytes leftover after parsing attributes in process `syz.2.15321'.
[  949.482695][T20373] veth0_to_batadv: entered allmulticast mode
[  949.631201][T20385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  949.671979][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15325'.
[  949.789637][T20391] netlink: 'syz.2.15329': attribute type 107 has an invalid length.
[  949.905614][T20408] bridge0: entered promiscuous mode
[  949.907468][T20408] bridge0: entered allmulticast mode
[  949.978405][T20411] netlink: 'syz.2.15335': attribute type 11 has an invalid length.
[  949.981868][T20411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15335'.
[  949.993133][T20411] netlink: 'syz.2.15335': attribute type 11 has an invalid length.
[  949.997692][T20411] netlink: 7 bytes leftover after parsing attributes in process `syz.2.15335'.
[  950.002199][T20411] netlink: 7 bytes leftover after parsing attributes in process `syz.2.15335'.
[  950.019086][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15336'.
[  950.557750][T20791] netlink: 'syz.0.15343': attribute type 1 has an invalid length.
[  950.560205][T20791] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15343'.
[  950.566743][T20791] netlink: 'syz.0.15343': attribute type 1 has an invalid length.
[  950.570001][T20791] netlink: 'syz.0.15343': attribute type 8 has an invalid length.
[  950.918607][T21673] netlink: 'syz.0.15346': attribute type 4 has an invalid length.
[  951.450338][T22172] xt_hashlimit: size too large, truncated to 1048576
[  952.524566][T22202] netlink: 'syz.2.15365': attribute type 15 has an invalid length.
[  952.767646][T22213] validate_nla: 1 callbacks suppressed
[  952.767663][T22213] netlink: 'syz.2.15367': attribute type 10 has an invalid length.
[  952.773238][T22213] bond0: entered promiscuous mode
[  952.775142][T22213] bond_slave_0: entered promiscuous mode
[  952.778909][T22213] bond_slave_1: entered promiscuous mode
[  952.787138][T22213] bridge0: port 4(bond0) entered blocking state
[  952.790075][T22213] bridge0: port 4(bond0) entered disabled state
[  952.792733][T22213] bond0: entered allmulticast mode
[  952.794727][T22213] bond_slave_0: entered allmulticast mode
[  952.797005][T22213] bond_slave_1: entered allmulticast mode
[  952.803999][T22213] bridge0: port 4(bond0) entered blocking state
[  952.806462][T22213] bridge0: port 4(bond0) entered forwarding state
[  953.586095][T22244] netlink: 'syz.2.15380': attribute type 2 has an invalid length.
[  953.594672][T22244] netlink: 'syz.2.15380': attribute type 8 has an invalid length.
[  953.597674][T22244] __nla_validate_parse: 5 callbacks suppressed
[  953.597692][T22244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15380'.
[  953.943875][T22266] dvmrp1: entered allmulticast mode
[  954.251081][T22280] netlink: 'syz.0.15392': attribute type 39 has an invalid length.
[  954.587599][T22300] netlink: 'syz.1.15398': attribute type 2 has an invalid length.
[  954.589958][T22300] netlink: 'syz.1.15398': attribute type 8 has an invalid length.
[  954.631628][T22300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15398'.
[  954.838633][T22303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15399'.
[  956.487886][T22367] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15425'.
[  956.966131][T22392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15432'.
[  958.159652][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15448'.
[  958.168617][T22446] tc_dump_action: action bad kind
[  958.220126][T22446] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15448'.
[  959.603023][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15468'.
[  959.606577][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15468'.
[  959.950918][T22516] x_tables: duplicate underflow at hook 2
[  960.155437][T22518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15475'.
[  960.196675][T22522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15476'.
[  960.223263][T22522] netlink: 'syz.2.15476': attribute type 18 has an invalid length.
[  961.483574][T22557] netlink: 'syz.2.15485': attribute type 12 has an invalid length.
[  961.491406][T22557] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15485'.
[  962.144630][T22586] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15495'.
[  962.439807][T22597] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15501'.
[  962.494869][T22595] netlink: 'syz.1.15500': attribute type 5 has an invalid length.
[  962.900032][T22608] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15503'.
[  963.860249][T22666] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.15523'.
[  964.249402][T22664] netlink: 124 bytes leftover after parsing attributes in process `syz.2.15521'.
[  964.383378][T22694] xt_ecn: cannot match TCP bits for non-tcp packets
[  964.608527][T22716] netlink: 'syz.2.15539': attribute type 10 has an invalid length.
[  964.621582][T22716] syz_tun: entered promiscuous mode
[  964.626697][T22716] syz_tun: entered allmulticast mode
[  964.629252][T22716] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  964.657456][T22716] netlink: 'syz.2.15539': attribute type 10 has an invalid length.
[  964.669864][T22716] bridge0: port 4(bond0) entered disabled state
[  964.673422][T22716] bond0: left allmulticast mode
[  964.674916][T22716] bond_slave_0: left allmulticast mode
[  964.676518][T22716] bond_slave_1: left allmulticast mode
[  964.678103][T22716] syz_tun: left allmulticast mode
[  964.679585][T22716] bond0: left promiscuous mode
[  964.680985][T22716] bond_slave_0: left promiscuous mode
[  964.702338][T22716] bond_slave_1: left promiscuous mode
[  964.704342][T22716] bridge0: port 4(bond0) entered disabled state
[  964.725417][T22716] 8021q: adding VLAN 0 to HW filter on device bond0
[  964.728033][T22716] bond0: entered promiscuous mode
[  964.729627][T22716] bond_slave_0: entered promiscuous mode
[  964.732481][T22716] bond_slave_1: entered promiscuous mode
[  964.734804][T22716] bond0: entered allmulticast mode
[  964.736755][T22716] bond_slave_0: entered allmulticast mode
[  964.738846][T22716] bond_slave_1: entered allmulticast mode
[  964.741141][T22716] syz_tun: entered allmulticast mode
[  964.744955][T22716] team0: Port device bond0 added
[  965.469546][T22777] netlink: 'syz.2.15558': attribute type 11 has an invalid length.
[  966.419518][T22803] openvswitch: netlink: Flow key attribute not present in set flow.
[  967.757977][T22841] __nla_validate_parse: 2 callbacks suppressed
[  967.757989][T22841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15579'.
[  967.786448][T22842] netlink: 'syz.1.15579': attribute type 21 has an invalid length.
[  967.789515][T22842] netlink: 'syz.1.15579': attribute type 6 has an invalid length.
[  967.821453][T22842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15579'.
[  968.257053][T22854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15584'.
[  968.434145][T22864] netlink: 148 bytes leftover after parsing attributes in process `syz.0.15588'.
[  968.469598][T22865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15586'.
[  968.926335][T22879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15594'.
[  969.499519][T22907] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  969.563466][   T33] audit: type=1800 audit(1771867999.560:23): pid=22907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15603" name="file2" dev="tmpfs" ino=14982 res=0 errno=0
[  970.093333][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15608'.
[  972.202969][T22973] netlink: 'syz.0.15625': attribute type 15 has an invalid length.
[  972.856237][T22990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15630'.
[  972.859583][T22990] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  973.760215][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15638'.
[  973.904708][T23024] openvswitch: netlink: Flow actions attr not present in new flow.
[  974.205791][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15645'.
[  974.249235][T23036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15646'.
[  974.252383][T23036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15646'.
[  974.380086][T23041] netlink: 'syz.2.15648': attribute type 11 has an invalid length.
[  974.467526][T23047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15651'.
[  974.474199][T23047] netlink: 'syz.2.15651': attribute type 29 has an invalid length.
[  974.516376][T23051] netlink: 88 bytes leftover after parsing attributes in process `syz.2.15652'.
[  974.519766][T23051] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  974.529030][T11644] bridge0: port 3(team0) entered disabled state
[  974.599191][T23053] syzkaller0: entered promiscuous mode
[  974.603465][T23053] syzkaller0: entered allmulticast mode
[  974.914321][T23070] netlink: 76 bytes leftover after parsing attributes in process `syz.1.15661'.
[  974.917811][T23070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15661'.
[  974.921867][T23070] netlink: 76 bytes leftover after parsing attributes in process `syz.1.15661'.
[  975.578053][T23105] openvswitch: netlink: Missing valid actions attribute.
[  975.580942][T23105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  978.880303][T23204] IPVS: set_ctl: invalid protocol: 0 172.20.20.48:32789
[  979.138303][T23213] xt_recent: Unsupported userspace flags (000000de)
[  979.336073][T23204] __nla_validate_parse: 2 callbacks suppressed
[  979.336089][T23204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15711'.
[  979.579163][T23241] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  980.098944][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15728'.
[  980.336158][T23265] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15731'.
[  980.689710][T23277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15735'.
[  980.734662][T23277] can: request_module (can-proto-0) failed.
[  980.950621][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15737'.
[  981.017578][T23285] netlink: 'syz.2.15738': attribute type 1 has an invalid length.
[  981.029949][T23285] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15738'.
[  981.034864][T23285] netlink: 658 bytes leftover after parsing attributes in process `syz.2.15738'.
[  981.038622][T23285] netlink: 1 bytes leftover after parsing attributes in process `syz.2.15738'.
[  981.510300][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15746'.
[  981.575301][T23314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15747'.
[  984.457593][T23402] __nla_validate_parse: 4 callbacks suppressed
[  984.457612][T23402] netlink: 120 bytes leftover after parsing attributes in process `syz.0.15781'.
[  984.505205][T23404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15782'.
[  984.673463][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15784'.
[  984.733814][T23416] netlink: 'syz.1.15785': attribute type 6 has an invalid length.
[  984.739279][T23416] netlink: 176 bytes leftover after parsing attributes in process `syz.1.15785'.
[  985.311531][T23436] netlink: 'syz.2.15791': attribute type 11 has an invalid length.
