last executing test programs:

824.878456ms ago: executing program 0 (id=9409):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r1=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000c0004800800024064066fa5140010001100010000000000000000000000000a"], 0xc0}}, 0x800)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000340)=@nfc={0x27, r4, 0x0, 0x2}, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)="93bdc1262b245fa8f14eabfecf3a22517f7bfb02", 0x14}, {&(0x7f0000000400)="3fa3751e06334753fe1b776ba58511b228836cbe2c32f82dddb81f53cfae8798e5656d78f507414ced0a17043e9adbe5871d0d75fd5bd93ce850533a1746dd7ed3a6452eeb3e5930efc31f3306d1822541678a32f77eb60fc6c6951b8d6205cbe07ecb01bba832a4797b89ada8095cc5609f09a203d7ab79c8fa199735affa8c9c000735a2e7e7f2a661b56e779658d3ee914d8bd4a63c5cb81c4dd05d71d370636b3d1bdc2421059bb0302d084a751bc12eccc4734cd5bedabbe43ec6184a2f165705d402607446254f696a8409a823f42157de2efebe6d1512748af598d943ab7f793a4949c29ad7a0ff77fa85", 0xee}, {&(0x7f0000000500)="d19863b29c0a881880518282814130f45d31ffa09c41798a8b7556adfa54310d449ea2500e76ed97d72ebfd27400cdfa8e9717d2a4bd824a8fbb41d33b220b85fd33e4cbcc67e64f16283bbe0d2ef5b697604ca6e097b405137a549a552558c168ebe6060217563ef05665d5b6b484036baa092c355835d8b10ce2dbe81e0463d5a9d8d3c83d8758f234f91132eb0f177ebb1610532fff5b6e790370400c1675996a04a93d9bbbac5e", 0xa9}, {&(0x7f00000005c0)="47172c0ccc3f357e970ec18f34a5a4f4c88a075fc8ca95f885f5d674b207a3468ecf6cb9f571fce1bedbca0bc498f6d4f22eb1e1b102c3c24ce2ae79f6b444a3e7e8b0e5806da2e9c33aeddee81de23ca269e88a7288ff93714ee0653d559ecd492650abd8197d2c0b19628e44d74dd5c46bd75fe5eee568b7fcb2f3679e82624bb0ae4e09866e3617fbf23a9af82d8c48126bad65878ed4d783200264623b8f0a1e5f8fb0f915aa67027b7a0cd74e67e26dd7e605435f1ce102e934800e7dde854464fc3786f11a4e561571b55cfbeae668dc076f29d73c256236edf704db906381046ad04e9fe015142b926ff67393ec17732c24", 0xf5}, {&(0x7f00000006c0)="ea8f174faea890494dbee0bdbac75542036d8b7ecc9142a2786c599497ff36b334a7d48825503307f9946a862bc9863d2b2a6e52fe60b0ada353300cc29775d48c38a3c5255ccea5cf7ecbb1e8e6a5aba93f890f2f642bdbfcbbd741330c4149261ff20a2cb87b540f13cd54c78e6523b477", 0x72}], 0x5}}], 0x1, 0x4004010)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@private=0xa010100, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x5, 0xa, 0x80, 0x0, 0x1, r1, r2}, {0x9, 0x1000, 0x5, 0x2, 0x1, 0x4, 0xe, 0xfa3}, {0x0, 0xb40, 0x1, 0x8}, 0x10, 0x6e6bbe, 0x2, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d6, 0xff}, 0xa, @in=@empty, 0x3503, 0x2, 0x1, 0x1, 0x7, 0xe3f, 0x7ff}}, 0xe8)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="021004030500000009000000fcdbdf25030007"], 0x28}}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r7, 0x4008af60, &(0x7f0000001040)={0x2, 0x6})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0xffff0000, 0x32, 0x7, 0x1}, 0x14)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000000))

753.104811ms ago: executing program 0 (id=9411):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="ffffffff", 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="00000000080000008510000004000000"], &(0x7f0000000100)='syzkaller\x00', 0x82, 0x8, &(0x7f0000000140)=""/8, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x6, 0x6, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000200)=[0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x5, 0x1, 0x3, 0x3}, {0x3, 0x5, 0x9, 0x2}, {0x3, 0x1, 0xc, 0xf}, {0x0, 0x1, 0x5, 0xc}, {0x4, 0x3, 0x8, 0xd91ca94e7971777d}, {0x2, 0x1, 0xf, 0x1}], 0x10, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000040), &(0x7f0000000380)=r3}, 0x20)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x49}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb6a75162368376ee}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000908)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0x4004af61, &(0x7f0000001040)={0x2, 0x6})
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f00000004c0)='\'', 0x1}], 0x1}}], 0x2, 0x24040800)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r6, 0xf}, 0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x8008, 0xfffffffb, 0x6, r6}, 0x10)

751.078349ms ago: executing program 0 (id=9413):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, r3, 0x25, 0x0, @void}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, r3, 0xc8b0e8d4}}, 0x1c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, r3, 0xc8b0e8d4}}, 0x1c}}, 0x0)

664.718229ms ago: executing program 0 (id=9414):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xd, &(0x7f0000000080)=0x3, 0x4)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@hyper})

664.193609ms ago: executing program 0 (id=9415):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
unshare(0x24060400)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x39, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfff9}, {0x8, 0xb}, {0xa, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x24040940}, 0x1)

545.052349ms ago: executing program 0 (id=9418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14140000250001002cbd7000fbdbdf2509000000efd4a387704388730ecf57bd0905a52bfca824"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = socket(0x2, 0x3, 0xff)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000240), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r4 = socket(0x15, 0x80005, 0x0)
getsockopt(r4, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000240)={'veth1_to_team\x00'})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="170000005400e5012dbd7000ffffffff07"], 0x38}}, 0x40c8480)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00008d0500010000000000fcdbdf251c14000000000006000000008d410dfc11b08f6cc4e2fd0fa3b7e769b5ed239d4aabd92d143440a5e83359efb0d25b47b16f9eea8317bbb4f9a2eef77c7c4b94085a"], 0x1c}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0xfffffffffffffec9)
recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/234, 0xea}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000001000000000100000007000000", @ANYRES32=r9, @ANYBLOB="8000ce002a000200bbbbbbbbbbbb0000"], 0x28}}, 0x0)
recvmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000280)=@l2tp6, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/229, 0xe5}, {&(0x7f0000000480)=""/38, 0x26}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/101, 0x65}], 0x4, &(0x7f00000005c0)=""/154, 0x9a}, 0x12100)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x26, 0x0, 0x1ff, 0x760}})

356.83612ms ago: executing program 2 (id=9427):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x1}}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0x5, 0x5}, {0x9, 0x2}, {0xe, 0x1}, {0x6, 0x2}, {0x6}, {0xd, 0x4}, {0x4, 0x5}, {0xe, 0x2}, {0x5, 0x4}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0xc, 0x5}, {0xf, 0x5}, {0x7, 0x2}, {0xf, 0x5}, {0x8}, {0x1, 0x2}]}]}, {0x0, [0x0, 0x0, 0x61, 0x5f, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000006c0)=""/189, 0xfd, 0xbd, 0x1, 0x1}, 0x28) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0xc, <r4=>0x0}, 0x8) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004)
sendmsg$inet_sctp(r7, &(0x7f0000000a40)={&(0x7f00000009c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000b00)="947ce6fda2be05a4eeaddc6dc5f15033342aded9692496bc0a66519389ff95f6968d39b2d21b9a8e7e8ed1878e0382a94a586d3cb8a3f1a39dc4144df0820da4f2ddcf0f133ee3ddaf6ebb68090caa0d16cbb6195a2ac1dcd46808512c9bdae0e4484488cca760778920e3363e8b832bb94820ad809c11cbc913b04c4253fbd61eb66ca8f3bf10506e9192322ed74c0fc3b5927622", 0x95}, {&(0x7f0000000bc0)="cac481a14bd6140171a994fc6e41b4f1f60e638ca1b0c4e0982d7be90afafe2a76e72e73cd1457cccf50d0b8d814efd86222ec14635b86f1b1b42887975d75a119c82ce15675f635762cf53847f5c437d0c9aa3b9178edb2f98b9057551d70a128db4ac79d2f2eed1b9ee214fe96ca1da29246783f3f76508e2b9a0d290a681a6fcbb6b4bc9406634381422ea5effb5be508114ecc911649c6aa", 0x9a}], 0x2, &(0x7f0000000c80)=[@authinfo={0x18, 0x84, 0x6, {0xf6}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @authinfo={0x18, 0x84, 0x6, {0x62}}], 0x70, 0x10}, 0x20000000) (async)
accept4(r7, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000940)=0x40, 0x4) (async, rerun: 32)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xc}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r11}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x41f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xf7, 0x3, 0x6, 0x2, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x92, &(0x7f00000003c0)=""/146, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x3, r3, 0x8, &(0x7f0000000600)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r11, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, r12, 0x1], 0x0, 0x10, 0xf8e7}, 0x94)
r13 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r13, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async)
sendmmsg$inet(r13, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)="bdce5026d17d126e", 0x8}, {0x0}], 0x2}}], 0x2, 0x2004000) (async)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x24}}, 0x60) (async, rerun: 64)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x82, 0x2}, @generic={0x7, 0x6, "bb8e1297"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (rerun: 64)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)

245.408095ms ago: executing program 1 (id=9429):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={<r1=>0x0, 0x4c, "56839ff97a3dcb4e46c187ecf865e7e5392b981663c8af105b4c460f30b8e98bf4e426dc72a8563a731efec7e0633b7b146ffbb61852809e8859bea02ed41dac9ede27972179f7da21468652"}, &(0x7f0000000080)=0x54)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1}, &(0x7f0000000100)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0xc, 0x0, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x4, [{}, {}, {}, {}]}]}}, &(0x7f0000002b80)=""/176, 0x26, 0xb0, 0x1}, 0x20)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x301080, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fa8000000000000000060000d029aef8fe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x40043d04, 0x0)

244.605426ms ago: executing program 1 (id=9430):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
unshare(0x22020600)
r6 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r1, 0x1, 0x20, 0x0, 0x4, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0x58, 0x3, 0xa, [{@local, 0x2f}, {@multicast1, 0x6}, {@local, 0x7fff}, {@empty, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x47ed}, {@remote, 0x2}, {@broadcast, 0xa}, {@broadcast, 0xfffffffa}]}, @end, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0x6, [{@empty, 0x7f}, {@empty, 0x7}, {@empty, 0x43}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0xf, [{@multicast2, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x39ba}, {@loopback, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x80000000}, {@multicast1, 0x1800}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0xc0000}]}, @noop, @noop, @timestamp={0x44, 0xc, 0x64, 0x0, 0x6, [0xff0d, 0x8]}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x4, [0x9]}, @noop]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611859000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

244.498651ms ago: executing program 2 (id=9431):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv4_newnexthop={0x18, 0x5e, 0xa25, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x10, 0x3, 0x1})

144.288341ms ago: executing program 2 (id=9432):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, 0x0, &(0x7f0000000100)=0x2e)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6d774}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x3c}, 0x1, 0xba01}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r7, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r8}, &(0x7f0000000c80), &(0x7f0000000cc0)=r9}, 0x20)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, <r12=>0xffffffffffffffff}, 0x4)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x16, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}]}, &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x7, 0x6, 0x80000000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r8, r1, r10, r11, r12, r2, r13, r3], &(0x7f0000000740)=[{0x4, 0x1, 0xe, 0x7}, {0x1, 0x2, 0xd, 0x3}], 0x10, 0x2}, 0x94)
sendmsg$AUDIT_LIST_RULES(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f5, 0x8, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c4)
r14 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r14, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x4000004)

144.062988ms ago: executing program 1 (id=9433):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x80503d0a, 0x0)

84.868139ms ago: executing program 2 (id=9434):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\r'], 0x10da)
recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000000ac0)=""/4093, 0xffd}], 0x1}, 0x3}], 0x1, 0x40018020, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)

84.532571ms ago: executing program 1 (id=9435):
r0 = socket$netlink(0x10, 0x3, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r2, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1\x00', <r12=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.508634ms ago: executing program 1 (id=9436):
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x40383d0c, 0x0)

1.033698ms ago: executing program 2 (id=9437):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040), &(0x7f00000002c0)=0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf250600000004000680180007800c0003000000000000000000080002004313e33f6c0005803400028008000300ff0700000800030000003000080001001e000000080002000a00000008000300f4ffffff0800020000040000340002800800020009000000080001000400000008000200010000000800020001010000080003000700000008000200090000004800018044000400200001000a004e230000000700000000000000000000000000000000ff010000200002d1dd46000a004e2400000002fe8000000000000000000000000000aa01c88a272fb1fed1a5ed5d03ecd212b1b0d254175c6d7f8dd595f52f9c3926b4d340859d86a3fe4f7bb35bc845a9f291c3526d80a597da7bf1e023ac7196b93d9b3dd2fb811023d3fda3238f49e123e7f890cfefc80a6f9135a1519ff5a9d5c81138fcda1544d24383a51d71b988f38d9fed37c39d424e9ae2c39c71500124411e5eb1da1c3f9ce3f65a75e67b422ce0e20fc3cdb5b69b2130f1f92c0a812ae6c0185353f32da8110ed331254eb00d3477b29cd0d39551091a80b0b1548c"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x8e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03076003008cb89e08f086dd", 0x0, 0x3ff, 0x60000000, 0x40, 0x0, 0x0, 0x0}, 0xffffffffffffff21)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0x8, 0xffffffffdffffffe, 0x6, 0x9, 0x25, 0x8, 0xe, 0x1, 0xb3, 0x65c, 0x4, 0x3ff, 0xffffffffffffffff, 0xdcd, 0x6]}, &(0x7f0000000440)=0x100)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4)

693.663µs ago: executing program 1 (id=9438):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x40043d0d, 0x0)

