last executing test programs:

1.093683753s ago: executing program 2 (id=5991):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0xb0}, 0x0)

1.031131333s ago: executing program 2 (id=5994):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000001900)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xf1, 0x3, 0x2, 0x2, 0x6, 0xe, 0x3, {0x3, 0x5, "663a7f6258"}, 0x1, 0x56, 0x3, 0x8, 0x3, '/*.'}}, 0x19)

533.624713ms ago: executing program 1 (id=6013):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10)

475.057745ms ago: executing program 1 (id=6016):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x20, 0x0, 0x6}, {0x6, 0x0, 0x0, 0x7}]}, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000000a34c5ddd40566a30e8a6f0613c0f297009eeddba44b1da65a59c8bd514be492b127699177255e054c2f9289516cdc23efa670c6111858b4e9de91337f0497b4ad4ffbe5babad078df57856205ce09dd810360e1b866435ef7209852efb9f1787a45"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}})
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10)
ppoll(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options]}, 0x34}, 0x1, 0x0, 0x0, 0x40440c0}, 0x4040000)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000)

474.832148ms ago: executing program 0 (id=6017):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)

412.87611ms ago: executing program 0 (id=6018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
splice(r0, 0xfffffffffffffffe, r1, 0x0, 0x8, 0x0)

412.736786ms ago: executing program 0 (id=6019):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

344.736056ms ago: executing program 0 (id=6020):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000000200000000000000aa000000000d0001007564703a73"], 0x6c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004"], 0x24}, 0x1, 0x0, 0x0, 0x10000014}, 0x4000884)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r6}, 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x4, 0x6, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r9}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000200), &(0x7f0000000340)=r9}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)

169.48142ms ago: executing program 2 (id=6021):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800)

169.149583ms ago: executing program 0 (id=6022):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x14)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x4, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
accept4$bt_l2cap(r5, 0x0, 0x0, 0x80000)

157.879835ms ago: executing program 1 (id=6023):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, r0}, 0x38)

94.926008ms ago: executing program 2 (id=6024):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)

94.429089ms ago: executing program 1 (id=6025):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000018c0)={'vcan0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001980)={'sit0\x00', &(0x7f0000001900)={'tunl0\x00', <r2=>0x0, 0x8, 0x700, 0x5, 0x0, {{0x17, 0x4, 0x3, 0x13, 0x5c, 0x67, 0x0, 0x7, 0x2f, 0x0, @remote, @rand_addr=0x9, {[@noop, @lsrr={0x83, 0x17, 0xb9, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x16}, @remote, @local]}, @end, @ssrr={0x89, 0xb, 0xe1, [@private=0xa010101, @private=0xa010100]}, @rr={0x7, 0x1f, 0xae, [@private=0xa010102, @multicast1, @private=0xa010101, @multicast1, @loopback, @rand_addr=0x64010100, @broadcast]}, @generic={0x83, 0x2}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={0x1, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmmsg$inet(r0, &(0x7f00000031c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fbbb3c995d71235a43222cbf9a7d89204800fd2649c034b752f144b8c86b831b", 0x20}, {&(0x7f00000004c0)="eaae8b24525d575c3d9b4cc438954d1c1b6ade4d71b9ede61a7447e2fe2f1672fa82b5f4bde936b5cb9976855abbf5be94271e9cc85299fd5059aad904d2576d88c482b6aac844b16335a462acafdcbeb7b5a79a2564515b1abc90d24db24a974849e076e8e80f8c920862cdd61c0edbaffefec49a09c6fe14ec203a5c040254e5a6c1ca12d08d3f175f25e71757f925abd1bec0641578662b779d8cea89d56d55c2af4774295cf8d6d540cd80a354ae089e71b15ba7c8fcf2a9298e1b1f90f8ed937ac16bf726501f7dc3d58419a777aa3cb62f11aa7212390bbee6b7dc4cede10e97e4d6f058f9cb62a52641e7a76f6685e544d3614bcaf3e4ce1735e64e2686f9ffe5055bf4495fda9d2a4228f9f558b1915d0c9117d7b700e4c61a008251cabe2f7c0a90e3f5b7d8874b8b0511bfa79de45c5af390d94a0fe87f8a4895ec627af1f97d0f69ec9e058084d7b487538a41c6f27329b00327e4323a476e22033ca78ec763fb1a5af1bdefd2da1a3f9efa526f05c44904370553a18499139893dcb86e4cc96f69b3692ae5b194b436f356ee6dcc3f9c125947ff60df61485795a872b1b131e8cef021b5bceeaa2dd81e92ebe162560d2b8c5d20f9c35063d3655bbc7aeb8123969cdadc098e1fa349fef3745f0abe850a23762a073d35a09b742c2cf7017afe1f3cef2277f17bd9ba69c751f83d852f265459f6076e158b9a14c5f0373897e90912896177601e801e9c5010f3673aaa831467e6abdbdb3c20bd67eeb8521ce68b9849cd356d129ccb0f0a360a400121012ad5574da8464642ab1d19c03fa07d1f5073c89808c88b46bb3623aea84b6e5322b40a899b6d9d0572021565184fcb86ed9e73a96acf948a3d6d1af4008150e235ce389fee02f08d3a21af472deffaffcfd07cd9fc408ed12dbafa54379e626cba0c1404e983ec21bfb8d9a41894844e768fec620c8e3d060f4a4f0dd6168243e9acb28709a0f4c520687361ca4a6699bd94bfeecfdf5f3e83645a8014f44822ab88fa16669221f72ea5b43f71db4cc422829b111e942fc54745eaec5c16f3644ab48daf627b50460f2b77996d66e228fc2999c488126939a3b336a193df60e5fbbcb2f0927faf790b30cad15e5e60fba2912bbc2ff582b4cafa1d1ec9fd8ff8c4a407b4ec495f89ac1ea11be131591acc8d7b7d8e8feeb6a830025d94a0ec48133541dfcdee16b1ccb53608b40440b7b3fc5235cbc466935d24947371a966a23eee8339c36b51e654fc9c97ff906546990e55842af314b034d7060ca22080d44adfb9fb6344d57b34a7acf4d146084f0bc08c98dc9d0b3fab017ecc18424587755ac226a97bb14143b6d91770d231dc35a69c846224e093bf73d77925144f9d9f11364487e378f21a3bd2a74a835efb8cd66eacaa1bc9154e1c13817e0eeda60c21e27a7266ecc46db9f69c1e44e5e38600707b5990536fd9fa0dd9f07a916e851d235c14ebe5cf955f2d2223b776fdc0d7c5410f35c9ad6d7f8fd590e4698371cc9868f1cf90f6e1f7f21f98c81ccbe7e71bf92fc603c851fe17dea11057ae73c394e9921a2a027b99683bf57daaffd174aca2fe4e0cb302dca89e425e88541e99a72d1008e424fa4cdce68f5835feec0c24f04b5f3660f08b07dd9820928f1bf05bfdcb7136c0cd4e9745ad1f40d0471377c1c4ee8a91b25756553f3f992a031549280679a37e41c166971be3c93326e9032cf53e05eeae5eaad998c1b466ab6e458a8753b11ab56fba046820131f6e1bea328516b5a5ac158f0945adf01807a0db572f963c89cd28c12b16035c6335f984ef09b06dfb0fbdc6cdb3a088ce8f38887a1c4e5574d74c5bd72456144f03450bf33c73296833f0e042166cd92286bbee2cd4302df75221be01b0dca98b060cdeb7fd2195d73ccce34f368b2d678075967d747f0c13f3c8988545833853d70d871cfcfc53ceb6b23bfb1b5663a6bb84653e22adc817e3ccad07fca25a2ae64955d72393bdaf1f186aa6e31e50faa2f3c01139aae9e27f92a6e80ef23b5f1c976eea8db927def0d0ab2be69967530589f345b0dba05746e8600a5980f74c27554a15ec6d0c01a2d534d84081860822a922c79847245aeb4bf6a96afd074e7400f2707e9c03e6f1bb7b5c25e8f45efe27174e775b92e94d590961504efcfcd99439b7f43bd6e88a4bf4da6e5c8ad2bef8202e6bbbf1b1b2e8d4379fe47dbd742bbdea9efde115e7afc580eb73f4b360398a93d6b46544a306972bc5746766f8f46798479d457b1465a33d0f9d82b6ade987511de9e50291326801931b6eb367f1f1ef0dc7eee50d01a28800d6f2be71fa699c08e1cbe92ee3d45eb29253247e81c57474eb5b359773a23deb6626cbf77fb247a7b48a9ea61237036e00ea38e1beedefd73d723be1967147f865a0af23b1810004b8bca378590ba0a9909839c8b12bf194bc8ea233ef86a269e1d416e6cf835b1ed191064e7fbcc3307580721447996e27cea715e6f2288fcafd8d233fd0febee2b45cd0348901287c66b93c7176e9db3d01ec4441a4ae49a1e979ff1122bc3f3098ba18a9f1e20fbe378fb0bbc124166c71a9a00f5cc26df8544a292cbab6453d4f179684a2b42ea1ff9362cf4b6c0fa98b5a12593310ddd8b68d6f07d34b972f842712a4d691b9406b01b8af31d991018be5f5c058ff1ba21be9feecf06b0d3d633cc63269d8c6de1425f6037ceda60f314affd90f25ebcb8cb4dadf6cad99a4a1e3ad565574521a94f22dd8d637af683c8bc66a8a616d8f9b676aad773b616fe4506603791bb6cb31b978bcaace7dfc58867255b35527f60c3753bd2df04d9f5cd4726fe1f68345c30cbb603ca6a7eedb81b11eb926a0e2816f2366d558d31911b127a78cdb3781065caabaadba8c7709934da1dfb5e7c2e3b9bec564bb99b6de59332ca1ae08c99836a1555c38a9ac3d995ceedeca23914440b259de89bd5d91cb95eb05062d6b00a3bf2a1f2b34e14036095200ffd916955d918ae69ae36b3c75a86b6395602bd4b26604408b40d3066cb25e98b0ff15ca3ebfb0d060444cf23c97de948f9f0020d95e2aa9da0a0a1f782376f7eac43ad2c8862f8d0fc45a7576ee05713aeb5f32f3adce4705f537ea1df713fa9383f09d4aa017602754994e3f1df9d38cf589fe4fcf5b9e6649285eca5e67a6021b8cbdef2a732647d65fc842b4552a1107b94a30b5d483a26439fb916ce5111fe1ea6c8f043b12834e5b797a28c456bc95a1cdb951e153c430108c4c92bd18d4d49c22b5805c3caebf4533ad0ba6ad805f785a1d8270f056505544808c22b34317e99eae1d70d9b7577b3e44e7dcaba2fb9912b754f9f34db08b05a6b1871494d12af923e28f29dd0de83d116a9353297b40cfd1cf0873c1d7e55780b64c1aac364aa5d4c489c180bcd98d1e16a440a86e37a57bf981d5e7ccb5f6924bf4a00287f44b490518e0ef175a22b6fdc62a258bc4cd3597d19c9db94fb587d022154e12a2eda2fa811adf35795ffcc1cea5b3d3eff256fad2f0f228df7e43ff75f8ef2e1172fc3bbfc7aca4ac6525fcc7406ce030b1b3f2a761cc5608a9c71bc37b15dd946d241021821d47061ca9e8c159643976dd9967da72c2ec8ae73fe5b225c44c31083866c81db5341561f34f0cd9ce9f05569b722a2bb9ab17cba603befbd4776cafaedbb0613ef6ac2ab7f06e193689daf6590e591780a633fdf062a0024b847c09351e2952c666c13c2c4e3e634b16d787a3de904ab554177c8ab349483aeb5ffa8e9733c30c77b53e8bad58fa2275cf81462a21c26a2df972ea0df46e6439b37757d4d80a92445e818b7e51face6d87970a73254314d058902c08fec5043c21225fbf7d6b7f08f5c45ef333b7767ae65554a63b0c5bb23be5115b597ea4c89e2eb106ca32353f1b1b1521930498f04fead026e59ad1b7c425889bf4b205a6b3f838e380b62527cb7f97cc8dfd66750f881bf358277754312314bce255dd55d7c07db1c801c75b3bc90438b93e1a4d4a80d794052f66dd92e0c05bf60ef45a5cf4810e98720118735980fc2dd0038dc19d64835e52c677f13e969c028dfa20f569fa9421dd65dc1fad25b4b95d98ec52355a1772ee83d7f20ecfea661237e8398d07001a3f0afb88c4873160caa8b2467c7cff88891462bc36cbae609b120b137e9eb703d819e66c3d5ac6b8966afd4b6acc51c825bb1e4a04331392e6ccf867ab7a9a9c0251fd0e6afabf5b2740440cf2f167323f436460767baa0de0eec020bb19dd67bcc834405afcb59b01eddc6d192732dcb1ffeb35ae6709c2968c8c3b99f0e907d4b12cda7a224fc51a3dc973e890097f1e7075dd534fbae2dc100963b2829c0e375cf0b42ee4e2629628cd472dba4fa2ba2aa6d97fc87931a86d2cbf47bc975bb1d41343b7dc889b62ef240c10e7286f65c80ac13a75447742ad98fbe6ad86057c99cc949a2758f667c770fd8fd1d407e3c9f0c35e92d7da7da9c9f58a9c223427239838e55ddcc335b23c3fd4ff322bd4ea21c62ec7462c35411461f5572d60c67fc08c742739c79725ed026d8df7ce847f4ce35da0fbc9041be6068189f6a48e8b7d5a77527277defda4800a8a0be55256687a981d44089613a03e9a89242b3eb7f9a3ec23d3a52f56bd4166e53b9fd2eac2a72a67f024003ba054c5ee003d6ff65d6dc12db90490031424460d152d1ca50abc06832014c9565eebd3a70d75ff27653a3b4783715857f75eb758bea869ea98d6c5893e61065ec7fbf9348582d7f945c2efa15c7ec998bc16906ea2312d689838cc53d13aa109a21d44f368df958c948959070342deb8bd2016da06ad7dd1cbf0a8570aadd4bd9e317b4099d6ce3f05bac7974b16f5caf44acd1ea1529b05b678f84054eab88f0e31c0e298a42dec5e7b472af51630c303b1c678b67f263e71ff23102ac7c2b81a56fc02aed434619efa0911595861f16d1c6198fbe527657e8b2961b985aec63631870ba54aef4ddf2d01ca7e0eb0495a1cbb9911ae3fa073306e9a846fb73b6a3be01de913b9b8570001f11f868efe860b2116b625f98d4161a1d5bfa0d1896bbf9ee1aa177e1ab375b6c6df48550e6251dc3ada4db86488dbb5e55463601877b27894c07a719d2af2d27b25404ee3cce0232c103781c32ff42af963f20a56d456077a7577e35942135a1b18eb776a7d8bad4e73874f0a69e8d813e9df52e71b6fa2b2e83d096d85f9d58ab9a0d6a204cceccbe254007519848340c8f484218a3b06657a5326af486e5580dcb6dadc9c1f19e852fd6d37ae98f18ba138c4c8bfea5f4c7e3319f3d20b267c07918e32b6aa28d109929e2524fd8de1ecd7022be6f7b984cd2208c09e64e90524ee37eb050a30b936793411140df447f6b350c5ab4f74e8fad82eff2de757a7611c94a43dd7c9d7ec6e92069cb4a0fcbb24a17504079417ba45b176e7b8b4134c9e9d7509764aa9c6fc6ee6944c93fbce755bf54dfddb01651804b20774ff898b84ba1d5add98b33492653345555ac39f257bef3791cf2369802ede31f021e4fef4f61e7a1a631da7911cee1649967b2fe241d6565033bbc372aeb445a42f5c8542364a46d2c8605b5228a1444a8213ebc0ff9d9dfe00724dba4d46380925dfbf928d41381aa9a996a8bcbfe714c126bb7dc07dfae11281c8e88a01c008a0f4ce80f081e8d5c465f9fb04e5e37b62312adb4e2d6431eac2a7d8d1a3dfeb94d9f7e1a1f775b4165ad66927be3997a53df0dc7e461cc6edc85e6365928d5c38e95e26", 0x1000}], 0x2}}, {{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="affb39da77ac21cf3100a5c5fa551d150f9266a090fde1ab3002111a6d98fa64d3a69081eff3b64a4d13961611097fbfb6110897edafa4b978e2750e84f842bf24593afb81c7ee4bbc3446477a492e2302fa59a78649630d6f40d2c6e184cf7e61de19fb0d3525acd063cc0f75c384f1a428338a0d087cd63690fa8a84bfe55badfcbe6788dbcdf0539417c5a8543aa3cb7ec12a11a9cf7e7c3a630289d2c9e961973f951f207902ffd2422fda1232e83d08a82f860817f3f3ea991b8ad420670cf18b88ada3026989deb8051cd1007e53fa50fdcd", 0xd5}, {&(0x7f0000000300)="eb27622c5dce7b032b327c1991aefc18702c8f1882f4cbb91a6535af40c6cb9b142b7ee8d92122ef353dd5bd465e8213eaab25ce0013fd568b59240be40a4a46f32e8e87b2d25848fb064bea6d", 0x4d}], 0x2, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff00}}, @ip_retopts={{0x10}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x23, 0xfc, [@broadcast, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @multicast1, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000014c0)="e5127f224587d728c3c20aa40b401df6c8deeb1f793ea10434ef250d2fdeab908315097903b58b95729b1a400035a8efda65cdcf29db5c4de59491d8aeaf6d5c47017ec9e8647cfa5d3cb13d68184869be5fbc53093e8d3b63f3f8b7cc38981af5a1cc0a6aaedeb9ece4ffcba4add461ccf1dcd09e1b51fac24b8863ee85f44d42ebf05bbd3b46dc25af3a6abc0084eeb5d300b448b4fc78b7772850cd5b1ccc73b65a12a4d70b023bb7416267f7650e56f8dc612bbbbd43e6b2bcdced25dfc3677e93734fbdb01da6c0d7dbc4dbe03a29081bd9150230cca0a91bcebb55bb93f23c343cadbbdcceb159b2de7da33858bc8c93763c", 0xf5}, {&(0x7f00000015c0)="9abe08bf8bf58d36d0991fb3fa368eaa206e44762adc0742627e0de4f6eb185918b67955f11fd63307d15eabd68b4639f2e494de851153b9147c58c99e5cf08616398965fc357bf0692494f1d1233404d42ef79f47ef81333dccd1fc2bc67d770892615d0ecbe558df82e3aef8327218496c70cfed5d32239fb58628b8676c4642c7b1ef1e39c59a09202b809c1cdd7c0b6c1a06e029e8f7d615b5d9bd547bdbfb46293c698e43b4c8c806e8f2515c2cfec08f1b44b7f5385647d7c21e966294afdeb9aaeb45b06a2a28f95ab5250cba11fc5a09c715", 0xd6}, {&(0x7f00000016c0)="35fa969f823ac9af54bdef4bf16af9bc1ed3d5f47b38df0c6674b6e2e6d4a46d14", 0x21}, {&(0x7f0000001700)="ea90991410dcc6c828c90659d08aea01950742baa4084eb3ba8314e8a2f168af01817917d374e6c0bfc81e81be4ef24ed4c3631080df41b44d27b441cd2ba215dc1237cab8c239c5e54c712ab50940c69a7f026e07937e4d6c0abef308103819dbb3a5669f28d19570e46745bcee168403", 0x71}, {&(0x7f0000001780)="12366d9d2bc1ad36cba15dec9a36a7086e799fad99edb639a82f89de44fcdee15c08b224c728a0ffd7f0545bf86ac2109d44c9b54d8530f855de", 0x3a}, {&(0x7f00000017c0)="4fd818ac849155b1f80113851b1027808dc020f6775b54ddd2ebd923524270fd504e79aea95e58c0a77c5c06f997760620ce069960498fbb62", 0x39}, {&(0x7f0000001800)="91b7d2e65f6079e9be79f0d0df20ccbdd31c", 0x12}], 0x7, &(0x7f0000001a80)=[@ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x0, 0x4, "edcb"}, {0x5, 0x4, "20fe"}, {0x5, 0x11, "f57680f674937dea937c1641265f1f"}, {0x6, 0x10, "f9f2279d9864f57fa1630c2c4f9a"}]}, @end, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xb, 0x0, 0x7, [0x2, 0x114]}, @timestamp={0x44, 0xc, 0x91, 0x0, 0x1, [0x7, 0x93]}, @ssrr={0x89, 0x1f, 0x54, [@private=0xa010101, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @local]}, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}]}, @lsrr={0x83, 0x1b, 0xf3, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @broadcast, @broadcast]}]}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101}}}], 0x188}}, {{&(0x7f0000001c40)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003080)=[{&(0x7f0000001c80)="8ef8a8ab8fbe4b2a875b26da082b347cd90036972d04e2cd46fba63de82742a5d7ccf3102de274f943ebab8b4a5369581e30eaf467418f06eefb8080844a990f046fc698b1b046e59b23c0a2b83a71cfca0b4d6673", 0x55}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="d1ec82afd636118f9ecb1c136486851cdfc3824452969507072936a5a29712ed959d7716debe94396b7e58a271bf988007e493a378ecb6c018c75156cf53ec6ae3fe36af232605a6922d6cfbcf07b1d01563f0604f45a2ecdcb179809cda90fb6a74124e093b6ffd2c5e636de65685717a170fbc3a888b5e904b", 0x7a}, {&(0x7f0000002d80)="2a45ead2a738c1708490a7851bcbc3240af266bfac49a367d3e853ac3f5fd00227174b0bacd6496a9dcb83b310fb6a46132c8ded74e6d69d011cedb611932ddc8f63a94c0354fd841cd6306030d027fb113ef72180b0b2d689d490c078648ef27df8805a54abd3d791ce9e6e0f1e2e6bcbb9b778ab053d842d517db1afdd6b04d87b0d704b1209ab4ec7d1abcb50b69a9c3c102bd92ec8592533bd9f8367f43e04684ff2d35630da01c41279bcca67e53f3a607581e34b8e6a60dbc814777699a2fc5917c69cc4f21c0e905ce5ac473e9027e86ccc30dd343440ab212a1f1e1133771e51b971", 0xe6}, {&(0x7f0000002e80)="45a10752ffae3d278e4653a86f22cd3a083c1e7e533a2b55b1c06031d750d8f2d10d8d243c096ed176b910d1ebfff56f86f8f13b5cbfd8fa09c69f54facf3f5a3831de6fd28d54793b80ce280da7278b3b2547b0afdef43fc4d54767bb0fc3b83265940079a63fa008b99c815149647d8688ceb6782816f82d6cff486dc458e0b2c0ce4c1ceb4384ca47c842c69bdeccb359d32b615a6eac969a8aa5152a4918ea51b1a9dba5db201bc2b7a13a5e052f0830cf041fcf8cc8d64991d3b9ca9fee17b5c6b00b255f595df234f9fd39899d324ce54ee024f0873471acf543f2600ccc9f351dad1ac6e411fec09cd5bd7725bfb23958d3d8", 0xf6}, {&(0x7f0000002f80)="f9d5ee7b061345c4de76", 0xa}, {&(0x7f0000002fc0)="a4964f57e2d3fec4d2bafe4ccb3ef7a1464f1524e4cabf4de1627473ba7721c4f9c3d5b9a5f4d44f3c8eb3e9d5de7a0b5d5a3c5ab746800f25fa1519255e362cc78aca1f2a90b54a14e24715e358ef6f67e475a5f5e17616e297886783ab1d96347ab13eec5724f6984f16c2b09d2d5fd1848ada60d542c2cdf5240ba399799c32095e", 0x83}], 0x7, &(0x7f0000003100)=ANY=[@ANYBLOB="94000000000000000000000007000000443ce703ac1414aa00000060ac1e010100000006ac14140e7fffffffffffffff000000036401010115ebc932ac1414bb8323c8e0000001ac1e0101ac14143aac1414bbffffffff0a010100ffffffffac1e000101441c7e43ac1414aa000007ffac1414bb000015c1ac141425000000068307d8ffffffff00"/152], 0x98}}], 0x4, 0x40)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000032c0)={0x7, 'netdevsim0\x00', {0x3}, 0x8000})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000000000000800030001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x3d, 0x107, 0x8003, 0x8, {0x3, 0x7c}, [@nested={0x14, 0x11, 0x0, 0x1, [@typed={0xd, 0x8, 0x0, 0x0, @str='}(/-$-^*\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0xc000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