[  985.415724][T23439] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.15792'.
[  986.074330][T23455] netlink: 'syz.1.15798': attribute type 2 has an invalid length.
[  986.077270][T23455] netlink: 'syz.1.15798': attribute type 8 has an invalid length.
[  986.091432][T23455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15798'.
[  986.109906][T23455] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  986.299747][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15803'.
[  988.091544][T23535] netlink: 'syz.1.15828': attribute type 10 has an invalid length.
[  988.114819][T23535] syz_tun: entered promiscuous mode
[  988.204344][T23539] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15830'.
[  988.210769][T23539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15830'.
[  988.247913][T23539] netlink: 15092 bytes leftover after parsing attributes in process `syz.1.15830'.
[  988.345969][T23537] netlink: 'syz.0.15829': attribute type 1 has an invalid length.
[  988.348769][T23537] netlink: 'syz.0.15829': attribute type 1 has an invalid length.
[  988.361751][T23537] netlink: 'syz.0.15829': attribute type 8 has an invalid length.
[  988.512843][T23553] openvswitch: netlink: Flow key attribute not present in set flow.
[  989.986613][T23611] netlink: 'syz.0.15859': attribute type 11 has an invalid length.
[  990.181605][T23621] __nla_validate_parse: 6 callbacks suppressed
[  990.181617][T23621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15865'.
[  990.204855][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15865'.
[  990.207887][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15865'.
[  990.305437][T23621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15865'.
[  990.426458][T23626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15867'.
[  990.429211][T23626] netlink: 13 bytes leftover after parsing attributes in process `syz.1.15867'.
[  990.438953][T23623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  990.565644][T23633] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15869'.
[  990.604303][T23643] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  991.693322][T23674] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15883'.
[  991.696733][T23674] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15883'.
[  991.699936][T23674] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15883'.
[  992.670615][T23720] netlink: 'syz.2.15901': attribute type 10 has an invalid length.
[  992.857003][T23734] IPVS: Unknown mcast interface: syzkaller1
[  992.860420][T23734] x_tables: duplicate underflow at hook 2
[  993.166440][T23754] netlink: 'syz.0.15915': attribute type 1 has an invalid length.
[  993.169423][T23754] netlink: 'syz.0.15915': attribute type 2 has an invalid length.
[  994.372422][T23825] netlink: 'syz.0.15940': attribute type 9 has an invalid length.
[  994.375417][T23825] netlink: 'syz.0.15940': attribute type 11 has an invalid length.
[  994.389089][T23825] netlink: 'syz.0.15940': attribute type 12 has an invalid length.
[  994.804018][T23838] tap0: tun_chr_ioctl cmd 1074025677
[  994.807345][T23838] tap0: linktype set to 778
[  995.066900][T23847] netlink: 'syz.2.15949': attribute type 21 has an invalid length.
[  995.196797][T23847] netlink: 'syz.2.15949': attribute type 21 has an invalid length.
[  995.245064][T23855] __nla_validate_parse: 6 callbacks suppressed
[  995.245081][T23855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15951'.
[  995.433478][T23871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15951'.
[  996.172586][T23879] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15957'.
[  996.197094][T23879] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15957'.
[  996.205658][T23879] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15957'.
[  996.274191][T23881] netlink: 'syz.2.15959': attribute type 2 has an invalid length.
[  996.277179][T23881] netlink: 'syz.2.15959': attribute type 8 has an invalid length.
[  996.279947][T23881] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15959'.
[  996.502396][T23889] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.15961'.
[  996.718533][T23899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15965'.
[  996.738258][T23899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15965'.
[  997.257039][T23932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15974'.
[  997.376134][T23939] netem: incorrect gi model size
[  997.378293][T23939] netem: change failed
[  998.301973][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  998.304281][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  999.053514][T23982] x_tables: duplicate underflow at hook 1
[ 1000.115084][T24012] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[ 1000.302686][T24021] __nla_validate_parse: 6 callbacks suppressed
[ 1000.302699][T24021] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.16005'.
[ 1000.683074][T24028] netlink: 100 bytes leftover after parsing attributes in process `syz.2.16008'.
[ 1000.748911][T24035] openvswitch: netlink: Flow key attribute not present in set flow.
[ 1001.146900][T24040] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.16011'.
[ 1003.300841][T24107] netlink: 'syz.0.16037': attribute type 1 has an invalid length.
[ 1003.770542][T24124] netlink: 'syz.0.16043': attribute type 16 has an invalid length.
[ 1003.781320][T24124] netlink: 'syz.0.16043': attribute type 17 has an invalid length.
[ 1003.839747][T24124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1003.855422][T12943] lo speed is unknown, defaulting to 1000
[ 1004.167505][T24143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16050'.
[ 1004.421675][T24154] openvswitch: netlink: Multiple metadata blocks provided
[ 1004.427977][T24153] openvswitch: netlink: Multiple metadata blocks provided
[ 1004.476899][T24154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16054'.
[ 1004.486752][T24153] netlink: 'syz.0.16054': attribute type 1 has an invalid length.
[ 1004.489068][T24153] netlink: 96 bytes leftover after parsing attributes in process `syz.0.16054'.
[ 1004.502316][T24153] netlink: 658 bytes leftover after parsing attributes in process `syz.0.16054'.
[ 1004.505038][T24153] netlink: 1 bytes leftover after parsing attributes in process `syz.0.16054'.
[ 1004.512911][T24154] netlink: 'syz.0.16054': attribute type 1 has an invalid length.
[ 1004.530391][T24154] netlink: 96 bytes leftover after parsing attributes in process `syz.0.16054'.
[ 1004.541943][T24154] netlink: 658 bytes leftover after parsing attributes in process `syz.0.16054'.
[ 1005.842268][T24193] __nla_validate_parse: 2 callbacks suppressed
[ 1005.842287][T24193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16070'.
[ 1005.852753][T24193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16070'.
[ 1005.863189][T24193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16070'.
[ 1006.279858][T24204] vxcan1 speed is unknown, defaulting to 1000
[ 1006.520256][T24204] lo speed is unknown, defaulting to 1000
[ 1007.068898][T24227] netlink: 750 bytes leftover after parsing attributes in process `syz.0.16081'.
[ 1007.394484][   T33] audit: type=1800 audit(1771868037.400:24): pid=24235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16085" name=FCFFFFFF dev="tmpfs" ino=15870 res=0 errno=0
[ 1007.430341][T24239] netlink: 'syz.0.16087': attribute type 1 has an invalid length.
[ 1007.447938][T24239] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16087'.
[ 1009.443903][T24294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16106'.
[ 1009.448353][T24294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16106'.
[ 1009.453967][T24294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16106'.
[ 1009.979883][T24312] netlink: 'syz.1.16115': attribute type 3 has an invalid length.
[ 1009.988934][T24312] netlink: 'syz.1.16115': attribute type 2 has an invalid length.
[ 1010.003962][T24312] netlink: 'syz.1.16115': attribute type 8 has an invalid length.
[ 1010.006839][T24312] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16115'.
[ 1010.382099][T24324] netlink: 'syz.2.16119': attribute type 25 has an invalid length.
[ 1010.461882][T24334] netlink: 'syz.1.16122': attribute type 1 has an invalid length.
[ 1010.465032][T24334] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.16122'.
[ 1010.531090][T24336] netlink: 'syz.1.16123': attribute type 11 has an invalid length.
[ 1010.860678][T24341] netlink: 'syz.1.16123': attribute type 6 has an invalid length.
[ 1010.891530][T24343] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16126'.
[ 1010.895705][T24343] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16126'.
[ 1011.047046][T24348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16127'.
[ 1011.637757][T24356] syz2: rxe_newlink: already configured on vxcan1
[ 1012.461730][T24389] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1012.554278][T24391] xt_hashlimit: size too large, truncated to 1048576
[ 1012.764446][T24396] openvswitch: netlink: Key type 89 is out of range max 32
[ 1013.663840][T24413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16146'.
[ 1013.666259][T24413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16146'.
[ 1013.766339][T24437] openvswitch: netlink: Message has 1 unknown bytes.
[ 1013.768628][T24437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1013.845124][T24413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16146'.
[ 1015.339079][T24519] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16184'.
[ 1015.390973][T24519] bond0 (unregistering): left promiscuous mode
[ 1015.399376][T24519] bond_slave_0: left promiscuous mode
[ 1015.402074][T24519] bond_slave_1: left promiscuous mode
[ 1015.404387][T24519] bond0 (unregistering): left allmulticast mode
[ 1015.418045][T24519] bond_slave_0: left allmulticast mode
[ 1015.420123][T24519] bond_slave_1: left allmulticast mode
[ 1015.456407][T24519] syz_tun: left allmulticast mode
[ 1015.490795][T24519] team0: Port device bond0 removed
[ 1015.505755][T24519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1015.510829][T24519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1015.516873][T24519] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[ 1015.527862][T24519] bond0 (unregistering): Released all slaves
[ 1015.833294][T24535] vxcan1 speed is unknown, defaulting to 1000
[ 1015.885187][T24540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16191'.
[ 1016.077930][T24535] lo speed is unknown, defaulting to 1000
[ 1016.106170][T24552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16195'.
[ 1016.123061][T24552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16195'.
[ 1016.804138][T24568] : entered promiscuous mode
[ 1016.809431][T24568] random: crng reseeded on system resumption
[ 1016.930095][T24589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16208'.
[ 1016.945589][T24589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16208'.
[ 1018.060712][T24618] netlink: 'syz.0.16217': attribute type 21 has an invalid length.
[ 1018.063170][T24618] netlink: 'syz.0.16217': attribute type 6 has an invalid length.
[ 1018.065240][T24618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16217'.
[ 1018.577649][T24627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16219'.
[ 1018.580335][T24627] netem: invalid attributes len -15
[ 1018.588566][T24627] netem: change failed
[ 1018.666272][T24629] netlink: 'syz.0.16219': attribute type 25 has an invalid length.
