last executing test programs:

1.066109356s ago: executing program 0 (id=2935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000c80)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e617400240002800800054000000003080002400000000208000140000000010800064078b9ccd60900010073797a30000000000900020073797a32"], 0xac}}, 0x0)

1.065804988s ago: executing program 0 (id=2936):
r0 = socket(0x1e, 0x2, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x8}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0)
listen(r0, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
accept4$unix(r0, 0x0, 0x0, 0x0)

1.022817285s ago: executing program 0 (id=2937):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r5], 0x5c}, 0x1, 0xba01}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911087000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

924.426789ms ago: executing program 0 (id=2940):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x6}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r3=>0x0})
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xf0, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008000}, 0x100)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x400000000000004)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000006d00110526bd7000ffdbdf2502000000", @ANYRES32=r8, @ANYBLOB="02000000c040040004003480"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x7d, &(0x7f0000001080)={0x0, 0x1000b}, &(0x7f00000010c0)=0x8)
writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

865.083532ms ago: executing program 0 (id=2942):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
connect$packet(r4, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x7, 0x6, @broadcast}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r2}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe50, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x5, &(0x7f00000000c0)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000600)={'wg0\x00'})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r7)
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r10, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2004c040)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="140035007665746831000000000000000000000044002b8008000800", @ANYRES32=0x0, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB='\x00\x00\b\x00', @ANYRES32, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x24000804}, 0x10)
ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000000))
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r13, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x818}, 0x2004000)
sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r13, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x48}, @void, @val={0xc, 0x99, {0x1, 0x9}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000880)

805.202241ms ago: executing program 0 (id=2944):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

485.217753ms ago: executing program 1 (id=2948):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket(0x15, 0x5, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={'sit0\x00', 0x200})
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000100)="efd9d9b6d94571aa9f6cd1884a043612e41e5e5c64b902a02cf612e2fd46d894072fe062475199eaba62366b24392cb397991b6577c699e7b762467ab8352a512ecf65ccba48f60e5db1d20566561b161218af9c981985d4ead543a04c8ae55d57")

484.659388ms ago: executing program 1 (id=2949):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x80000)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0))
splice(r1, &(0x7f0000000040)=0x3, r2, &(0x7f0000000080)=0xbf63, 0xffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x72}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
accept4$tipc(r0, 0x0, 0x0, 0x80000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async)
epoll_create1(0x80000) (async)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)) (async)
splice(r1, &(0x7f0000000040)=0x3, r2, &(0x7f0000000080)=0xbf63, 0xffffffff, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x72}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async)
accept4$tipc(r0, 0x0, 0x0, 0x80000) (async)

374.756765ms ago: executing program 1 (id=2950):
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, 0x13, 0x20, 0x70bd26, 0x25dfdbff, {0x1f, 0x0, 0x5, 0x9, {0x4e22, 0x4e22, [0xc, 0xe, 0xd4a, 0x2], [0x1, 0x4, 0x6, 0x5], 0x0, [0x1, 0x80000001]}, 0x2000000, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "29bfed83ee6fa3ec2d8fe7a3bdd9b17d2c33f05bec8e38de7b7652e73b1811804b37ec117d87e5bec362133e76298eb2e31a2e70046ff57172676558c25b749e2105ddbbe603"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "6d1749f18e32af"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008010}, 0x4056)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x7, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x86}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6b26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x7ffc, 0x7}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0x5c, 0x160, 0x0, 0x3e0, 0x228, 0x228, 0x25a, 0x228, 0x228, 0x4, 0x0, {[{{@ipv6={@local, @dev, [0xff], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x3a, 0x0, 0x0, 0x8}, 0x5002, 0xf8, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, '\x00', 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @empty, [0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b3)