0s ago: executing program 2 (id=9439):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)={@remote, @broadcast, 0x0, 0x2, [@remote, @dev={0xac, 0x14, 0x14, 0x36}]}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x9, 0x3, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x8010)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'syztnl0\x00', <r3=>0x0, 0x7de8a80e852b56bf, 0x700, 0x43, 0x351c00, {{0xb, 0x4, 0x3, 0x1a, 0x2c, 0x64, 0x0, 0x4, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x13}, {[@generic={0x89, 0x10, "f7f4690b0befbfce8a847b99df0a"}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_newaddr={0x20, 0x14, 0x200, 0x70bd29, 0x25dfdc01, {0xa, 0x38, 0x4841f755f1e4eb49, 0xfd, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x20}}, 0x48850)
accept4(0xffffffffffffffff, &(0x7f0000000080)=@x25={0x9, @remote}, &(0x7f0000000000)=0x80, 0x40800)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="06055200190000ee6010880000000000630127b1000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'lo\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x4, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}})

kernel console output (not intermixed with test programs):

tover after parsing attributes in process `syz.2.2925'.
[  190.939428][T12766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2924'.
[  190.972683][T12766] bond0: entered promiscuous mode
[  190.974569][T12766] batadv_slave_0: entered promiscuous mode
[  190.978176][T12766] bond0: left promiscuous mode
[  190.980081][T12766] batadv_slave_0: left promiscuous mode
[  191.002679][T12768] gretap1: entered promiscuous mode
[  191.129963][T12777] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.192338][T12781] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  191.517968][T12820] netlink: 'syz.0.2948': attribute type 6 has an invalid length.
[  191.713643][T12839] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  191.752645][T12844] openvswitch: netlink: IP tunnel dst address not specified
[  191.927658][T12866] netlink: 'syz.0.2970': attribute type 1 has an invalid length.
[  191.930252][T12866] netlink: 'syz.0.2970': attribute type 3 has an invalid length.
[  192.179738][T12891] lo speed is unknown, defaulting to 1000
[  193.012855][T12916] __nla_validate_parse: 6 callbacks suppressed
[  193.012874][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2991'.
[  193.133302][   T33] audit: type=1800 audit(1756991047.818:6): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2992" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=5219 res=0 errno=0
[  193.161348][   T33] audit: type=1804 audit(1756991047.838:7): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2992" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=5219 res=1 errno=0
[  193.216015][ T5853] Bluetooth: hci0: command tx timeout
[  193.815456][T12954] syzkaller1: entered promiscuous mode
[  193.828504][T12954] syzkaller1: entered allmulticast mode
[  194.617868][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3011'.
[  194.621699][T12964] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  194.625013][T12964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.861045][T13008] tun0: tun_chr_ioctl cmd 1074025675
[  195.875924][T13008] tun0: persist enabled
[  195.878642][T13008] tun0: tun_chr_ioctl cmd 1074025675
[  195.884221][T13008] tun0: persist disabled
[  195.984356][T13018] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3034'.
[  196.918720][T13030] netlink: 'syz.1.3041': attribute type 10 has an invalid length.
[  197.161698][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3048'.
[  197.171375][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3048'.
[  197.430569][T13072] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3058'.
[  197.509281][T13074] netlink: 'syz.2.3059': attribute type 1 has an invalid length.
[  197.550711][T13074] bond1 (unregistering): Released all slaves
[  198.193048][T13089] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3063'.
[  198.314724][T13095] syzkaller0: entered promiscuous mode
[  198.317177][T13095] syzkaller0: entered allmulticast mode
[  198.382682][T13101] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3069'.
[  199.568061][T13151] netlink: 'syz.0.3086': attribute type 10 has an invalid length.
[  199.746730][T13167] netlink: 'syz.1.3094': attribute type 10 has an invalid length.
[  199.756827][T13167] bridge0: port 1(macsec0) entered blocking state
[  199.759120][T13167] bridge0: port 1(macsec0) entered disabled state
[  199.761816][T13167] macsec0: entered allmulticast mode
[  199.763569][T13167] veth1_macvtap: entered allmulticast mode
[  199.767996][T13167] macsec0: entered promiscuous mode
[  199.812961][T13175] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.3097'.
[  199.870176][T13179] lo speed is unknown, defaulting to 1000
[  200.044609][T13191] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3104'.
[  200.048361][T13191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3104'.
[  200.051857][T13191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3104'.
[  200.296187][T13193] lo speed is unknown, defaulting to 1000
[  200.422495][T13216] lo speed is unknown, defaulting to 1000
[  200.844793][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3114'.
[  201.808702][T13297] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3141'.
[  201.812321][T13297] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  201.821154][T13297] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  204.030648][T13337] netlink: 'syz.1.3159': attribute type 4 has an invalid length.
[  204.098183][T13339] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  204.760359][T13348] lo speed is unknown, defaulting to 1000
[  204.992927][T13357] lo speed is unknown, defaulting to 1000
[  205.074675][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3167'.
[  205.078534][T13362] veth1: entered promiscuous mode
[  205.080928][T13362] netlink: 'syz.1.3167': attribute type 1 has an invalid length.
[  205.083920][T13362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3167'.
[  205.088989][T13362] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  205.186971][T13364] netlink: 'syz.2.3168': attribute type 1 has an invalid length.
[  205.219691][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3168'.
[  205.254375][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3168'.
[  205.346853][T13370] bridge_slave_0: entered promiscuous mode
[  205.799588][T13400] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.890810][T13406] netlink: 'syz.0.3186': attribute type 1 has an invalid length.
[  205.898207][T13406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3186'.
[  206.039353][T13414] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3190'.
[  206.464999][T13444] bridge0: port 1(dummy0) entered disabled state
[  206.500915][ T5314] lo speed is unknown, defaulting to 1000
[  206.504813][T13446] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3203'.
[  206.508846][ T5314] syz1: Port: 1 Link DOWN
[  206.666527][T13457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.672070][T13457] syzkaller0: entered promiscuous mode
[  206.674311][T13457] syzkaller0: entered allmulticast mode
[  206.717169][T13457] tipc: Resetting bearer <eth:syzkaller0>
[  206.721897][T13456] tipc: Resetting bearer <eth:syzkaller0>
[  206.738295][T13456] tipc: Disabling bearer <eth:syzkaller0>
[  206.864048][T13467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3211'.
[  206.873366][T13467] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  208.538835][T13527] netlink: 'syz.2.3238': attribute type 10 has an invalid length.
[  208.541986][T13527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3238'.
[  208.547121][T13527] dummy0: entered promiscuous mode
[  208.556561][T13527] dummy0: entered allmulticast mode
[  208.560234][T13527] bridge0: port 1(dummy0) entered blocking state
[  208.566232][T13527] bridge0: port 1(dummy0) entered disabled state
[  208.577991][T13527] bridge0: port 1(dummy0) entered blocking state
[  208.580643][T13527] bridge0: port 1(dummy0) entered forwarding state
[  208.661026][T13532] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  208.812931][T13545] netlink: 'syz.1.3246': attribute type 20 has an invalid length.
[  208.881223][T13555] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3251'.
[  208.963018][T13559] lo speed is unknown, defaulting to 1000
[  209.615957][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.098748][T13625] lo speed is unknown, defaulting to 1000
[  210.162257][T13634] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  210.228777][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'.
[  210.327423][T13651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3293'.
[  210.353742][T13653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3295'.
[  210.431772][T13657] lo speed is unknown, defaulting to 1000
[  210.851840][T13684] netlink: 'syz.2.3308': attribute type 1 has an invalid length.
[  211.241553][T13703] lo speed is unknown, defaulting to 1000
[  211.784685][T13737] vlan2: entered promiscuous mode
[  213.059512][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3346'.
[  213.171719][T13783] netlink: 'syz.1.3349': attribute type 1 has an invalid length.
[  213.241554][T13789] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3350'.
[  213.250448][T13789] hsr_slave_0: left promiscuous mode
[  213.258086][T13789] hsr_slave_1: left promiscuous mode
[  213.348827][T13799] netlink: get zone limit has 8 unknown bytes
[  213.431696][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3358'.
[  213.438230][T13806] macsec0: left allmulticast mode
[  213.440207][T13806] veth1_macvtap: left allmulticast mode
[  213.443373][T13806] macsec0: left promiscuous mode
[  213.445586][T13806] bridge0: port 1(macsec0) entered disabled state
[  214.019310][T13859] Bluetooth: MGMT ver 1.23
[  214.823386][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3413'.
[  214.827864][T13940] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3410'.
[  214.936961][T13943] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.991759][T13948] netlink: 'syz.2.3417': attribute type 1 has an invalid length.
[  215.066634][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3420'.
[  215.109966][T13958] netlink: 'syz.0.3422': attribute type 10 has an invalid length.
[  215.219993][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3427'.
[  215.257867][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3425'.
[  215.385622][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3430'.
[  215.388956][T13976] netlink: 'syz.0.3430': attribute type 1 has an invalid length.
[  215.442972][T13980] Unsupported ieee802154 address type: 0
[  215.852845][T14004] netlink: 'syz.1.3439': attribute type 9 has an invalid length.
[  215.856228][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'.
[  216.133965][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3448'.
[  216.151692][T14021] syzkaller1: entered promiscuous mode
[  216.154166][T14021] syzkaller1: entered allmulticast mode
[  216.282183][T14028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.341791][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'.
[  216.892216][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3462'.
[  216.932294][T14052] lo speed is unknown, defaulting to 1000
[  217.522973][T14068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3469'.
[  218.318832][T14074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3471'.
[  218.324794][T14074] netlink: 'syz.1.3471': attribute type 29 has an invalid length.
[  218.896297][T14113] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3485'.
[  219.803139][T14169] lo speed is unknown, defaulting to 1000
[  219.807628][T14172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3513'.
[  219.868351][T14175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.874912][T14175] veth0_to_bridge: entered promiscuous mode
[  219.880326][T14175] veth0_to_bridge: entered allmulticast mode
[  219.934707][T14171] tipc: Disabling bearer <eth:syzkaller0>
[  220.341102][T14210] batadv1: entered promiscuous mode
[  220.343519][T14210] batadv1: entered allmulticast mode
[  220.407536][T14216] __nla_validate_parse: 3 callbacks suppressed
[  220.407551][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3529'.
[  220.412998][T14216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3529'.
[  220.722511][T14241] netlink: 'syz.1.3541': attribute type 21 has an invalid length.
[  221.058013][T14251] geneve3: entered allmulticast mode
[  221.322019][T14262] openvswitch: netlink: Message has 16 unknown bytes.
[  221.421117][T14266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.425398][T14266] syzkaller0: entered promiscuous mode
[  221.428119][T14266] syzkaller0: entered allmulticast mode
[  221.463547][T14266] tipc: Resetting bearer <eth:syzkaller0>
[  221.482315][T14265] tipc: Resetting bearer <eth:syzkaller0>
[  221.514403][T14265] tipc: Disabling bearer <eth:syzkaller0>
[  221.634405][T14279] gretap0: entered promiscuous mode
[  221.656565][T14279] gretap0: left promiscuous mode
[  221.939869][T14313] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3576'.
[  222.109285][T14327] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  222.474073][T14366] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  222.494225][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3602'.
[  222.570903][T14372] bond8: entered promiscuous mode
[  222.680160][T14391] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3613'.
[  222.702073][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3614'.
[  222.750277][T14398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3616'.
[  223.004164][T14420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.008779][T14420] netlink: 'syz.2.3625': attribute type 1 has an invalid length.
[  223.011971][T14420] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3625'.
[  223.363023][T14444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3637'.
[  224.055616][T14492] geneve4: entered promiscuous mode
[  224.198441][T14503] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  224.284394][T14506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3665'.
[  224.445997][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.696136][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.994804][T14561] netlink: 'syz.2.3685': attribute type 1 has an invalid length.
[  225.167761][T14573] batadv0: entered promiscuous mode
[  225.372101][T14588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.386585][T14588] syzkaller0: entered promiscuous mode
[  225.388808][T14588] syzkaller0: entered allmulticast mode
[  225.402131][T14588] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  225.979453][T14636] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  225.993871][T14638] tipc: Resetting bearer <eth:syzkaller0>
[  226.217915][T14586] tipc: Resetting bearer <eth:syzkaller0>
[  226.249536][T14586] tipc: Disabling bearer <eth:syzkaller0>
[  226.442506][T14660] __nla_validate_parse: 1 callbacks suppressed
[  226.442520][T14660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3733'.
[  226.459553][T14662] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  227.034015][T14714] bond0: entered promiscuous mode
[  227.041901][T14714] bond0: left promiscuous mode
[  227.262756][T14720] netlink: 'syz.0.3757': attribute type 10 has an invalid length.
[  227.271914][T14720] dummy0: left allmulticast mode
[  227.273917][T14720] dummy0: left promiscuous mode
[  227.282122][T14720] bridge0: port 1(dummy0) entered disabled state
[  227.308186][T14720] team0: Failed to send options change via netlink (err -105)
[  227.318003][T14720] team0: Port device dummy0 added
[  227.323149][T14721] netlink: 'syz.0.3757': attribute type 10 has an invalid length.
[  227.327158][T14721] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  227.339334][T14721] team0: Failed to send options change via netlink (err -105)
[  227.343571][T14721] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  227.348520][T14721] team0: Port device dummy0 removed
[  227.359932][T14721] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  227.793116][T14732] geneve2: entered promiscuous mode
[  229.665295][T14833] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3806'.
[  229.669210][T14833] netlink: 'syz.0.3806': attribute type 1 has an invalid length.
[  230.352598][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3838'.
[  230.388557][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3839'.
[  230.453254][T14909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3843'.
[  230.649991][T14928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.816665][T14944] veth7: entered promiscuous mode
[  231.403621][T15003] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3883'.
[  231.617491][T15029] macvtap1: entered promiscuous mode
[  231.619591][T15029] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode
[  231.629295][T15029] mac80211_hwsim hwsim12 wlan1: left promiscuous mode
[  231.712915][T15039] netlink: 'syz.2.3901': attribute type 39 has an invalid length.
[  231.719668][T15039] veth0_macvtap: left promiscuous mode
[  233.298823][T15171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3955'.
[  233.922640][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3976'.
[  234.511358][T15261] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.530614][T15261] bridge3: entered promiscuous mode
[  235.113311][T15299] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.170153][T15303] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4011'.
[  235.178973][T15303] netlink: 'syz.0.4011': attribute type 1 has an invalid length.
[  235.599511][T15336] tap0: tun_chr_ioctl cmd 1074025681
[  235.804183][T15358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4034'.
[  235.978844][T15370] netlink: 'syz.0.4039': attribute type 1 has an invalid length.
[  236.058955][T15366] bridge0: port 1(dummy0) entered disabled state
[  236.081474][T15366] batadv0: left promiscuous mode
[  236.284892][T15366] vlan1: left allmulticast mode
[  236.286669][T15366] veth0_vlan: left allmulticast mode
[  236.316420][T15366] tipc: Resetting bearer <eth:syzkaller0>
[  236.320643][T15366] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  236.323019][T15366] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  236.330540][T15366] erspan0: left allmulticast mode