[ 1018.668434][T24629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16219'.
[ 1019.201756][T24644] tc_dump_action: action bad kind
[ 1019.257378][T24648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16225'.
[ 1019.260172][T24648] netlink: 108 bytes leftover after parsing attributes in process `syz.1.16225'.
[ 1019.273047][T24648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16225'.
[ 1019.573624][T24653] netlink: 'syz.1.16227': attribute type 2 has an invalid length.
[ 1019.576012][T24653] netlink: 'syz.1.16227': attribute type 8 has an invalid length.
[ 1019.824252][T24665] netlink: 'syz.1.16232': attribute type 2 has an invalid length.
[ 1020.155047][T24672] netlink: 'syz.1.16232': attribute type 10 has an invalid length.
[ 1021.768508][T24749] __nla_validate_parse: 8 callbacks suppressed
[ 1021.768520][T24749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16261'.
[ 1021.817747][T24752] netlink: 'syz.0.16263': attribute type 6 has an invalid length.
[ 1022.027827][T24760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16266'.
[ 1022.049729][T24760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16266'.
[ 1022.258928][T24766] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.16269'.
[ 1022.867618][T24778] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16272'.
[ 1022.911789][T24773] netlink: 'syz.1.16270': attribute type 10 has an invalid length.
[ 1023.047685][T24785] siw: device registration error -23
[ 1023.579227][T24805] netlink: 'syz.1.16281': attribute type 1 has an invalid length.
[ 1023.661955][T24810] dummy0: entered allmulticast mode
[ 1023.666426][T24810] dummy0: left allmulticast mode
[ 1023.951463][T24827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16290'.
[ 1024.194457][T24827] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16290'.
[ 1024.327824][T24840] netlink: 830 bytes leftover after parsing attributes in process `syz.1.16295'.
[ 1024.377175][T24846] netlink: 'syz.1.16296': attribute type 1 has an invalid length.
[ 1024.379501][T24846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16296'.
[ 1024.687707][T24871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16304'.
[ 1024.688009][T24869] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1024.891606][T24882] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1025.225199][T24897] netlink: 'syz.0.16313': attribute type 16 has an invalid length.
[ 1025.275797][T24902] netlink: 'syz.1.16315': attribute type 21 has an invalid length.
[ 1025.503088][T24909] xt_hashlimit: size too large, truncated to 1048576
[ 1025.980399][T24929] SET target dimension over the limit!
[ 1026.942457][T24953] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1026.946021][T24954] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1027.231049][T24931] syz.2.16327 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1027.291629][T24931] CPU: 1 UID: 0 PID: 24931 Comm: syz.2.16327 Not tainted syzkaller #0 PREEMPT(full) 
[ 1027.291645][T24931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1027.291651][T24931] Call Trace:
[ 1027.291655][T24931]  <TASK>
[ 1027.291660][T24931]  dump_stack_lvl+0xe8/0x150
[ 1027.291676][T24931]  dump_header+0xd3/0x4c0
[ 1027.291688][T24931]  oom_kill_process+0x3ab/0x970
[ 1027.291698][T24931]  out_of_memory+0x106c/0x1410
[ 1027.291706][T24931]  ? percpu_ref_put+0x19/0x180
[ 1027.291717][T24931]  ? __pfx___mutex_lock+0x10/0x10
[ 1027.291728][T24931]  ? __pfx_out_of_memory+0x10/0x10
[ 1027.291734][T24931]  ? do_raw_spin_unlock+0x4d/0x210
[ 1027.291747][T24931]  try_charge_memcg+0xc53/0x1560
[ 1027.291757][T24931]  ? __lock_acquire+0x6b5/0x2cf0
[ 1027.291807][T24931]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1027.291815][T24931]  ? xa_load+0x60/0x210
[ 1027.291826][T24931]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 1027.291837][T24931]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 1027.291847][T24931]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[ 1027.291857][T24931]  __swap_cache_prepare_and_add+0x52a/0x700
[ 1027.291877][T24931]  swap_cache_alloc_folio+0xf1/0x240
[ 1027.291890][T24931]  swap_cluster_readahead+0x53a/0x690
[ 1027.291903][T24931]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1027.291920][T24931]  ? get_vma_policy+0x27b/0x3c0
[ 1027.291931][T24931]  swapin_readahead+0x196/0xc50
[ 1027.291947][T24931]  ? __pfx_swapin_readahead+0x10/0x10
[ 1027.291959][T24931]  ? swap_table_get+0x1e/0x260
[ 1027.291968][T24931]  ? swap_table_get+0x1e/0x260
[ 1027.291977][T24931]  ? swap_table_get+0x1e/0x260
[ 1027.291987][T24931]  ? swap_table_get+0x216/0x260
[ 1027.291997][T24931]  ? swap_cache_get_folio+0x513/0x520
[ 1027.292010][T24931]  do_swap_page+0x54f/0x58d0
[ 1027.292021][T24931]  ? __lock_acquire+0x6b5/0x2cf0
[ 1027.292039][T24931]  ? do_swap_page+0x12c/0x58d0
[ 1027.292049][T24931]  ? __pfx_do_swap_page+0x10/0x10
[ 1027.292058][T24931]  ? __pte_offset_map+0x1ae/0x240
[ 1027.292071][T24931]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 1027.292083][T24931]  handle_mm_fault+0x12d2/0x3310
[ 1027.292100][T24931]  ? handle_mm_fault+0xee/0x3310
[ 1027.292114][T24931]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1027.292124][T24931]  ? lock_vma_under_rcu+0x45a/0x500
[ 1027.292143][T24931]  do_user_addr_fault+0xa73/0x1340
[ 1027.292157][T24931]  ? rcu_is_watching+0x15/0xb0
[ 1027.292167][T24931]  ? trace_page_fault_user+0x84/0x210
[ 1027.292178][T24931]  exc_page_fault+0x6a/0xc0
[ 1027.292190][T24931]  asm_exc_page_fault+0x26/0x30
[ 1027.292198][T24931] RIP: 0033:0x7fae04270cd0
[ 1027.292208][T24931] Code: d5 00 49 39 54 24 28 0f 82 5e 03 00 00 40 0f b6 fe c6 44 24 0e 01 45 31 ed 45 31 f6 89 7c 24 08 85 c0 0f 84 10 01 00 00 66 90 <48> 8b 3c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 ef 80 3d c1 70 3a 00
[ 1027.292215][T24931] RSP: 002b:00007ffebd6ad9b0 EFLAGS: 00010297
[ 1027.292224][T24931] RAX: 000000110c28c000 RBX: ffffffff81d72e27 RCX: 0000000000000004
[ 1027.292230][T24931] RDX: 0000000000000e27 RSI: 0000000000001cb8 RDI: 0000000000000010
[ 1027.292235][T24931] RBP: 0000000000000000 R08: 00007fae04600000 R09: 00007fae04602000
[ 1027.292239][T24931] R10: 0000000081d72e2b R11: 0000000000000014 R12: 00007fae04616038
[ 1027.292244][T24931] R13: 0000000000000020 R14: ffffffff81d72e27 R15: 00007fae05145720
[ 1027.292250][T24931]  ? map_create+0xa17/0x16a0
[ 1027.292267][T24931]  ? map_create+0xa17/0x16a0
[ 1027.292288][T24931]  </TASK>
[ 1027.292294][T24931] memory: usage 307200kB, limit 307200kB, failcnt 3958
[ 1027.431379][T24931] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0
[ 1027.433662][T24931] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[ 1027.435747][T24931] Memory cgroup stats for /syz2:
[ 1027.435949][T24931] cache 0
[ 1027.438236][T24931] rss 0
[ 1027.439068][T24931] rss_huge 0
[ 1027.440023][T24931] shmem 0
[ 1027.440891][T24931] mapped_file 0
[ 1027.471440][T24931] dirty 0
[ 1027.472391][T24931] writeback 0
[ 1027.473315][T24931] workingset_refault_anon 417
[ 1027.474597][T24931] workingset_refault_file 94
[ 1027.475820][T24931] swap 204800
[ 1027.476710][T24931] swapcached 26304512
[ 1027.478261][T24931] pgpgin 2101997
[ 1027.479315][T24931] pgpgout 2106670
[ 1027.480292][T24931] pgfault 1847031
[ 1027.554004][T24931] pgmajfault 348
[ 1027.555492][T24931] inactive_anon 8192
[ 1027.556999][T24931] active_anon 12288
[ 1027.558449][T24931] inactive_file 0
[ 1027.560214][T24931] active_file 0
[ 1027.611433][T24931] unevictable 0
[ 1027.612434][T24931] hierarchical_memory_limit 314572800
[ 1027.614359][T24931] hierarchical_memsw_limit 9223372036854771712
[ 1027.616598][T24931] total_cache 0
[ 1027.641397][T24931] total_rss 0
[ 1027.642494][T24931] total_rss_huge 0
[ 1027.643608][T24931] total_shmem 0
[ 1027.644636][T24931] total_mapped_file 0
[ 1027.645807][T24931] total_dirty 0
[ 1027.646830][T24931] total_writeback 0
[ 1027.647921][T24931] total_workingset_refault_anon 417
[ 1027.649416][T24931] total_workingset_refault_file 94
[ 1027.650918][T24931] total_swap 204800
[ 1027.687867][T24931] total_swapcached 26304512
[ 1027.689265][T24931] total_pgpgin 2101998
[ 1027.721496][T24931] total_pgpgout 2106671
[ 1027.722792][T24931] total_pgfault 1847032
[ 1027.724243][T24931] total_pgmajfault 348
[ 1027.725752][T24931] total_inactive_anon 8192
[ 1027.727364][T24931] total_active_anon 12288
[ 1027.729056][T24931] total_inactive_file 0
[ 1027.730572][T24931] total_active_file 0
[ 1027.754117][T24931] total_unevictable 0
[ 1027.755335][T24931] anon_cost 0
[ 1027.756312][T24931] file_cost 0
[ 1027.757417][T24931] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.16327,pid=24931,uid=0
[ 1027.782843][T24931] Memory cgroup out of memory: Killed process 24931 (syz.2.16327) total-vm:102356kB, anon-rss:1232kB, file-rss:23304kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[ 1028.278042][T24989] __nla_validate_parse: 3 callbacks suppressed
[ 1028.278055][T24989] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16346'.