93.924117ms ago: executing program 2 (id=6026):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc000)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r4, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440"], 0xdc}}, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10)
sendmmsg$inet(r7, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1b9ff8", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)}}], 0x2, 0x20008004)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000ba5b00007ffffffe000000000000000000000000000000000000000000000000000000000100000000010000000000000000200000002c28d894d4de11f3e6b4522e00000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x4cc00)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0)

21.388316ms ago: executing program 1 (id=6027):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e6400"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

21.169196ms ago: executing program 1 (id=6028):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x3c}, {0x6}]}, 0x10)

7.056607ms ago: executing program 2 (id=6029):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0)

0s ago: executing program 0 (id=6030):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0)

kernel console output (not intermixed with test programs):

[ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.986'.
[   92.711695][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'.
[   92.761721][ T8220] lo speed is unknown, defaulting to 1000
[   92.764672][ T8220] lo speed is unknown, defaulting to 1000
[   92.767410][ T8220] lo speed is unknown, defaulting to 1000
[   92.823968][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.988'.
[   92.937347][ T8220] infiniband syz0: set down
[   92.939376][ T8220] infiniband syz0: added lo
[   92.942016][  T791] lo speed is unknown, defaulting to 1000
[   92.980858][ T8220] RDS/IB: syz0: added
[   92.982978][ T8220] smc: adding ib device syz0 with port count 1
[   92.985605][ T8220] smc:    ib device syz0 port 1 has pnetid 
[   92.990746][ T8220] lo speed is unknown, defaulting to 1000
[   93.004956][ T8227] netlink: 'syz.0.989': attribute type 2 has an invalid length.
[   93.059745][ T8229] netlink: 'syz.0.991': attribute type 12 has an invalid length.
[   93.064605][ T8229] netlink: 132 bytes leftover after parsing attributes in process `syz.0.991'.
[   93.152796][ T8220] lo speed is unknown, defaulting to 1000
[   93.308639][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'.
[   93.311730][ T8220] lo speed is unknown, defaulting to 1000
[   93.466383][ T8220] lo speed is unknown, defaulting to 1000
[   93.472198][  T791] lo speed is unknown, defaulting to 1000
[   93.609167][ T8219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.639419][ T8310] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1027'.
[   94.704187][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'.
[   94.976655][ T5873] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   95.714530][ T8362] __nla_validate_parse: 4 callbacks suppressed
[   95.714539][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'.
[   95.724296][ T8362] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   95.727107][ T8362] team0: Device ipvlan2 is already an upper device of the team interface
[   95.793378][ T8370] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1052'.
[   95.800143][ T8368] netlink: 'syz.0.1051': attribute type 11 has an invalid length.
[   95.887875][ T8378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.890733][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'.
[   95.899924][ T8378] syzkaller0: entered promiscuous mode
[   95.904740][ T8378] syzkaller0: entered allmulticast mode
[   95.923314][ T8378] tipc: Resetting bearer <eth:syzkaller0>
[   95.943973][ T8377] tipc: Resetting bearer <eth:syzkaller0>
[   95.953902][ T8377] tipc: Disabling bearer <eth:syzkaller0>
[   96.035528][ T8396] lo speed is unknown, defaulting to 1000
[   96.079595][ T8400] netlink: 'syz.2.1065': attribute type 13 has an invalid length.
[   96.085521][ T8400] netlink: 'syz.2.1065': attribute type 17 has an invalid length.
[   96.136237][ T8400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.556379][ T8429] netlink: 'syz.2.1077': attribute type 9 has an invalid length.
[   96.559804][ T8429] netlink: 147436 bytes leftover after parsing attributes in process `syz.2.1077'.
[   96.768941][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.772736][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.780717][ T8445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.274577][  T791] IPVS: starting estimator thread 0...
[   97.314557][ T8464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1094'.
[   97.362023][ T8461] IPVS: using max 40 ests per chain, 96000 per kthread
[   97.795907][ T8503] netlink: 'syz.2.1111': attribute type 8 has an invalid length.
[   97.869452][ T8515] netlink: 'syz.1.1116': attribute type 12 has an invalid length.
[   97.872857][ T8515] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1116'.
[   97.967793][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[   98.116657][ T8543] netlink: 'syz.0.1128': attribute type 1 has an invalid length.
[   98.217062][ T8554] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   98.234512][ T8556] vxcan3: entered allmulticast mode
[   98.539959][ T8583] delete_channel: no stack
[   98.687788][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'.
[   99.560264][ T8614] lo speed is unknown, defaulting to 1000
[   99.669052][ T8620] ieee802154 phy0 wpan0: encryption failed: -90
[   99.896216][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1167'.
[   99.972936][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'.
[  100.256223][ T8666] netlink: 'syz.2.1182': attribute type 1 has an invalid length.
[  100.361877][ T8673] nbd0: detected capacity change from 0 to 127
[  100.373612][   T56] block nbd0: Receive control failed (result -32)
[  100.374429][ T5842] block nbd0: Send control failed (result -32)
[  100.379628][ T5842] block nbd0: Request send failed, requeueing
[  100.387496][   T60] block nbd0: Dead connection, failed to find a fallback
[  100.390682][   T60] block nbd0: shutting down sockets
[  100.397542][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.405446][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[  100.410600][ T5842] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.416395][ T5842] Buffer I/O error on dev nbd0, logical block 1, async page read
[  100.423145][ T5842] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.427275][ T5842] Buffer I/O error on dev nbd0, logical block 2, async page read
[  100.430739][ T5842] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.435389][ T5842] Buffer I/O error on dev nbd0, logical block 3, async page read
[  100.439257][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.445674][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read
[  100.449257][ T5842] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.456210][ T5842] Buffer I/O error on dev nbd0, logical block 1, async page read
[  100.459339][ T5842] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.470131][ T5842] Buffer I/O error on dev nbd0, logical block 2, async page read
[  100.475903][ T5842] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.480129][ T5842] Buffer I/O error on dev nbd0, logical block 3, async page read
[  100.486340][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.490954][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read
[  100.495635][ T5842] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.499636][ T5842] Buffer I/O error on dev nbd0, logical block 1, async page read
[  100.508152][ T8682] netlink: 'syz.1.1189': attribute type 13 has an invalid length.
[  100.509782][ T5842] ldm_validate_partition_table(): Disk read failed.
[  100.518056][ T8682] netlink: 'syz.1.1189': attribute type 17 has an invalid length.
[  100.518238][ T5842] Dev nbd0: unable to read RDB block 0
[  100.529314][ T5842]  nbd0: unable to read partition table
[  100.543835][ T5842] ldm_validate_partition_table(): Disk read failed.
[  100.548701][ T5842] Dev nbd0: unable to read RDB block 0
[  100.559747][ T5842]  nbd0: unable to read partition table
[  100.698611][ T8678] infiniband syz2: set down
[  100.700863][ T8678] infiniband syz2: added syzkaller0
[  100.752583][ T8682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.759087][  T791] lo speed is unknown, defaulting to 1000
[  100.762637][  T791] syz0: Port: 1 Link ACTIVE
[  100.764459][ T8678] RDS/IB: syz2: added
[  100.765356][  T791] lo speed is unknown, defaulting to 1000
[  100.766458][ T8678] smc: adding ib device syz2 with port count 1
[  100.766473][ T8678] smc:    ib device syz2 port 1 has pnetid 
[  100.801777][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  100.847681][ T8682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.862556][ T8688] lo speed is unknown, defaulting to 1000
[  101.416367][   T36] smc: removing ib device syz2
[  102.252801][ T8703] netlink: 'syz.1.1193': attribute type 4 has an invalid length.
[  102.260656][  T791] lo speed is unknown, defaulting to 1000
[  102.272919][  T791] syz0: Port: 1 Link DOWN
[  102.277372][  T791] lo speed is unknown, defaulting to 1000
[  102.532739][ T8709] __nla_validate_parse: 3 callbacks suppressed
[  102.532753][ T8709] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1197'.
[  102.534701][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'.
[  102.535312][ T8709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1197'.
[  102.564343][ T8709] rdma_rxe: rxe_newlink: failed to add lo
[  102.590393][ T8709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.676640][ T8719] netlink: 'syz.1.1200': attribute type 4 has an invalid length.
[  102.718294][ T8723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.723433][ T8723] syzkaller0: entered promiscuous mode
[  102.725608][ T8723] syzkaller0: entered allmulticast mode
[  102.733092][ T8723] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  102.752278][ T8723] tipc: Resetting bearer <eth:syzkaller0>
[  102.758714][ T8722] tipc: Resetting bearer <eth:syzkaller0>
[  102.784929][ T8722] tipc: Disabling bearer <eth:syzkaller0>
[  102.844700][ T8733] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1208'.
[  102.848508][ T8733] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1208'.
[  102.874910][ T8733] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1208'.
[  102.887727][ T8737] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1210'.
[  102.891814][ T8733] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1208'.
[  102.897922][ T8733] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1208'.
[  102.902212][ T8733] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1208'.
[  102.995519][ T8747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.998349][ T8747] syzkaller0: entered promiscuous mode
[  103.000419][ T8747] syzkaller0: entered allmulticast mode
[  103.021654][ T8747] tipc: Resetting bearer <eth:syzkaller0>
[  103.026521][ T8746] tipc: Resetting bearer <eth:syzkaller0>
[  103.045673][ T8746] tipc: Disabling bearer <eth:syzkaller0>
[  103.706634][ T8814] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  103.709841][ T8814] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  103.713246][ T8814] tipc: Invalid UDP bearer configuration
[  103.713280][ T8814] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  104.218005][ T8852] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  104.987702][ T8884] netlink: 'syz.1.1273': attribute type 4 has an invalid length.
[  105.948963][ T8928] team0: No ports can be present during mode change
[  105.957858][ T8928] vlan0: entered promiscuous mode
[  105.970502][ T8928] team0: Port device vlan0 added
[  105.974899][ T8928] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  106.397898][ T8951] gtp0: entered promiscuous mode
[  107.899617][ T9022] __nla_validate_parse: 4 callbacks suppressed
[  107.899626][ T9022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1336'.
[  107.910734][ T9022] 8021q: VLANs not supported on sit0
[  107.949480][ T9027] netlink: 'syz.0.1338': attribute type 4 has an invalid length.
[  107.998593][ T9032] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.046445][ T9032] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.096322][ T9032] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.147636][ T9032] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.230023][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.248585][ T9045] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  108.251745][ T9045] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  108.269401][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.285633][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.297191][ T5873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.346958][ T9049] netlink: 'syz.0.1348': attribute type 9 has an invalid length.
[  108.349752][ T9049] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.1348'.
[  108.376148][ T9051] netlink: 'syz.0.1349': attribute type 5 has an invalid length.
[  108.595743][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'.
[  108.652988][ T9067] sctp: [Deprecated]: syz.1.1357 (pid 9067) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.652988][ T9067] Use struct sctp_sack_info instead
[  108.676208][ T9069] lo speed is unknown, defaulting to 1000
[  109.094650][ T9107] netlink: 'syz.1.1376': attribute type 11 has an invalid length.
[  109.145079][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'.
[  109.150119][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'.
[  109.266278][ T9123] syzkaller0: entered promiscuous mode
[  109.268369][ T9123] syzkaller0: entered allmulticast mode
[  109.376629][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'.
[  109.441076][ T9138] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1390'.
[  109.445573][ T9135] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1390'.
[  109.767071][ T9168] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1404'.
[  109.811018][ T9170] rdma_rxe: rxe_newlink: failed to add lo
[  109.837921][ T9169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.972622][ T9182] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1411'.
[  110.387315][ T9205] trusted_key: syz.2.1422 sent an empty control message without MSG_MORE.
[  110.610792][ T9224] syzkaller1: entered promiscuous mode
[  110.613500][ T9224] syzkaller1: entered allmulticast mode
[  110.952607][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  111.249562][ T9261] netlink: 'syz.1.1449': attribute type 30 has an invalid length.
[  111.334314][ T9267] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  111.539471][ T9275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.544780][ T9275] syzkaller0: entered promiscuous mode
[  111.547162][ T9275] syzkaller0: entered allmulticast mode
[  111.563809][ T9275] tipc: Resetting bearer <eth:syzkaller0>
[  111.572817][ T9274] tipc: Resetting bearer <eth:syzkaller0>
[  111.585674][ T9274] tipc: Disabling bearer <eth:syzkaller0>
[  112.745919][ T9338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.762035][ T9338] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  112.765121][ T9338] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  112.768828][ T9338] tipc: Resetting bearer <eth:syzkaller0>
[  112.779002][   T26] tipc: Resetting bearer <eth:syzkaller0>
[  112.791998][ T9338] tipc: Resetting bearer <eth:syzkaller0>
[  112.849303][ T9346] netlink: 'syz.0.1484': attribute type 11 has an invalid length.
[  112.899979][ T9351] tc_dump_action: action bad kind
[  113.020290][ T9364] __nla_validate_parse: 7 callbacks suppressed
[  113.020306][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'.
[  113.117652][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  113.781750][ T2301] tipc: Node number set to 3978367959
[  113.956747][ T9401] netlink: 'syz.2.1509': attribute type 1 has an invalid length.
[  113.994089][ T9406] netlink: 'syz.0.1511': attribute type 1 has an invalid length.
[  113.995855][ T9401] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.331422][ T9401] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.342632][ T9401] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  114.380855][ T9401] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  114.503267][ T9409] veth5: entered promiscuous mode
[  114.515676][ T9409] bond2: (slave veth5): Enslaving as an active interface with a down link
[  114.519570][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'.
[  114.562166][ T9423] netlink: 'syz.1.1517': attribute type 1 has an invalid length.
[  114.575298][ T9423] netlink: 'syz.1.1517': attribute type 1 has an invalid length.
[  114.840351][ T9448] netlink: 'syz.2.1528': attribute type 1 has an invalid length.
[  114.843780][ T9448] netlink: 'syz.2.1528': attribute type 3 has an invalid length.
[  114.846347][ T9448] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1528'.
[  114.882615][ T9444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1523'.
[  115.076733][ T9468] xt_socket: unknown flags 0xfc
[  115.588932][ T9491] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1546'.
[  115.621289][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'.
[  115.756480][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'.
[  115.803394][ T9513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.813597][ T9513] syzkaller0: entered promiscuous mode
[  115.815944][ T9513] syzkaller0: entered allmulticast mode
[  115.842051][ T9513] tipc: Resetting bearer <eth:syzkaller0>
[  115.854703][ T9512] tipc: Resetting bearer <eth:syzkaller0>
[  115.868069][ T9512] tipc: Disabling bearer <eth:syzkaller0>
[  116.799875][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'.
[  117.007364][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'.
[  117.056490][ T9596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1596'.
[  117.521247][ T9621] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  117.989819][ T9620] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.034534][ T9620] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.089148][ T9620] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.120966][ T9631] netlink: zone id is out of range