[  236.332552][T15366] macvtap1: left promiscuous mode
[  236.334264][T15366] macvtap1: left allmulticast mode
[  236.342940][T15366] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  236.345343][T15366] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  236.348276][T15366] macsec0: left promiscuous mode
[  236.350215][T15366] macsec0: left allmulticast mode
[  236.362754][T15366] gretap1: left promiscuous mode
[  236.370749][T15366] vlan2: left promiscuous mode
[  236.373673][T15366] geneve2: left promiscuous mode
[  236.376110][T15366] bridge3: left promiscuous mode
[  236.385594][ T5677] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  236.396085][ T5677] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  236.399012][ T5677] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  236.410883][ T5677] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.086017][T15433] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.099332][T15433] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  237.102874][T15433] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  237.328061][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4077'.
[  237.419445][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4080'.
[  237.912091][T15487] veth0_to_bond: entered allmulticast mode
[  237.958469][   T33] audit: type=1804 audit(1756991092.648:8): pid=15490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4092" name="/newroot/1388/cgroup.controllers" dev="tmpfs" ino=7013 res=1 errno=0
[  237.963923][T15491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.970241][   T33] audit: type=1800 audit(1756991092.648:9): pid=15490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4092" name="cgroup.controllers" dev="tmpfs" ino=7013 res=0 errno=0
[  237.989882][T15491] syzkaller0: entered promiscuous mode
[  237.992314][T15491] syzkaller0: entered allmulticast mode
[  238.012493][T15491] tipc: Resetting bearer <eth:syzkaller0>
[  238.018444][T15488] tipc: Resetting bearer <eth:syzkaller0>
[  238.034070][T15488] tipc: Disabling bearer <eth:syzkaller0>
[  239.774985][T15567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.781473][T15567] syzkaller0: entered promiscuous mode
[  239.783694][T15567] syzkaller0: entered allmulticast mode
[  239.820547][T15567] tipc: Resetting bearer <eth:syzkaller0>
[  239.833129][T15566] tipc: Resetting bearer <eth:syzkaller0>
[  239.864418][T15566] tipc: Disabling bearer <eth:syzkaller0>
[  240.085102][T15595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.123818][T15595] syzkaller0: entered promiscuous mode
[  240.125916][T15595] syzkaller0: entered allmulticast mode
[  240.128693][T15595] tipc: Resetting bearer <eth:syzkaller0>
[  240.149457][T15593] tipc: Resetting bearer <eth:syzkaller0>
[  241.093201][T15615] netlink: 'syz.0.4148': attribute type 10 has an invalid length.
[  241.399123][T15593] tipc: Disabling bearer <eth:syzkaller0>
[  241.765622][T15643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4160'.
[  241.954803][T15657] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4167'.
[  242.140247][T15672] netlink: zone id is out of range
[  242.142656][T15672] netlink: zone id is out of range
[  242.144879][T15672] netlink: set zone limit has 4 unknown bytes
[  242.370298][T15688] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  242.451675][T15694] netlink: 'syz.0.4183': attribute type 13 has an invalid length.
[  242.941156][T15731] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4193'.
[  243.350717][T15747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.502320][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4200'.
[  243.761564][T15776] netlink: 'syz.0.4210': attribute type 5 has an invalid length.
[  243.764701][T15776] netlink: 'syz.0.4210': attribute type 7 has an invalid length.
[  243.848482][T15783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4213'.
[  243.877445][T15786] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.932667][T15786] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.993748][T15786] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.061266][T15786] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.180076][ T5890] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.199491][ T5890] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.217441][ T5890] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.242262][ T5890] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.323705][   T33] audit: type=1107 audit(1756991099.008:10): pid=15827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  244.415038][T15838] ip6tnl2: entered allmulticast mode
[  244.469447][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4242'.
[  244.664896][T15863] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.4250'.
[  244.830161][T15871] smc: net device bond0 applied user defined pnetid SYZ2
[  244.839270][T15871] smc: net device bond0 erased user defined pnetid SYZ2
[  244.946319][T15868] tipc: Resetting bearer <eth:syzkaller0>
[  245.085902][T15881] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4258'.
[  245.562188][T15894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4264'.
[  245.861727][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4275'.
[  246.035504][T15933] ipvlan3: entered promiscuous mode
[  246.041549][T15933] bridge0: port 2(ipvlan3) entered blocking state
[  246.044380][T15933] bridge0: port 2(ipvlan3) entered disabled state
[  246.049678][T15933] ipvlan3: entered allmulticast mode
[  246.051991][T15933] gretap0: entered allmulticast mode
[  246.056839][T15933] ipvlan3: left allmulticast mode
[  246.059047][T15933] gretap0: left allmulticast mode
[  246.545486][T15959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.604183][T15959] syzkaller0: entered promiscuous mode
[  246.606811][T15959] syzkaller0: entered allmulticast mode
[  246.609682][T15959] tipc: Resetting bearer <eth:syzkaller0>
[  246.638152][T15957] tipc: Resetting bearer <eth:syzkaller0>
[  248.267314][T15957] tipc: Disabling bearer <eth:syzkaller0>
[  248.284021][T15968] bridge0: entered allmulticast mode
[  248.576436][T15989] sctp: [Deprecated]: syz.2.4306 (pid 15989) Use of int in max_burst socket option.
[  248.576436][T15989] Use struct sctp_assoc_value instead
[  248.908086][T16013] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4318'.
[  249.136851][T16028] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  249.372896][T16047] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4333'.
[  249.554031][   T33] audit: type=1800 audit(1756991104.238:11): pid=16052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4333" name="memory.events" dev="tmpfs" ino=7435 res=0 errno=0
[  249.697418][T16063] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  249.699970][T16063] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  250.240577][T16093] syzkaller1: tun_chr_ioctl cmd 1074025677
[  250.243141][T16093] syzkaller1: linktype set to 823
[  250.573776][T16107] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.580932][T16107] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  250.584054][T16107] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  250.637082][T16113] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4362'.
[  251.053190][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4373'.
[  251.148744][T16148] sit0: entered promiscuous mode
[  251.151046][T16148] netlink: 'syz.1.4377': attribute type 1 has an invalid length.
[  251.153951][T16148] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4377'.
[  251.607948][T16198] netlink: 'syz.0.4398': attribute type 9 has an invalid length.
[  252.193326][T16216] veth0_vlan: entered allmulticast mode
[  253.697855][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4429'.
[  254.041282][T16285] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  254.851687][T16338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4457'.
[  255.732773][T16372] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4468'.
[  255.922528][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4474'.
[  256.601406][T16407] syz.1.4483 (16407) used obsolete PPPIOCDETACH ioctl
[  256.883159][T16421] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4489'.
[  257.043172][T16437] sctp: [Deprecated]: syz.1.4498 (pid 16437) Use of int in maxseg socket option.
[  257.043172][T16437] Use struct sctp_assoc_value instead
[  257.100933][T16442] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  257.104227][T16442] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.259847][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4507'.
[  257.263698][T16456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.313530][T16501] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4525'.
[  258.571264][T16516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.605356][T16516] syzkaller0: entered promiscuous mode
[  258.607734][T16516] syzkaller0: entered allmulticast mode
[  258.610507][T16516] tipc: Resetting bearer <eth:syzkaller0>
[  258.617321][T16515] tipc: Resetting bearer <eth:syzkaller0>
[  260.245929][T16515] tipc: Disabling bearer <eth:syzkaller0>
[  261.016124][  T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.349315][T16605] macsec1: entered promiscuous mode
[  261.351059][T16605] bridge0: entered promiscuous mode
[  261.354219][T16605] bridge0: left promiscuous mode
[  261.697129][T16631] bond1: entered promiscuous mode
[  261.699196][T16631] bond1: entered allmulticast mode
[  261.701648][T16631] 8021q: adding VLAN 0 to HW filter on device bond1
[  261.739171][T16634] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  261.743277][T16634] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  261.777515][  T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.970231][T16653] netlink: 'syz.2.4593': attribute type 12 has an invalid length.
[  262.963760][T16701] netlink: 'syz.0.4613': attribute type 3 has an invalid length.
[  262.969587][T16701] netlink: 'syz.0.4613': attribute type 3 has an invalid length.
[  263.883289][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4634'.
[  264.067590][T16766] vlan3: entered promiscuous mode
[  264.070274][T16766] syz_tun: entered promiscuous mode
[  264.147964][T16772] netlink: 'syz.1.4647': attribute type 27 has an invalid length.
[  264.158310][T16772] netlink: 'syz.1.4647': attribute type 27 has an invalid length.
[  264.497140][T16793] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4657'.
[  264.584847][   T33] audit: type=1107 audit(1756991119.268:12): pid=16798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  264.773666][T16809] netlink: 'syz.2.4665': attribute type 4 has an invalid length.
[  265.376865][T16839] netlink: 'syz.1.4680': attribute type 1 has an invalid length.
[  265.381963][T16839] netlink: 'syz.1.4680': attribute type 1 has an invalid length.
[  265.385003][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4680'.
[  265.393532][T16839] block nbd0: shutting down sockets
[  265.407950][T16841] syzkaller1: entered promiscuous mode
[  265.410209][T16841] syzkaller1: entered allmulticast mode
[  265.749344][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4695'.
[  265.961539][T16884] netlink: 'syz.0.4701': attribute type 23 has an invalid length.
[  266.089168][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4706'.
[  266.093316][T16894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4706'.
[  266.094083][T16893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4705'.
[  266.192353][T16897] smc: net device bond0 applied user defined pnetid SYZ2
[  266.195374][T16897] smc: net device bond0 erased user defined pnetid SYZ2
[  266.292605][T16909] openvswitch: netlink: Message has 16 unknown bytes.
[  266.427605][T16916] IPVS: persistence engine module ip_vs_pe_ not found
[  267.112664][T16979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.498156][T16997] netlink: 'syz.2.4744': attribute type 8 has an invalid length.
[  267.861216][T17016] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  267.863545][T17016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4752'.
[  267.867125][T17016] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  267.994349][T17023] sit1: entered promiscuous mode
[  267.997356][T17023] team0: Port device sit1 added
[  268.121426][T17037] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4761'.
[  268.225064][T17047] bond0: entered promiscuous mode
[  268.228002][T17047] ip6erspan0: entered promiscuous mode
[  268.233466][T17047] bond0: left promiscuous mode
[  268.235548][T17047] ip6erspan0: left promiscuous mode
[  269.250897][T17130] netlink: 'syz.0.4802': attribute type 7 has an invalid length.
[  269.253424][T17130] netlink: 'syz.0.4802': attribute type 8 has an invalid length.
[  269.331156][T17138] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4806'.
[  270.833760][T17152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.849385][T17152] syzkaller0: entered promiscuous mode
[  270.854272][T17152] syzkaller0: entered allmulticast mode
[  270.874031][T17152] tipc: Resetting bearer <eth:syzkaller0>
[  270.878368][T17150] tipc: Resetting bearer <eth:syzkaller0>
[  270.887303][T17150] tipc: Disabling bearer <eth:syzkaller0>
[  271.023115][T17171] netlink: 'syz.0.4821': attribute type 31 has an invalid length.
[  272.083035][T17229] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4847'.
[  272.243414][T17243] : renamed from batadv_slave_1
[  272.263318][T17247] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4855'.
[  274.540212][T17375] ip6gretap3: entered allmulticast mode
[  274.579444][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4911'.
[  275.001693][T17401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4922'.
[  275.052281][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'.
[  275.242031][T17421] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4932'.
[  275.532713][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4943'.
[  275.818028][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'.
[  275.828381][T17451] macsec1: entered promiscuous mode
[  275.834045][T17451] syzkaller0: entered promiscuous mode
[  275.843037][T17451] batman_adv: batadv0: Adding interface: macsec1
[  275.850106][T17451] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.869428][T17451] batman_adv: batadv0: Interface activated: macsec1
[  275.883271][T17450] batman_adv: batadv0: Interface deactivated: macsec1
[  275.887180][T17450] syzkaller0 (unregistering): left promiscuous mode
[  275.911089][T17450] batman_adv: batadv0: Removing interface: macsec1
[  276.903677][T17523] batadv_slave_1: entered promiscuous mode
[  276.912852][T17522] batadv_slave_1: left promiscuous mode
[  277.014064][T17535] macsec1: entered promiscuous mode
[  277.018948][T17535] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode
[  277.030985][T17535] mac80211_hwsim hwsim12 wlan1: left promiscuous mode
[  277.194553][T17548] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4985'.
[  277.268016][T17555] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4988'.
[  277.330629][T17559] netlink: 'syz.0.4990': attribute type 1 has an invalid length.
[  277.333791][T17559] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4990'.
[  277.471033][T17566] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  277.870515][T17593] IPVS: Error connecting to the multicast addr
[  277.988595][T17604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5010'.
[  279.097950][T17638] raw_sendmsg: syz.0.5026 forgot to set AF_INET. Fix it!
[  280.376902][T17695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.407122][T17695] syzkaller0: entered promiscuous mode
[  280.409500][T17695] syzkaller0: entered allmulticast mode
[  280.411886][T17695] tipc: Resetting bearer <eth:syzkaller0>
[  280.461279][T17694] tipc: Resetting bearer <eth:syzkaller0>
[  281.962436][T17694] tipc: Disabling bearer <eth:syzkaller0>
[  282.368471][T17743] __nla_validate_parse: 3 callbacks suppressed
[  282.368482][T17743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5065'.
[  282.374342][T17743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5065'.
[  282.377851][T17743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5065'.
[  282.380888][T17743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5065'.
[  282.912030][T17766] syzkaller0: entered promiscuous mode
[  282.914498][T17766] syzkaller0: entered allmulticast mode
[  282.922481][T17766] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5082'.
[  283.132642][T17777] netlink: 'syz.2.5087': attribute type 1 has an invalid length.
[  283.183674][T17777] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  283.191653][T17777] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  283.249134][T17783] gretap2: entered promiscuous mode
[  283.253967][T17783] bond3: (slave gretap2): making interface the new active one
[  283.260113][T17783] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  283.352022][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5091'.
[  283.443658][T17797] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5095'.
[  283.875924][T17826] netlink: 'syz.0.5106': attribute type 4 has an invalid length.
[  283.880118][T17826] netlink: 'syz.0.5106': attribute type 4 has an invalid length.
[  283.939497][T17830] vlan2: entered promiscuous mode
[  283.941725][T17830] bond0: entered promiscuous mode
[  283.943859][T17830] batadv_slave_0: entered promiscuous mode
[  284.015049][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5106'.
[  285.215245][T17888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5134'.
[  285.245470][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5134'.
[  285.249592][T17888] netlink: 'syz.1.5134': attribute type 10 has an invalid length.
[  286.591835][T18006] openvswitch: netlink: Duplicate or invalid key (type 0).
[  286.594948][T18006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.865462][T18032] bond0: entered promiscuous mode
[  286.872761][T18032] dummy0: entered promiscuous mode
[  286.876430][T18032] bond0: left promiscuous mode
[  286.878388][T18032] dummy0: left promiscuous mode
[  287.385072][T18071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.438995][T18075] netlink: 'syz.1.5219': attribute type 15 has an invalid length.
[  287.526156][T18081] smc: net device bond0 applied user defined pnetid SYZ2
[  287.926113][T18115] netlink: 'syz.1.5238': attribute type 1 has an invalid length.
[  287.929379][T18115] __nla_validate_parse: 7 callbacks suppressed