[ 1028.424556][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16347'.
[ 1028.882985][T25017] netlink: 'syz.2.16357': attribute type 11 has an invalid length.
[ 1029.736991][T25058] x_tables: duplicate underflow at hook 2
[ 1030.259043][T25079] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16374'.
[ 1030.262357][T25079] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16374'.
[ 1030.264723][T25079] netlink: 'syz.2.16374': attribute type 12 has an invalid length.
[ 1030.509745][T25089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1030.742251][T25091] x_tables: unsorted underflow at hook 3
[ 1031.097711][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[ 1031.417836][T25115] IPv6: Can't replace route, no match found
[ 1031.588979][T25120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16385'.
[ 1032.119933][T25153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16395'.
[ 1032.801498][T25170] tipc: Trying to set illegal importance in message
[ 1032.937824][T25175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16404'.
[ 1032.941577][T25175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16404'.
[ 1032.958617][T25176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16403'.
[ 1033.223457][T25187] netlink: 'syz.1.16409': attribute type 4 has an invalid length.
[ 1033.226414][T25187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16409'.
[ 1033.619307][T25199] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1033.886459][T25199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16413'.
[ 1033.890162][T25199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16413'.
[ 1034.147924][T25211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16416'.
[ 1034.511722][T25218] netlink: 72 bytes leftover after parsing attributes in process `syz.1.16418'.
[ 1034.534180][T25218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16418'.
[ 1034.707135][T25224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16421'.
[ 1034.711024][T25224] netlink: 'syz.2.16421': attribute type 2 has an invalid length.
[ 1034.714415][T25224] netlink: 'syz.2.16421': attribute type 8 has an invalid length.
[ 1034.717390][T25224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16421'.
[ 1034.844281][T25238] openvswitch: netlink: Key type 97 is out of range max 32
[ 1034.849713][T25238] netlink: 'syz.2.16424': attribute type 1 has an invalid length.
[ 1034.852946][T25238] netlink: 96 bytes leftover after parsing attributes in process `syz.2.16424'.
[ 1034.856563][T25238] netlink: 'syz.2.16424': attribute type 1 has an invalid length.
[ 1034.859632][T25238] netlink: 'syz.2.16424': attribute type 8 has an invalid length.
[ 1034.862957][T25238] netlink: 606 bytes leftover after parsing attributes in process `syz.2.16424'.
[ 1034.866491][T25238] netlink: 1 bytes leftover after parsing attributes in process `syz.2.16424'.
[ 1035.117701][T20243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.214957][T20243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.287357][T25250] xt_cgroup: path and classid specified
[ 1035.310392][T20243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.370012][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1035.374588][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1035.378667][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1035.384344][T20243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.388778][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1035.393469][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1035.430766][T25251] vxcan1 speed is unknown, defaulting to 1000
[ 1035.581777][T20243] team0: left allmulticast mode
[ 1035.583669][T20243] team_slave_0: left allmulticast mode
[ 1035.585914][T20243] team_slave_1: left allmulticast mode
[ 1035.588091][T20243] team0: left promiscuous mode
[ 1035.589896][T20243] team_slave_0: left promiscuous mode
[ 1035.596786][T20243] team_slave_1: left promiscuous mode
[ 1035.607122][T20243] bridge0: port 3(team0) entered disabled state
[ 1035.628175][T20243] bridge_slave_1: left allmulticast mode
[ 1035.630106][T20243] bridge_slave_1: left promiscuous mode
[ 1035.632128][T20243] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1035.636355][T20243] bridge_slave_0: left promiscuous mode
[ 1035.638169][T20243] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1035.878152][T20243] dvmrp1 (unregistering): left allmulticast mode
[ 1036.053448][T25251] lo speed is unknown, defaulting to 1000
[ 1036.128834][T20243] : left promiscuous mode
[ 1036.437336][T25251] chnl_net:caif_netlink_parms(): no params data found
[ 1036.774720][T25251] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1036.781516][T25251] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1036.785712][T25251] bridge_slave_0: entered allmulticast mode
[ 1036.793381][T25251] bridge_slave_0: entered promiscuous mode
[ 1036.809572][T25251] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1036.830282][T25251] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1036.840260][T25251] bridge_slave_1: entered allmulticast mode
[ 1036.852941][T25251] bridge_slave_1: entered promiscuous mode
[ 1037.000766][T25251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1037.013589][T25251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1037.102879][T25251] team0: Port device team_slave_0 added
[ 1037.109056][T25251] team0: Port device team_slave_1 added
[ 1037.151096][T25251] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1037.153505][T25251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1037.164960][T25251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1037.189877][T25251] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1037.195104][T25251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1037.207652][T25251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1037.300772][T25251] hsr_slave_0: entered promiscuous mode
[ 1037.307507][T25251] hsr_slave_1: entered promiscuous mode
[ 1037.312717][T25251] debugfs: 'hsr0' already exists in 'hsr'
[ 1037.317923][T25251] Cannot create hsr debugfs directory
[ 1037.481726][T17853] Bluetooth: hci1: command tx timeout
[ 1037.956443][T20243] hsr_slave_0: left promiscuous mode
[ 1037.959155][T20243] hsr_slave_1: left promiscuous mode
[ 1037.989116][T20243] veth1_vlan: left promiscuous mode
[ 1038.287492][T20243] team0 (unregistering): Port device team_slave_1 removed
[ 1038.319043][T20243] team0 (unregistering): Port device team_slave_0 removed
[ 1038.420097][T18105] smc: removing ib device syz2
[ 1038.625420][T12943] vxcan1 speed is unknown, defaulting to 1000
[ 1038.627522][T12943] syz2: Port: 1 Link DOWN
[ 1038.651792][   T10] lo speed is unknown, defaulting to 1000
[ 1038.654000][   T10] infiniband syz: ib_query_port failed (-19)
[ 1038.994141][T25251] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1039.074391][T25251] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1039.107675][T25251] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1039.152524][T25251] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1039.437331][T25251] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1039.480743][T25251] 8021q: adding VLAN 0 to HW filter on device team0
[ 1039.505001][T28710] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1039.507733][T28710] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1039.561644][T17853] Bluetooth: hci1: command tx timeout
[ 1039.563218][T28710] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1039.563325][T28710] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1039.886975][T25420] __nla_validate_parse: 6 callbacks suppressed
[ 1039.886986][T25420] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16468'.
[ 1039.895011][T20243] IPVS: stop unused estimator thread 0...
[ 1039.914357][T25420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16468'.
[ 1040.002639][T25251] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1040.073189][T25251] veth0_vlan: entered promiscuous mode
[ 1040.093851][T25251] veth1_vlan: entered promiscuous mode
[ 1040.106393][T25424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16470'.
[ 1040.109783][T25424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16470'.
[ 1040.142154][T25251] veth0_macvtap: entered promiscuous mode
[ 1040.163032][T25251] veth1_macvtap: entered promiscuous mode
[ 1040.192179][T25251] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1040.232120][T25251] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1040.241519][T12796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.245065][T12796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.247812][T12796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.250548][T12796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.397786][T18105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1040.400347][T18105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1040.453815][T28710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1040.456785][T28710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1041.249196][T25470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16485'.
[ 1041.254741][T25470] tc_dump_action: action bad kind
[ 1041.365700][T25476] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.16486'.
[ 1041.527940][T25479] netlink: 'syz.1.16487': attribute type 1 has an invalid length.
[ 1041.530911][T25479] netlink: 'syz.1.16487': attribute type 1 has an invalid length.
[ 1041.580236][T25479] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.16487'.
[ 1041.642044][T17853] Bluetooth: hci1: command tx timeout
[ 1041.849428][T25495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16493'.
[ 1041.852881][T25495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16493'.
[ 1042.013750][T25502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16496'.
[ 1042.143507][T25505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1042.145673][T25505] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1042.148532][T25505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1042.158018][T25505] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1043.725522][T17853] Bluetooth: hci1: command tx timeout
[ 1044.293474][T25588] binder_alloc: binder_alloc_mmap_handler: 25587 200000ffc000-200000ffd000 already mapped failed -16
[ 1044.531787][T25594] nbd: illegal input index -1495182229
[ 1044.912690][T25609] __nla_validate_parse: 4 callbacks suppressed
[ 1044.912709][T25609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16531'.
[ 1045.129744][T25628] openvswitch: netlink: IP tunnel dst address not specified
[ 1045.401728][T25638] netlink: 72 bytes leftover after parsing attributes in process `syz.1.16539'.
[ 1045.597778][T25651] netlink: 'syz.0.16541': attribute type 10 has an invalid length.
[ 1045.653518][T25651] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1045.720380][T25651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16541'.
[ 1046.416641][T25676] xt_socket: unknown flags 0x88
[ 1046.671178][T25689] netlink: 'syz.2.16558': attribute type 10 has an invalid length.
[ 1046.677538][T25689] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16558'.
[ 1047.030130][T25703] netlink: 4975 bytes leftover after parsing attributes in process `syz.2.16565'.
[ 1047.033644][T25703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1047.784851][T25743] openvswitch: netlink: IPv4 tun info is not correct
[ 1047.857515][T25743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16579'.
[ 1047.902152][T25749] netlink: 96 bytes leftover after parsing attributes in process `syz.2.16581'.