[  118.123173][ T9631] netlink: zone id is out of range
[  118.125656][ T9631] netlink: zone id is out of range
[  118.127682][ T9631] netlink: zone id is out of range
[  118.129476][ T9631] netlink: zone id is out of range
[  118.131271][ T9631] netlink: zone id is out of range
[  118.133624][ T9631] netlink: zone id is out of range
[  118.136278][ T9631] netlink: zone id is out of range
[  118.139492][ T9631] netlink: zone id is out of range
[  118.150289][ T9620] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.205674][ T9633] netlink: 'syz.0.1612': attribute type 5 has an invalid length.
[  118.222859][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.236708][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.248501][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.261904][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.332750][ T9640] delete_channel: no stack
[  118.441418][ T9653] __nla_validate_parse: 1 callbacks suppressed
[  118.441427][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'.
[  118.456988][ T9655] netlink: 'syz.0.1623': attribute type 13 has an invalid length.
[  118.487347][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.491421][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.497693][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.500701][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.543019][ T9665] netlink: 'syz.0.1628': attribute type 1 has an invalid length.
[  118.569234][ T9665] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  118.576709][ T9665] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  118.646051][ T9665] gretap1: entered promiscuous mode
[  118.654888][ T9665] bond5: (slave gretap1): making interface the new active one
[  118.658507][ T9665] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  118.786466][ T9684] lo speed is unknown, defaulting to 1000
[  118.972369][ T9691] team0 (unregistering): Port device team_slave_0 removed
[  118.980860][ T9691] team0 (unregistering): Port device team_slave_1 removed
[  119.085619][ T9700] netlink: 'syz.0.1642': attribute type 21 has an invalid length.
[  119.089339][ T9700] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1642'.
[  119.099146][ T9700] netlink: 'syz.0.1642': attribute type 5 has an invalid length.
[  119.103056][ T9700] netlink: 'syz.0.1642': attribute type 6 has an invalid length.
[  119.107798][ T9700] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1642'.
[  119.571702][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'.
[  119.629236][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'.
[  120.100503][ T9761] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  120.168189][ T9762] netlink: 'syz.0.1666': attribute type 4 has an invalid length.
[  120.171417][ T9762] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1666'.
[  120.716027][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'.
[  120.719842][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'.
[  120.725723][ T9772] netlink: 'syz.1.1671': attribute type 12 has an invalid length.
[  120.765329][ T9774] syz_tun: entered allmulticast mode
[  120.769222][ T9773] syz_tun: left allmulticast mode
[  121.047614][ T9791] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  121.289384][ T9810] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  121.298035][ T9810] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  121.301650][ T9810] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  121.642464][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'.
[  121.645952][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'.
[  122.191609][ T9836] tipc: Resetting bearer <eth:syzkaller0>
[  122.313217][ T9850] macsec0: entered promiscuous mode
[  122.315582][ T9850] macsec0: entered allmulticast mode
[  122.317690][ T9850] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  122.465078][ T9858] lo speed is unknown, defaulting to 1000
[  123.342819][   T33] audit: type=1804 audit(1755300943.132:2): pid=9927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1724" name="/newroot/514/cgroup.controllers" dev="tmpfs" ino=2600 res=1 errno=0
[  123.360781][   T33] audit: type=1800 audit(1755300943.132:3): pid=9927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1724" name="cgroup.controllers" dev="tmpfs" ino=2600 res=0 errno=0
[  123.400201][ T9929] net_ratelimit: 5 callbacks suppressed
[  123.400211][ T9929] openvswitch: netlink: IPv4 tunnel dst address is zero
[  123.429017][ T9931] lo speed is unknown, defaulting to 1000
[  123.611959][ T9944] __nla_validate_parse: 46 callbacks suppressed
[  123.611973][ T9944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1732'.
[  123.749089][ T9958] netlink: 'syz.0.1737': attribute type 13 has an invalid length.
[  123.756568][ T9958] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.1737'.
[  123.845192][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'.
[  123.869972][ T9967] netlink: 'syz.0.1742': attribute type 1 has an invalid length.
[  124.063668][ T9981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1749'.
[  124.406946][T10011] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1764'.
[  124.705337][T10039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.710191][T10039] syzkaller0: entered promiscuous mode
[  124.715302][T10039] syzkaller0: entered allmulticast mode
[  124.731997][T10039] tipc: Resetting bearer <eth:syzkaller0>
[  124.736514][T10038] tipc: Resetting bearer <eth:syzkaller0>
[  124.747809][T10038] tipc: Disabling bearer <eth:syzkaller0>
[  125.158314][T10083] netlink: 'syz.1.1798': attribute type 11 has an invalid length.
[  125.285292][T10099] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1807'.
[  125.322470][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1806'.
[  125.420610][T10113] lo speed is unknown, defaulting to 1000
[  125.687528][T10116] netlink: 'syz.2.1813': attribute type 13 has an invalid length.
[  125.704548][T10116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.876231][T10136] netlink: 'syz.0.1822': attribute type 21 has an invalid length.
[  125.905543][T10138] netlink: 'syz.1.1823': attribute type 1 has an invalid length.
[  125.909115][T10138] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1823'.
[  125.943521][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1826'.
[  125.995283][T10144] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  126.006942][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 3] type 2 family 0 port 20000 - 0
[  126.015180][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 3] type 2 family 0 port 20000 - 0
[  126.019124][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 3] type 2 family 0 port 20000 - 0
[  126.022812][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 3] type 2 family 0 port 20000 - 0
[  126.092086][T10157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.094625][T10157] IPv6: NLM_F_CREATE should be set when creating new route
[  126.097021][T10157] IPv6: NLM_F_CREATE should be set when creating new route
[  126.278320][T10177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.286349][T10170] tipc: Resetting bearer <eth:syzkaller0>
[  126.304709][T10170] tipc: Disabling bearer <eth:syzkaller0>
[  126.497148][ T5844] Bluetooth: hci2: link tx timeout
[  126.500090][ T5844] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  126.505720][ T5844] Bluetooth: hci2: link tx timeout
[  126.508114][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.511312][ T5844] Bluetooth: hci2: link tx timeout
[  126.514106][ T5844] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  126.517392][ T5844] Bluetooth: hci2: link tx timeout
[  126.519630][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.554855][T10195] netlink: 'syz.1.1849': attribute type 1 has an invalid length.
[  126.557866][T10195] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1849'.
[  126.561370][T10195] netlink: 'syz.1.1849': attribute type 1 has an invalid length.
[  126.930913][T10213] netlink: 'syz.0.1854': attribute type 1 has an invalid length.
[  127.071205][T10221] Bluetooth: MGMT ver 1.23
[  127.790155][T10242] sctp: [Deprecated]: syz.1.1869 (pid 10242) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.790155][T10242] Use struct sctp_sack_info instead
[  128.495170][T10300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  128.563962][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  128.912332][T10328] __nla_validate_parse: 6 callbacks suppressed
[  128.912342][T10328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1909'.
[  128.919909][T10328] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1909'.
[  129.298693][T10347] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1917'.
[  129.302828][T10347] batadv_slave_1: entered promiscuous mode
[  129.633002][T10360] delete_channel: no stack
[  129.890417][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'.
[  129.906567][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'.
[  129.981084][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1934'.
[  130.155863][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1938'.
[  130.404126][T10417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1950'.
[  130.631607][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  130.674926][T10446] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1964'.
[  130.681406][T10446] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1964'.
[  130.848654][T10462] netlink: 'syz.1.1971': attribute type 1 has an invalid length.
[  130.979080][T10462] bond0: (slave bond_slave_1): Releasing backup interface
[  131.041135][T10476] sctp: [Deprecated]: syz.0.1977 (pid 10476) Use of int in max_burst socket option.
[  131.041135][T10476] Use struct sctp_assoc_value instead
[  131.378595][T10501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  131.748094][T10523] sctp: [Deprecated]: syz.2.1992 (pid 10523) Use of int in max_burst socket option deprecated.
[  131.748094][T10523] Use struct sctp_assoc_value instead
[  132.407799][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.696782][T10567] netlink: 'syz.1.2009': attribute type 10 has an invalid length.
[  132.705381][T10567] veth0_vlan: entered allmulticast mode
[  132.708506][T10567] bridge0: port 3(veth0_vlan) entered blocking state
[  132.797852][T10567] bridge0: port 3(veth0_vlan) entered disabled state
[  132.807520][T10567] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  132.999341][T10586] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  133.130241][T10596] netlink: 'syz.2.2023': attribute type 2 has an invalid length.
[  133.922560][T10681] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  134.014747][T10687] __nla_validate_parse: 14 callbacks suppressed
[  134.014764][T10687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2064'.
[  134.024602][T10687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2064'.
[  134.070924][T10693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2067'.
[  134.076611][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2067'.
[  134.080539][T10693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2067'.
[  134.447741][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'.
[  134.567378][T10737] netlink: 'syz.0.2088': attribute type 1 has an invalid length.
[  134.815005][T10753] netlink: 'syz.0.2095': attribute type 2 has an invalid length.
[  134.818060][T10753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2095'.
[  135.570273][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'.
[  135.726757][T10794] TCP: TCP_TX_DELAY enabled
[  135.806644][T10804] netdevsim netdevsim0: Direct firmware load for /. failed with error -2
[  135.810905][T10804] netdevsim netdevsim0: Falling back to sysfs fallback for: /.
[  135.945589][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'.
[  136.006063][T10813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2119'.
[  136.912714][T10848] netlink: 'syz.1.2136': attribute type 2 has an invalid length.
[  136.920237][T10848] : entered promiscuous mode
[  137.020927][T10856] netlink: 'syz.1.2140': attribute type 11 has an invalid length.
[  137.024060][T10856] netlink: 'syz.1.2140': attribute type 11 has an invalid length.
[  137.247511][T10868] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.251718][T10868] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.368353][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.503019][   T13] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0
[  137.510909][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.518886][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.532639][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.958337][T10922] vlan3: entered allmulticast mode
[  137.960413][T10922] bond0: entered allmulticast mode
[  137.965414][T10922] : entered allmulticast mode
[  138.095800][T10935] pim6reg1: entered promiscuous mode
[  138.099788][T10935] pim6reg1: entered allmulticast mode
[  138.123927][T10939] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  138.553280][T10959] block nbd1: server does not support multiple connections per device.
[  138.559762][T10959] block nbd1: shutting down sockets
[  138.980050][T11004] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  138.998298][T11006] syzkaller1: entered promiscuous mode
[  139.000784][T11006] syzkaller1: entered allmulticast mode
[  139.146834][T11015] openvswitch: netlink: Message has 16 unknown bytes.
[  139.201982][T11020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.210927][T11021] __nla_validate_parse: 6 callbacks suppressed
[  139.210936][T11021] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2214'.
[  139.655700][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2229'.
[  139.728650][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2232'.
[  139.896139][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'.
[  139.908095][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'.
[  139.944355][T11080] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2243'.
[  139.998021][T11086] netlink: 'syz.2.2246': attribute type 46 has an invalid length.
[  140.376472][T11118] sctp: [Deprecated]: syz.1.2261 (pid 11118) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.376472][T11118] Use struct sctp_sack_info instead
[  140.608170][T11137] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  141.441173][T11185] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2290'.
[  141.818727][T11216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2303'.
[  141.958015][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'.
[  142.139534][T11247] netlink: 'syz.0.2313': attribute type 6 has an invalid length.
[  142.452639][T11260] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2321'.
[  142.699220][T11277] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  142.813941][T11282] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  143.066240][T11311] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  143.069760][T11309] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  143.217221][T11321] IPVS: Scheduler module ip_vs_sip not found
[  143.580930][T11343] netlink: 'syz.1.2357': attribute type 5 has an invalid length.
[  143.609112][T11343] lo speed is unknown, defaulting to 1000
[  143.855732][T11354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.867710][T11354] syzkaller0: entered promiscuous mode
[  143.869651][T11354] syzkaller0: entered allmulticast mode
[  143.890113][T11354] tipc: Resetting bearer <eth:syzkaller0>
[  143.903094][T11353] tipc: Resetting bearer <eth:syzkaller0>
[  143.913773][T11353] tipc: Disabling bearer <eth:syzkaller0>
[  145.255507][T11476] tipc: Resetting bearer <eth:team0>
[  145.261386][T11474] __nla_validate_parse: 10 callbacks suppressed
[  145.261394][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'.
[  145.268249][T11476] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  145.281037][T11474] pim6reg: entered allmulticast mode
[  145.287320][T11474] pim6reg: left allmulticast mode
[  145.516598][T11499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.546214][T11503] sch_tbf: burst 240 is lower than device lo mtu (1550) !
[  145.679146][T11518] delete_channel: no stack
[  145.843425][T11539] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2415'.
[  145.847090][T11539] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  145.850345][T11539] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  145.955523][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2419'.
[  146.006213][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2421'.
[  146.063775][T11558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2424'.
[  146.070687][T11558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2424'.
[  146.281088][T11587] netlink: 'syz.1.2439': attribute type 1 has an invalid length.
[  146.346357][T11595] IPv6: NLM_F_CREATE should be specified when creating new route
[  146.694887][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2460'.
[  146.923959][T11647] syzkaller1: entered promiscuous mode
[  146.929234][T11647] syzkaller1: entered allmulticast mode
[  147.251411][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'.
[  147.393714][T11682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2483'.
[  147.600967][T11699] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2491'.
[  147.703638][T11706] netlink: 'syz.1.2494': attribute type 8 has an invalid length.
[  147.943581][T11728] sctp: [Deprecated]: syz.0.2501 (pid 11728) Use of int in max_burst socket option.
[  147.943581][T11728] Use struct sctp_assoc_value instead
[  148.212581][T11738] nbd: nbd0 already in use
[  148.215474][T11738] block nbd0: NBD_DISCONNECT
[  148.217192][T11738] block nbd0: Send disconnect failed -32
[  148.319825][T11748] netlink: 'syz.0.2511': attribute type 27 has an invalid length.
[  148.616139][T11786] syz.0.2528 uses old SIOCAX25GETINFO
[  148.987869][T11820] netlink: 'syz.1.2544': attribute type 1 has an invalid length.
[  149.938131][T11859] netlink: 'syz.1.2561': attribute type 9 has an invalid length.
[  150.293944][T11871] netlink: 'syz.1.2566': attribute type 83 has an invalid length.
[  150.652815][T11906] __nla_validate_parse: 7 callbacks suppressed
[  150.652824][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2583'.
[  151.494957][T11933] xt_socket: unknown flags 0xd0