[  287.929392][T18115] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5238'.
[  288.244635][T18133] netlink: 'syz.1.5247': attribute type 4 has an invalid length.
[  288.251074][T18133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5247'.
[  288.326722][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5250'.
[  288.330638][T18143] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  288.687793][T18168] smc: net device bond0 erased user defined pnetid SYZ2
[  288.890403][T18186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5270'.
[  288.893190][T18186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5270'.
[  288.931202][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5269'.
[  288.949032][T18193] openvswitch: netlink: Message has 20 unknown bytes.
[  288.951827][T18193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.051248][T18197] netlink: 'syz.2.5274': attribute type 13 has an invalid length.
[  289.053721][T18197] netlink: 'syz.2.5274': attribute type 17 has an invalid length.
[  289.061604][T18197] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  289.331244][T18216] netlink: 'syz.0.5280': attribute type 2 has an invalid length.
[  289.962153][T18256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  290.174945][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5306'.
[  290.192786][T18274] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  290.345648][T18279] ip6gretap1: entered allmulticast mode
[  291.302902][T18313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5324'.
[  291.306717][T18313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5324'.
[  291.346570][T18315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5325'.
[  291.357725][T18315] bridge5: the hash_elasticity option has been deprecated and is always 16
[  291.510157][T18327] openvswitch: netlink: IP tunnel dst address not specified
[  291.687393][T18341] sctp: [Deprecated]: syz.0.5337 (pid 18341) Use of int in max_burst socket option.
[  291.687393][T18341] Use struct sctp_assoc_value instead
[  291.934752][T18355] netlink: 'syz.2.5344': attribute type 3 has an invalid length.
[  291.982972][T18357] netlink: 'syz.2.5345': attribute type 1 has an invalid length.
[  292.007652][T18357] 8021q: adding VLAN 0 to HW filter on device bond4
[  292.185368][T18376] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  292.353053][T18388] macvlan3: entered promiscuous mode
[  292.535919][T18376] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  292.886079][T18376] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  293.016917][T18376] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  293.498624][T18459] __nla_validate_parse: 7 callbacks suppressed
[  293.498636][T18459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5390'.
[  294.236026][T18489] nbd0: detected capacity change from 0 to 127
[  294.243860][   T56] block nbd0: Receive control failed (result -32)
[  294.894736][T18528] netlink: 'syz.0.5419': attribute type 1 has an invalid length.
[  294.924678][T18528] 8021q: adding VLAN 0 to HW filter on device bond5
[  294.945343][T18528] bond5: (slave ip6gretap2): making interface the new active one
[  294.949887][T18528] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link
[  294.971149][T18528] veth1: entered promiscuous mode
[  294.976778][T18528] bond5: (slave veth1): Enslaving as an active interface with a down link
[  294.982031][T18528] erspan0: entered allmulticast mode
[  294.988620][T18528] bond5: (slave erspan0): Enslaving as an active interface with an up link
[  295.039728][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5422'.
[  295.045426][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5422'.
[  295.050467][T18536] netlink: 'syz.0.5422': attribute type 18 has an invalid length.
[  295.540216][T18558] smc: net device bond0 applied user defined pnetid SYZ2
[  295.646458][T18564] erspan0: left allmulticast mode
[  295.671453][T18564] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  295.788614][T18571] veth0: entered promiscuous mode
[  295.792656][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5436'.
[  295.824643][T18571] veth0 (unregistering): left promiscuous mode
[  295.879296][T18571] bond5: (slave veth1): Releasing active interface
[  295.881541][T18571] ip6gretap2: entered promiscuous mode
[  296.021076][T18588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5445'.
[  296.024819][T18588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5445'.
[  296.693025][T18618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5456'.
[  296.824240][T18623] netlink: 'syz.1.5459': attribute type 10 has an invalid length.
[  297.107029][   T33] audit: type=1800 audit(1756991151.798:13): pid=18637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5462" name="memory.events" dev="tmpfs" ino=9148 res=0 errno=0
[  297.486385][T18672] vlan3: entered allmulticast mode
[  297.488604][T18672] bond0: entered allmulticast mode
[  297.490859][T18672] dummy0: entered allmulticast mode
[  297.533358][T18661] infiniband syz0: set down
[  297.535386][T18661] infiniband syz0: added veth0_vlan
[  297.569189][T18661] RDS/IB: syz0: added
[  297.571547][T18661] smc: adding ib device syz0 with port count 1
[  297.574058][T18661] smc:    ib device syz0 port 1 has pnetid 
[  297.649089][T18679] IPVS: length: 24 != 55320
[  298.276117][T18709] netlink: 'syz.2.5494': attribute type 3 has an invalid length.
[  298.281537][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5494'.
[  298.483995][T18723] netlink: 'syz.0.5500': attribute type 10 has an invalid length.
[  298.488910][T18723] 8021q: adding VLAN 0 to HW filter on device team0
[  298.492823][T18723] team0: entered allmulticast mode
[  298.495982][T18723] bond0: (slave team0): Enslaving as an active interface with an up link
[  298.501249][T18723] netlink: 'syz.0.5500': attribute type 10 has an invalid length.
[  298.514594][T18723] syz_tun: entered allmulticast mode
[  298.516908][T18723] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  298.539871][T18723] 8021q: adding VLAN 0 to HW filter on device bond6
[  299.120925][T18743] netlink: 'syz.1.5506': attribute type 21 has an invalid length.
[  299.645414][T18772] vxcan1: entered allmulticast mode
[  300.331052][T18812] vlan3: entered allmulticast mode
[  300.333193][T18812] bridge_slave_0: entered allmulticast mode
[  300.457234][T18818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5539'.
[  300.658117][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5547'.
[  300.944943][T18868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5563'.
[  301.045668][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5568'.
[  301.112540][T18883] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5571'.
[  301.155580][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5572'.
[  301.165084][T18888] macvlan3: entered promiscuous mode
[  301.169716][T18888] bond0: entered promiscuous mode
[  301.171417][T18888] ip6erspan0: entered promiscuous mode
[  301.174546][T18888] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  301.232003][T18893] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5573'.
[  301.282971][T18899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5577'.
[  301.285601][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5577'.
[  301.319365][T18899] bond5: entered promiscuous mode
[  301.321572][T18899] bond5: entered allmulticast mode
[  301.323470][T18899] 8021q: adding VLAN 0 to HW filter on device bond5
[  301.534201][T18907] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5580'.
[  303.213833][T18973] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  303.227712][T18973] dummy0: left allmulticast mode
[  303.232150][T18973] bond0 (unregistering): (slave team0): Releasing backup interface
[  303.250229][T18973] team0: left allmulticast mode
[  303.257218][T18973] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  303.262132][T18973] syz_tun: left allmulticast mode
[  303.266284][T18973] bond0 (unregistering): Released all slaves
[  303.870836][T19018] sctp: [Deprecated]: syz.1.5624 (pid 19018) Use of int in max_burst socket option deprecated.
[  303.870836][T19018] Use struct sctp_assoc_value instead
[  305.912387][T19103] __nla_validate_parse: 3 callbacks suppressed
[  305.912401][T19103] netlink: 664 bytes leftover after parsing attributes in process `syz.0.5663'.
[  305.919424][T19103] netlink: 664 bytes leftover after parsing attributes in process `syz.0.5663'.
[  305.975855][   T33] audit: type=1800 audit(1756991160.658:14): pid=19107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5666" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=9958 res=0 errno=0
[  306.157024][T19118] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.5672'.
[  306.398906][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5679'.
[  306.402655][T19136] nbd: couldn't find a device at index 65546
[  306.987117][ T5890] ip6gretap2: left promiscuous mode
[  307.120805][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5697'.
[  308.031510][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5714'.
[  309.226558][T19250] netlink: 'syz.0.5726': attribute type 1 has an invalid length.
[  309.230114][T19250] netlink: 'syz.0.5726': attribute type 1 has an invalid length.
[  309.249789][T19252] syzkaller1: entered promiscuous mode
[  309.252248][T19252] syzkaller1: entered allmulticast mode
[  309.712971][T19270] netlink: 'syz.2.5738': attribute type 13 has an invalid length.
[  309.723628][T19270] netlink: 'syz.2.5738': attribute type 17 has an invalid length.
[  309.772372][T19270] erspan0: left promiscuous mode
[  309.813948][T19270] 8021q: adding VLAN 0 to HW filter on device team0
[  309.821946][T19270] bridge0: port 1(dummy0) entered blocking state
[  309.824895][T19270] bridge0: port 1(dummy0) entered forwarding state
[  309.837270][T19270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.830212][ T5677] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  311.253028][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5764'.
[  312.599635][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5794'.
[  313.020312][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5807'.
[  313.275039][T19450] netlink: 'syz.2.5816': attribute type 1 has an invalid length.
[  314.488165][T19523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.655988][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  314.910594][T19566] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5864'.
[  315.171855][T19580] lo speed is unknown, defaulting to 1000
[  315.174755][T19580] lo speed is unknown, defaulting to 1000
[  315.179162][T19580] lo speed is unknown, defaulting to 1000
[  315.203567][T19580] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  315.235576][T19587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5869'.
[  315.249802][T19580] lo speed is unknown, defaulting to 1000
[  315.253649][T19580] lo speed is unknown, defaulting to 1000
[  315.265582][T19587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5869'.
[  315.280855][T19580] lo speed is unknown, defaulting to 1000
[  315.301370][T19592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5875'.
[  315.327565][T19580] lo speed is unknown, defaulting to 1000
[  315.336400][T19587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.439427][T19579] tipc: Disabling bearer <eth:syzkaller0>
[  315.493946][T19600] ip6gre1: entered allmulticast mode
[  315.572710][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5882'.
[  315.577447][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5882'.
[  315.580406][T19607] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5882'.
[  316.364903][T19642] syzkaller1: entered promiscuous mode
[  316.367346][T19642] syzkaller1: entered allmulticast mode
[  316.790289][T19666] tc_dump_action: action bad kind
[  317.457076][T19712] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.512399][T19712] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.573979][T19712] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.631972][T19712] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.739516][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.764047][ T5876] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.769695][T19733] tun0: tun_chr_ioctl cmd 1074025675
[  317.773094][T19733] tun0: persist enabled
[  317.793159][T19733] tun0: tun_chr_ioctl cmd 1074025675
[  317.795462][T19733] tun0: persist disabled
[  317.797456][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.827831][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.999102][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5942'.
[  318.081285][T19757] siw: device registration error -23
[  318.087464][T19757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5943'.
[  318.105651][T19761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5945'.
[  318.241786][T19767] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5948'.
[  318.281204][T19771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5950'.
[  318.650752][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5961'.
[  319.066866][T19825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.431068][T19841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.553374][T19849] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5986'.
[  319.592653][T19853] netlink: 'syz.2.5988': attribute type 58 has an invalid length.
[  319.596199][T19853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5988'.
[  320.422868][T19920] netlink: 'syz.1.6021': attribute type 6 has an invalid length.
[  320.657704][T19945] netlink: 'syz.2.6032': attribute type 10 has an invalid length.
[  320.660616][T19945] macvlan1: entered allmulticast mode
[  320.662951][T19945] team0: Device macvlan1 is of different type
[  320.689859][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6034'.
[  320.805589][T19962] netlink: 'syz.2.6040': attribute type 2 has an invalid length.
[  320.988032][T19980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.042746][T19983] vlan3: entered promiscuous mode
[  321.044932][T19983] macvtap0: entered promiscuous mode
[  321.092340][T19983] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6048'.
[  321.433759][T19996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.896172][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  322.980736][T20062] syzkaller1: entered promiscuous mode
[  322.982968][T20062] syzkaller1: entered allmulticast mode
[  323.026961][T20064] syzkaller1: entered promiscuous mode
[  323.028662][T20064] syzkaller1: entered allmulticast mode
[  323.371161][T20096] sctp: [Deprecated]: syz.2.6096 (pid 20096) Use of int in maxseg socket option.
[  323.371161][T20096] Use struct sctp_assoc_value instead
[  324.269518][T20127] __nla_validate_parse: 1 callbacks suppressed
[  324.269534][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6110'.
[  324.421563][T20136] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  324.545592][T20145] netlink: 'syz.1.6118': attribute type 10 has an invalid length.
[  324.804330][T20169] netlink: 'syz.0.6130': attribute type 3 has an invalid length.
[  324.825941][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6130'.
[  324.830698][T20169] netlink: 'syz.0.6130': attribute type 3 has an invalid length.
[  324.833694][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6130'.
[  325.003205][T20187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6138'.
[  325.074270][T20190] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.077965][T20190] syzkaller0: entered promiscuous mode
[  325.080257][T20190] syzkaller0: entered allmulticast mode
[  325.090787][T20190] tipc: Resetting bearer <eth:syzkaller0>
[  325.095010][T20189] tipc: Resetting bearer <eth:syzkaller0>
[  325.111860][T20189] tipc: Disabling bearer <eth:syzkaller0>
[  325.141466][T20192] netlink: 'syz.2.6140': attribute type 6 has an invalid length.
[  325.144739][T20192] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6140'.
[  325.383520][T20217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.387189][T20217] syzkaller0: entered promiscuous mode
[  325.389555][T20217] syzkaller0: entered allmulticast mode
[  325.405254][T20217] tipc: Resetting bearer <eth:syzkaller0>
[  325.410297][T20215] tipc: Resetting bearer <eth:syzkaller0>
[  325.419732][T20215] tipc: Disabling bearer <eth:syzkaller0>
[  325.429626][T20220] tipc: Enabled bearer <udp:syz2>, priority 10
[  325.437259][T20220] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  325.440732][T20220] tipc: Enabled bearer <udp:syz0>, priority 10
[  325.448751][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6154'.
[  325.535417][T20230] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6159'.
[  325.569259][T20232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.590079][T20234] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  325.963310][T20264] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6174'.
[  325.989804][T20268] openvswitch: netlink: IP tunnel dst address not specified
[  326.054794][T20275] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.191138][T20288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6186'.
[  326.194159][T20288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6186'.
[  326.563549][T20325] netlink: 'syz.2.6204': attribute type 1 has an invalid length.
[  326.569586][T20325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  327.013933][T20366] vlan3: entered promiscuous mode
[  327.016233][T20366] vlan3: entered allmulticast mode
[  327.018295][T20366] hsr_slave_1: entered allmulticast mode
[  327.212638][T20361] lo speed is unknown, defaulting to 1000
[  328.833055][T20471] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  328.859593][T20473] netlink: 'syz.2.6268': attribute type 11 has an invalid length.
[  329.087845][T20483] lo speed is unknown, defaulting to 1000
[  329.917825][T20521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.922272][T20521] syzkaller0: entered promiscuous mode
[  329.924464][T20521] syzkaller0: entered allmulticast mode
[  329.942875][T20521] tipc: Resetting bearer <eth:syzkaller0>
[  329.951338][T20520] tipc: Resetting bearer <eth:syzkaller0>
[  329.961365][T20520] tipc: Disabling bearer <eth:syzkaller0>
[  330.061948][T20519] netlink: 'syz.1.6284': attribute type 1 has an invalid length.
[  330.064985][T20519] netlink: 'syz.1.6284': attribute type 1 has an invalid length.