[ 1047.926267][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16581'.
[ 1047.930281][T25756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16581'.
[ 1048.052601][T25765] netlink: 452 bytes leftover after parsing attributes in process `syz.2.16587'.
[ 1048.085579][T25763] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[ 1049.543143][T25816] netlink: 'syz.2.16604': attribute type 4 has an invalid length.
[ 1050.106448][T25835] netlink: 'syz.0.16611': attribute type 89 has an invalid length.
[ 1050.307090][T25846] __nla_validate_parse: 7 callbacks suppressed
[ 1050.307106][T25846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16613'.
[ 1051.537801][T25897] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16634'.
[ 1051.546645][T25898] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16634'.
[ 1051.556224][T25897] netlink: 264 bytes leftover after parsing attributes in process `syz.1.16634'.
[ 1052.376070][T25922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16644'.
[ 1052.392370][T25922] netlink: 'syz.1.16644': attribute type 12 has an invalid length.
[ 1052.395347][T25922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16644'.
[ 1053.249264][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16655'.
[ 1053.499526][T25949] netlink: 'syz.1.16652': attribute type 21 has an invalid length.
[ 1053.508010][T25949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16652'.
[ 1053.599788][T25960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16659'.
[ 1053.723143][T25969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16663'.
[ 1053.790084][T25976] netlink: 'syz.1.16664': attribute type 3 has an invalid length.
[ 1055.508098][T26018] __nla_validate_parse: 2 callbacks suppressed
[ 1055.508110][T26018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16681'.
[ 1055.535536][T26018] netlink: 'syz.2.16681': attribute type 10 has an invalid length.
[ 1055.538033][T26018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16681'.
[ 1056.429400][T20243] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.557384][T20243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.766997][T20243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.867063][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1056.902240][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1056.913051][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1056.918986][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1056.922314][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1056.957956][T20243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.969475][T26061] netlink: 'syz.0.16696': attribute type 10 has an invalid length.
[ 1056.972533][T26061] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16696'.
[ 1057.207048][T20243] bridge_slave_1: left allmulticast mode
[ 1057.209129][T20243] bridge_slave_1: left promiscuous mode
[ 1057.211988][T20243] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.222965][T20243] bridge_slave_0: left allmulticast mode
[ 1057.225084][T20243] bridge_slave_0: left promiscuous mode
[ 1057.227165][T20243] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1057.257828][T26064] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16697'.
[ 1057.269830][T26064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16697'.
[ 1057.555378][T26077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1057.602565][T20243] IPVS: stopping backup sync thread 17099 ...
[ 1057.605476][T20243] IPVS: stopping backup sync thread 17097 ...
[ 1057.611694][T20243] IPVS: stopping backup sync thread 17096 ...
[ 1057.614374][T20243] IPVS: stopping backup sync thread 17095 ...
[ 1057.621524][T20243] IPVS: stopping backup sync thread 17094 ...
[ 1057.630186][T20243] IPVS: stopping backup sync thread 17092 ...
[ 1057.642513][T20243] IPVS: stopping backup sync thread 17091 ...
[ 1057.669653][T20243] IPVS: stopping backup sync thread 17090 ...
[ 1057.694184][T26054] chnl_net:caif_netlink_parms(): no params data found
[ 1057.792930][T26083] netlink: 'syz.2.16699': attribute type 11 has an invalid length.
[ 1057.802156][T26083] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.16699'.
[ 1058.535814][T26054] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1058.538634][T26054] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1058.571543][T26054] bridge_slave_0: entered allmulticast mode
[ 1058.590839][T26054] bridge_slave_0: entered promiscuous mode
[ 1058.600157][T26054] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1058.640301][T26054] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1058.669000][T26054] bridge_slave_1: entered allmulticast mode
[ 1058.679310][T26054] bridge_slave_1: entered promiscuous mode
[ 1058.768978][T26054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1058.805608][T26054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1058.866853][T26122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16704'.
[ 1058.920216][T20243] hsr_slave_0: left promiscuous mode
[ 1058.939999][T20243] hsr_slave_1: left promiscuous mode
[ 1058.978710][T20243] veth1_macvtap: left promiscuous mode
[ 1058.980756][T20243] veth0_macvtap: left promiscuous mode
[ 1059.002168][T17853] Bluetooth: hci2: command tx timeout
[ 1059.366488][T20243] team0 (unregistering): Port device team_slave_1 removed
[ 1059.385097][T20243] team0 (unregistering): Port device team_slave_0 removed
[ 1059.570534][T26054] team0: Port device team_slave_0 added
[ 1059.576000][T26156] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0
[ 1059.578014][T26054] team0: Port device team_slave_1 added
[ 1059.646205][T26054] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1059.648739][T26054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1059.659593][T26054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1059.683641][T26054] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1059.686172][T26054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1059.722624][T26054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1059.753928][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.756270][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[ 1059.840349][T26054] hsr_slave_0: entered promiscuous mode
[ 1059.852228][T26054] hsr_slave_1: entered promiscuous mode
[ 1060.030268][T20243] IPVS: stop unused estimator thread 0...
[ 1060.512553][T26054] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1060.525604][T26054] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1060.536275][T26054] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1060.561887][T26054] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1060.703613][T26054] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1060.719809][T27765] netlink: 'syz.2.16717': attribute type 1 has an invalid length.
[ 1060.738672][T27765] netlink: 11922 bytes leftover after parsing attributes in process `syz.2.16717'.
[ 1060.751905][T27765] netlink: 'syz.2.16717': attribute type 1 has an invalid length.
[ 1060.755948][T27765] netlink: 11922 bytes leftover after parsing attributes in process `syz.2.16717'.
[ 1060.766668][T26054] 8021q: adding VLAN 0 to HW filter on device team0
[ 1060.822715][T18105] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.824726][T18105] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.828685][T18105] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.831104][T18105] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1060.873082][T26054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1060.876348][T26054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1061.081637][T17853] Bluetooth: hci2: command tx timeout
[ 1061.106388][T26054] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1061.198197][T27786] : renamed from wg2 (while UP)
[ 1061.256581][T26054] veth0_vlan: entered promiscuous mode
[ 1061.278320][T26054] veth1_vlan: entered promiscuous mode
[ 1061.318787][T26054] veth0_macvtap: entered promiscuous mode
[ 1061.339877][T26054] veth1_macvtap: entered promiscuous mode
[ 1061.369512][T26054] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1061.386562][T26054] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1061.406022][T25431] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.416915][T25431] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.423562][T25431] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.455191][T25431] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.543281][T11655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1061.546967][T11655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1061.578523][T11655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1061.582034][T11655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1062.128611][   T33] audit: type=1800 audit(1771868092.150:25): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16734" name="file1" dev="tmpfs" ino=54 res=0 errno=0
[ 1062.832258][T27848] vxcan1 speed is unknown, defaulting to 1000
[ 1062.835225][T27848] vxcan1 speed is unknown, defaulting to 1000
[ 1062.838123][T27848] vxcan1 speed is unknown, defaulting to 1000
[ 1062.922766][T27870] netlink: 'syz.0.16746': attribute type 1 has an invalid length.
[ 1062.925596][T27870] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.16746'.
[ 1062.929593][T27870] netlink: 'syz.0.16746': attribute type 1 has an invalid length.
[ 1062.936699][T27870] netlink: 96 bytes leftover after parsing attributes in process `syz.0.16746'.
[ 1063.025222][T27848] infiniband syz2: set active
[ 1063.026996][T27848] infiniband syz2: added vxcan1
[ 1063.032696][ T5273] vxcan1 speed is unknown, defaulting to 1000
[ 1063.060591][T27848] RDS/IB: syz2: added
[ 1063.062367][T27848] smc: adding ib device syz2 with port count 1
[ 1063.064659][T27848] smc:    ib device syz2 port 1 has no pnetid
[ 1063.068298][ T5273] vxcan1 speed is unknown, defaulting to 1000
[ 1063.077670][T27848] vxcan1 speed is unknown, defaulting to 1000
[ 1063.161522][T17853] Bluetooth: hci2: command tx timeout
[ 1063.607654][T20243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.635890][T27848] vxcan1 speed is unknown, defaulting to 1000
[ 1063.715607][T20243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.814408][T20243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.906687][T20243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.922755][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1063.930437][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1063.935788][T27848] vxcan1 speed is unknown, defaulting to 1000
[ 1063.938515][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1063.944521][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1063.948041][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1064.130316][T20243] bridge_slave_1: left allmulticast mode
[ 1064.135312][T20243] bridge_slave_1: left promiscuous mode
[ 1064.137656][T20243] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1064.148159][T20243] bridge_slave_0: left allmulticast mode
[ 1064.150295][T20243] bridge_slave_0: left promiscuous mode
[ 1064.156692][T20243] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1064.398974][T20243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1064.414416][T20243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1064.425497][T20243] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 1064.430100][T20243] bond0 (unregistering): Released all slaves
[ 1064.450611][T27891] vxcan1 speed is unknown, defaulting to 1000
[ 1064.646851][T20243] IPVS: stopping backup sync thread 26156 ...
[ 1065.242249][   T54] Bluetooth: hci2: command tx timeout
[ 1065.390240][T20243] hsr_slave_0: left promiscuous mode
[ 1065.398539][T20243] hsr_slave_1: left promiscuous mode
[ 1065.405779][T20243] veth1_macvtap: left promiscuous mode
[ 1065.407976][T20243] veth0_macvtap: left promiscuous mode
[ 1065.410011][T20243] veth1_vlan: left promiscuous mode
[ 1065.413768][T20243] veth0_vlan: left promiscuous mode
[ 1065.467826][T27926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16761'.