371.844569ms ago: executing program 1 (id=2951):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r0=>0x0, 0x29, 0xc8, 0x2, 0x1, 0x64, @empty, @dev={0xfe, 0x80, '\x00', 0x25}, 0x8, 0x40, 0x5, 0x40}}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@RTM_DELMDB={0x138, 0x55, 0x1, 0x70bd25, 0x25dfdbff, {0x7, r0}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x62edfb85a0410068, 0x2, {@ip4=@multicast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x4, {@ip4=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @remote}, 0xcdb3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r0, 0x0, 0x1, 0x4, {@in6_addr=@loopback, 0x436e}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r0, 0x0, 0x3, 0x1, {@ip4=@multicast2, 0x4b6e}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x1, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1, 0x8edd}}}]}, 0x138}}, 0x4000010)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00i'], 0x20}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000020601130600000600000000000000000e0003006269746d61010001000000000000040000000000"], 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xd}, {0x5, 0x8}}}, 0x24}}, 0x40004) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24001f816900010002000000fcffff7f00000000000000000c00020001000000040000005ab71fa59fcd164c238d95fd58ce34f7c305e2d543ce73b3c9307b708dc30900000000a85ddd620e00009de54fb508a36742ffa6228a0053dbfb5420b1ecc6eb047dbc7a75612cc823c65c5b06d30f5e3eba3e0adb2410eee98c9628303c69a345c40b5e25984329a553660e4e3156c3ba6840db2465ad5f035e1817768bbe5c6feb28cd08d7c7df99d938cada0e5a985cdd44c4c914fc15c821b230dd74fe4255a94397da3fc05b79d45115bd4e335cf992eb474bd9b3"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x4000)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000010000000400000000020000000000", @ANYBLOB="0900000000000000000000000e00000000000000", @ANYRES32, @ANYBLOB="0200000004000000000000080d000000000000000000000000237aa336153c3e1f4ab1fe83caa0f6eb9eb1"], 0x50) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'dvmrp1\x00', 0x20}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r9) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r10) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})

302.767635ms ago: executing program 1 (id=2952):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x3}]}, {0x0, [0x0, 0x2e, 0x5f]}}, 0x0, 0x2d}, 0x28)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c000004000000140001800600060088470000080002", @ANYRES16=r0, @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

302.094015ms ago: executing program 1 (id=2953):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x2f, 0x61, 0x30, 0x61, 0x30]}}, 0x0, 0x2e, 0x0, 0x1, 0x6ec1}, 0x28)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, &(0x7f00000001c0))
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r1)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2081}, 0x20004080)

226.014812ms ago: executing program 2 (id=2954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x2, @private1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x0, 0x2b}}}], 0x18}}], 0x1, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x4, &(0x7f0000000240)=@ccm_128={{0x303}, "f7108300", "f3c5989b3854eb01b57000", "b9ed814d", "000000af3800"}, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0x2}}}, 0x24}}, 0x4000010)

165.972451ms ago: executing program 2 (id=2955):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000300)={0xb, 0x4, 0xd5ec39e58ef30e02, 0x400, 0x3, 0x0, [{0x0, 0x9, 0x7, '\x00', 0x2480}, {0x7ff, 0xfffffffffffffffe, 0x6, '\x00', 0x3a04}, {0x6, 0x9, 0x3, '\x00', 0x100}]})
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