[  330.068510][T20519] __nla_validate_parse: 10 callbacks suppressed
[  330.068518][T20519] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6284'.
[  330.330537][T20549] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.340303][T20549] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  330.566927][T20575] netlink: 'syz.0.6311': attribute type 13 has an invalid length.
[  330.602284][  T975] lo speed is unknown, defaulting to 1000
[  331.445219][T20583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6314'.
[  331.449056][T20583] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6314'.
[  331.460734][T20583] geneve3: entered promiscuous mode
[  332.192119][T20640] lo speed is unknown, defaulting to 1000
[  332.567837][T20676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6354'.
[  332.583315][T20676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6354'.
[  332.586944][T20676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6354'.
[  332.590693][T20676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6354'.
[  332.593949][T20676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6354'.
[  332.605419][T20676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6354'.
[  332.611206][T20676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6354'.
[  332.639120][T20676] bridge0: port 1(dummy0) entered disabled state
[  332.850605][T20702] netlink: 'syz.0.6364': attribute type 1 has an invalid length.
[  333.154720][T20708] lo speed is unknown, defaulting to 1000
[  334.098439][T20762] gre1: entered allmulticast mode
[  334.357524][T20778] netlink: 'syz.0.6395': attribute type 41 has an invalid length.
[  334.981486][T20816] netlink: 'syz.2.6411': attribute type 29 has an invalid length.
[  335.093066][T20830] netlink: 'syz.2.6415': attribute type 83 has an invalid length.
[  335.863579][T20893] netlink: 'syz.0.6442': attribute type 2 has an invalid length.
[  335.869139][T20893] netlink: 'syz.0.6442': attribute type 1 has an invalid length.
[  335.873169][T20893] __nla_validate_parse: 104 callbacks suppressed
[  335.873179][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6442'.
[  336.182373][T20924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6458'.
[  336.190664][T20924] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  336.194208][T20924] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  336.252344][T20935] netlink: 'syz.2.6462': attribute type 10 has an invalid length.
[  336.261353][T20935] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  336.264182][T20935] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  337.252248][T20994] _Z`Ԁ@: entered promiscuous mode
[  338.216369][T21012] pimreg: tun_chr_ioctl cmd 2147767506
[  338.228970][T21014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6499'.
[  338.391226][T21030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6506'.
[  338.470140][T21037] sctp: [Deprecated]: syz.0.6510 (pid 21037) Use of struct sctp_assoc_value in delayed_ack socket option.
[  338.470140][T21037] Use struct sctp_sack_info instead
[  338.571584][T21046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6509'.
[  338.787386][T21068] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6525'.
[  338.791305][T21068] ip6tnl0: Caught tx_queue_len zero misconfig
[  338.941637][T21082] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6530'.
[  338.944847][T21082] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6530'.
[  338.949229][T21082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6530'.
[  339.003727][T21090] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6534'.
[  339.604557][   T33] audit: type=1800 audit(1756991194.288:15): pid=21154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6565" name="blkio.bfq.time_recursive" dev="tmpfs" ino=10710 res=0 errno=0
[  340.305282][T21208] geneve4: entered promiscuous mode
[  340.488586][T21206] lo speed is unknown, defaulting to 1000
[  341.278405][T21288] __nla_validate_parse: 5 callbacks suppressed
[  341.278423][T21288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6620'.
[  343.460072][T21321] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  344.510137][T21392] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6666'.
[  344.541541][T21376] lo speed is unknown, defaulting to 1000
[  344.627002][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6667'.
[  344.725126][T21401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6669'.
[  345.028546][T21408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6672'.
[  345.171973][T21414] syzkaller1: entered promiscuous mode
[  345.174219][T21414] syzkaller1: entered allmulticast mode
[  345.392653][T21425] netlink: 'syz.1.6679': attribute type 10 has an invalid length.
[  345.635070][T21445] ip6tnl4: entered promiscuous mode
[  345.702632][T21450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6688'.
[  345.705959][T21450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6688'.
[  345.771194][T21454] netlink: 'syz.1.6690': attribute type 25 has an invalid length.
[  345.921256][T21462] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  347.783639][T21564] netlink: 'syz.1.6740': attribute type 1 has an invalid length.
[  347.791074][T21564] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6740'.
[  348.289880][T21605] netlink: 'syz.1.6758': attribute type 1 has an invalid length.
[  348.293026][T21605] netlink: 'syz.1.6758': attribute type 2 has an invalid length.
[  348.304763][T21605] netlink: 'syz.1.6758': attribute type 1 has an invalid length.
[  348.307463][T21605] netlink: 'syz.1.6758': attribute type 2 has an invalid length.
[  350.037772][T21718] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  350.040731][T21718] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  350.174487][T21730] netlink: 'syz.0.6815': attribute type 1 has an invalid length.
[  350.488852][T21759] tap0: tun_chr_ioctl cmd 1074025681
[  350.595625][T21765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6832'.
[  350.607729][T21765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6832'.
[  350.661620][T21771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6835'.
[  350.753890][T21779] netlink: 'syz.1.6839': attribute type 1 has an invalid length.
[  350.909814][T21793] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.949919][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6849'.
[  350.996567][T21793] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.011800][T21806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  351.042756][T21793] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.081898][T21793] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.160369][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.179084][ T5876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.193084][ T5876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.211397][ T5876] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.808082][T21832] TCP: TCP_TX_DELAY enabled
[  352.075280][T21855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6874'.
[  352.531613][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6895'.
[  352.543702][T21903] macvtap1: entered promiscuous mode
[  352.549554][T21903] batadv0: entered promiscuous mode
[  352.551942][T21903] macvtap1: entered allmulticast mode
[  352.554218][T21903] batadv0: entered allmulticast mode
[  352.557595][T21903] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  352.562930][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6895'.
[  352.568611][T21903] batadv0: left allmulticast mode
[  352.570716][T21903] batadv0: left promiscuous mode
[  352.697025][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6902'.
[  352.700723][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6902'.
[  352.704470][T21915] netlink: 'syz.2.6902': attribute type 12 has an invalid length.
[  352.709935][T21915] netlink: 'syz.2.6902': attribute type 14 has an invalid length.
[  352.975970][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.072802][T21941] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6914'.
[  353.648301][T21970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6928'.
[  355.103204][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6970'.
[  355.139099][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6971'.
[  355.142049][T22062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  356.000107][T22117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.003169][T22117] syzkaller0: entered promiscuous mode
[  356.005348][T22117] syzkaller0: entered allmulticast mode
[  356.023375][T22117] tipc: Resetting bearer <eth:syzkaller0>
[  356.028157][T22116] tipc: Resetting bearer <eth:syzkaller0>
[  356.059615][T22116] tipc: Disabling bearer <eth:syzkaller0>
[  356.290491][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7003'.
[  357.907768][T22200] netlink: 'syz.0.7036': attribute type 1 has an invalid length.
[  357.912688][T22200] netlink: 'syz.0.7036': attribute type 2 has an invalid length.
[  358.899982][T22240] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7054'.
[  359.374486][T22238] lo speed is unknown, defaulting to 1000
[  359.828562][   T33] audit: type=1800 audit(1756991214.518:16): pid=22263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7062" name="cgroup.controllers" dev="tmpfs" ino=12237 res=0 errno=0
[  360.133120][T22283] netlink: 'syz.0.7071': attribute type 15 has an invalid length.
[  360.943958][T22336] netlink: 'syz.0.7095': attribute type 9 has an invalid length.
[  361.214165][T22349] netlink: 'syz.1.7101': attribute type 3 has an invalid length.
[  361.218785][T22349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7101'.
[  361.367003][T22357] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  361.491149][T22353] lo speed is unknown, defaulting to 1000
[  361.575518][T22366] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7108'.
[  361.591895][T22366] batadv2: entered promiscuous mode
[  361.593873][T22366] batadv2: entered allmulticast mode
[  362.143726][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7127'.
[  362.147630][T22409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7127'.
[  362.349428][T22423] tunl0: Caught tx_queue_len zero misconfig
[  362.436216][T22427] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  362.441614][T22427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.042032][T22453] netlink: 'syz.2.7146': attribute type 10 has an invalid length.
[  365.668177][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7151'.
[  366.007351][T22462] lo speed is unknown, defaulting to 1000
[  367.011950][T22500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.015545][T22500] syzkaller0: entered promiscuous mode
[  367.019164][T22500] syzkaller0: entered allmulticast mode
[  367.051104][T22500] tipc: Resetting bearer <eth:syzkaller0>
[  367.055269][T22499] tipc: Resetting bearer <eth:syzkaller0>
[  367.070744][T22499] tipc: Disabling bearer <eth:syzkaller0>
[  367.268671][T22517] netlink: 'syz.2.7171': attribute type 11 has an invalid length.
[  367.508253][T22524] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7174'.
[  369.373566][T22657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7236'.
[  369.382839][T22657] vlan3: entered promiscuous mode
[  369.384815][T22657] batadv0: entered promiscuous mode
[  369.568289][T22668] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  369.992185][T22703] netlink: 'syz.2.7258': attribute type 12 has an invalid length.
[  370.464402][T22715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7263'.
[  370.469514][T22715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7263'.
[  370.473244][T22715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7263'.
[  370.517911][T22717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7264'.
[  370.975154][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7272'.
[  371.113813][T22742] netlink: 'syz.1.7276': attribute type 1 has an invalid length.
[  371.117217][T22742] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7276'.
[  371.131780][T22744] netlink: 'syz.0.7277': attribute type 27 has an invalid length.
[  371.135292][T22744] netlink: 'syz.0.7277': attribute type 27 has an invalid length.
[  371.385186][T22766] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7288'.
[  371.468476][   T33] audit: type=1107 audit(1756991226.148:17): pid=22771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  371.634976][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7300'.
[  371.697791][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7304'.
[  371.812697][T22809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  371.867559][T22816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  371.991393][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7316'.
[  372.039400][T22829] macvlan1: left allmulticast mode
[  372.041856][T22829] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  372.044058][T22829] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  372.048435][T22829] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  372.053709][T22829] ip6tnl2: left allmulticast mode
[  372.059124][T22829] bond1: left promiscuous mode
[  372.060704][T22829] bond1: left allmulticast mode
[  372.065623][T22829] ip6gretap3: left allmulticast mode
[  372.072428][T22829] gretap2: left promiscuous mode
[  372.077355][T22829] bond0: left promiscuous mode
[  372.079307][T22829] ip6erspan0: left promiscuous mode
[  372.081863][T22829] macvlan3: left promiscuous mode
[  372.086081][T22829] bond5: left promiscuous mode
[  372.087737][T22829] bond5: left allmulticast mode
[  372.105144][T22829] geneve3: left promiscuous mode
[  372.730471][T22869] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  372.744692][T22869] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  373.148344][T22881] openvswitch: netlink: Missing key (keys=40, expected=80)
[  373.754771][T22915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7354'.
[  373.932045][T22919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7358'.
[  374.115985][T22925] nbd1: detected capacity change from 0 to 549764202496
[  374.120560][   T55] block nbd1: Receive control failed (result -32)
[  374.620134][T22960] sctp: [Deprecated]: syz.2.7375 (pid 22960) Use of struct sctp_assoc_value in delayed_ack socket option.
[  374.620134][T22960] Use struct sctp_sack_info instead
[  374.690475][T22967] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7378'.
[  374.801252][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7380'.
[  374.915144][T22964] lo speed is unknown, defaulting to 1000
[  376.110996][T23026] syzkaller1: entered promiscuous mode
[  376.120732][T23026] syzkaller1: entered allmulticast mode
[  376.408931][T23033] lo speed is unknown, defaulting to 1000
[  376.715639][T23061] __nla_validate_parse: 1 callbacks suppressed
[  376.715659][T23061] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7422'.
[  376.841737][T23072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7427'.
[  376.844653][T23072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7427'.
[  377.029919][T23081] syzkaller0: entered promiscuous mode
[  377.046070][T23081] syzkaller0: entered allmulticast mode
[  377.146344][T23070] lo speed is unknown, defaulting to 1000
[  377.472075][T23099] netlink: 'syz.0.7439': attribute type 7 has an invalid length.
[  377.528863][T23101] netlink: 724 bytes leftover after parsing attributes in process `syz.0.7440'.
[  377.533062][T23101] netlink: 83 bytes leftover after parsing attributes in process `syz.0.7440'.
[  379.770598][T23110] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  379.773809][T23110] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  379.790758][T23128] bond4: (slave wlan0): Releasing active interface
[  380.692710][T23180] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  381.318754][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7486'.
[  381.836892][T23222] openvswitch: netlink: IP tunnel dst address not specified
[  381.878026][T23224] netlink: 'syz.0.7494': attribute type 1 has an invalid length.
[  382.081042][T23222] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  382.120067][T23236] netlink: 'syz.1.7499': attribute type 8 has an invalid length.
[  382.240743][T23228] lo speed is unknown, defaulting to 1000
[  382.359056][T23251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7505'.
[  382.368419][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7505'.
[  382.780430][T23275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7514'.
[  382.904307][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7516'.
[  383.017522][T23287] netlink: 'syz.1.7521': attribute type 1 has an invalid length.
[  383.188977][T23299] netlink: 'syz.0.7527': attribute type 1 has an invalid length.
[  383.423229][T23307] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7532'.
[  383.785632][T23329] netlink: 'syz.2.7541': attribute type 7 has an invalid length.
[  383.794710][T23329] : entered promiscuous mode
[  384.075347][T23345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7543'.
[  384.766272][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7562'.
[  385.265649][T23432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.312381][T23432] syzkaller0: entered promiscuous mode
[  385.314355][T23432] syzkaller0: entered allmulticast mode
[  385.318206][T23432] tipc: Resetting bearer <eth:syzkaller0>
[  385.338023][T23430] tipc: Resetting bearer <eth:syzkaller0>
[  387.041828][T23430] tipc: Disabling bearer <eth:syzkaller0>
[  387.048094][T23428] lo speed is unknown, defaulting to 1000
[  387.346694][T23459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7594'.
[  387.350334][T23459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7594'.
[  387.353820][T23459] netlink: 'syz.0.7594': attribute type 1 has an invalid length.
[  387.377345][T23459] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7594'.
[  387.447026][T23459] nbd: socks must be embedded in a SOCK_ITEM attr
[  387.456733][T23459] block nbd2: shutting down sockets
[  387.712507][T23473] netlink: 'syz.0.7602': attribute type 2 has an invalid length.
[  387.983752][T23486] veth1: mtu greater than device maximum
[  388.616966][T23514] netlink: 'syz.2.7619': attribute type 12 has an invalid length.
[  388.620180][T23514] netlink: 'syz.2.7619': attribute type 18 has an invalid length.
[  388.623336][T23514] netlink: 'syz.2.7619': attribute type 21 has an invalid length.