[ 1065.747509][T20243] team0 (unregistering): Port device team_slave_1 removed
[ 1065.756322][T20243] team0 (unregistering): Port device team_slave_0 removed
[ 1065.768656][T27933] siw: device registration error -23
[ 1065.915287][T27891] chnl_net:caif_netlink_parms(): no params data found
[ 1065.946072][T27939] netlink: 'syz.1.16766': attribute type 6 has an invalid length.
[ 1066.027193][T27891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1066.031847][T27891] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1066.034602][T27891] bridge_slave_0: entered allmulticast mode
[ 1066.039695][T27891] bridge_slave_0: entered promiscuous mode
[ 1066.045539][T27891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1066.047478][   T54] Bluetooth: hci1: command tx timeout
[ 1066.050315][T27891] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1066.053303][T27891] bridge_slave_1: entered allmulticast mode
[ 1066.066422][T27891] bridge_slave_1: entered promiscuous mode
[ 1066.099174][T27946] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16767'.
[ 1066.118674][T27891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1066.136096][T27891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1066.163828][T27891] team0: Port device team_slave_0 added
[ 1066.168325][T27891] team0: Port device team_slave_1 added
[ 1066.194625][T27891] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1066.197253][T27891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1066.211343][T27891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1066.217508][T27891] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1066.222739][T27891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1066.233283][T27891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1066.295028][T27891] hsr_slave_0: entered promiscuous mode
[ 1066.297826][T27891] hsr_slave_1: entered promiscuous mode
[ 1066.304590][T27891] debugfs: 'hsr0' already exists in 'hsr'
[ 1066.306684][T27891] Cannot create hsr debugfs directory
[ 1066.857854][T27891] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1066.866725][T27891] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1066.872491][T27891] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1066.878381][T27891] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1066.960029][T27982] openvswitch: netlink: IP tunnel dst address not specified
[ 1067.133390][T27986] siw: device registration error -23
[ 1067.135653][T27891] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1067.174256][T27891] 8021q: adding VLAN 0 to HW filter on device team0
[ 1067.205600][T28711] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1067.208348][T28711] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1067.228224][T28711] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1067.230839][T28711] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1067.421016][T28001] netlink: zone id is out of range
[ 1067.423635][T28001] netlink: zone id is out of range
[ 1067.425896][T28001] netlink: zone id is out of range
[ 1067.427716][T28001] netlink: zone id is out of range
[ 1067.429739][T28001] netlink: zone id is out of range
[ 1067.432119][T28001] netlink: zone id is out of range
[ 1067.434387][T28001] netlink: zone id is out of range
[ 1067.436279][T28001] netlink: zone id is out of range
[ 1067.438312][T28001] netlink: zone id is out of range
[ 1067.626812][T27891] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1067.720344][T27891] veth0_vlan: entered promiscuous mode
[ 1067.739218][T27891] veth1_vlan: entered promiscuous mode
[ 1067.793350][T27891] veth0_macvtap: entered promiscuous mode
[ 1067.810074][T27891] veth1_macvtap: entered promiscuous mode
[ 1067.837182][T27891] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1067.846743][T27891] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1067.870938][T25431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.880907][T25431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.903268][T25431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.917384][T25431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.988339][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1067.993057][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1068.025603][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1068.033092][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1068.122414][   T54] Bluetooth: hci1: command tx timeout
[ 1068.157211][T28038] ip6t_srh: unknown srh match flags  4000
[ 1068.164817][T28038] netlink: 832 bytes leftover after parsing attributes in process `syz.1.16781'.
[ 1068.289237][T28044] xt_addrtype: ipv6 does not support BROADCAST matching
[ 1068.314661][T28047] netlink: 15092 bytes leftover after parsing attributes in process `syz.0.16784'.
[ 1068.893448][T28071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16793'.
[ 1068.964567][T28074] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.16794'.
[ 1068.973411][T28074] netlink: 'syz.1.16794': attribute type 11 has an invalid length.
[ 1068.976237][T28074] netlink: 140 bytes leftover after parsing attributes in process `syz.1.16794'.
[ 1070.216017][   T54] Bluetooth: hci1: command tx timeout
[ 1070.249989][T28115] netlink: 'syz.1.16811': attribute type 32 has an invalid length.
[ 1070.566275][T28115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16811'.
[ 1070.771670][T28132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16817'.
[ 1070.895722][T28138] netlink: 92 bytes leftover after parsing attributes in process `syz.0.16818'.
[ 1070.975006][T28144] netlink: 452 bytes leftover after parsing attributes in process `syz.2.16822'.
[ 1071.244129][T19296] IPVS: starting estimator thread 0...
[ 1071.249615][T28142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16821'.
[ 1071.331406][T28154] IPVS: using max 36 ests per chain, 86400 per kthread
[ 1071.650840][T28173] netlink: 'syz.0.16831': attribute type 1 has an invalid length.
[ 1071.819877][T28179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16834'.
[ 1071.840367][T28179] netlink: 'syz.2.16834': attribute type 12 has an invalid length.
[ 1071.846082][T28179] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16834'.
[ 1072.283074][   T54] Bluetooth: hci1: command tx timeout
[ 1074.278584][T28281] : renamed from bond_slave_0
[ 1074.505247][T28288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16873'.
[ 1075.418180][T28312] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1075.461657][T28314] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16883'.
[ 1075.659669][T28323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16884'.
[ 1075.938225][T28335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16889'.
[ 1075.955584][T28335] netlink: 'syz.1.16889': attribute type 2 has an invalid length.
[ 1075.985221][T28335] netlink: 'syz.1.16889': attribute type 8 has an invalid length.
[ 1075.998865][T28335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16889'.
[ 1076.186025][T28344] netlink: 'syz.2.16892': attribute type 19 has an invalid length.
[ 1076.248543][T28346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16894'.
[ 1076.912136][T28374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16906'.
[ 1076.952288][T28377] xt_HMARK: spi-set and port-set can't be combined
[ 1078.119627][T28425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16925'.
[ 1078.127923][T28425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16925'.
[ 1078.132074][T28425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16925'.
[ 1078.135375][T28425] netlink: 'syz.1.16925': attribute type 6 has an invalid length.
[ 1078.138600][T28425] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16925'.
[ 1078.143189][T28425] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16925'.
[ 1078.409109][T28427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16926'.
[ 1078.427873][T28436] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1078.769019][T28445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16932'.
[ 1080.015333][T28489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16949'.
[ 1080.274192][T28506] netlink: 'syz.2.16954': attribute type 3 has an invalid length.
[ 1081.472108][T28535] netlink: 964 bytes leftover after parsing attributes in process `syz.1.16964'.
[ 1082.710020][T28602] net_ratelimit: 398 callbacks suppressed
[ 1082.710033][T28602] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0
[ 1082.730946][T28603] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0
[ 1082.883820][T28600] openvswitch: netlink: IP tunnel dst address not specified
[ 1082.916866][T28613] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1083.566988][T28623] ipt_ECN: cannot use operation on non-tcp rule
[ 1084.111154][T28641] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1084.126344][T28641] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1084.133465][T28641] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1084.366268][T28658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17004'.
[ 1084.619667][T28663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1084.623230][T28663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1084.626691][T28663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1084.630045][T28663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1084.633426][T28663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1084.636945][T28663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1084.640321][T28663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1085.214819][T28689] netlink: 88 bytes leftover after parsing attributes in process `syz.0.17014'.
[ 1085.218175][T28689] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17014'.
[ 1086.414597][T28738] syzkaller0: left promiscuous mode
[ 1086.431558][T28738] syzkaller0: left allmulticast mode
[ 1087.330292][T28776] xt_HMARK: proto mask must be zero with L3 mode
[ 1087.781695][T28783] net_ratelimit: 3322 callbacks suppressed
[ 1087.781711][T28783] Set syz1 is full, maxelem 1021 reached
[ 1088.020182][T28786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17045'.
[ 1088.220114][T28791] netlink: 'syz.0.17046': attribute type 21 has an invalid length.
[ 1088.226482][T28791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17046'.
[ 1088.996979][T28798] xt_addrtype: ipv6 BLACKHOLE matching not supported
[ 1089.092680][T28798] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.17049'.
[ 1089.662287][T28814] netlink: 124 bytes leftover after parsing attributes in process `syz.2.17053'.
[ 1090.886008][T28861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17066'.
[ 1090.987527][T28867] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17069'.
[ 1091.108275][T28874] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.17071'.
[ 1091.125801][T28874] netlink: 168 bytes leftover after parsing attributes in process `syz.0.17071'.
[ 1091.131192][T28874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17071'.
[ 1091.591369][T28915] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1091.764624][   T31] IPVS: starting estimator thread 0...
[ 1091.767583][T28926] netlink: 5216 bytes leftover after parsing attributes in process `syz.0.17087'.
[ 1091.844783][T28930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17088'.
[ 1091.851577][T28927] IPVS: using max 41 ests per chain, 98400 per kthread
[ 1092.472714][T28966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17097'.
[ 1092.475863][T28966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17097'.
[ 1093.878540][T29019] netlink: 'syz.1.17114': attribute type 10 has an invalid length.
[ 1093.886489][T29019] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1093.912054][T29019] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1093.916929][T29019] netlink: 'syz.1.17114': attribute type 10 has an invalid length.
[ 1093.919834][T29019] batadv0: entered promiscuous mode
[ 1093.934155][T29019] batadv0: entered allmulticast mode
[ 1093.947791][T29019] bond0: (slave batadv0): Releasing backup interface
[ 1093.960082][T29019] bridge0: port 3(batadv0) entered blocking state
[ 1093.972312][T29019] bridge0: port 3(batadv0) entered disabled state
[ 1094.172602][T25431] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1094.175553][T25431] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1094.554754][T29044] netlink: 'syz.1.17127': attribute type 2 has an invalid length.
[ 1094.903191][T29066] netlink: 'syz.1.17133': attribute type 3 has an invalid length.
[ 1095.440891][T29081] __nla_validate_parse: 4 callbacks suppressed
[ 1095.440910][T29081] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17137'.