[  151.635058][T11949] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001
[  151.656920][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2600'.
[  151.850328][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2603'.
[  152.492505][T11978] netlink: 'syz.1.2609': attribute type 10 has an invalid length.
[  152.495967][T11978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2609'.
[  152.500097][T11978] dummy0: entered promiscuous mode
[  152.512387][T11978] bridge0: port 3(dummy0) entered blocking state
[  152.518364][T11978] bridge0: port 3(dummy0) entered disabled state
[  152.524778][T11978] dummy0: entered allmulticast mode
[  153.275754][T12016] syzkaller1: entered promiscuous mode
[  153.278017][T12016] syzkaller1: entered allmulticast mode
[  153.339942][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2629'.
[  153.349875][T12020] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.389510][T12025] sctp: [Deprecated]: syz.0.2631 (pid 12025) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.389510][T12025] Use struct sctp_sack_info instead
[  153.454854][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'.
[  153.932960][T12073] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2653'.
[  153.988029][T12078] netlink: 'syz.2.2655': attribute type 10 has an invalid length.
[  154.000275][T12078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.004888][T12078] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  154.012831][T12078] netlink: 'syz.2.2655': attribute type 10 has an invalid length.
[  154.016302][T12078] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2655'.
[  154.020135][T12078] batadv0: entered promiscuous mode
[  154.024451][T12078] batadv0: entered allmulticast mode
[  154.028137][T12078] bond0: (slave batadv0): Releasing backup interface
[  154.034491][T12078] bridge0: port 3(batadv0) entered blocking state
[  154.037514][T12078] bridge0: port 3(batadv0) entered disabled state
[  154.088611][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'.
[  154.092813][T12080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2656'.
[  154.103776][T12080] bridge0: port 4(vlan3) entered blocking state
[  154.106505][T12080] bridge0: port 4(vlan3) entered disabled state
[  154.109255][T12080] vlan3: entered allmulticast mode
[  154.113764][T12080] vlan3: left allmulticast mode
[  154.451828][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  154.456007][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  154.690081][T12127] bridge4: entered promiscuous mode
[  154.697421][T12127] bridge4: entered allmulticast mode
[  154.713520][T12127] team0: Port device bridge4 added
[  155.837081][T12180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.841367][T12180] syzkaller0: entered promiscuous mode
[  155.848070][T12180] syzkaller0: entered allmulticast mode
[  155.877465][T12180] tipc: Resetting bearer <eth:syzkaller0>
[  155.885796][T12178] tipc: Resetting bearer <eth:syzkaller0>
[  155.889354][T12187] netlink: 'syz.2.2706': attribute type 58 has an invalid length.
[  155.893090][T12187] __nla_validate_parse: 1 callbacks suppressed
[  155.893164][T12187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2706'.
[  155.920828][T12178] tipc: Disabling bearer <eth:syzkaller0>
[  156.043373][T12196] IPVS: Error connecting to the multicast addr
[  156.054368][T12196] netlink: 'syz.1.2709': attribute type 16 has an invalid length.
[  156.057478][T12196] netlink: 'syz.1.2709': attribute type 17 has an invalid length.
[  157.149053][T12249] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2733'.
[  157.328299][T12263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.331101][T12265] netlink: 'syz.0.2738': attribute type 1 has an invalid length.
[  157.333926][T12265] netlink: 'syz.0.2738': attribute type 2 has an invalid length.
[  157.346644][T12263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.364720][T12265] netlink: 'syz.0.2738': attribute type 1 has an invalid length.
[  157.368013][T12265] netlink: 'syz.0.2738': attribute type 2 has an invalid length.
[  157.407669][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2741'.
[  158.524858][T12299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.528264][T12299] syzkaller0: entered promiscuous mode
[  158.530680][T12299] syzkaller0: entered allmulticast mode
[  158.550354][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'.
[  158.550963][T12299] tipc: Resetting bearer <eth:syzkaller0>
[  158.560771][T12298] tipc: Resetting bearer <eth:syzkaller0>
[  158.572614][T12298] tipc: Disabling bearer <eth:syzkaller0>
[  158.810786][T12313] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.813990][T12313] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.892061][T12313] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  158.898865][T12319] batman_adv: batadv0: Adding interface: dummy0
[  158.901420][T12319] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.913254][T12319] batman_adv: batadv0: Interface activated: dummy0
[  159.039755][T12325] svc: failed to register nfsdv3 RPC service (errno 111).
[  159.043287][T12325] svc: failed to register nfsaclv3 RPC service (errno 111).
[  159.092967][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'.
[  159.096082][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'.
[  159.099752][T12343] netlink: 'syz.0.2773': attribute type 12 has an invalid length.
[  159.102888][T12343] netlink: 'syz.0.2773': attribute type 11 has an invalid length.
[  159.587828][T12389] dummy0: left allmulticast mode
[  159.593987][T12389] bridge0: port 3(dummy0) entered disabled state
[  159.606277][T12389] bridge_slave_0: left allmulticast mode
[  159.608749][T12389] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.625912][T12389] bridge_slave_1: left allmulticast mode
[  159.628443][T12389] bridge_slave_1: left promiscuous mode
[  159.630961][T12389] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.643079][T12389] bond0: (slave 77): Releasing backup interface
[  159.649364][T12389] : left allmulticast mode
[  159.653389][T12389] team0: Port device team_slave_0 removed
[  159.656348][T12389] team0: Port device team_slave_1 removed
[  159.658532][T12389] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.663096][T12389] vlan2: left promiscuous mode
[  159.664866][T12389] bridge0: left promiscuous mode
[  159.666918][T12389] bridge1: port 1(vlan2) entered disabled state
[  159.674225][T12389] bond1: (slave gretap1): Releasing active interface
[  159.678032][T12382] netlink: 'syz.1.2791': attribute type 10 has an invalid length.
[  159.757182][T12389] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.760646][T12389] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.930291][T12414] netlink: 'syz.2.2799': attribute type 1 has an invalid length.
[  160.041005][T12418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.044961][T12418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.048379][T12418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45255 - 0
[  160.052914][T12418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 51015 - 0
[  160.056992][T12418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0
[  160.127578][T12418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.131106][T12418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.135683][T12418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45255 - 0
[  160.139437][T12418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 51015 - 0
[  160.143354][T12418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0
[  160.183607][T12418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.187228][T12418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.190843][T12418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45255 - 0
[  160.194653][T12418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 51015 - 0
[  160.198080][T12418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0
[  160.266565][T12418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.269985][T12418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.273962][T12418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 45255 - 0
[  160.277420][T12418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 51015 - 0
[  160.281192][T12418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0
[  160.339972][T10148] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.344110][T10148] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  160.347794][T10148] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 51015 - 0
[  160.351355][T10148] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 45255 - 0
[  160.355306][T10148] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 6081 - 0
[  160.367781][T10148] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.372738][T10148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  160.375577][T10148] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 51015 - 0
[  160.378370][T10148] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 45255 - 0
[  160.381142][T10148] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 6081 - 0
[  160.394412][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.403895][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  160.408037][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 51015 - 0
[  160.412355][   T13] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 45255 - 0
[  160.415710][   T13] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 6081 - 0
[  160.426314][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.429731][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  160.433582][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 51015 - 0
[  160.437719][   T13] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 45255 - 0
[  160.441021][   T13] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 6081 - 0
[  160.447748][T12425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.450684][T12425] syzkaller0: entered promiscuous mode
[  160.452665][T12425] syzkaller0: entered allmulticast mode
[  160.460708][T12425] netem: change failed
[  160.465881][T12425] tipc: Resetting bearer <eth:syzkaller0>
[  160.885654][T12484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2837'.
[  161.014962][T12500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2844'.
[  161.527709][T12538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2862'.
[  161.745128][T12556] macvlan3: entered allmulticast mode
[  161.746995][T12556] veth1_vlan: entered allmulticast mode
[  161.749855][T12556] veth1_vlan: left allmulticast mode
[  161.796833][T12558] netlink: 'syz.0.2872': attribute type 9 has an invalid length.
[  161.799345][T12558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2872'.
[  161.911803][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  163.113031][T12615] bond0: option xmit_hash_policy: invalid value (8)
[  163.207909][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'.
[  163.213859][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2902'.
[  163.254549][T12627] netlink: 'syz.0.2903': attribute type 1 has an invalid length.
[  163.358709][T12641] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2910'.
[  163.365099][T12639] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2909'.
[  163.460308][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'.
[  163.468814][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2917'.
[  163.490384][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'.
[  163.493582][T10148] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.497968][T10148] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.504776][T10148] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.510587][T12661] vti0: entered promiscuous mode
[  163.531969][T10148] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.592444][T12671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.609367][T12671] netem: change failed
[  163.709348][T12689] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  163.983586][T12718] netlink: zone id is out of range
[  164.147285][T10148] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  164.167595][T12739] GUP no longer grows the stack in syz.0.2957 (12739): 200000006000-20000000a000 (200000005000)
[  164.172645][T12739] CPU: 0 UID: 0 PID: 12739 Comm: syz.0.2957 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0 PREEMPT(full) 
[  164.172662][T12739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.172669][T12739] Call Trace:
[  164.172674][T12739]  <TASK>
[  164.172681][T12739]  dump_stack_lvl+0x189/0x250
[  164.172703][T12739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.172717][T12739]  ? __pfx__printk+0x10/0x10
[  164.172731][T12739]  ? find_vma+0xe7/0x160
[  164.172747][T12739]  ? mas_next_slot+0xc27/0xcf0
[  164.172772][T12739]  __get_user_pages+0x24d0/0x2ce0
[  164.172785][T12739]  ? __lock_acquire+0xab9/0xd20
[  164.172821][T12739]  ? __gup_longterm_locked+0xc68/0x1660
[  164.172842][T12739]  __gup_longterm_locked+0xde9/0x1660
[  164.172858][T12739]  ? try_grab_folio_fast+0x1be/0x4f0
[  164.172881][T12739]  ? gup_fast_fallback+0x195f/0x2010
[  164.172899][T12739]  gup_fast_fallback+0x1e6a/0x2010
[  164.172938][T12739]  ? __pfx_gup_fast_fallback+0x10/0x10
[  164.172951][T12739]  ? __mutex_lock+0x335/0x1360
[  164.172967][T12739]  ? psi_group_change+0xab8/0x1050
[  164.172977][T12739]  ? rcu_read_lock_sched_held+0x89/0x100
[  164.172993][T12739]  ? is_valid_gup_args+0x11f/0x200
[  164.173010][T12739]  ? get_user_pages_fast+0x4d/0xb0
[  164.173028][T12739]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  164.173049][T12739]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  164.173066][T12739]  ? wait_for_space+0x24d/0x2d0
[  164.173085][T12739]  iov_iter_get_pages2+0x5e/0xa0
[  164.173109][T12739]  __se_sys_vmsplice+0x548/0x10d0
[  164.173134][T12739]  ? futex_private_hash_put+0x4b/0x280
[  164.173153][T12739]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  164.173175][T12739]  ? __pfx_futex_wake+0x10/0x10
[  164.173198][T12739]  ? __lock_acquire+0xab9/0xd20
[  164.173241][T12739]  ? do_pipe2+0xf7/0x170
[  164.173261][T12739]  ? rcu_is_watching+0x15/0xb0
[  164.173277][T12739]  ? do_syscall_64+0xbe/0x3b0
[  164.173297][T12739]  do_syscall_64+0xfa/0x3b0
[  164.173312][T12739]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.173326][T12739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.173338][T12739]  ? exc_page_fault+0x9f/0xf0
[  164.173354][T12739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.173365][T12739] RIP: 0033:0x7f4845b8ebe9
[  164.173376][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.173385][T12739] RSP: 002b:00007f4846a28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  164.173399][T12739] RAX: ffffffffffffffda RBX: 00007f4845db5fa0 RCX: 00007f4845b8ebe9
[  164.173409][T12739] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  164.173417][T12739] RBP: 00007f4845c11e19 R08: 0000000000000000 R09: 0000000000000000
[  164.173424][T12739] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  164.173431][T12739] R13: 00007f4845db6038 R14: 00007f4845db5fa0 R15: 00007ffc57cf3528
[  164.173451][T12739]  </TASK>
[  164.344437][T12742] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2613249073/2613249075
[  164.348564][T12742] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2613249073/2613249075
[  164.772868][T12780] netlink: 'syz.2.2977': attribute type 4 has an invalid length.
[  164.950747][T12801] netlink: 'syz.2.2987': attribute type 1 has an invalid length.
[  164.955084][T12801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.201793][T12834] netlink: 'syz.1.3004': attribute type 17 has an invalid length.
[  165.214516][T12834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.220619][   T24] lo speed is unknown, defaulting to 1000
[  165.229707][   T24] syz0: Port: 1 Link ACTIVE
[  165.232736][   T24] lo speed is unknown, defaulting to 1000
[  165.444445][T12857] lo speed is unknown, defaulting to 1000
[  165.686766][T12873] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  165.787711][T12880] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.964306][T12888] lo speed is unknown, defaulting to 1000
[  166.802586][T12917] __nla_validate_parse: 9 callbacks suppressed
[  166.802600][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3036'.
[  167.402040][T12941] netlink: 'syz.1.3045': attribute type 1 has an invalid length.
[  167.405651][T12941] netlink: 'syz.1.3045': attribute type 1 has an invalid length.
[  167.409073][T12941] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3045'.
[  167.709171][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'.
[  167.757028][T12959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.759882][T12959] syzkaller0: entered promiscuous mode
[  167.763867][T12959] syzkaller0: entered allmulticast mode
[  167.776242][T12959] tipc: Resetting bearer <eth:syzkaller0>
[  167.780033][T12956] tipc: Resetting bearer <eth:syzkaller0>
[  167.789114][T12956] tipc: Disabling bearer <eth:syzkaller0>
[  167.903794][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'.
[  168.188892][T13001] netlink: 'syz.2.3075': attribute type 4 has an invalid length.
[  168.212195][T13001] netlink: 'syz.2.3075': attribute type 4 has an invalid length.
[  168.350594][T13015] netlink: 'syz.2.3081': attribute type 15 has an invalid length.
[  168.423408][T13021] openvswitch: netlink: Multiple metadata blocks provided
[  168.625245][T13039] netlink: 'syz.1.3092': attribute type 13 has an invalid length.
[  168.696135][T13039] tipc: Resetting bearer <eth:syzkaller0>
[  168.701000][T10876] lo speed is unknown, defaulting to 1000
[  168.703005][T10876] syz0: Port: 1 Link DOWN
[  168.704397][T10876] lo speed is unknown, defaulting to 1000
[  168.919881][T13046] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3095'.
[  169.015509][T13052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3098'.
[  169.079404][T13056] tun0: tun_chr_ioctl cmd 1074025675
[  169.082697][T13056] tun0: persist enabled
[  169.084933][T13056] tun0: tun_chr_ioctl cmd 1074025675
[  169.087128][T13056] tun0: persist disabled
[  169.439201][T13071] netlink: 'syz.0.3107': attribute type 10 has an invalid length.
[  169.846332][T13114] nbd: couldn't find device at index 536870912
[  169.850555][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3127'.