[  388.633137][T23514] netlink: 'syz.2.7619': attribute type 26 has an invalid length.
[  388.926678][T23528] openvswitch: netlink: Duplicate or invalid key (type 0).
[  388.928964][T23528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.948855][T23530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7627'.
[  389.237176][T23532] lo speed is unknown, defaulting to 1000
[  389.585515][T23546] lo speed is unknown, defaulting to 1000
[  390.102619][T23567] netlink: 'syz.0.7640': attribute type 1 has an invalid length.
[  390.108018][T23567] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7640'.
[  390.507985][T23578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7646'.
[  390.773154][T23605] netlink: 'syz.0.7656': attribute type 13 has an invalid length.
[  390.797205][T23605] netlink: 'syz.0.7656': attribute type 17 has an invalid length.
[  390.831241][T23611] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  390.865904][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7658'.
[  390.897570][T23605] 8021q: adding VLAN 0 to HW filter on device team0
[  390.904046][T23605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  390.917105][T23598] lo speed is unknown, defaulting to 1000
[  391.670504][T23643] smc: net device bond0 applied user defined pnetid SYZ0
[  391.673121][T23643] smc: net device bond0 erased user defined pnetid SYZ0
[  391.810519][T23654] netlink: 'syz.0.7679': attribute type 1 has an invalid length.
[  391.825250][T23654] netlink: 'syz.0.7679': attribute type 3 has an invalid length.
[  391.831832][T23654] netlink: 'syz.0.7679': attribute type 1 has an invalid length.
[  391.838469][T23654] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7679'.
[  391.842252][T23654] NCSI netlink: No device for ifindex 0
[  392.011147][T23663] !: renamed from dummy0 (while UP)
[  392.474278][T23712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7705'.
[  392.477747][T23712] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7705'.
[  392.489164][T23712] bridge8: the hash_elasticity option has been deprecated and is always 16
[  392.569089][T23721] openvswitch: netlink: IP tunnel dst address not specified
[  392.740576][T23729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7712'.
[  392.808783][T23722] lo speed is unknown, defaulting to 1000
[  393.291692][T23749] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7719'.
[  393.329719][T23746] lo speed is unknown, defaulting to 1000
[  393.750032][T23769] netlink: 'syz.0.7725': attribute type 3 has an invalid length.
[  393.752759][T23769] netlink: 'syz.0.7725': attribute type 1 has an invalid length.
[  393.755379][T23769] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7725'.
[  393.987152][   T33] audit: type=1800 audit(1756991248.678:18): pid=23780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7732" name="memory.events" dev="tmpfs" ino=13462 res=0 errno=0
[  394.110549][T23789] netlink: 'syz.2.7736': attribute type 30 has an invalid length.
[  394.219155][T23796] syzkaller1: entered promiscuous mode
[  394.221599][T23796] syzkaller1: entered allmulticast mode
[  394.292437][T23756] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  395.423658][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7769'.
[  395.430156][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7769'.
[  395.439606][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7769'.
[  395.443515][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7769'.
[  395.450278][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7769'.
[  395.461431][T23869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.570243][T23942] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  397.071487][T23967] pim6reg: entered allmulticast mode
[  397.074009][T23967] pim6reg: left allmulticast mode
[  397.194837][T23974] netlink: 'syz.2.7816': attribute type 10 has an invalid length.
[  397.207284][T23974] dummy0: left allmulticast mode
[  397.208918][T23974] dummy0: left promiscuous mode
[  397.212253][T23974] bridge0: port 1(dummy0) entered disabled state
[  397.219347][T23974] team0: Device dummy0 is of different type
[  397.225274][T23974] netlink: 'syz.2.7816': attribute type 10 has an invalid length.
[  397.523656][T24001] netlink: 'syz.0.7829': attribute type 15 has an invalid length.
[  397.534132][T24001] __nla_validate_parse: 16 callbacks suppressed
[  397.534146][T24001] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7829'.
[  397.546464][T24004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.701039][T24015] netlink: 'syz.1.7834': attribute type 1 has an invalid length.
[  397.703710][T24015] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7834'.
[  397.954637][T24033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7842'.
[  398.203217][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7850'.
[  398.570535][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7870'.
[  398.753056][T24107] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  398.762321][T24107] bond5: (slave erspan0): Releasing active interface
[  398.764633][T24107] ip6gretap2: entered promiscuous mode
[  398.773951][T24107] bond3: (slave geneve3): Releasing active interface
[  398.778558][T24107] bond5: (slave ip6gretap2): Releasing active interface
[  398.781130][T24107] ip6gretap2: left promiscuous mode
[  398.788767][T24111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7879'.
[  398.803635][T24111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7879'.
[  398.844889][T24107] netlink: 'syz.0.7877': attribute type 10 has an invalid length.
[  398.851188][T24107] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  398.854827][T24107] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  399.199859][   T33] audit: type=1800 audit(1756991253.888:19): pid=24136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7890" name="memory.events" dev="tmpfs" ino=13254 res=0 errno=0
[  399.211164][   T33] audit: type=1804 audit(1756991253.888:20): pid=24136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7890" name="/newroot/2622/memory.events" dev="tmpfs" ino=13254 res=1 errno=0
[  400.211469][T24220] netlink: 'syz.2.7928': attribute type 1 has an invalid length.
[  400.215854][T24220] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7928'.
[  400.223826][T24220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7928'.
[  400.372723][T24235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7934'.
[  400.430238][T24239] IPVS: Scheduler module ip_vs_ not found
[  400.470047][T24235] vlan3: entered allmulticast mode
[  400.472172][T24235] bond7: entered allmulticast mode
[  400.621694][T24257] netlink: 'syz.2.7943': attribute type 3 has an invalid length.
[  401.182496][T24299] syzkaller1: entered promiscuous mode
[  401.184622][T24299] syzkaller1: entered allmulticast mode
[  401.501095][T24308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.504460][T24308] syzkaller0: entered promiscuous mode
[  401.507825][T24308] syzkaller0: entered allmulticast mode
[  401.530126][T24308] tipc: Resetting bearer <eth:syzkaller0>
[  401.533760][T24311] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  401.540347][T24307] tipc: Resetting bearer <eth:syzkaller0>
[  401.559741][T24307] tipc: Disabling bearer <eth:syzkaller0>
[  402.665155][T24381] lo speed is unknown, defaulting to 1000
[  403.258126][T24407] sctp: [Deprecated]: syz.2.8003 (pid 24407) Use of int in maxseg socket option.
[  403.258126][T24407] Use struct sctp_assoc_value instead
[  403.411982][T24419] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  403.697720][T24436] __nla_validate_parse: 1 callbacks suppressed
[  403.697770][T24436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8017'.
[  403.808200][T24449] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8024'.
[  403.809884][T24450] IPv6: NLM_F_CREATE should be specified when creating new route
[  403.985962][T24469] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  404.176232][T24492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8043'.
[  404.179930][T24492] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8043'.
[  404.317109][T24504] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.8047'.
[  404.353723][T24506] macsec0: entered promiscuous mode
[  404.355633][T24506] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  404.358179][T24506] macsec0: entered allmulticast mode
[  404.360059][T24506] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  405.015050][T24538] netlink: 'syz.1.8063': attribute type 1 has an invalid length.
[  405.018826][T24538] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8063'.
[  405.022603][T24538] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8063'.
[  405.134884][T24544] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8066'.
[  405.139869][T24546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8067'.
[  405.156306][T24544] unsupported nlmsg_type 40
[  405.263703][T24554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  405.722574][T24581] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  406.120464][T24617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8098'.
[  406.124456][T24617] nbd: couldn't find a device at index 65546
[  407.044737][T24701] tipc: Bearer <ib:ip6gre0>: already 2 bearers with priority 10
[  407.049975][T24701] tipc: Bearer <ib:ip6gre0>: trying with adjusted priority
[  407.053048][T24701] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  408.124893][T24733] ip6tnl3: entered allmulticast mode
[  408.419906][T24754] tipc: Can't bind to reserved service type 0
[  408.504376][T24764] openvswitch: netlink: Flow key attr not present in new flow.
[  408.552438][T24770] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  409.331246][T24829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  409.395231][T24831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.122928][T24855] netlink: 'syz.2.8201': attribute type 1 has an invalid length.
[  410.131469][T24855] __nla_validate_parse: 4 callbacks suppressed
[  410.131491][T24855] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8201'.
[  410.293498][T24862] ip6tnl6: entered promiscuous mode
[  410.299217][T24862] ip6tnl6: entered allmulticast mode
[  410.462122][T24875] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  410.464951][T24875] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  410.794792][T24883] lo speed is unknown, defaulting to 1000
[  411.272089][T24913] lo: entered promiscuous mode
[  411.276698][T24911] lo: left promiscuous mode
[  411.709387][T24955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  411.712432][T24955] syzkaller0: entered promiscuous mode
[  411.714223][T24955] syzkaller0: entered allmulticast mode
[  411.734535][T24955] tipc: Resetting bearer <eth:syzkaller0>
[  411.739730][T24954] tipc: Resetting bearer <eth:syzkaller0>
[  411.755455][T24954] tipc: Disabling bearer <eth:syzkaller0>
[  411.833290][T24964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  411.840042][T24964] syzkaller0: entered promiscuous mode
[  411.842744][T24964] syzkaller0: entered allmulticast mode
[  411.864589][T24964] tipc: Resetting bearer <eth:syzkaller0>
[  411.870843][T24963] tipc: Resetting bearer <eth:syzkaller0>
[  411.888063][T24963] tipc: Disabling bearer <eth:syzkaller0>
[  412.110512][T24977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8253'.
[  412.282139][T24995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.375260][T25005] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8267'.
[  412.382592][T25005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8267'.
[  412.386381][T25005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8267'.
[  412.479684][T25018] netlink: 'syz.2.8273': attribute type 9 has an invalid length.
[  412.989107][T25064] netlink: 460 bytes leftover after parsing attributes in process `syz.2.8293'.
[  414.004637][T25092] lo speed is unknown, defaulting to 1000
[  414.491797][T25134] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8323'.
[  414.534443][T25142] netlink: 'syz.1.8328': attribute type 1 has an invalid length.
[  414.537492][T25142] netlink: 'syz.1.8328': attribute type 1 has an invalid length.
[  414.541911][T25142] netlink: 'syz.1.8328': attribute type 1 has an invalid length.
[  414.622564][T25152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8332'.
[  414.636969][T25156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8333'.
[  414.848136][T25180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8346'.
[  414.945586][T25187] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  415.079795][T25192] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  415.082752][T25192] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  415.770912][T25186] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  415.949405][T25210] __nla_validate_parse: 2 callbacks suppressed
[  415.949420][T25210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8356'.
[  416.158540][T25229] sctp: [Deprecated]: syz.2.8365 (pid 25229) Use of int in max_burst socket option deprecated.
[  416.158540][T25229] Use struct sctp_assoc_value instead
[  416.431920][T25256] netlink: 'syz.1.8376': attribute type 5 has an invalid length.
[  418.509888][T25305] Bluetooth: hci0: Opcode 0x080f failed: -4
[  418.757350][T25341] syzkaller1: entered promiscuous mode
[  418.759884][T25341] syzkaller1: entered allmulticast mode
[  419.000945][T25360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8423'.
[  419.055627][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8425'.
[  419.058628][T25366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8425'.
[  419.067732][T25366] gtp1: entered promiscuous mode
[  419.210296][T25386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8435'.
[  419.265556][T25391] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.363923][T25391] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.431545][T25391] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.491633][T25391] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.602794][ T5890] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.624111][ T5677] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.642367][ T5890] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.663518][ T5677] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.382936][T25443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8460'.
[  420.394468][T25443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8460'.
[  420.410167][T25450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.489134][T25456] netlink: 'syz.1.8465': attribute type 4 has an invalid length.
[  420.492107][T25456] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8465'.
[  420.498973][T25456] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  421.615135][T25492] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8480'.
[  422.146002][T25525] lo speed is unknown, defaulting to 1000
[  422.390801][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8501'.
[  422.467784][T25544] netlink: 'syz.1.8503': attribute type 2 has an invalid length.
[  422.568958][T25548] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.8505'.
[  422.689197][T25552] netlink: 'syz.1.8507': attribute type 6 has an invalid length.
[  423.274088][T25596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8528'.
[  423.418632][T25610] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8534'.
[  424.132637][T25630] lo speed is unknown, defaulting to 1000
[  424.308885][T25646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8551'.
[  424.397800][T25651] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  424.412380][T25630] geneve0: entered promiscuous mode
[  424.830267][T25684] bridge0: the hash_elasticity option has been deprecated and is always 16
[  425.052156][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8577'.
[  425.056684][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8577'.
[  425.060411][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8577'.
[  425.064014][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8577'.
[  425.393042][T25733] netlink: 'syz.0.8589': attribute type 21 has an invalid length.
[  425.490971][T25741] bridge5: entered allmulticast mode
[  425.999373][T25780] team0: Device xfrm1 is up. Set it down before adding it as a team port
[  426.692660][T25847] __nla_validate_parse: 17 callbacks suppressed
[  426.692673][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8639'.
[  426.868696][T25851] lo speed is unknown, defaulting to 1000
[  426.889927][T25864] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8646'.
[  426.937211][T25868] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  427.043458][T25874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8650'.
[  427.313362][T25900] netlink: 'syz.2.8664': attribute type 1 has an invalid length.
[  427.413660][T25910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8668'.
[  427.422855][T25910] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  427.428776][T25910] CPU: 0 UID: 0 PID: 25910 Comm: syz.1.8668 Not tainted syzkaller #0 PREEMPT(full) 
[  427.428805][T25910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  427.428811][T25910] Call Trace:
[  427.428827][T25910]  <TASK>
[  427.428833][T25910]  dump_stack_lvl+0x189/0x250
[  427.428859][T25910]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.428873][T25910]  ? __pfx__printk+0x10/0x10
[  427.428893][T25910]  ? kernfs_path_from_node+0x2f/0x290
[  427.428908][T25910]  ? kernfs_path_from_node+0x250/0x290
[  427.428919][T25910]  ? kernfs_path_from_node+0x2f/0x290
[  427.428934][T25910]  sysfs_warn_dup+0x8e/0xa0
[  427.428947][T25910]  sysfs_do_create_link_sd+0xc0/0x110
[  427.428960][T25910]  device_add_class_symlinks+0x1cf/0x240
[  427.428978][T25910]  device_add+0x475/0xb50
[  427.428999][T25910]  wiphy_register+0x1ba6/0x28d0
[  427.429020][T25910]  ? __pfx_wiphy_register+0x10/0x10
[  427.429032][T25910]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  427.429046][T25910]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  427.429057][T25910]  ieee80211_register_hw+0x3484/0x4100
[  427.429074][T25910]  ? ieee80211_register_hw+0x1431/0x4100
[  427.429088][T25910]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  427.429099][T25910]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  427.429114][T25910]  ? __hrtimer_setup+0x187/0x210