[ 1095.757529][T29082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17136'.
[ 1096.067114][T29087] bpf: Bad value for 'gid'
[ 1096.535969][T29084] infiniband syz1: set down
[ 1096.537718][T29084] infiniband syz1: added ipvlan0
[ 1096.603594][T29104] netlink: 196 bytes leftover after parsing attributes in process `syz.0.17144'.
[ 1096.632734][T29084] RDS/IB: syz1: added
[ 1096.634382][T29084] smc: adding ib device syz1 with port count 1
[ 1096.636700][T29084] smc:    ib device syz1 port 1 has no pnetid
[ 1096.647940][T29106] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1096.650758][T29106] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1096.822115][T29119] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.17149'.
[ 1096.825628][T29119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17149'.
[ 1096.835563][T29119] netlink: 65173 bytes leftover after parsing attributes in process `syz.0.17149'.
[ 1097.221812][T29130] netlink: 'syz.0.17153': attribute type 21 has an invalid length.
[ 1097.224184][T29130] netlink: 128 bytes leftover after parsing attributes in process `syz.0.17153'.
[ 1097.226804][T29130] netlink: 'syz.0.17153': attribute type 5 has an invalid length.
[ 1097.229130][T29130] netlink: 3 bytes leftover after parsing attributes in process `syz.0.17153'.
[ 1097.609287][T29141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17158'.
[ 1097.799327][T29153] netlink: zone id is out of range
[ 1097.800861][T29153] netlink: zone id is out of range
[ 1097.803252][T29153] netlink: zone id is out of range
[ 1097.805811][T29153] netlink: zone id is out of range
[ 1098.133506][T29174] netlink: 'syz.0.17171': attribute type 15 has an invalid length.
[ 1098.141921][T29174] netlink: 'syz.0.17171': attribute type 7 has an invalid length.
[ 1098.220600][T29178] netlink: 'syz.0.17174': attribute type 1 has an invalid length.
[ 1098.669978][T29196] policy can only be matched on NF_INET_PRE_ROUTING
[ 1098.669994][T29196] unable to load match
[ 1098.798718][T29202] pim6reg1: entered promiscuous mode
[ 1098.800353][T29202] pim6reg1: entered allmulticast mode
[ 1098.807035][T29202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17184'.
[ 1098.810729][T29202] pim6reg1: tun_chr_ioctl cmd 1074025677
[ 1098.813279][T29202] pim6reg1: Linktype set failed because interface is up
[ 1098.826757][T29206] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1098.959460][T29204] x_tables: duplicate underflow at hook 2
[ 1100.045871][T25431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.187713][T25431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.295829][T25431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.330818][T17853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1100.335004][T17853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1100.338412][T17853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1100.342756][T17853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1100.345271][T17853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1100.373882][T25431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.411646][T29277] vxcan1 speed is unknown, defaulting to 1000
[ 1100.720440][T25431] bridge0: port 3(batadv0) entered disabled state
[ 1100.762519][T25431] bridge_slave_1: left allmulticast mode
[ 1100.764313][T25431] bridge_slave_1: left promiscuous mode
[ 1100.766114][T25431] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1100.769829][T25431] bridge_slave_0: left allmulticast mode
[ 1100.772805][T25431] bridge_slave_0: left promiscuous mode
[ 1100.774462][T25431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1101.088322][T25431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1101.095008][T25431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1101.099898][T25431] bond0 (unregistering): Released all slaves
[ 1101.107128][T29299] __nla_validate_parse: 3 callbacks suppressed
[ 1101.107141][T29299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17214'.
[ 1101.771969][T29313] netlink: 294 bytes leftover after parsing attributes in process `syz.0.17217'.
[ 1101.774725][T29313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1101.866740][T29277] chnl_net:caif_netlink_parms(): no params data found
[ 1102.167281][T29277] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1102.172747][T29277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.175333][T29277] bridge_slave_0: entered allmulticast mode
[ 1102.197639][T29277] bridge_slave_0: entered promiscuous mode
[ 1102.209117][T29277] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1102.212152][T29277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1102.236572][T29277] bridge_slave_1: entered allmulticast mode
[ 1102.277635][T29277] bridge_slave_1: entered promiscuous mode
[ 1102.317655][T25431] hsr_slave_0: left promiscuous mode
[ 1102.321075][T25431] hsr_slave_1: left promiscuous mode
[ 1102.327346][T25431] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1102.363228][T17853] Bluetooth: hci2: command tx timeout
[ 1102.366419][T25431] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1102.376040][T25431] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1102.378383][T25431] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1102.405771][T25431] veth1_macvtap: left promiscuous mode
[ 1102.416870][T25431] veth0_macvtap: left promiscuous mode
[ 1102.419034][T25431] veth1_vlan: left promiscuous mode
[ 1102.421054][T25431] veth0_vlan: left promiscuous mode
[ 1102.722808][ T5899] smc: removing ib device syz1
[ 1102.881554][T25431] team0 (unregistering): Port device team_slave_1 removed
[ 1102.894010][T25431] team0 (unregistering): Port device team_slave_0 removed
[ 1103.008804][T17765] smc: removing ib device syz2
[ 1103.208118][T29277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1103.213829][   T31] vxcan1 speed is unknown, defaulting to 1000
[ 1103.214009][T12943] ==================================================================
[ 1103.215486][   T31] syz2: Port: 1 Link DOWN
[ 1103.218297][T12943] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[ 1103.222601][T12943] Read of size 8 at addr ffff8881083ba2f0 by task kworker/0:0/12943
[ 1103.225482][T12943] 
[ 1103.226533][T12943] CPU: 0 UID: 0 PID: 12943 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1103.226551][T12943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1103.226561][T12943] Workqueue: events smc_ib_port_event_work
[ 1103.226584][T12943] Call Trace:
[ 1103.226591][T12943]  <TASK>
[ 1103.226599][T12943]  dump_stack_lvl+0xe8/0x150
[ 1103.226619][T12943]  print_report+0xba/0x230
[ 1103.226635][T12943]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1103.226653][T12943]  kasan_report+0x117/0x150
[ 1103.226960][T12943]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1103.226981][T12943]  __ethtool_get_link_ksettings+0x5e/0x170
[ 1103.226999][T12943]  ib_get_eth_speed+0x180/0x7f0
[ 1103.227013][T12943]  ? rxe_query_port+0x7e/0x3d0
[ 1103.227026][T12943]  ? __pfx_ib_get_eth_speed+0x10/0x10
[ 1103.227043][T12943]  ? do_raw_spin_unlock+0x4d/0x210
[ 1103.227060][T12943]  rxe_query_port+0x93/0x3d0
[ 1103.227073][T12943]  ib_query_port+0x170/0x830
[ 1103.227090][T12943]  smc_ib_port_event_work+0x15a/0x940
[ 1103.227110][T12943]  ? process_scheduled_works+0xa25/0x1830
[ 1103.227126][T12943]  ? process_scheduled_works+0xa25/0x1830
[ 1103.227142][T12943]  process_scheduled_works+0xb02/0x1830
[ 1103.227166][T12943]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1103.227184][T12943]  ? assign_work+0x3d5/0x5e0
[ 1103.227206][T12943]  worker_thread+0xa50/0xfc0
[ 1103.227232][T12943]  kthread+0x388/0x470
[ 1103.227244][T12943]  ? __pfx_worker_thread+0x10/0x10
[ 1103.227259][T12943]  ? __pfx_kthread+0x10/0x10
[ 1103.227270][T12943]  ret_from_fork+0x51e/0xb90
[ 1103.227288][T12943]  ? __pfx_ret_from_fork+0x10/0x10
[ 1103.227302][T12943]  ? __switch_to+0xc7d/0x1450
[ 1103.227318][T12943]  ? __pfx_kthread+0x10/0x10
[ 1103.227330][T12943]  ret_from_fork_asm+0x1a/0x30
[ 1103.227380][T12943]  </TASK>
[ 1103.227386][T12943] 
[ 1103.291587][T12943] Allocated by task 26054:
[ 1103.293271][T12943]  kasan_save_track+0x3e/0x80
[ 1103.295064][T12943]  __kasan_kmalloc+0x93/0xb0
[ 1103.296810][T12943]  __kvmalloc_node_noprof+0x528/0x8a0
[ 1103.298839][T12943]  alloc_netdev_mqs+0xa6/0x11b0
[ 1103.300671][T12943]  rtnl_create_link+0x31f/0xd70
[ 1103.302490][T12943]  rtnl_newlink_create+0x277/0xb70
[ 1103.304433][T12943]  rtnl_newlink+0x1666/0x1be0
[ 1103.306160][T12943]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1103.308010][T12943]  netlink_rcv_skb+0x232/0x4b0
[ 1103.309857][T12943]  netlink_unicast+0x80f/0x9b0
[ 1103.311656][T12943]  netlink_sendmsg+0x813/0xb40
[ 1103.313443][T12943]  __sys_sendto+0x709/0x7a0
[ 1103.315061][T12943]  __x64_sys_sendto+0xde/0x100
[ 1103.316843][T12943]  do_syscall_64+0x14d/0xf80
[ 1103.318570][T12943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1103.320806][T12943] 