75.007313ms ago: executing program 2 (id=2956):
socketpair(0x2a, 0x0, 0x7ff, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4e47}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)={0x3ac, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xacc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x64de}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fe1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x767}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff00}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x13}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2921}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff3090}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa9d}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000002100)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000700)={0x1954, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x50, 0xfc, "c81615b3c9b38926f51a38694647b15040f8d54d535a7a282a5a19fa760a7f7b30ac3981352a669976acddbfa1baa15d75dddfa50c5330b315f4695530d873342401469ae3270df8b41878be"}], @NL80211_ATTR_IE={0x16d, 0x2a, [@perr={0x84, 0x11c, {0x3, 0x12, [{{}, @broadcast, 0x400, @void, 0x3}, {{}, @broadcast, 0x1800, @void, 0x26}, {{}, @device_a, 0x0, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x52, @value=@device_b, 0x28}, {{}, @device_b, 0x4, @void, 0x39}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x25}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x7}, {{0x0, 0x1}, @device_a, 0xfffffffe, @value=@device_b, 0x28}, {{}, @device_b, 0xff, @void, 0x21}, {{}, @broadcast, 0x9, @void, 0x20}, {{}, @device_b, 0xf, @void, 0x27}, {{0x0, 0x1}, @device_b, 0xf283, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x40}, {{}, @device_a, 0x3, @void, 0x10}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x24}, {{}, @device_a, 0x3, @void, 0x37}, {{}, @broadcast, 0x6, @void, 0x31}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x35}]}}, @preq={0x82, 0x41, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x6, 0x2, @broadcast, 0xda8d0f88, @value=@device_b, 0xae72, 0x3, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0x3}, {{}, @broadcast, 0x7d}, {{0x0, 0x0, 0x1}, @device_a, 0xa3}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x91, 0xfa, "e264b25593eafc668692f3b28904838cd12fbbac549d572a41d8e6f8eaf1bc6cbc31aa140eadb76daba7390ef58b380d815c6e9a5c30b56ad73ed75c150873d7dd41618021b5b43576864d0b0d308055e7f58dbf770c1304bcac36857b8fc720fd16663bde32e79ff24a9e3b3daf4f9c3c5bbc6fa12abe6ff6ac17078258d42d0e720eca26922d9f163bead2ca"}, @NL80211_ATTR_FILS_ERP_RRK={0xe5, 0xfc, "fb0b4953edcd49c9b5f30d9a203dc5a79a7fee764ba93b306ffe64e8c1cdc52ab5d27079ac1a3ca0a0b3295a6f1880b75886c89ef221c5b49ba210c94747cfa7ed9ac4fec5a8eff0ed7e2b51dc537ca56b4fb301a74b098bed7abd027019d5c7d66964e1f226f4a5b389751d590cece3f462bd477c4f1e93a6442291f345d7a3a86ee532db778e996b13f454c1b7e9e802e9a019d5ef729ddc4aab91e2abb6c08d7db37cd47089ce15cec970e75c98ca682b39ca737985fbb127a40c05fc67fbbb843e1e54e9160cc0c82f4c31a71e76eee8cb5f13a6b7938496a8754d249d357e"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "eef6acd3f98d32a47258aa079f3c9c"}, @NL80211_ATTR_FILS_ERP_RRK={0x17, 0xfc, "caf2360c08ad31da1c3af4afbf9834ffe28bcc"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb9, 0xfc, "ba093549921d2e37d53a867a629875f7f934bb2163fab6e1a9cfe3f6d99e49e7201244ea5cb710c0b558c3e8aac3328c2b33b16bb122339cba186f2f8920b2715357e911ac7627bafab6bb2d6d9d4fcc43a6cf38aadfee84e32e672008faf8d2612b31b422b297232bd3ffe266a5489c947f36115dbfd612ee0a73fff6220ef8d33e6c8829e5d3a8954fc7253eabbb3ee9464b1b80b3a2c7533f6e1d7ffd79a79984add4884d2031ebaad6fb2325fb473d2e2f852e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x81}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "651dc0f0f7389b7c4d72747de910acd21111016d0d1a93a1aab46e806ab1eb7ef465fec8102501fb6f338b6bab57a012a3c151af8dc1696f3fc9d54f81cbddf0e30cc8421b2458c2b5f15cfb2d14c4370400622ff238652e2f66"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xdd, 0xfa, "84d4285411bcc4d440c62695ea39758101b96e83ec673eaf4fc10a8866996018bc53136c6e0c8a32132a5b50884cfdee628b8cdb9e3827cbba07e4eef103ab586dfeda1babb36ed841b3e0daa1fd5277d5d55c0c5b1a40f1e7f1643d50b75916bf06e1ce1c96cf6e190834776b629ac1b291f5d773a6b689b345d6de6b46d7fe15a52751ef580c3c1a4e2dd4f5443f29cd05dba9d3762a331dc2a7cd31654b3dcaf48b98e2b60afef16cfc3cc012070370f4ec44b3dcb048661d976d7ac27b7f2b657cec7d8c6635899d363ebc08cf1f62ac3eeb4c3f188ae9"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "21537e89b7"}, @NL80211_ATTR_FILS_ERP_RRK={0xd9, 