[  170.087702][T13133] syzkaller1: entered promiscuous mode
[  170.089804][T13133] syzkaller1: entered allmulticast mode
[  170.539552][T13146] netlink: 'syz.1.3143': attribute type 2 has an invalid length.
[  170.730888][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3148'.
[  170.744292][T13159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3149'.
[  170.941804][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'.
[  170.990969][T13173] netlink: 'syz.0.3154': attribute type 3 has an invalid length.
[  171.527267][T13186] netlink: 'syz.0.3160': attribute type 3 has an invalid length.
[  171.645330][T13191] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.648542][T13192] netlink: 'syz.1.3162': attribute type 6 has an invalid length.
[  172.557986][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3185'.
[  172.610325][T13251] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  172.619868][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3191'.
[  172.666769][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3195'.
[  172.729443][T13258] syz.2.3194: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  172.739774][T13258] CPU: 0 UID: 0 PID: 13258 Comm: syz.2.3194 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0 PREEMPT(full) 
[  172.739786][T13258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.739791][T13258] Call Trace:
[  172.739794][T13258]  <TASK>
[  172.739798][T13258]  dump_stack_lvl+0x189/0x250
[  172.739812][T13258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.739821][T13258]  ? __pfx__printk+0x10/0x10
[  172.739832][T13258]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  172.739842][T13258]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  172.739859][T13258]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  172.739886][T13258]  warn_alloc+0x214/0x310
[  172.739898][T13258]  ? stack_depot_save_flags+0x40/0x860
[  172.739910][T13258]  ? __pfx_warn_alloc+0x10/0x10
[  172.739922][T13258]  ? kasan_save_track+0x4f/0x80
[  172.739931][T13258]  ? xskq_create+0x56/0x170
[  172.739939][T13258]  ? xsk_init_queue+0xb0/0x110
[  172.739946][T13258]  ? xsk_setsockopt+0x4dc/0x8d0
[  172.739953][T13258]  ? do_sock_setsockopt+0x17c/0x1b0
[  172.739963][T13258]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  172.739968][T13258]  ? do_syscall_64+0xfa/0x3b0
[  172.739977][T13258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.739987][T13258]  __vmalloc_node_range_noprof+0x125/0x12f0
[  172.740009][T13258]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  172.740021][T13258]  ? __kasan_kmalloc+0x93/0xb0
[  172.740031][T13258]  vmalloc_user_noprof+0xad/0xf0
[  172.740040][T13258]  ? xskq_create+0xbf/0x170
[  172.740050][T13258]  xskq_create+0xbf/0x170
[  172.740059][T13258]  xsk_init_queue+0xb0/0x110
[  172.740069][T13258]  xsk_setsockopt+0x4dc/0x8d0
[  172.740077][T13258]  ? __pfx_xsk_setsockopt+0x10/0x10
[  172.740085][T13258]  ? __pfx_aa_sk_perm+0x10/0x10
[  172.740096][T13258]  ? aa_sock_opt_perm+0xff/0x1b0
[  172.740103][T13258]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  172.740111][T13258]  ? __pfx_xsk_setsockopt+0x10/0x10
[  172.740119][T13258]  do_sock_setsockopt+0x17c/0x1b0
[  172.740131][T13258]  __x64_sys_setsockopt+0x13f/0x1b0
[  172.740140][T13258]  do_syscall_64+0xfa/0x3b0
[  172.740148][T13258]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.740157][T13258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.740163][T13258]  ? exc_page_fault+0x9f/0xf0
[  172.740172][T13258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.740178][T13258] RIP: 0033:0x7fdb6a38ebe9
[  172.740186][T13258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.740192][T13258] RSP: 002b:00007fdb6b1a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  172.740200][T13258] RAX: ffffffffffffffda RBX: 00007fdb6a5b5fa0 RCX: 00007fdb6a38ebe9
[  172.740205][T13258] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  172.740210][T13258] RBP: 00007fdb6a411e19 R08: 0000000000000004 R09: 0000000000000000
[  172.740214][T13258] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.740218][T13258] R13: 00007fdb6a5b6038 R14: 00007fdb6a5b5fa0 R15: 00007ffe4fb80f28
[  172.740229][T13258]  </TASK>
[  172.740254][T13258] Mem-Info:
[  172.755112][T13268] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  172.758908][T13258] active_anon:5348 inactive_anon:0 isolated_anon:0
[  172.758908][T13258]  active_file:1357 inactive_file:38253 isolated_file:0
[  172.758908][T13258]  unevictable:1768 dirty:280 writeback:0
[  172.758908][T13258]  slab_reclaimable:9772 slab_unreclaimable:83617
[  172.758908][T13258]  mapped:18101 shmem:2419 pagetables:1235
[  172.758908][T13258]  sec_pagetables:0 bounce:0
[  172.758908][T13258]  kernel_misc_reclaimable:0
[  172.758908][T13258]  free:259885 free_pcp:25515 free_cma:0
[  172.758948][T13258] Node 0 active_anon:15300kB inactive_anon:0kB active_file:4392kB inactive_file:132596kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36888kB dirty:984kB writeback:0kB shmem:4984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7424kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  172.758967][T13258] Node 1 active_anon:6092kB inactive_anon:0kB active_file:1036kB inactive_file:20416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35516kB dirty:136kB writeback:0kB shmem:4692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4348kB pagetables:2180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  172.758986][T13258] Node 0 DMA free:10560kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:700kB local_pcp:360kB free_cma:0kB
[  172.759008][T13258] lowmem_reserve[]: 0 811 811 811 811
[  172.759025][T13258] Node 0 DMA32 free:183288kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15300kB inactive_anon:0kB active_file:4392kB inactive_file:132596kB unevictable:3536kB writepending:984kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:51868kB local_pcp:35516kB free_cma:0kB
[  172.876621][T13273] netlink: 'syz.0.3198': attribute type 16 has an invalid length.
[  172.886932][T13258] lowmem_reserve[]: 0 0 0 0 0
[  172.886972][T13258] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  172.887015][T13258] lowmem_reserve[]: 0 0 854 854 854
[  172.887044][T13258] Node 1 Normal free:386996kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6364kB inactive_anon:0kB active_file:1036kB inactive_file:20416kB unevictable:3536kB writepending:136kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49360kB local_pcp:21716kB free_cma:0kB
[  172.887087][T13258] lowmem_reserve[]: 0 0 0 0 0
[  172.887114][T13258] Node 0 DMA: 7*4kB (UM) 5*8kB (U) 4*16kB (U) 10*32kB (UM) 6*64kB (UM) 6*128kB (U) 5*256kB (UM) 3*512kB (UM) 
[  172.907226][T13273] netlink: 'syz.0.3198': attribute type 17 has an invalid length.
[  172.911581][T13258] 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 10564kB
[  172.963993][T13258] Node 0 DMA32: 582*4kB (UM) 1252*8kB (UME) 614*16kB (UME) 695*32kB (UME) 304*64kB (UME) 145*128kB (UME) 104*256kB (UME) 39*512kB (UM) 41*1024kB (U) 6*2048kB (UME) 0*4096kB = 183288kB
[  172.970754][T13258] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (UM) = 458492kB
[  172.976694][T13258] Node 1 Normal: 161*4kB (UME) 194*8kB (UME) 367*16kB (UE) 4*32kB (UE) 189*64kB (UME) 193*128kB (U) 199*256kB (UM) 200*512kB (UM) 174*1024kB (UME) 5*2048kB (UM) 0*4096kB = 386756kB
[  172.982620][T13258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  172.985972][T13258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  172.989183][T13258] 42029 total pagecache pages
[  172.990697][T13258] 0 pages in swap cache
[  172.998791][T13273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.009089][T13273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.021609][T13258] Free swap  = 124996kB
[  173.023229][T13258] Total swap = 124996kB
[  173.024666][T13258] 786301 pages RAM
[  173.025966][T13258] 0 pages HighMem/MovableOnly
[  173.027759][T13258] 241330 pages reserved
[  173.029332][T13258] 0 pages cma reserved
[  173.163761][T13273] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  173.178256][T10148] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.181170][T10148] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  173.185421][T10148] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 51015 - 0
[  173.188162][T10148] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 45255 - 0
[  173.191820][T10148] netdevsim netdevsim0 eth0: unset [1, 3] type 2 family 0 port 6081 - 0
[  173.194930][T10148] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.197820][T10148] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  173.200791][T10148] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 51015 - 0
[  173.206051][T10148] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 45255 - 0
[  173.209792][T10148] netdevsim netdevsim0 eth1: unset [1, 3] type 2 family 0 port 6081 - 0
[  173.212860][T10148] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.215610][T10148] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  173.218510][T10148] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 51015 - 0
[  173.222986][T10148] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 45255 - 0
[  173.226392][T10148] netdevsim netdevsim0 eth2: unset [1, 3] type 2 family 0 port 6081 - 0
[  173.229706][T10148] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.233342][T10148] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  173.236827][T10148] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 51015 - 0
[  173.240348][T10148] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 45255 - 0
[  173.245128][T10148] netdevsim netdevsim0 eth3: unset [1, 3] type 2 family 0 port 6081 - 0
[  173.433715][T13279] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.543434][T13264] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  173.647913][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3208'.
[  174.019526][T13330] netlink: 'syz.2.3225': attribute type 1 has an invalid length.
[  174.022375][T13330] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3225'.
[  174.025719][T13330] NCSI netlink: No device for ifindex 0
[  175.088988][T13388] netlink: 'syz.0.3251': attribute type 1 has an invalid length.
[  175.091931][T13388] netlink: 'syz.0.3251': attribute type 1 has an invalid length.
[  175.217600][T13400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3257'.
[  175.276746][T13400] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3257'.
[  175.649538][T13429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3269'.
[  175.745290][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3270'.
[  175.928476][T13434] bridge0: port 3(batadv0) entered disabled state
[  175.946780][T13434] bridge_slave_1: left promiscuous mode
[  175.963342][T13434] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.992191][T13434] bridge_slave_0: left allmulticast mode
[  175.998714][T13434] bridge_slave_0: left promiscuous mode
[  176.001922][T13434] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.099465][T13434] vlan2 (unregistering): left promiscuous mode
[  176.105407][T13434] bridge1: port 1(vlan2) entered disabled state
[  176.544196][T13449] netlink: 'syz.1.3276': attribute type 9 has an invalid length.
[  176.547985][T13449] netlink: 'syz.1.3276': attribute type 6 has an invalid length.
[  177.328256][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3279'.
[  177.443339][T13460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.446596][T13460] syzkaller0: entered promiscuous mode
[  177.448675][T13460] syzkaller0: entered allmulticast mode
[  177.458321][T13460] tipc: Resetting bearer <eth:syzkaller0>
[  177.464799][T13459] tipc: Resetting bearer <eth:syzkaller0>
[  177.474236][T13459] tipc: Disabling bearer <eth:syzkaller0>
[  177.564925][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3282'.
[  177.568720][T13462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.690849][T13468] netlink: 'syz.0.3285': attribute type 3 has an invalid length.
[  177.762652][T13470] block nbd0: NBD_DISCONNECT
[  177.817484][T13481] netlink: 'syz.0.3290': attribute type 1 has an invalid length.
[  178.130782][T13510] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.3305'.
[  178.714475][T13543] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  178.728285][T13543] batman_adv: batadv0: Interface deactivated: dummy0
[  178.731226][T13543] batman_adv: batadv0: Removing interface: dummy0
[  178.738444][T13543] bond0: (slave bond_slave_0): Releasing backup interface
[  178.748620][T13543] bond0: (slave bond_slave_1): Releasing backup interface
[  178.769735][T13543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.773965][T13543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.786702][T13543] bond2: (slave veth5): Releasing active interface
[  178.800553][T13543] netlink: 'syz.2.3318': attribute type 10 has an invalid length.
[  178.813587][T13543] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  178.827445][T13543] bond0: (slave wlan1): Opening slave failed
[  178.845245][T13543] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  178.849382][T13543] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  178.951057][T13556] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  178.974409][T13556] netlink: 'syz.0.3321': attribute type 10 has an invalid length.
[  178.978396][T13556] bond0: (slave wlan1): Opening slave failed
[  179.025090][T13558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3322'.
[  179.028952][T13558] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3322'.
[  179.034870][T13558] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3322'.
[  179.257410][T13577] netlink: 'syz.0.3330': attribute type 1 has an invalid length.
[  179.259989][T13577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3330'.
[  179.437094][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3334'.
[  179.493636][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3337'.
[  179.504460][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3337'.
[  179.509604][T13594] netlink: 'syz.0.3337': attribute type 18 has an invalid length.
[  179.814208][T13638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.015678][T13657] netlink: 'syz.1.3367': attribute type 1 has an invalid length.
[  180.153061][T13673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3375'.
[  180.237619][T13679] syzkaller0: entered promiscuous mode
[  180.240043][T13679] syzkaller0: entered allmulticast mode
[  180.246868][T10148] syzkaller0: tun_net_xmit 70
[  180.249553][T13679] syzkaller0: tun_chr_ioctl cmd 1074025677
[  180.251775][T13679] syzkaller0: Linktype set failed because interface is up
[  180.539626][T13701] pim6reg1: entered promiscuous mode
[  180.542305][T13701] pim6reg1: entered allmulticast mode
[  180.553908][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  181.279738][T13765] rdma_rxe: rxe_newlink: failed to add lo
[  181.286067][T13765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.363778][   T33] audit: type=1800 audit(1755301001.162:4): pid=13771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3422" name=CB dev="tmpfs" ino=5879 res=0 errno=0
[  181.988389][T13847] unsupported nlmsg_type 40
[  182.064407][T13853] geneve2: entered promiscuous mode
[  182.248560][T13870] netlink: 'syz.1.3467': attribute type 1 has an invalid length.
[  182.263761][T13870] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.273032][T13870] gretap2: entered promiscuous mode
[  182.279149][T13870] bond2: (slave gretap2): making interface the new active one
[  182.284010][T13870] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  183.060910][T13923] __nla_validate_parse: 15 callbacks suppressed
[  183.060925][T13923] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3482'.
[  183.121310][T13928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3484'.
[  183.361052][T13942] netlink: 'syz.2.3490': attribute type 2 has an invalid length.
[  183.812657][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3497'.
[  183.888432][T13962] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  183.889797][T13964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3500'.
[  183.897784][T13964] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3500'.
[  183.908904][T13964] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  183.917456][T13964] gretap3: entered promiscuous mode
[  183.919771][T13964] gretap3: entered allmulticast mode
[  183.922615][T13966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3501'.
[  183.983914][T13971] netlink: 'syz.2.3502': attribute type 1 has an invalid length.
[  183.987403][T13971] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3502'.
[  183.991021][T13971] netlink: 'syz.2.3502': attribute type 1 has an invalid length.
[  184.023686][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'.
[  184.032938][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'.
[  184.569919][T14005] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.599102][T14007] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  184.621337][T14005] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3518'.
[  184.717221][T14013] sctp: [Deprecated]: syz.2.3521 (pid 14013) Use of struct sctp_assoc_value in delayed_ack socket option.
[  184.717221][T14013] Use struct sctp_sack_info instead
[  184.783391][T14019] macsec1: entered promiscuous mode
[  184.790435][T14019] team0: entered promiscuous mode
[  184.845410][T14031] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  184.943027][T14046] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  185.060862][T14063] netlink: 'syz.1.3544': attribute type 1 has an invalid length.
[  185.237006][T14081] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  185.240563][T14081] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.503268][T14101] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  186.874668][T14249] veth0_to_bond: entered allmulticast mode
[  187.794992][T14275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  187.833509][T14279] syzkaller1: entered promiscuous mode
[  187.835865][T14279] syzkaller1: entered allmulticast mode
[  187.839330][T14279] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  188.278538][T14301] __nla_validate_parse: 7 callbacks suppressed
[  188.278552][T14301] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3653'.