[ 1103.321718][T12943] Freed by task 25431:
[ 1103.323233][T12943]  kasan_save_track+0x3e/0x80
[ 1103.324915][T12943]  kasan_save_free_info+0x46/0x50
[ 1103.326878][T12943]  __kasan_slab_free+0x5c/0x80
[ 1103.328664][T12943]  kfree+0x1c1/0x630
[ 1103.330083][T12943]  device_release+0x9e/0x1d0
[ 1103.332710][T12943]  kobject_put+0x228/0x560
[ 1103.334238][T12943]  netdev_run_todo+0xc75/0xde0
[ 1103.335954][T12943]  default_device_exit_batch+0x986/0xa00
[ 1103.337959][T12943]  ops_undo_list+0x52b/0x940
[ 1103.339687][T12943]  cleanup_net+0x56b/0x800
[ 1103.341446][T12943]  process_scheduled_works+0xb02/0x1830
[ 1103.343758][T12943]  worker_thread+0xa50/0xfc0
[ 1103.345374][T12943]  kthread+0x388/0x470
[ 1103.346890][T12943]  ret_from_fork+0x51e/0xb90
[ 1103.348662][T12943]  ret_from_fork_asm+0x1a/0x30
[ 1103.350488][T12943] 
[ 1103.351408][T12943] The buggy address belongs to the object at ffff8881083ba000
[ 1103.351408][T12943]  which belongs to the cache kmalloc-cg-4k of size 4096
[ 1103.356641][T12943] The buggy address is located 752 bytes inside of
[ 1103.356641][T12943]  freed 4096-byte region [ffff8881083ba000, ffff8881083bb000)
[ 1103.361681][T12943] 
[ 1103.362533][T12943] The buggy address belongs to the physical page:
[ 1103.364830][T12943] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1083b8
[ 1103.368072][T12943] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1103.371176][T12943] memcg:ffff8881083b9011
[ 1103.372782][T12943] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[ 1103.375627][T12943] page_type: f5(slab)
[ 1103.377124][T12943] raw: 017ff00000000040 ffff88810005d500 dead000000000122 0000000000000000
[ 1103.380231][T12943] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff8881083b9011
[ 1103.383550][T12943] head: 017ff00000000040 ffff88810005d500 dead000000000122 0000000000000000
[ 1103.386815][T12943] head: 0000000000000000 0000200000040004 00000000f5000000 ffff8881083b9011
[ 1103.389908][T12943] head: 017ff00000000003 ffffea000420ee01 00000000ffffffff 00000000ffffffff
[ 1103.393006][T12943] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1103.396245][T12943] page dumped because: kasan: bad access detected
[ 1103.398492][T12943] page_owner tracks the page as allocated
[ 1103.400458][T12943] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 26054, tgid 26054 (syz-executor), ts 1059914447235, free_ts 1058807306445
[ 1103.408322][T12943]  post_alloc_hook+0x231/0x280
[ 1103.410084][T12943]  get_page_from_freelist+0x24dc/0x2580
[ 1103.411992][T12943]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1103.414527][T12943]  allocate_slab+0x77/0x660
[ 1103.416081][T12943]  refill_objects+0x331/0x3c0
[ 1103.417793][T12943]  __pcs_replace_empty_main+0x2b9/0x620
[ 1103.419734][T12943]  __kmalloc_node_track_caller_noprof+0x572/0x7b0
[ 1103.421900][T12943]  kmemdup_noprof+0x2b/0x70
[ 1103.423498][T12943]  __addrconf_sysctl_register+0xa7/0x4d0
[ 1103.426561][T12943]  addrconf_sysctl_register+0x168/0x1c0
[ 1103.428482][T12943]  ipv6_add_dev+0xd26/0x13a0
[ 1103.430155][T12943]  addrconf_notify+0x771/0x1050
[ 1103.432071][T12943]  notifier_call_chain+0x1be/0x400
[ 1103.433983][T12943]  register_netdevice+0x173a/0x1cf0
[ 1103.436489][T12943]  virt_wifi_newlink+0x428/0x860
[ 1103.438171][T12943]  rtnl_newlink_create+0x329/0xb70
[ 1103.440134][T12943] page last free pid 26119 tgid 26119 stack trace:
[ 1103.442430][T12943]  __free_frozen_pages+0xc2b/0xdb0
[ 1103.444277][T12943]  __slab_free+0x263/0x2b0
[ 1103.445966][T12943]  qlist_free_all+0x97/0x100
[ 1103.447728][T12943]  kasan_quarantine_reduce+0x148/0x160
[ 1103.449724][T12943]  __kasan_slab_alloc+0x22/0x80
[ 1103.451565][T12943]  kmem_cache_alloc_noprof+0x2bc/0x650
[ 1103.453591][T12943]  do_getname+0x2e/0x250
[ 1103.455087][T12943]  __se_sys_symlinkat+0x2e/0x2b0
[ 1103.456874][T12943]  do_syscall_64+0x14d/0xf80
[ 1103.458601][T12943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1103.460699][T12943] 
[ 1103.461557][T12943] Memory state around the buggy address:
[ 1103.464164][T12943]  ffff8881083ba180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1103.467039][T12943]  ffff8881083ba200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1103.469737][T12943] >ffff8881083ba280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1103.472497][T12943]                                                              ^
[ 1103.475209][T12943]  ffff8881083ba300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1103.478167][T12943]  ffff8881083ba380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1103.480993][T12943] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1103.745388][T12943] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1103.747822][T12943] CPU: 0 UID: 0 PID: 12943 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1103.750553][T12943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1103.753554][T12943] Workqueue: events smc_ib_port_event_work
[ 1103.755422][T12943] Call Trace:
[ 1103.756672][T12943]  <TASK>
[ 1103.757785][T12943]  vpanic+0x56c/0xa60
[ 1103.759326][T12943]  ? __pfx_vpanic+0x10/0x10
[ 1103.761038][T12943]  ? __pfx___schedule+0x10/0x10
[ 1103.762900][T12943]  panic+0xc5/0xd0
[ 1103.764257][T12943]  ? __pfx_panic+0x10/0x10
[ 1103.765701][T12943]  ? preempt_schedule_common+0x82/0xd0
[ 1103.767324][T12943]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1103.769077][T12943]  check_panic_on_warn+0x89/0xb0
[ 1103.770544][T12943]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1103.772668][T12943]  end_report+0x73/0x180
[ 1103.773939][T12943]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1103.775679][T12943]  kasan_report+0x128/0x150
[ 1103.777024][T12943]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1103.778747][T12943]  __ethtool_get_link_ksettings+0x5e/0x170
[ 1103.780446][T12943]  ib_get_eth_speed+0x180/0x7f0
[ 1103.782019][T12943]  ? rxe_query_port+0x7e/0x3d0
[ 1103.783440][T12943]  ? __pfx_ib_get_eth_speed+0x10/0x10
[ 1103.784992][T12943]  ? do_raw_spin_unlock+0x4d/0x210
[ 1103.786482][T12943]  rxe_query_port+0x93/0x3d0
[ 1103.787817][T12943]  ib_query_port+0x170/0x830
[ 1103.789158][T12943]  smc_ib_port_event_work+0x15a/0x940
[ 1103.791129][T12943]  ? process_scheduled_works+0xa25/0x1830
[ 1103.793110][T12943]  ? process_scheduled_works+0xa25/0x1830
[ 1103.794688][T12943]  process_scheduled_works+0xb02/0x1830
[ 1103.796368][T12943]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1103.798223][T12943]  ? assign_work+0x3d5/0x5e0
[ 1103.799634][T12943]  worker_thread+0xa50/0xfc0
[ 1103.800994][T12943]  kthread+0x388/0x470
[ 1103.802184][T12943]  ? __pfx_worker_thread+0x10/0x10
[ 1103.803750][T12943]  ? __pfx_kthread+0x10/0x10
[ 1103.805315][T12943]  ret_from_fork+0x51e/0xb90
[ 1103.806724][T12943]  ? __pfx_ret_from_fork+0x10/0x10
[ 1103.808164][T12943]  ? __switch_to+0xc7d/0x1450
[ 1103.809434][T12943]  ? __pfx_kthread+0x10/0x10
[ 1103.811099][T12943]  ret_from_fork_asm+0x1a/0x30
[ 1103.812890][T12943]  </TASK>
[ 1103.814612][T12943] Kernel Offset: disabled
[ 1103.816232][T12943] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:35:33  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81ba2959 RBX=0000000000000014 RCX=ffff888101fcd700 RDX=0000000000000000
RSI=0000000000000014 RDI=00000000000000ff RBP=dffffc0000000000 RSP=ffffc9000768eb78
R8 =ffffc9000768ec40 R9 =ffffc9000768ed40 R10=0000000000000073 R11=0000000000000000
R12=ffffffff822f8b76 R13=0000000000000008 R14=000000000000005a R15=ffffffff8d12fe63
RIP=ffffffff81c58cc6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818de66000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f45761e82f8 CR3=000000001f8a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=e56f5a471a187f65 fa4fa3cd8cf6e329
XMM02=d5118ef58c363f25 6c9535c25be1fde7 XMM03=584b844de87bd2ea c5a8d73dc1cad878
XMM04=cb7d85894de69b68 b3bcdd40928bdfbf XMM05=00000054d9f2e3c8 be8cdc84f8ab79ca
XMM06=0d7a95ec90757831 9466321e6043ae43 XMM07=788feeb8c4d1a3e8 5d72024c3043c8b1
XMM08=37c794ebc8f08ef1 351f8d081f2e13cb XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11021f3fae0 RBX=ffff88810f9fd700 RCX=ffffffff81a10004 RDX=0000000000000000
RSI=0000000000000008 RDI=0000000000000000 RBP=ffffffff8fbcb830 RSP=ffffc9000a3cf0d0
R8 =ffffffff8fbcb7a7 R9 =1ffffffff1f796f4 R10=dffffc0000000000 R11=fffffbfff1f796f5
R12=ffffffff8fbcb7a0 R13=ffff888101fcd700 R14=dffffc0000000000 R15=ffffffff8fbcb7f0
RIP=ffffffff81a0ff42 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555650f9500 ffffffff 00c00000
GS =0000 ffff8882a9466000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdf977efa8 CR3=00000001199fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffff000000000000 ff00ff0000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ff00ff0000000000 XMM05=0000000000000000 00007f912fa331df
XMM06=0000000000000000 00007f912fa33343 XMM07=0000000000000000 00007f912fa331d1
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