[  427.429121][T25910]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  427.429136][T25910]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  427.429162][T25910]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  427.429172][T25910]  ? trace_kmalloc+0x1f/0xd0
[  427.429182][T25910]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  427.429193][T25910]  ? kstrndup+0xbf/0x160
[  427.429207][T25910]  hwsim_new_radio_nl+0xea4/0x1b10
[  427.429219][T25910]  ? __pfx___nla_validate_parse+0x10/0x10
[  427.429238][T25910]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  427.429254][T25910]  ? __nla_parse+0x40/0x60
[  427.429268][T25910]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  427.429282][T25910]  genl_family_rcv_msg_doit+0x215/0x300
[  427.429295][T25910]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  427.429311][T25910]  ? bpf_lsm_capable+0x9/0x20
[  427.429320][T25910]  ? security_capable+0x7e/0x2e0
[  427.429336][T25910]  genl_rcv_msg+0x60e/0x790
[  427.429349][T25910]  ? __pfx_genl_rcv_msg+0x10/0x10
[  427.429358][T25910]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  427.429375][T25910]  netlink_rcv_skb+0x208/0x470
[  427.429412][T25910]  ? __lock_acquire+0xab9/0xd20
[  427.429426][T25910]  ? __pfx_genl_rcv_msg+0x10/0x10
[  427.429436][T25910]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  427.429458][T25910]  ? down_read+0x1ad/0x2e0
[  427.429468][T25910]  genl_rcv+0x28/0x40
[  427.429477][T25910]  netlink_unicast+0x82f/0x9e0
[  427.429500][T25910]  ? __pfx_netlink_unicast+0x10/0x10
[  427.429517][T25910]  ? netlink_sendmsg+0x642/0xb30
[  427.429527][T25910]  ? skb_put+0x11b/0x210
[  427.429543][T25910]  netlink_sendmsg+0x805/0xb30
[  427.429563][T25910]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.429575][T25910]  ? aa_sock_msg_perm+0xf1/0x1d0
[  427.429586][T25910]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  427.429600][T25910]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.429614][T25910]  __sock_sendmsg+0x21c/0x270
[  427.429646][T25910]  ____sys_sendmsg+0x505/0x830
[  427.429667][T25910]  ? __pfx_____sys_sendmsg+0x10/0x10
[  427.429681][T25910]  ? import_iovec+0x74/0xa0
[  427.429693][T25910]  ___sys_sendmsg+0x21f/0x2a0
[  427.429703][T25910]  ? __pfx____sys_sendmsg+0x10/0x10
[  427.429732][T25910]  ? __fget_files+0x2a/0x420
[  427.429744][T25910]  ? __fget_files+0x3a0/0x420
[  427.429761][T25910]  __x64_sys_sendmsg+0x19b/0x260
[  427.429771][T25910]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  427.429785][T25910]  ? rcu_is_watching+0x15/0xb0
[  427.429795][T25910]  ? do_syscall_64+0xbe/0x3b0
[  427.429804][T25910]  do_syscall_64+0xfa/0x3b0
[  427.429810][T25910]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.429821][T25910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.429829][T25910]  ? exc_page_fault+0x9f/0xf0
[  427.429842][T25910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.429849][T25910] RIP: 0033:0x7f0ff278ebe9
[  427.429858][T25910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.429866][T25910] RSP: 002b:00007f0ff3596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  427.429875][T25910] RAX: ffffffffffffffda RBX: 00007f0ff29c5fa0 RCX: 00007f0ff278ebe9
[  427.429881][T25910] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  427.429886][T25910] RBP: 00007f0ff2811e19 R08: 0000000000000000 R09: 0000000000000000
[  427.429891][T25910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  427.429895][T25910] R13: 00007f0ff29c6038 R14: 00007f0ff29c5fa0 R15: 00007fff4e4b70c8
[  427.429911][T25910]  </TASK>
[  427.780495][T25936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8676'.
[  428.127364][T25952] vlan0: entered promiscuous mode
[  428.228774][T25954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8687'.
[  428.280188][T25954] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8687'.
[  428.373603][T25964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8691'.
[  428.378182][T25964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8691'.
[  428.611208][T25982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.614731][T25982] syzkaller0: entered promiscuous mode
[  428.617314][T25982] syzkaller0: entered allmulticast mode
[  428.631830][T25982] tipc: Resetting bearer <eth:syzkaller0>
[  428.639681][T25981] tipc: Resetting bearer <eth:syzkaller0>
[  428.651198][T25981] tipc: Disabling bearer <eth:syzkaller0>
[  428.759875][T25987] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8702'.
[  428.969918][T25991] lo speed is unknown, defaulting to 1000
[  429.539118][T26012] netlink: 'syz.0.8713': attribute type 1 has an invalid length.
[  429.762672][T26017] pim6reg: entered allmulticast mode
[  429.765236][T26016] pim6reg: left allmulticast mode
[  429.851414][T26024] netlink: 'syz.0.8718': attribute type 6 has an invalid length.
[  430.150406][T26059] netlink: 'syz.0.8734': attribute type 11 has an invalid length.
[  431.069887][T26116] macsec1: entered promiscuous mode
[  431.072317][T26116] macsec1: entered allmulticast mode
[  431.074477][T26116] batadv0: entered allmulticast mode
[  431.083990][T26116] batadv0: left allmulticast mode
[  432.200072][T26183] __nla_validate_parse: 3 callbacks suppressed
[  432.200083][T26183] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8790'.
[  432.329497][T26196] sock: sock_set_timeout: `syz.2.8796' (pid 26196) tries to set negative timeout
[  432.421722][T26205] bond0: (slave ip6erspan0): Releasing active interface
[  432.431133][T26205] sit1: left promiscuous mode
[  432.439017][T26205] team0: Port device sit1 removed
[  432.441468][T26205] bond3: (slave gretap2): Releasing active interface
[  432.446241][T26205] netlink: 'syz.2.8800': attribute type 10 has an invalid length.
[  432.598021][T26223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8806'.
[  432.635485][T26225] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8809'.
[  433.752700][T26297] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8839'.
[  433.884376][T26303] siw: device registration error -23
[  433.993433][T26309] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  433.999169][T26309] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  434.125052][T26325] openvswitch: netlink: Missing valid actions attribute.
[  434.145926][T26325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.302775][T26327] lo speed is unknown, defaulting to 1000
[  434.954816][T26369] IPVS: Error connecting to the multicast addr
[  435.053261][T26378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8878'.
[  435.184845][T26388] bond0: Device is already in use.
[  435.449730][T26413] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8893'.
[  435.466528][T26413] hsr_slave_0: left promiscuous mode
[  435.560296][T26422] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  435.562831][T26422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.593317][T26426] ip6_vti0: entered allmulticast mode
[  435.599540][T26425] ip6_vti0: left allmulticast mode
[  435.670094][T26436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8904'.
[  435.672865][T26436] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8904'.
[  435.841893][T26457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8914'.
[  435.845631][T26457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8914'.
[  436.083329][T26481] netlink: 'syz.2.8926': attribute type 7 has an invalid length.
[  436.670905][T26503] lo speed is unknown, defaulting to 1000
[  437.002721][T26515] netlink: 'syz.1.8937': attribute type 1 has an invalid length.
[  437.655348][T26564] __nla_validate_parse: 4 callbacks suppressed
[  437.655363][T26564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8959'.
[  437.865428][T26577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8965'.
[  438.044889][T26589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8967'.
[  438.223583][T26581] lo speed is unknown, defaulting to 1000
[  438.269791][T26587] netlink: 'syz.1.8969': attribute type 1 has an invalid length.
[  438.273127][T26587] netlink: 'syz.1.8969': attribute type 1 has an invalid length.
[  438.276522][T26587] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8969'.
[  438.450745][T26595] unsupported nla_type 52263
[  438.531380][T26597] netlink: 'syz.1.8972': attribute type 21 has an invalid length.
[  438.534451][T26597] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8972'.
[  438.689008][T26607] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8977'.
[  439.165835][T26642] netlink: 'syz.1.8993': attribute type 4 has an invalid length.
[  439.236805][T26635] lo speed is unknown, defaulting to 1000
[  439.570243][T26666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9000'.
[  439.626711][T26669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.328097][T26692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9013'.
[  440.331917][T26692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9013'.
[  440.543948][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9016'.
[  440.557041][T26698] macvtap0: entered promiscuous mode
[  440.559645][T26698] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  440.711670][T26709] netlink: 'syz.2.9020': attribute type 12 has an invalid length.
[  442.054389][T26780] batadv1: entered promiscuous mode
[  442.060085][T26780] batadv1: entered allmulticast mode
[  442.185520][T26789] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  442.189006][T26789] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  443.249560][T26815] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  443.362692][T26829] __nla_validate_parse: 4 callbacks suppressed
[  443.362712][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9067'.
[  443.528774][T26840] !: renamed from dummy0
[  444.420903][T26850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9076'.
[  444.564631][T26863] netlink: 'syz.2.9083': attribute type 1 has an invalid length.
[  444.834477][T26881] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  445.098584][ T2297] lo speed is unknown, defaulting to 1000
[  445.101010][ T2297] syz2: Port: 1 Link DOWN
[  445.196997][T26903] netlink: 'syz.0.9100': attribute type 1 has an invalid length.
[  445.200082][T26903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9100'.
[  445.500401][T26915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.506836][T26915] netlink: 'syz.0.9106': attribute type 1 has an invalid length.
[  445.516113][T26915] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9106'.
[  445.559983][T26924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9109'.
[  445.576341][T26924] macvlan7: entered promiscuous mode
[  445.587386][T26924] bond0: entered promiscuous mode
[  445.591008][T26924] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  445.594122][T26927] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9110'.
[  445.729747][T26936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9114'.
[  446.084729][T26966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9128'.
[  446.205260][T26974] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  446.354045][T26971] lo speed is unknown, defaulting to 1000
[  446.605238][T26989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.633807][T26989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9136'.
[  446.651690][T26989] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  446.669636][T26997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9139'.
[  446.957421][T27008] netlink: 'syz.0.9143': attribute type 1 has an invalid length.
[  446.995327][T27008] 8021q: adding VLAN 0 to HW filter on device bond7
[  447.324949][T27010] lo speed is unknown, defaulting to 1000
[  447.608559][T27038] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  447.611631][T27037] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  447.653282][T27041] gtp1: entered allmulticast mode
[  448.008260][T27062] IPVS: ip_vs_add_dest(): server weight less than zero
[  448.188721][T27072] netlink: 'syz.0.9160': attribute type 5 has an invalid length.
[  448.210990][T27072] geneve5: entered promiscuous mode
[  448.213057][T27072] geneve5: entered allmulticast mode
[  448.223299][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  448.233114][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  448.235662][ T5876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  448.248440][ T5876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  448.351829][T27090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.371042][T27095] netlink: 'syz.2.9168': attribute type 6 has an invalid length.
[  448.375355][T27096] netlink: 'syz.2.9168': attribute type 6 has an invalid length.
[  448.381576][T27096] netlink: 'syz.2.9168': attribute type 6 has an invalid length.
[  448.385077][T27096] netlink: 'syz.2.9168': attribute type 6 has an invalid length.
[  448.389358][T27096] netlink: 'syz.2.9168': attribute type 6 has an invalid length.
[  448.418780][T27094] __nla_validate_parse: 6 callbacks suppressed
[  448.418803][T27094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9169'.
[  448.478798][T27104] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9170'.
[  448.557800][T27107] tipc: Resetting bearer <eth:syzkaller0>
[  449.210376][T27088] tipc: Disabling bearer <eth:syzkaller0>
[  449.252380][T27114] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.9172'.
[  449.356563][T27119] 8021q: adding VLAN 0 to HW filter on device bond8
[  449.378655][T27122] bond3: (slave vcan0): The slave device specified does not support setting the MAC address
[  449.387489][T27122] bond3: (slave vcan0): Error -95 calling set_mac_address
[  449.618237][T27147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9183'.
[  449.622348][T27147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.679050][T27149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9180'.
[  449.954137][T27154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9185'.
[  449.961370][T27154] validate_nla: 29 callbacks suppressed
[  449.961391][T27154] netlink: 'syz.1.9185': attribute type 9 has an invalid length.
[  450.464391][T27176] netlink: 'syz.1.9189': attribute type 3 has an invalid length.
[  450.492513][T27177] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.547984][T27177] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.582627][T27177] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.630327][T27177] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.731903][ T5890] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.734048][T27188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9194'.
[  450.735209][ T5890] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.758710][ T5890] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.775628][ T5890] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.833084][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9197'.
[  451.110984][T27224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  451.132675][T27227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  451.144301][T27229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  451.150392][T27229] syzkaller0: entered promiscuous mode
[  451.152980][T27229] syzkaller0: entered allmulticast mode
[  451.160769][T27226] tipc: Resetting bearer <eth:syzkaller0>
[  451.178060][T27226] tipc: Disabling bearer <eth:syzkaller0>
[  451.186822][T27232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9207'.
[  451.292294][T27244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9211'.
[  451.337192][T27238] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  451.392800][T27250] netlink: 'syz.0.9213': attribute type 19 has an invalid length.
[  451.641046][T27284] netlink: 'syz.2.9225': attribute type 10 has an invalid length.
[  451.708771][T27295] netlink: 'syz.0.9229': attribute type 1 has an invalid length.
[  452.250225][T27333] netlink: 'syz.0.9241': attribute type 21 has an invalid length.
[  452.448688][T27340] block nbd2: server does not support multiple connections per device.
[  452.460021][T27340] block nbd2: shutting down sockets
[  452.616091][T27352] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  452.616176][T27351] bond0: invalid ARP target 0.0.0.0 specified for addition
[  452.621862][T27351] bond0: option arp_ip_target: invalid value (0)
[  452.779311][T27366] pimreg: tun_chr_ioctl cmd 1074025677
[  452.781813][T27366] pimreg: linktype set to 780
[  452.784555][T27366] pimreg: tun_chr_ioctl cmd 35111
[  453.536230][T27384] __nla_validate_parse: 12 callbacks suppressed
[  453.536245][T27384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9259'.
[  453.582047][T27390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9260'.
[  453.792271][T27403] syzkaller0: entered promiscuous mode
[  453.794962][T27403] syzkaller0: entered allmulticast mode
[  453.929800][T27414] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9269'.
[  454.092204][T27422] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  455.525379][T27456] syzkaller1: entered promiscuous mode
[  455.530622][T27456] syzkaller1: entered allmulticast mode
[  455.553205][T27456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9279'.
[  455.583268][T27456] netlink: 'syz.0.9279': attribute type 7 has an invalid length.
[  455.649838][T27461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9280'.
[  455.673097][T27466] netlink: 'syz.2.9282': attribute type 17 has an invalid length.
[  455.733068][T27466] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  455.747801][T27466] bond0: left promiscuous mode
[  455.764910][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9282'.
[  455.769808][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9282'.
[  455.784376][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9282'.
[  455.789333][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9282'.
[  455.978170][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9288'.
[  456.066811][T27492] veth11: entered promiscuous mode
[  456.195125][T27502] netlink: 'syz.0.9294': attribute type 1 has an invalid length.
[  456.244437][T27511] delete_channel: no stack
[  456.245170][T27502] bond10: (slave bridge10): making interface the new active one
[  456.250355][T27502] bond10: (slave bridge10): Enslaving as an active interface with an up link
[  456.586835][T27535] lo speed is unknown, defaulting to 1000
[  456.943640][T27559] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.989814][T27559] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.016742][T27568] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  457.080612][T27559] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.166186][T27559] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.214795][T27576] netlink: 'syz.2.9318': attribute type 7 has an invalid length.