[  188.294181][T14301] vlan3: entered allmulticast mode
[  188.299229][T14301] gretap0: entered allmulticast mode
[  188.426946][T14306] netlink: 'syz.1.3654': attribute type 303 has an invalid length.
[  188.450463][T14308] bond0: Error: Cannot enslave bond to itself.
[  188.453529][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3654'.
[  188.457773][T14303] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  188.465311][T14303] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  188.906062][T14348] netlink: 'syz.0.3674': attribute type 1 has an invalid length.
[  188.909342][T14348] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3674'.
[  189.082489][T14360] netlink: 'syz.0.3680': attribute type 1 has an invalid length.
[  189.085354][T14360] netlink: 'syz.0.3680': attribute type 1 has an invalid length.
[  190.820942][T14457] @: renamed from bond_slave_0
[  190.984873][T14480] smc: net device bond0 applied user defined pnetid SYZ2
[  191.049184][T14488] lo speed is unknown, defaulting to 1000
[  191.165764][T14503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3743'.
[  191.356099][T14518] netlink: 'syz.0.3748': attribute type 1 has an invalid length.
[  191.358626][T14518] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3748'.
[  191.626708][T14529] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3754'.
[  192.036982][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3775'.
[  192.144839][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3777'.
[  192.152514][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3777'.
[  192.786234][T14620] vlan2: entered promiscuous mode
[  192.788130][T14620] gretap0: entered promiscuous mode
[  192.836105][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3798'.
[  192.873425][T14626] netlink: 'syz.0.3799': attribute type 2 has an invalid length.
[  192.877229][T14626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.261283][T14656] lo speed is unknown, defaulting to 1000
[  193.603987][T14671] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  193.607221][T14671] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  193.930304][T14685] __nla_validate_parse: 4 callbacks suppressed
[  193.930314][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3826'.
[  193.938990][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3826'.
[  193.955920][T14685] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3826'.
[  194.004643][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3828'.
[  194.701089][T14716] lo speed is unknown, defaulting to 1000
[  194.897371][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'.
[  194.911118][T14722] netlink: 'syz.2.3836': attribute type 1 has an invalid length.
[  194.917220][T14722] netlink: 'syz.2.3836': attribute type 2 has an invalid length.
[  194.928810][T14722] netlink: 'syz.2.3836': attribute type 1 has an invalid length.
[  194.941634][T14722] netlink: 'syz.2.3836': attribute type 2 has an invalid length.
[  195.126229][T14740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3847'.
[  195.304313][T14750] infiniband syz1: set down
[  195.306342][T14750] infiniband syz1: added bond0
[  195.330746][T14750] RDS/IB: syz1: added
[  195.332551][T14750] smc: adding ib device syz1 with port count 1
[  195.347312][T14750] smc:    ib device syz1 port 1 has pnetid SYZ1 (user defined)
[  195.426256][T14766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.630804][T14776] tun0: tun_chr_ioctl cmd 2147767520
[  195.979252][T14789] netlink: 'syz.1.3867': attribute type 4 has an invalid length.
[  196.935883][T14840] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  196.940430][T14840] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  197.236327][T14865] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  197.441810][T14879] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3906'.
[  197.445050][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3906'.
[  197.448876][T14879] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3906'.
[  197.455849][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3906'.
[  198.048139][T14935] tipc: Resetting bearer <eth:syzkaller0>
[  198.051349][T14935] netlink: 'syz.1.3929': attribute type 11 has an invalid length.
[  198.129015][T14945] lo speed is unknown, defaulting to 1000
[  198.131620][T14945] lo speed is unknown, defaulting to 1000
[  198.135157][T14945] lo speed is unknown, defaulting to 1000
[  198.144294][T14945] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  198.160882][T14945] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  198.193660][T14945] lo speed is unknown, defaulting to 1000
[  198.199158][T14945] lo speed is unknown, defaulting to 1000
[  198.207812][T14945] lo speed is unknown, defaulting to 1000
[  198.467817][T14962] netlink: 'syz.2.3945': attribute type 22 has an invalid length.
[  198.500732][T14963] netlink: 'syz.1.3943': attribute type 1 has an invalid length.
[  198.948646][T14984] __nla_validate_parse: 3 callbacks suppressed
[  198.948663][T14984] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3954'.
[  198.984815][T14984] bond0 (unregistering): Released all slaves
[  199.120344][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3957'.
[  199.347794][T15009] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3966'.
[  199.424688][T15015] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3970'.
[  199.540804][T15024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3974'.
[  199.609667][T15029] netlink: 'syz.1.3976': attribute type 21 has an invalid length.
[  199.616168][T15029] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3976'.
[  199.621316][T15029] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3976'.
[  199.647650][T15033] netlink: 'syz.1.3978': attribute type 5 has an invalid length.
[  199.780024][T15045] bridge10: entered promiscuous mode
[  199.782072][T15045] bridge10: entered allmulticast mode
[  199.868733][T15055] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3989'.
[  200.042987][T15071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.046626][T15071] syzkaller0: entered promiscuous mode
[  200.048949][T15071] syzkaller0: entered allmulticast mode
[  200.090515][T15071] tipc: Resetting bearer <eth:syzkaller0>
[  200.098857][T15070] tipc: Resetting bearer <eth:syzkaller0>
[  200.112364][T15070] tipc: Disabling bearer <eth:syzkaller0>
[  200.167697][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4001'.
[  200.182441][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4001'.
[  200.229561][T15085] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1294) !
[  200.324930][T15093] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  200.847238][T15141] geneve2: entered promiscuous mode
[  200.956446][T15151] netlink: 'syz.1.4036': attribute type 11 has an invalid length.
[  200.968689][T15153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.973927][T15153] syzkaller0: entered promiscuous mode
[  200.976042][T15153] syzkaller0: entered allmulticast mode
[  200.979534][T15153] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  200.995913][T15153] tipc: Resetting bearer <eth:syzkaller0>
[  200.998912][T15152] tipc: Resetting bearer <eth:syzkaller0>
[  201.011092][T15152] tipc: Disabling bearer <eth:syzkaller0>
[  201.152387][T15164] netlink: 'syz.2.4042': attribute type 10 has an invalid length.
[  201.168978][T15164] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  201.173415][T15164] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  201.200624][T15171] netlink: 'syz.0.4045': attribute type 12 has an invalid length.
[  202.019994][T15182] wireguard0: entered promiscuous mode
[  202.024732][T15182] wireguard0: entered allmulticast mode
[  202.220948][T15203] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  202.534443][T15257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.712008][T15284] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  202.830502][T15296] syzkaller0: entered promiscuous mode
[  202.833788][T15296] syzkaller0: entered allmulticast mode
[  203.812723][T15313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.997623][T15325] __nla_validate_parse: 11 callbacks suppressed
[  203.997638][T15325] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4114'.
[  204.193050][T15336] netlink: 'syz.2.4119': attribute type 1 has an invalid length.
[  204.196394][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4119'.
[  204.199430][T15336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4119'.
[  204.206520][T15336] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  204.210107][T15336] gretap1: entered promiscuous mode
[  204.326682][T15352] ip6tnl3: entered promiscuous mode
[  204.329005][T15352] ip6tnl3: entered allmulticast mode
[  204.460778][T15358] syzkaller1: entered promiscuous mode
[  204.463400][T15358] syzkaller1: entered allmulticast mode
[  205.364188][T15388] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4139'.
[  205.834307][T15431] xt_policy: neither incoming nor outgoing policy selected
[  206.004065][T15449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4165'.
[  206.123375][T15461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4170'.
[  206.230708][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'.
[  206.387708][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4182'.
[  206.438424][T15492] netlink: 87 bytes leftover after parsing attributes in process `syz.1.4185'.
[  206.467747][T15494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.505180][T15494] syzkaller0: entered promiscuous mode
[  206.506990][T15494] syzkaller0: entered allmulticast mode
[  206.520839][T15494] tipc: Resetting bearer <eth:syzkaller0>
[  206.523973][T15493] tipc: Resetting bearer <eth:syzkaller0>
[  207.469311][T15493] tipc: Disabling bearer <eth:syzkaller0>
[  207.605245][T15529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4201'.
[  208.197085][T15559] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4
[  208.681749][T15594] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  209.573262][T15646] __nla_validate_parse: 1 callbacks suppressed
[  209.573275][T15646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4256'.
[  209.675936][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4259'.
[  209.889325][T15683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4273'.
[  210.025529][T15697] IPVS: persistence engine module ip_vs_pe_ not found
[  210.087325][T15707] netlink: 'syz.2.4283': attribute type 1 has an invalid length.
[  210.090462][T15707] netlink: 'syz.2.4283': attribute type 11 has an invalid length.
[  210.098322][T15707] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4283'.
[  210.174763][T15717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4288'.
[  210.413644][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4299'.
[  211.280809][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4301'.
[  211.391745][T15760] netlink: 'syz.1.4304': attribute type 4 has an invalid length.
[  211.597151][T15783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4315'.
[  211.600865][T15783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4315'.
[  211.606050][T15783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4315'.
[  211.760070][T15798] netlink: set zone limit has 4 unknown bytes
[  212.230195][T15849] sch_tbf: burst 88 is lower than device veth11 mtu (1514) !
[  212.240072][T15852] netlink: 'syz.0.4346': attribute type 4 has an invalid length.
[  212.350833][T15864] policy can only be matched on NF_INET_PRE_ROUTING
[  212.350849][T15864] unable to load match
[  212.365360][T15868] netlink: 'syz.2.4354': attribute type 29 has an invalid length.
[  213.036762][T15925] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  213.248037][T15960] syzkaller1: entered promiscuous mode
[  213.250292][T15960] syzkaller1: entered allmulticast mode
[  213.755629][T15994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  214.193033][T15970] delete_channel: no stack
[  214.971417][T16122] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.977752][T16122] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.025925][T16122] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  215.029418][T16122] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.077760][T16122] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  215.082013][T16122] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.116801][T16122] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  215.123299][T16122] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.187842][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  215.193235][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.203969][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  215.206935][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.215715][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  215.218496][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.230244][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.235249][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.482862][T16131] batman_adv: batadv0: Adding interface: ip6gretap1
[  215.485315][T16131] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.494514][T16131] batman_adv: batadv0: Interface activated: ip6gretap1
[  215.585323][T16114] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  216.460746][T16177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  216.791218][T16196] netlink: 'syz.1.4494': attribute type 27 has an invalid length.
[  216.905157][T16209] netlink: 'syz.0.4500': attribute type 3 has an invalid length.
[  216.908481][T16209] netlink: 'syz.0.4500': attribute type 1 has an invalid length.
[  216.914552][T16209] __nla_validate_parse: 10 callbacks suppressed
[  216.914564][T16209] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4500'.
[  216.947294][T16206] lo speed is unknown, defaulting to 1000
[  217.175266][T16206] lo speed is unknown, defaulting to 1000
[  217.519095][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4519'.
[  218.182833][T16299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  218.439950][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4546'.
[  218.520528][T16327] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4551'.
[  218.558955][T16332] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4553'.
[  218.988110][T16369] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  219.269278][T16380] netlink: 'syz.2.4576': attribute type 10 has an invalid length.
[  219.305662][T16380] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  219.308934][T16380] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  219.805479][T16395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4581'.
[  220.050610][T16420] hsr0: entered promiscuous mode
[  220.063784][T16420] hsr0: entered allmulticast mode
[  220.069393][T16420] hsr_slave_0: entered allmulticast mode
[  220.075213][T16420] hsr_slave_1: entered allmulticast mode
[  220.182636][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4600'.
[  220.186583][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4600'.
[  220.218704][T16437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4602'.
[  221.195551][T16469] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4615'.
[  221.228066][T16469] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.235754][T16469] 8021q: adding VLAN 0 to HW filter on device team0
[  221.239165][T16469] dummy0: left promiscuous mode
[  221.247191][T16469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.256974][ T5874] lo speed is unknown, defaulting to 1000
[  221.263425][ T5874] syz2: Port: 1 Link ACTIVE
[  221.412351][T16482] netlink: 'syz.1.4622': attribute type 1 has an invalid length.
[  221.612396][T16510] netlink: 'syz.0.4631': attribute type 2 has an invalid length.
[  221.676404][T16516] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  221.714614][T16520] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.729012][T16520] tipc: Resetting bearer <eth:syzkaller0>
[  222.135461][T16540] __nla_validate_parse: 5 callbacks suppressed
[  222.135476][T16540] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4645'.
[  222.266382][T16548] lo speed is unknown, defaulting to 1000
[  222.335909][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4649'.
[  222.409690][T16557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.510491][T16548] lo speed is unknown, defaulting to 1000
[  222.581071][T16568] openvswitch: netlink: IP tunnel TTL not specified.
[  222.673903][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'.
[  222.679781][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'.
[  222.967521][T16602] delete_channel: no stack
[  223.601759][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4701'.
[  223.605560][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4701'.
[  223.655702][T16660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4702'.
[  223.850165][T16667] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4706'.
[  224.104041][T16710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  224.477167][T16734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4734'.
[  224.479884][T16734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4734'.
[  224.483937][T16734] netlink: 'syz.0.4734': attribute type 4 has an invalid length.
[  224.623826][T16740] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  224.649898][T16740] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  224.854474][T16758] netdevsim0: entered allmulticast mode
[  225.101133][T16783] netlink: 'syz.0.4754': attribute type 15 has an invalid length.
[  225.617917][T16836] netlink: 'syz.2.4782': attribute type 4 has an invalid length.
[  225.808197][T16859] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  225.812356][T16859] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  226.366433][T16916] netem: change failed
[  226.454814][T16922] netlink: 'syz.0.4820': attribute type 2 has an invalid length.
[  226.511888][T16931] sctp: [Deprecated]: syz.2.4823 (pid 16931) Use of int in max_burst socket option deprecated.
[  226.511888][T16931] Use struct sctp_assoc_value instead
[  226.557201][T16937] netlink: 'syz.1.4828': attribute type 2 has an invalid length.
[  226.654232][T16947] netlink: 'syz.0.4833': attribute type 15 has an invalid length.
[  226.678022][T16947] syzkaller0: entered promiscuous mode
[  226.680263][T16947] syzkaller0: entered allmulticast mode
[  227.903546][T16984] __nla_validate_parse: 3 callbacks suppressed
[  227.903560][T16984] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4843'.
[  228.835479][T17046] lo speed is unknown, defaulting to 1000
[  229.089015][T17046] lo speed is unknown, defaulting to 1000
[  229.107347][T17072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.629457][T17103] netlink: 'syz.0.4900': attribute type 1 has an invalid length.
[  229.632564][T17103] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4900'.
[  230.057746][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4908'.
[  230.164763][T17134] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.171676][T17134] tipc: Resetting bearer <eth:syzkaller0>
[  230.225341][T17136] netlink: 'syz.1.4914': attribute type 1 has an invalid length.
[  230.228791][T17136] netlink: 'syz.1.4914': attribute type 2 has an invalid length.
[  230.232622][T17136] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.4914'.
[  231.414579][T17215] bridge0: port 1(erspan0) entered blocking state
[  231.417842][T17215] bridge0: port 1(erspan0) entered disabled state
[  231.420903][T17215] erspan0: entered allmulticast mode
[  231.427126][T17215] erspan0: entered promiscuous mode
[  231.434390][T17215] bridge0: port 1(erspan0) entered blocking state
[  231.436816][T17215] bridge0: port 1(erspan0) entered forwarding state
[  231.443984][T17215] erspan0: left allmulticast mode
[  231.445753][T17215] erspan0: left promiscuous mode
[  231.447629][T17215] bridge0: port 1(erspan0) entered disabled state
[  231.484370][T17218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.581024][T17223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4953'.
[  231.789063][T17235] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4959'.
[  231.793478][T17235] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4959'.
[  231.932529][T17245] netem: change failed
[  232.490720][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4980'.
[  232.535161][T17285] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4982'.
[  232.550111][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4982'.
[  232.667442][T17301] netlink: 'syz.1.4989': attribute type 4 has an invalid length.
[  233.084399][T17351] syzkaller1: entered promiscuous mode
[  233.089132][T17351] syzkaller1: entered allmulticast mode
[  233.256492][T17368] __nla_validate_parse: 2 callbacks suppressed
[  233.256503][T17368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5018'.
[  233.275406][T17368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5018'.
[  233.379786][T17380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5023'.
[  233.397926][T17380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5023'.
[  233.592800][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  233.629166][T17411] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5038'.
[  233.654590][ T5890] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  234.116614][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5040'.
[  234.254414][T17423] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  234.416515][T17412] netlink: 'syz.1.5037': attribute type 1 has an invalid length.
[  234.425845][T17412] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5037'.
[  234.432639][T17412] netlink: 'syz.1.5037': attribute type 1 has an invalid length.
[  234.735005][T17471] netlink: set zone limit has 8 unknown bytes
[  234.765535][T17476] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5066'.
[  235.076559][T17505] lo speed is unknown, defaulting to 1000
[  235.277696][T17505] lo speed is unknown, defaulting to 1000
[  235.866900][T17524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5088'.
[  235.872827][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5086'.
[  236.034403][T17535] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  236.618213][T17569] 8021q: adding VLAN 0 to HW filter on device bond3
[  236.629968][T17569] bond3: entered allmulticast mode
[  236.638575][T17569] bond0: (slave bond3): Enslaving as an active interface with a down link
[  236.941226][T17594] netlink: 'syz.0.5119': attribute type 6 has an invalid length.
[  236.948601][T17594] netlink: 'syz.0.5119': attribute type 6 has an invalid length.
[  238.034073][T17667] lo speed is unknown, defaulting to 1000
[  238.209995][T17667] lo speed is unknown, defaulting to 1000
[  238.585974][T17684] __nla_validate_parse: 4 callbacks suppressed
[  238.585988][T17684] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5156'.
[  238.624325][T17688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5158'.
[  238.627968][T17688] bridge0: port 1(macvlan1) entered blocking state
[  238.630487][T17688] bridge0: port 1(macvlan1) entered disabled state
[  238.634799][T17688] macvlan1: entered allmulticast mode
[  238.637530][T17688] macvlan1: entered promiscuous mode
[  238.834572][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5165'.
[  238.869761][T17706] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  238.873465][T17706] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  239.246600][T17731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5179'.
[  239.316729][T17735] netlink: 'syz.1.5180': attribute type 3 has an invalid length.
[  239.320829][T17735] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5180'.
[  239.468458][   T33] audit: type=1804 audit(1755301059.262:5): pid=17754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5189" name="/newroot/1793/cgroup.controllers" dev="tmpfs" ino=9060 res=1 errno=0
[  239.479995][   T33] audit: type=1800 audit(1755301059.262:6): pid=17754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5189" name="cgroup.controllers" dev="tmpfs" ino=9060 res=0 errno=0
[  240.443907][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5198'.
[  240.447696][T17777] netlink: 'syz.2.5198': attribute type 20 has an invalid length.
[  240.481119][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5198'.
[  240.486987][T17777] netlink: 'syz.2.5198': attribute type 20 has an invalid length.
[  240.774217][T17806] netlink: 'syz.2.5212': attribute type 7 has an invalid length.
[  240.777270][T17806] netlink: 'syz.2.5212': attribute type 8 has an invalid length.
[  240.827525][T17812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5215'.
[  240.833494][T17812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5215'.
[  241.378260][T17854] netlink: 'syz.2.5236': attribute type 1 has an invalid length.
[  241.384141][T17854] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5236'.
[  242.197453][T17890] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.419742][T17912] netlink: 'syz.2.5262': attribute type 21 has an invalid length.
[  242.428343][T17912] netlink: 'syz.2.5262': attribute type 4 has an invalid length.
[  243.174047][T17949] syz_tun: entered allmulticast mode
[  243.183836][T17949] dvmrp1: entered allmulticast mode
[  243.188881][T17948] syz_tun: left allmulticast mode
[  243.912219][T17982] __nla_validate_parse: 12 callbacks suppressed
[  243.912236][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5292'.
[  243.940008][T17982] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.967527][T17982] bond0: (slave bridge7): Enslaving as an active interface with an up link
[  244.030886][T17984] netlink: 'syz.2.5292': attribute type 1 has an invalid length.
[  246.617235][T18009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  246.809537][T18030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5313'.
[  246.813984][T18030] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5313'.
[  246.884946][T18037] veth15: entered promiscuous mode
[  246.950074][T18043] netlink: 'syz.0.5318': attribute type 21 has an invalid length.
[  247.648986][T18101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5341'.
[  247.845556][T18126] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5356'.
[  247.898449][T18130] netlink: 'syz.0.5359': attribute type 1 has an invalid length.
[  247.908177][T18132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5358'.
[  247.970276][T18140] syzkaller1: entered promiscuous mode
[  247.974343][T18140] syzkaller1: entered allmulticast mode
[  248.040228][   T33] audit: type=1800 audit(1755301067.832:7): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5365" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=9283 res=0 errno=0
[  248.215503][T18155] netlink: 'syz.0.5370': attribute type 23 has an invalid length.
[  248.370513][T18165] netlink: 'syz.0.5375': attribute type 1 has an invalid length.
[  248.667476][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5391'.
[  248.670439][T18197] netlink: 'syz.0.5391': attribute type 30 has an invalid length.
[  248.680398][ T5873] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.683234][ T5873] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.685907][ T5873] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.688600][ T5873] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  248.692195][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5391'.
[  248.695713][T18197] netlink: 'syz.0.5391': attribute type 30 has an invalid length.
[  248.736940][T18201] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5393'.
[  248.808122][T18205] Unsupported ieee802154 address type: 0
[  249.068710][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5402'.
[  249.203481][T18223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.012716][T18285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  250.659085][T18319] netlink: 'syz.2.5444': attribute type 3 has an invalid length.
[  250.663490][T18319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.868307][T18329] bridge8: entered allmulticast mode
[  251.058525][T18338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5453'.
[  251.295652][T18348] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5458'.
[  251.430024][T18359] smc: net device bond0 erased user defined pnetid SYZ2
[  251.435610][T18359] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1
[  251.475902][   T26] smc: removing ib device syz1
[  251.479491][T18359] bond0 (unregistering): (slave bond3): Releasing backup interface
[  251.485759][T18359] bond3: left allmulticast mode
[  251.489350][T18359] bond0 (unregistering): Released all slaves
[  251.754072][T18374] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  252.203516][T18398] pim6reg1: entered promiscuous mode
[  252.206554][T18398] pim6reg1: entered allmulticast mode
[  252.399639][T18412] netlink: 'syz.2.5483': attribute type 1 has an invalid length.
[  252.408064][T18412] netlink: 'syz.2.5483': attribute type 2 has an invalid length.
[  252.565831][ T5890] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  252.569284][ T5890] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  252.572890][ T5890] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  252.576477][ T5890] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  252.796959][T18443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  253.285294][T18482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5515'.
[  253.289087][T18482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5515'.
[  253.338153][T18488] delete_channel: no stack
[  253.374137][T18492] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5520'.
[  253.541802][T18506] pim6reg1: entered promiscuous mode
[  253.543568][T18506] pim6reg1: entered allmulticast mode
[  254.343116][T18515] netlink: 'syz.0.5531': attribute type 32 has an invalid length.
[  254.347564][T18515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5531'.
[  254.351757][T18515] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  254.418520][ T5873] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  254.426034][T18526] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  254.514067][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5541'.
[  254.656517][T18552] pim6reg1: entered allmulticast mode
[  255.046507][T18580] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  256.057156][T18636] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.069376][T18636] tipc: Resetting bearer <eth:syzkaller0>
[  256.135240][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5587'.
[  256.264493][T18656] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  256.341321][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5600'.
[  256.347976][T18669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5601'.
[  256.350944][T18669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5601'.
[  256.351506][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5600'.
[  256.386885][T18672] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5602'.
[  256.392910][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5603'.
[  256.395782][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5603'.
[  256.398650][T18673] netlink: 'syz.0.5603': attribute type 15 has an invalid length.
[  256.401098][T18673] netlink: 'syz.0.5603': attribute type 18 has an invalid length.
[  256.461128][T18679] lo speed is unknown, defaulting to 1000
[  256.596186][T18679] lo speed is unknown, defaulting to 1000
[  256.652010][T18695] block nbd1: server does not support multiple connections per device.
[  256.655445][T18695] block nbd1: shutting down sockets
[  256.810270][T18718] netlink: 'syz.2.5622': attribute type 1 has an invalid length.
[  257.398346][T18779] netlink: 'syz.1.5650': attribute type 30 has an invalid length.
[  257.420028][ T5873] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0
[  257.424033][ T5873] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.427266][ T5873] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.430085][ T5873] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.434239][T18779] netlink: 'syz.1.5650': attribute type 30 has an invalid length.
[  257.718590][T18813] pim6reg9: entered allmulticast mode
[  257.774150][T18819] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  257.968973][T18849] netlink: 'syz.2.5684': attribute type 1 has an invalid length.
[  258.207374][T18873] netlink: 'syz.1.5695': attribute type 13 has an invalid length.
[  258.210633][T18873] netlink: 'syz.1.5695': attribute type 17 has an invalid length.
[  258.262112][T18873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.350229][T18879] geneve2: entered allmulticast mode
[  258.354767][ T5890] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 6081 - 0
[  258.358077][ T5890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.363855][ T5890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.367445][ T5890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.391889][T18881] nftables ruleset with unbound chain
[  258.558023][T18889] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  259.195925][T18915] netlink: 'syz.0.5713': attribute type 18 has an invalid length.
[  259.299010][T18919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.325292][T18919] syzkaller0: entered promiscuous mode
[  259.327506][T18919] syzkaller0: entered allmulticast mode
[  259.344413][T18919] tipc: Resetting bearer <eth:syzkaller0>
[  259.347838][T18918] tipc: Resetting bearer <eth:syzkaller0>
[  259.359503][T18918] tipc: Disabling bearer <eth:syzkaller0>
[  259.479761][T18925] __nla_validate_parse: 13 callbacks suppressed
[  259.479774][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5719'.
[  259.609997][T18936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5725'.
[  259.639704][T18941] validate_nla: 1 callbacks suppressed
[  259.639714][T18941] netlink: 'syz.1.5728': attribute type 1 has an invalid length.
[  259.719561][T18950] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  259.756926][T18952] lo speed is unknown, defaulting to 1000
[  259.862954][T18952] lo speed is unknown, defaulting to 1000
[  260.105865][T18978] netlink: 'syz.0.5744': attribute type 1 has an invalid length.
[  260.108407][T18978] netlink: 'syz.0.5744': attribute type 4 has an invalid length.
[  260.110991][T18978] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5744'.
[  260.192922][T18982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5745'.
[  260.373147][T18989] netlink: 'syz.1.5749': attribute type 11 has an invalid length.
[  260.436188][T18991] tap0: tun_chr_ioctl cmd 1074025677
[  260.438777][T18991] tap0: linktype set to 0
[  260.709140][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5757'.
[  260.716035][T19005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.829906][T19015] netlink: 'syz.1.5762': attribute type 1 has an invalid length.
[  260.839550][T19015] netlink: 'syz.1.5762': attribute type 4 has an invalid length.
[  260.842840][T19015] netlink: 15538 bytes leftover after parsing attributes in process `syz.1.5762'.
[  260.848990][T19017] tipc: Failed to remove unknown binding: 66,1,1/3978367959:2502793797/2502793799
[  260.855697][T19017] tipc: Failed to remove unknown binding: 66,1,1/3978367959:2502793797/2502793799
[  260.859807][T19017] tipc: Failed to remove unknown binding: 66,1,1/3978367959:2502793797/2502793799
[  261.224363][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5778'.
[  261.231784][T19055] netlink: 'syz.2.5781': attribute type 21 has an invalid length.
[  261.293144][T19063] batadv_slave_0: entered promiscuous mode
[  261.295915][T19062] batadv_slave_0: left promiscuous mode
[  261.323851][T19067] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5787'.
[  261.324352][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5786'.
[  261.326619][T19067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5787'.
[  262.506930][T19114] nftables ruleset with unbound set
[  262.558400][T19120] netlink: 'syz.1.5810': attribute type 22 has an invalid length.
[  262.572885][T19122] netlink: 'syz.2.5811': attribute type 1 has an invalid length.
[  262.576213][T19122] netlink: 'syz.2.5811': attribute type 4 has an invalid length.
[  262.634596][T19120] netlink: 'syz.1.5810': attribute type 22 has an invalid length.
[  263.293277][T19190] bond0: (slave bridge7): Releasing backup interface
[  263.404117][T19181] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  263.407833][T19181] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  264.245921][T19219] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.510356][T19255] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.760666][T19277] __nla_validate_parse: 10 callbacks suppressed