[  457.218550][T27574] netlink: 'syz.0.9317': attribute type 30 has an invalid length.
[  457.231411][ T5876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.234029][T27576] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  457.273441][ T5876] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.277868][ T5876] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.280553][ T5876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.381819][T27587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  457.386527][T27587] syzkaller0: entered promiscuous mode
[  457.388865][T27587] syzkaller0: entered allmulticast mode
[  457.410213][T27587] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  457.440172][T27587] tipc: Resetting bearer <eth:syzkaller0>
[  457.443924][T27586] tipc: Resetting bearer <eth:syzkaller0>
[  457.450229][T27593] openvswitch: netlink: Flow key attribute not present in set flow.
[  457.476678][T27586] tipc: Disabling bearer <eth:syzkaller0>
[  457.490911][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.493015][T27596] netlink: 'syz.2.9326': attribute type 4 has an invalid length.
[  457.493599][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.501923][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.504613][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  457.654969][T27598] netlink: 'syz.0.9327': attribute type 3 has an invalid length.
[  457.797515][T27610] netlink: 'syz.1.9331': attribute type 1 has an invalid length.
[  457.800156][T27610] netlink: 'syz.1.9331': attribute type 2 has an invalid length.
[  457.813597][T27610] netlink: 'syz.1.9331': attribute type 3 has an invalid length.
[  457.823911][T27610] sctp: [Deprecated]: syz.1.9331 (pid 27610) Use of struct sctp_assoc_value in delayed_ack socket option.
[  457.823911][T27610] Use struct sctp_sack_info instead
[  457.966535][T27621] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  457.968853][T27622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.127122][T27661] __nla_validate_parse: 21 callbacks suppressed
[  459.127142][T27661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9346'.
[  459.136055][T27661] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  459.160953][T27664] digital: digital_start_poll: Unknown protocol
[  459.169445][T27664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9347'.
[  459.432170][T27688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9353'.
[  459.494007][T27690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  459.859414][T27699] lo speed is unknown, defaulting to 1000
[  459.897632][T27717] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9361'.
[  460.293232][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9365'.
[  460.379929][T27737] can: request_module (can-proto-0) failed.
[  460.600544][T27754] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.9370'.
[  460.840556][T27774] openvswitch: netlink: Message has 8 unknown bytes.
[  460.867634][T27776] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.9377'.
[  461.071270][T27795] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9383'.
[  461.074316][T27795] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9383'.
[  461.461215][T27831] validate_nla: 8 callbacks suppressed
[  461.461229][T27831] netlink: 'syz.0.9398': attribute type 1 has an invalid length.
[  461.465452][T27831] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9398'.
[  461.579490][T27821] lo speed is unknown, defaulting to 1000
[  461.766963][T27822] lo speed is unknown, defaulting to 1000
[  462.264383][T27865] sctp: [Deprecated]: syz.1.9408 (pid 27865) Use of int in max_burst socket option.
[  462.264383][T27865] Use struct sctp_assoc_value instead
[  462.350041][T27869] netlink: 'syz.1.9410': attribute type 1 has an invalid length.
[  462.577595][T27888] dvmrp8: entered allmulticast mode
[  462.915023][T27917] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  463.073934][T27927] bridge0: port 1(veth0_to_bond) entered blocking state
[  463.076807][T27927] bridge0: port 1(veth0_to_bond) entered disabled state
[  463.079458][T27927] veth0_to_bond: entered allmulticast mode
[  463.082338][T27927] veth0_to_bond: entered promiscuous mode
[  463.178236][T27935] ==================================================================
[  463.181007][T27935] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  463.184257][T27935] Write of size 8 at addr ffff88811ab96428 by task syz.2.9439/27935
[  463.188129][T27935] 
[  463.189531][T27935] CPU: 0 UID: 0 PID: 27935 Comm: syz.2.9439 Not tainted syzkaller #0 PREEMPT(full) 
[  463.189555][T27935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  463.189565][T27935] Call Trace:
[  463.189573][T27935]  <TASK>
[  463.189582][T27935]  dump_stack_lvl+0x189/0x250
[  463.189607][T27935]  ? __kasan_check_byte+0x12/0x40
[  463.189630][T27935]  ? __pfx_dump_stack_lvl+0x10/0x10
[  463.189646][T27935]  ? lock_release+0x4b/0x3e0
[  463.189671][T27935]  ? __virt_addr_valid+0x4a5/0x5c0
[  463.189690][T27935]  print_report+0xca/0x240
[  463.189703][T27935]  ? __xfrm_state_delete+0x666/0xca0
[  463.189715][T27935]  kasan_report+0x118/0x150
[  463.189735][T27935]  ? __xfrm_state_delete+0x666/0xca0
[  463.189752][T27935]  __xfrm_state_delete+0x666/0xca0
[  463.189769][T27935]  xfrm_state_flush+0x45f/0x770
[  463.189784][T27935]  pfkey_flush+0x13f/0x340
[  463.189798][T27935]  ? __pfx_pfkey_flush+0x10/0x10
[  463.189809][T27935]  ? kmem_cache_free+0x18f/0x400
[  463.189871][T27935]  pfkey_sendmsg+0xbfe/0x1090
[  463.189889][T27935]  ? trace_sched_exit_tp+0x36/0x110
[  463.189913][T27935]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  463.189933][T27935]  ? aa_sock_msg_perm+0xf1/0x1d0
[  463.189949][T27935]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  463.189966][T27935]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  463.189978][T27935]  __sock_sendmsg+0x21c/0x270
[  463.189995][T27935]  ____sys_sendmsg+0x505/0x830
[  463.190013][T27935]  ? __pfx_____sys_sendmsg+0x10/0x10
[  463.190033][T27935]  ? import_iovec+0x74/0xa0
[  463.190050][T27935]  ___sys_sendmsg+0x21f/0x2a0
[  463.190066][T27935]  ? __pfx____sys_sendmsg+0x10/0x10
[  463.190091][T27935]  ? __fget_files+0x2a/0x420
[  463.190113][T27935]  ? __fget_files+0x3a0/0x420
[  463.190137][T27935]  __x64_sys_sendmsg+0x19b/0x260
[  463.190151][T27935]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  463.190167][T27935]  ? rcu_is_watching+0x15/0xb0
[  463.190182][T27935]  ? do_syscall_64+0xbe/0x3b0
[  463.190196][T27935]  do_syscall_64+0xfa/0x3b0
[  463.190206][T27935]  ? lockdep_hardirqs_on+0x9c/0x150
[  463.190223][T27935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.190237][T27935]  ? exc_page_fault+0x9f/0xf0
[  463.190255][T27935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.190269][T27935] RIP: 0033:0x7fc87138ebe9
[  463.190283][T27935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  463.190296][T27935] RSP: 002b:00007fc872171038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  463.190312][T27935] RAX: ffffffffffffffda RBX: 00007fc8715c5fa0 RCX: 00007fc87138ebe9
[  463.190324][T27935] RDX: 0000000000008010 RSI: 0000200000000180 RDI: 0000000000000005
[  463.190335][T27935] RBP: 00007fc871411e19 R08: 0000000000000000 R09: 0000000000000000
[  463.190344][T27935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.190353][T27935] R13: 00007fc8715c6038 R14: 00007fc8715c5fa0 R15: 00007ffd05503cf8
[  463.190368][T27935]  </TASK>
[  463.190372][T27935] 
[  463.288481][T27935] Allocated by task 22645:
[  463.289868][T27935]  kasan_save_track+0x3e/0x80
[  463.291348][T27935]  __kasan_slab_alloc+0x6c/0x80
[  463.292904][T27935]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  463.294603][T27935]  xfrm_state_alloc+0x24/0x2f0
[  463.296112][T27935]  __find_acq_core+0x8a7/0x1c00
[  463.297700][T27935]  xfrm_find_acq+0x78/0xa0
[  463.299199][T27935]  xfrm_alloc_userspi+0x6b3/0xc90
[  463.300766][T27935]  xfrm_user_rcv_msg+0x7a3/0xab0
[  463.302307][T27935]  netlink_rcv_skb+0x208/0x470
[  463.303810][T27935]  xfrm_netlink_rcv+0x79/0x90
[  463.305294][T27935]  netlink_unicast+0x82f/0x9e0
[  463.306803][T27935]  netlink_sendmsg+0x805/0xb30
[  463.308562][T27935]  __sock_sendmsg+0x21c/0x270
[  463.310424][T27935]  ____sys_sendmsg+0x505/0x830
[  463.312106][T27935]  ___sys_sendmsg+0x21f/0x2a0
[  463.313570][T27935]  __x64_sys_sendmsg+0x19b/0x260
[  463.315117][T27935]  do_syscall_64+0xfa/0x3b0
[  463.316519][T27935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.318522][T27935] 
[  463.319492][T27935] Freed by task 5314:
[  463.320986][T27935]  kasan_save_track+0x3e/0x80
[  463.322465][T27935]  kasan_save_free_info+0x46/0x50
[  463.324086][T27935]  __kasan_slab_free+0x5b/0x80
[  463.325589][T27935]  kmem_cache_free+0x18f/0x400
[  463.327130][T27935]  xfrm_state_gc_task+0x52d/0x6b0
[  463.329082][T27935]  process_scheduled_works+0xae1/0x17b0
[  463.331233][T27935]  worker_thread+0x8a0/0xda0
[  463.333044][T27935]  kthread+0x711/0x8a0
[  463.334680][T27935]  ret_from_fork+0x3fc/0x770
[  463.336417][T27935]  ret_from_fork_asm+0x1a/0x30
[  463.338041][T27935] 
[  463.338919][T27935] The buggy address belongs to the object at ffff88811ab96400
[  463.338919][T27935]  which belongs to the cache xfrm_state of size 928
[  463.344139][T27935] The buggy address is located 40 bytes inside of
[  463.344139][T27935]  freed 928-byte region [ffff88811ab96400, ffff88811ab967a0)
[  463.348398][T27935] 
[  463.349102][T27935] The buggy address belongs to the physical page:
[  463.351054][T27935] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811ab95680 pfn:0x11ab94
[  463.354744][T27935] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  463.358033][T27935] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  463.360871][T27935] page_type: f5(slab)
[  463.362345][T27935] raw: 057ff00000000040 ffff88801bfccc80 dead000000000122 0000000000000000
[  463.365540][T27935] raw: ffff88811ab95680 00000000800e0008 00000000f5000000 0000000000000000
[  463.368797][T27935] head: 057ff00000000040 ffff88801bfccc80 dead000000000122 0000000000000000
[  463.371993][T27935] head: ffff88811ab95680 00000000800e0008 00000000f5000000 0000000000000000
[  463.375226][T27935] head: 057ff00000000002 ffffea00046ae501 00000000ffffffff 00000000ffffffff
[  463.378510][T27935] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  463.381786][T27935] page dumped because: kasan: bad access detected
[  463.383790][T27935] page_owner tracks the page as allocated
[  463.385870][T27935] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 16801, tgid 16800 (syz.0.4661), ts 265175554343, free_ts 258910683327
[  463.392039][T27935]  post_alloc_hook+0x240/0x2a0
[  463.394012][T27935]  get_page_from_freelist+0x21e4/0x22c0
[  463.396194][T27935]  __alloc_frozen_pages_noprof+0x181/0x370
[  463.398520][T27935]  alloc_pages_mpol+0x232/0x4a0
[  463.400540][T27935]  allocate_slab+0x8a/0x370
[  463.402399][T27935]  ___slab_alloc+0xbeb/0x1410
[  463.403944][T27935]  kmem_cache_alloc_noprof+0x283/0x3c0
[  463.405612][T27935]  xfrm_state_alloc+0x24/0x2f0
[  463.407488][T27935]  xfrm_state_find+0x37d4/0x5400
[  463.409531][T27935]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  463.412064][T27935]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  463.414304][T27935]  xfrm_lookup_route+0x3c/0x1c0
[  463.416283][T27935]  udp_sendmsg+0x142e/0x2170
[  463.418195][T27935]  __sock_sendmsg+0x19c/0x270
[  463.420113][T27935]  ____sys_sendmsg+0x52d/0x830
[  463.421981][T27935]  ___sys_sendmsg+0x21f/0x2a0
[  463.423459][T27935] page last free pid 5847 tgid 5847 stack trace:
[  463.425658][T27935]  __free_frozen_pages+0xbc4/0xd30
[  463.427295][T27935]  __put_partials+0x156/0x1a0
[  463.428922][T27935]  put_cpu_partial+0x17c/0x250
[  463.430793][T27935]  __slab_free+0x2d5/0x3c0
[  463.432628][T27935]  qlist_free_all+0x97/0x140
[  463.434520][T27935]  kasan_quarantine_reduce+0x148/0x160
[  463.436703][T27935]  __kasan_slab_alloc+0x22/0x80
[  463.438572][T27935]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  463.440565][T27935]  copy_fs_struct+0x4f/0x270
[  463.442444][T27935]  copy_fs+0x6d/0x150
[  463.444088][T27935]  copy_process+0x15df/0x3c00
[  463.445982][T27935]  kernel_clone+0x21e/0x840
[  463.447801][T27935]  __x64_sys_clone+0x18b/0x1e0
[  463.449745][T27935]  do_syscall_64+0xfa/0x3b0
[  463.451553][T27935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.453921][T27935] 
[  463.454904][T27935] Memory state around the buggy address:
[  463.456681][T27935]  ffff88811ab96300: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  463.459609][T27935]  ffff88811ab96380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  463.462252][T27935] >ffff88811ab96400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  463.464891][T27935]                                   ^
[  463.466515][T27935]  ffff88811ab96480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  463.468913][T27935]  ffff88811ab96500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  463.471275][T27935] ==================================================================
[  463.473842][T27935] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  463.476285][T27935] CPU: 0 UID: 0 PID: 27935 Comm: syz.2.9439 Not tainted syzkaller #0 PREEMPT(full) 
[  463.479731][T27935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  463.483155][T27935] Call Trace:
[  463.484409][T27935]  <TASK>
[  463.485509][T27935]  dump_stack_lvl+0x99/0x250
[  463.487293][T27935]  ? __asan_memcpy+0x40/0x70
[  463.489083][T27935]  ? __pfx_dump_stack_lvl+0x10/0x10
[  463.491047][T27935]  ? __pfx__printk+0x10/0x10
[  463.492751][T27935]  vpanic+0x281/0x750
[  463.494270][T27935]  ? __pfx_vpanic+0x10/0x10
[  463.495995][T27935]  ? irqentry_exit+0x74/0x90
[  463.497732][T27935]  panic+0xb9/0xc0
[  463.499175][T27935]  ? __pfx_panic+0x10/0x10
[  463.500933][T27935]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  463.503226][T27935]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  463.505496][T27935]  ? __xfrm_state_delete+0x666/0xca0
[  463.507561][T27935]  check_panic_on_warn+0x89/0xb0
[  463.509481][T27935]  ? __xfrm_state_delete+0x666/0xca0
[  463.511505][T27935]  end_report+0x78/0x160
[  463.513118][T27935]  kasan_report+0x129/0x150
[  463.514557][T27935]  ? __xfrm_state_delete+0x666/0xca0
[  463.516222][T27935]  __xfrm_state_delete+0x666/0xca0
[  463.517835][T27935]  xfrm_state_flush+0x45f/0x770
[  463.519441][T27935]  pfkey_flush+0x13f/0x340
[  463.520870][T27935]  ? __pfx_pfkey_flush+0x10/0x10
[  463.522417][T27935]  ? kmem_cache_free+0x18f/0x400
[  463.523989][T27935]  pfkey_sendmsg+0xbfe/0x1090
[  463.525455][T27935]  ? trace_sched_exit_tp+0x36/0x110
[  463.527137][T27935]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  463.528858][T27935]  ? aa_sock_msg_perm+0xf1/0x1d0
[  463.530403][T27935]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  463.532055][T27935]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  463.533659][T27935]  __sock_sendmsg+0x21c/0x270
[  463.535150][T27935]  ____sys_sendmsg+0x505/0x830
[  463.536650][T27935]  ? __pfx_____sys_sendmsg+0x10/0x10
[  463.538301][T27935]  ? import_iovec+0x74/0xa0
[  463.539822][T27935]  ___sys_sendmsg+0x21f/0x2a0
[  463.541238][T27935]  ? __pfx____sys_sendmsg+0x10/0x10
[  463.543106][T27935]  ? __fget_files+0x2a/0x420
[  463.544929][T27935]  ? __fget_files+0x3a0/0x420
[  463.546835][T27935]  __x64_sys_sendmsg+0x19b/0x260
[  463.548826][T27935]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  463.551032][T27935]  ? rcu_is_watching+0x15/0xb0
[  463.552982][T27935]  ? do_syscall_64+0xbe/0x3b0
[  463.554918][T27935]  do_syscall_64+0xfa/0x3b0
[  463.556729][T27935]  ? lockdep_hardirqs_on+0x9c/0x150
[  463.558762][T27935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.561114][T27935]  ? exc_page_fault+0x9f/0xf0
[  463.563044][T27935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.565382][T27935] RIP: 0033:0x7fc87138ebe9
[  463.567196][T27935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  463.574690][T27935] RSP: 002b:00007fc872171038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  463.577831][T27935] RAX: ffffffffffffffda RBX: 00007fc8715c5fa0 RCX: 00007fc87138ebe9
[  463.581011][T27935] RDX: 0000000000008010 RSI: 0000200000000180 RDI: 0000000000000005
[  463.583589][T27935] RBP: 00007fc871411e19 R08: 0000000000000000 R09: 0000000000000000
[  463.586187][T27935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.589356][T27935] R13: 00007fc8715c6038 R14: 00007fc8715c5fa0 R15: 00007ffd05503cf8
[  463.592327][T27935]  </TASK>
[  463.593928][T27935] Kernel Offset: disabled
[  463.595473][T27935] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:08:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000005 RBX=0000000000000005 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000fe2 RDI=0000000000000fe3 RBP=00000000000003f9 RSP=ffffc90002fc6eb0
R8 =ffff888107828237 R9 =1ffff11020f05046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc8721716c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000200ffffffff CR3=000000011e2a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc871597498 00007fc871597470 XMM03=00007fc8715974a8 00007fc8715974a0
XMM04=00007fc8720fd100 00007fc871597460 XMM05=00007fc871597478 00007fc8715974c0
XMM06=00007fc8715974b8 00007fc8715974b0 XMM07=00007fc8715974a8 00007fc8715974a0
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007fc871412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44cfb RBX=1ffff11009608341 RCX=ffff888105431cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900032676c0 RSP=ffffc90003267540
R8 =ffffffff8fa38e37 R9 =1ffffffff1f471c6 R10=dffffc0000000000 R11=fffffbfff1f471c7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44ce3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558d4f4500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32623ffc CR3=000000010d6a2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000006e61 6c765f3068746576
XMM02=00007f7981b97498 00007f7981b97470 XMM03=00007f7981b974a8 00007f7981b974a0
XMM04=00007f79826fd100 00007f7981b97460 XMM05=00007f7981b97478 00007f7981b974c0
XMM06=00007f7981b974b8 00007f7981b974b0 XMM07=00007f7981b974a8 00007f7981b974a0
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f7981a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