[  264.760676][T19277] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5874'.
[  264.847971][T19281] validate_nla: 1 callbacks suppressed
[  264.847980][T19281] netlink: 'syz.1.5876': attribute type 1 has an invalid length.
[  264.853411][T19281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5876'.
[  265.152113][T19291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5881'.
[  265.225644][T19303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5886'.
[  265.339241][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5892'.
[  265.763763][T19344] netlink: 'syz.2.5906': attribute type 1 has an invalid length.
[  266.060726][T19370] openvswitch: netlink: Key type 251 is out of range max 32
[  266.108521][T19374] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5921'.
[  266.113017][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5921'.
[  266.151268][T19377] syz_tun: entered allmulticast mode
[  266.159180][T19377] dvmrp1: entered allmulticast mode
[  266.168582][T19375] syz_tun: left allmulticast mode
[  266.337535][T19392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5929'.
[  267.073566][T19414] 8021q: adding VLAN 0 to HW filter on device bond4
[  267.086451][T19414] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  267.090794][T19414] bond4: (slave macvlan2): Enslaving as a backup interface with a down link
[  267.425349][T19456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5955'.
[  267.563560][T19475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5965'.
[  267.929515][T19507] netlink: 'syz.1.5978': attribute type 7 has an invalid length.
[  267.935801][T19507] netlink: 'syz.1.5978': attribute type 8 has an invalid length.
[  268.702931][T19522] netlink: 'syz.1.5985': attribute type 1 has an invalid length.
[  269.101245][T19567] vlan3: entered promiscuous mode
[  269.103742][T19567] bridge0: entered promiscuous mode
[  269.510292][T19599] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  269.514980][T19598] IPVS: stopping backup sync thread 19599 ...
[  269.747451][T19604] ipvlan2: entered promiscuous mode
[  269.795180][T19610] netlink: 'syz.1.6025': attribute type 8 has an invalid length.
[  269.805570][T19616] __nla_validate_parse: 5 callbacks suppressed
[  269.805582][T19616] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6026'.
[  269.828645][T19618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6027'.
[  269.835013][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6027'.
[  269.914778][T19627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6032'.
[  269.928887][T19630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6033'.
[  269.932725][T19630] ==================================================================
[  269.936105][T19630] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  269.939262][T19630] Read of size 4 at addr ffff888043289bc4 by task syz.0.6033/19630
[  269.943426][T19630] 
[  269.944440][T19630] CPU: 0 UID: 0 PID: 19630 Comm: syz.0.6033 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0 PREEMPT(full) 
[  269.944455][T19630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.944462][T19630] Call Trace:
[  269.944475][T19630]  <TASK>
[  269.944480][T19630]  dump_stack_lvl+0x189/0x250
[  269.944497][T19630]  ? __kasan_check_byte+0x12/0x40
[  269.944517][T19630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.944529][T19630]  ? lock_release+0x4b/0x3e0
[  269.944548][T19630]  ? __virt_addr_valid+0x4a5/0x5c0
[  269.944562][T19630]  print_report+0xca/0x240
[  269.944575][T19630]  ? xfrm_alloc_spi+0x570/0xf30
[  269.944586][T19630]  kasan_report+0x118/0x150
[  269.944600][T19630]  ? xfrm_alloc_spi+0x570/0xf30
[  269.944615][T19630]  xfrm_alloc_spi+0x570/0xf30
[  269.944625][T19630]  ? xfrm_alloc_spi+0x2a0/0xf30
[  269.944641][T19630]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  269.944674][T19630]  ? xfrm_find_acq+0x87/0xa0
[  269.944689][T19630]  xfrm_alloc_userspi+0x70b/0xc90
[  269.944707][T19630]  ? apparmor_capable+0x137/0x1b0
[  269.944721][T19630]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  269.944735][T19630]  ? __nla_parse+0x40/0x60
[  269.944754][T19630]  xfrm_user_rcv_msg+0x7a3/0xab0
[  269.944769][T19630]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  269.944789][T19630]  ? __pfx___mutex_trylock_common+0x10/0x10
[  269.944803][T19630]  ? rcu_is_watching+0x15/0xb0
[  269.944815][T19630]  ? trace_contention_end+0x39/0x120
[  269.944829][T19630]  ? __mutex_lock+0x335/0x1360
[  269.944845][T19630]  netlink_rcv_skb+0x208/0x470
[  269.944861][T19630]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  269.944873][T19630]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  269.944892][T19630]  ? netlink_deliver_tap+0x2e/0x1b0
[  269.944907][T19630]  ? netlink_deliver_tap+0x2e/0x1b0
[  269.944923][T19630]  xfrm_netlink_rcv+0x79/0x90
[  269.944936][T19630]  netlink_unicast+0x82f/0x9e0
[  269.944951][T19630]  ? __pfx_netlink_unicast+0x10/0x10
[  269.944965][T19630]  ? netlink_sendmsg+0x642/0xb30
[  269.944978][T19630]  ? skb_put+0x11b/0x210
[  269.944990][T19630]  netlink_sendmsg+0x805/0xb30
[  269.945006][T19630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  269.945023][T19630]  ? aa_sock_msg_perm+0xf1/0x1d0
[  269.945037][T19630]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  269.945059][T19630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  269.945072][T19630]  __sock_sendmsg+0x21c/0x270
[  269.945088][T19630]  ____sys_sendmsg+0x505/0x830
[  269.945099][T19630]  ? __pfx_____sys_sendmsg+0x10/0x10
[  269.945113][T19630]  ? import_iovec+0x74/0xa0
[  269.945127][T19630]  ___sys_sendmsg+0x21f/0x2a0
[  269.945139][T19630]  ? __pfx____sys_sendmsg+0x10/0x10
[  269.945160][T19630]  ? __fget_files+0x2a/0x420
[  269.945169][T19630]  ? __fget_files+0x3a0/0x420
[  269.945181][T19630]  __x64_sys_sendmsg+0x19b/0x260
[  269.945193][T19630]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  269.945205][T19630]  ? rcu_is_watching+0x15/0xb0
[  269.945218][T19630]  ? do_syscall_64+0xbe/0x3b0
[  269.945233][T19630]  do_syscall_64+0xfa/0x3b0
[  269.945248][T19630]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.945261][T19630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.945270][T19630]  ? exc_page_fault+0x9f/0xf0
[  269.945285][T19630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.945296][T19630] RIP: 0033:0x7f4845b8ebe9
[  269.945306][T19630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.945316][T19630] RSP: 002b:00007f4846a28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.945328][T19630] RAX: ffffffffffffffda RBX: 00007f4845db5fa0 RCX: 00007f4845b8ebe9
[  269.945336][T19630] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[  269.945342][T19630] RBP: 00007f4845c11e19 R08: 0000000000000000 R09: 0000000000000000
[  269.945351][T19630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.945357][T19630] R13: 00007f4845db6038 R14: 00007f4845db5fa0 R15: 00007ffc57cf3528
[  269.945368][T19630]  </TASK>
[  269.945372][T19630] 
[  270.104181][T19630] Allocated by task 15095:
[  270.106073][T19630]  kasan_save_track+0x3e/0x80
[  270.108009][T19630]  __kasan_slab_alloc+0x6c/0x80
[  270.110074][T19630]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  270.112381][T19630]  xfrm_state_alloc+0x24/0x2f0
[  270.114416][T19630]  __find_acq_core+0x8a7/0x1c00
[  270.116489][T19630]  xfrm_find_acq+0x78/0xa0
[  270.118367][T19630]  xfrm_alloc_userspi+0x6b3/0xc90
[  270.120467][T19630]  xfrm_user_rcv_msg+0x7a3/0xab0
[  270.122584][T19630]  netlink_rcv_skb+0x208/0x470
[  270.124589][T19630]  xfrm_netlink_rcv+0x79/0x90
[  270.126597][T19630]  netlink_unicast+0x82f/0x9e0
[  270.128606][T19630]  netlink_sendmsg+0x805/0xb30
[  270.130605][T19630]  __sock_sendmsg+0x21c/0x270
[  270.132620][T19630]  ____sys_sendmsg+0x505/0x830
[  270.134639][T19630]  ___sys_sendmsg+0x21f/0x2a0
[  270.136674][T19630]  __x64_sys_sendmsg+0x19b/0x260
[  270.138753][T19630]  do_syscall_64+0xfa/0x3b0
[  270.140689][T19630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.143125][T19630] 
[  270.144154][T19630] Freed by task 10877:
[  270.145849][T19630]  kasan_save_track+0x3e/0x80
[  270.147802][T19630]  kasan_save_free_info+0x46/0x50
[  270.149927][T19630]  __kasan_slab_free+0x5b/0x80
[  270.151944][T19630]  kmem_cache_free+0x18f/0x400
[  270.153962][T19630]  xfrm_state_gc_task+0x52d/0x6b0
[  270.156078][T19630]  process_scheduled_works+0xae1/0x17b0
[  270.158383][T19630]  worker_thread+0x8a0/0xda0
[  270.160317][T19630]  kthread+0x711/0x8a0
[  270.162072][T19630]  ret_from_fork+0x3fc/0x770
[  270.163991][T19630]  ret_from_fork_asm+0x1a/0x30
[  270.165987][T19630] 
[  270.166995][T19630] The buggy address belongs to the object at ffff888043289b00
[  270.166995][T19630]  which belongs to the cache xfrm_state of size 928
[  270.172701][T19630] The buggy address is located 196 bytes inside of
[  270.172701][T19630]  freed 928-byte region [ffff888043289b00, ffff888043289ea0)
[  270.178105][T19630] 
[  270.179098][T19630] The buggy address belongs to the physical page:
[  270.181715][T19630] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804328b180 pfn:0x43288
[  270.185811][T19630] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  270.189301][T19630] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  270.192399][T19630] page_type: f5(slab)
[  270.194084][T19630] raw: 00fff00000000040 ffff88801bf28c80 dead000000000122 0000000000000000
[  270.197509][T19630] raw: ffff88804328b180 00000000800e0004 00000000f5000000 0000000000000000
[  270.201041][T19630] head: 00fff00000000040 ffff88801bf28c80 dead000000000122 0000000000000000
[  270.204431][T19630] head: ffff88804328b180 00000000800e0004 00000000f5000000 0000000000000000
[  270.207832][T19630] head: 00fff00000000002 ffffea00010ca201 00000000ffffffff 00000000ffffffff
[  270.211350][T19630] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  270.214876][T19630] page dumped because: kasan: bad access detected
[  270.217428][T19630] page_owner tracks the page as allocated
[  270.219816][T19630] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12133, tgid 12132 (syz.2.2681), ts 155233964933, free_ts 152767115576
[  270.227647][T19630]  post_alloc_hook+0x240/0x2a0
[  270.229672][T19630]  get_page_from_freelist+0x21e4/0x22c0
[  270.231933][T19630]  __alloc_frozen_pages_noprof+0x181/0x370
[  270.234480][T19630]  alloc_pages_mpol+0x232/0x4a0
[  270.236563][T19630]  allocate_slab+0x8a/0x370
[  270.238524][T19630]  ___slab_alloc+0xbeb/0x1410
[  270.240502][T19630]  kmem_cache_alloc_noprof+0x283/0x3c0
[  270.242762][T19630]  xfrm_state_alloc+0x24/0x2f0
[  270.244803][T19630]  xfrm_state_find+0x37d4/0x5400
[  270.246884][T19630]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  270.249509][T19630]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  270.251751][T19630]  xfrm_lookup_route+0x3c/0x1c0
[  270.253757][T19630]  udp_sendmsg+0x142e/0x2170
[  270.255700][T19630]  __sock_sendmsg+0x19c/0x270
[  270.257622][T19630]  ____sys_sendmsg+0x52d/0x830
[  270.259670][T19630]  ___sys_sendmsg+0x21f/0x2a0
[  270.261633][T19630] page last free pid 10876 tgid 10876 stack trace:
[  270.264389][T19630]  __free_frozen_pages+0xbc4/0xd30
[  270.266543][T19630]  vfree+0x25a/0x400
[  270.268235][T19630]  pcpu_balance_free+0x6ae/0x940
[  270.270307][T19630]  pcpu_balance_workfn+0xd01/0xe00
[  270.272490][T19630]  process_scheduled_works+0xae1/0x17b0
[  270.274833][T19630]  worker_thread+0x8a0/0xda0
[  270.276807][T19630]  kthread+0x711/0x8a0
[  270.278536][T19630]  ret_from_fork+0x3fc/0x770
[  270.280427][T19630]  ret_from_fork_asm+0x1a/0x30
[  270.282385][T19630] 
[  270.283246][T19630] Memory state around the buggy address:
[  270.285608][T19630]  ffff888043289a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  270.289012][T19630]  ffff888043289b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.292311][T19630] >ffff888043289b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.295516][T19630]                                            ^
[  270.298058][T19630]  ffff888043289c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.301285][T19630]  ffff888043289c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.304592][T19630] ==================================================================
[  270.308181][T19630] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  270.311284][T19630] CPU: 0 UID: 0 PID: 19630 Comm: syz.0.6033 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0 PREEMPT(full) 
[  270.316429][T19630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.320413][T19630] Call Trace:
[  270.321792][T19630]  <TASK>
[  270.322988][T19630]  dump_stack_lvl+0x99/0x250
[  270.325028][T19630]  ? __asan_memcpy+0x40/0x70
[  270.326794][T19630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.328763][T19630]  ? __pfx__printk+0x10/0x10
[  270.330696][T19630]  vpanic+0x281/0x750
[  270.332267][T19630]  ? __pfx_vpanic+0x10/0x10
[  270.334134][T19630]  ? irqentry_exit+0x74/0x90
[  270.336099][T19630]  panic+0xb9/0xc0
[  270.337680][T19630]  ? __pfx_panic+0x10/0x10
[  270.339502][T19630]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  270.341888][T19630]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  270.344333][T19630]  ? xfrm_alloc_spi+0x570/0xf30
[  270.346367][T19630]  check_panic_on_warn+0x89/0xb0
[  270.348401][T19630]  ? xfrm_alloc_spi+0x570/0xf30
[  270.350395][T19630]  end_report+0x78/0x160
[  270.352160][T19630]  kasan_report+0x129/0x150
[  270.354144][T19630]  ? xfrm_alloc_spi+0x570/0xf30
[  270.356242][T19630]  xfrm_alloc_spi+0x570/0xf30
[  270.358212][T19630]  ? xfrm_alloc_spi+0x2a0/0xf30
[  270.360303][T19630]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  270.362452][T19630]  ? xfrm_find_acq+0x87/0xa0
[  270.364403][T19630]  xfrm_alloc_userspi+0x70b/0xc90
[  270.366506][T19630]  ? apparmor_capable+0x137/0x1b0
[  270.368644][T19630]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  270.370933][T19630]  ? __nla_parse+0x40/0x60
[  270.372862][T19630]  xfrm_user_rcv_msg+0x7a3/0xab0
[  270.374991][T19630]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  270.377351][T19630]  ? __pfx___mutex_trylock_common+0x10/0x10
[  270.379790][T19630]  ? rcu_is_watching+0x15/0xb0
[  270.381821][T19630]  ? trace_contention_end+0x39/0x120
[  270.384001][T19630]  ? __mutex_lock+0x335/0x1360
[  270.386029][T19630]  netlink_rcv_skb+0x208/0x470
[  270.388009][T19630]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  270.390285][T19630]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  270.392449][T19630]  ? netlink_deliver_tap+0x2e/0x1b0
[  270.394489][T19630]  ? netlink_deliver_tap+0x2e/0x1b0
[  270.396635][T19630]  xfrm_netlink_rcv+0x79/0x90
[  270.398643][T19630]  netlink_unicast+0x82f/0x9e0
[  270.400631][T19630]  ? __pfx_netlink_unicast+0x10/0x10
[  270.402787][T19630]  ? netlink_sendmsg+0x642/0xb30
[  270.404783][T19630]  ? skb_put+0x11b/0x210
[  270.406579][T19630]  netlink_sendmsg+0x805/0xb30
[  270.408601][T19630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.410792][T19630]  ? aa_sock_msg_perm+0xf1/0x1d0
[  270.412890][T19630]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  270.415036][T19630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.417218][T19630]  __sock_sendmsg+0x21c/0x270
[  270.419141][T19630]  ____sys_sendmsg+0x505/0x830
[  270.421103][T19630]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.423246][T19630]  ? import_iovec+0x74/0xa0
[  270.425171][T19630]  ___sys_sendmsg+0x21f/0x2a0
[  270.427124][T19630]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.429299][T19630]  ? __fget_files+0x2a/0x420
[  270.431212][T19630]  ? __fget_files+0x3a0/0x420
[  270.433124][T19630]  __x64_sys_sendmsg+0x19b/0x260
[  270.435189][T19630]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.437506][T19630]  ? rcu_is_watching+0x15/0xb0
[  270.439501][T19630]  ? do_syscall_64+0xbe/0x3b0
[  270.441489][T19630]  do_syscall_64+0xfa/0x3b0
[  270.443417][T19630]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.445542][T19630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.448050][T19630]  ? exc_page_fault+0x9f/0xf0
[  270.449976][T19630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.452432][T19630] RIP: 0033:0x7f4845b8ebe9
[  270.454331][T19630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.462051][T19630] RSP: 002b:00007f4846a28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.465488][T19630] RAX: ffffffffffffffda RBX: 00007f4845db5fa0 RCX: 00007f4845b8ebe9
[  270.468773][T19630] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[  270.471973][T19630] RBP: 00007f4845c11e19 R08: 0000000000000000 R09: 0000000000000000
[  270.475186][T19630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.478424][T19630] R13: 00007f4845db6038 R14: 00007f4845db5fa0 R15: 00007ffc57cf3528
[  270.481717][T19630]  </TASK>
[  270.483719][T19630] Kernel Offset: disabled
[  270.485548][T19630] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:38:09  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001573 RDI=0000000000001574 RBP=00000000000003f8 RSP=ffffc9000174e9f0
R8 =ffff888106310237 R9 =1ffff11020c62046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98f2 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4846a286c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3211cff8 CR3=0000000132fba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=002bccea32cf345b c97c5839c3885916
XMM02=9ff6fa3b1697ffe2 f005115aa8a4968c XMM03=4501d4442c741d0b a9148f6032563ee2
XMM04=5ad67368af1d307c febc83c9c79ca728 XMM05=08006f005926dc6c d0fe27a94cfe6362
XMM06=e41214cc73356fa1 f15bd21d574afc20 XMM07=4edcd68bb34ef318 ed5d8e23fa25c7a7
XMM08=7ca85c0090c82ee0 ce0dc85ad67368af XMM09=0000000000000000 00007f4845c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000002 RBX=ffff8881006b0b18 RCX=8ab6ce2d1bc22d00 RDX=0000000000000000
RSI=ffffffff8e139ee0 RDI=ffff8881006b0af0 RBP=00000000ffffffff RSP=ffffc900001e09a8
R8 =0000000000000000 R9 =ffffffff822b322a R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=0000000000000246 R13=ffff8881006b0000 R14=ffffffff8e139ee0 R15=0000000000000001
RIP=ffffffff8b794baa RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056059cafb000 CR3=0000000028aaa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