0xfc, "c601182fcc3200a9ff1e8f55f66451cff6521282437d8bd0d24b41d07d546f70f4be2ba6f487b6ae458f056b846c74c50920b771776702cb5900a22147e5985427b69d6e9a9e36b6ace26505bfee358e55076af5cdd158642a258658390fa4649bfeb2b8031b56a89d4d37dfa289ac65020d3eb86ae6045e7dbfcc6e97daf89edb650ab20fd2ed737e1de9d9753d52b21365ef45c928d299f0d04507e1ba676889768f72aafdf70bcc998bed8c722bacedaa0733499cccfcfeb7cc49699fa5ec8da1dafa9a05f032365320a051490cedafde876547"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "7634f53ba5e48eabae26552689a1e8c5ca94650fcc4957057a87affb5a6476e4ae26870684319461815f40bdcfccfb2b9f2f706483e7d802853ce6c6a153b48d0fbfa750d0c35c51db92687e873f06d7ad7bd5f48114b60fdb33"}, @NL80211_ATTR_FILS_ERP_REALM={0x69, 0xfa, "55ed4f4a65a915e9fa8c9bbfc5804b5d9e4e5baad0582818cc61d30365e513e11d84955755fd64f13d79fd6807a61dea67e7973a705a35ea8c3dd744aaba5a120b2069b0414f3c82bfb92455884be4fd7cbd59e5810474c5226e63e55ae18aa81ced9f99a2"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0xed, 0xfa, "9f555a8d21e7dfa9d813b78008642e3f52054eebfd7f081ff9d95719f8bd305a04e33c44fbf0baa1e6be4fcd228fb9597e835812794818d96766e69074e3297acc19112a66a9c3cb7c7778faf401e4e393e4c28d972f478c8aa52ddaa118cbe92fd4b696df9e4c53cb55b282062a919b6da043f9e005f530d20b543064d576dd3fbe4a86d7d006f7e46a05cc6c0c36190b323e1c852e3de0f4dc722d27ef3e171bc1063a7cf11ce01a497ca290bd55003171d17057e4ff627d03847468d882d6654ea810e634ba05ce3b52e8ed68bb56072e2f85dbde13f386893abfc59678952eb96207adfa26bbf0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xd180}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x40}], @NL80211_ATTR_IE={0xfa, 0x2a, [@ht={0x2d, 0x1a, {0x80, 0x0, 0x5, 0x0, {0x3, 0x5, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x71, 0xb}}, @dsss={0x3, 0x1, 0xd}, @peer_mgmt={0x75, 0x14, {0x0, 0x200, @void, @void, @val="88895cfa240ab771d6bc7590917aa43c"}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @device_b}}, @tim={0x5, 0x28, {0xea, 0xc, 0x4, "f635fe252c818653ca96017146e6548a43970cdd393a595356db4d77459b4d5667bcdb32d9"}}, @random={0x2f, 0x78, "4ad3f693cac503d0b71184287fd2a629aaf9eb789c388c0d412995693db0d71ce53e600e94041873989f15b2e6c2fad8ce4c013a96e68070fae68c54a00c2606354f6e4534c40affa51e6514fd62782b529be3cf2d18075ffdbd2569c85bd7a7703e9983fc48e00ccf73fa80139e1df491964b5c8dbb95c9"}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8}}]}]}, 0x1954}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x68, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x26000014}, 0x8080)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000022c0), r1)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000002400)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0xc0, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc080}, 0x4080)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6dcf, 0x13}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x14}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x44000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000026c0), r1)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x1c, r6, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048001}, 0x40014)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002800)={0x1, &(0x7f00000027c0)=[{0x0, 0x4, 0x53, 0x7}]}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x8010, r1, 0x832fe000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002880), r0)
sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x34, r7, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf7}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002980)='syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_subtree(r8, &(0x7f00000029c0), 0x2, 0x0)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002bc0)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002e80)={0xffffffffffffffff, 0x20, &(0x7f0000002e40)={&(0x7f0000002c80)=""/163, 0xa3, <r11=>0x0, &(0x7f0000002d40)=""/214, 0xd6}}, 0x10)
r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002f00)=@o_path={&(0x7f0000002ec0)='./file0\x00', 0x0, 0x0, r9}, 0x18)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002f40)={0x1b, 0x0, 0x0, 0xa7, 0x0, 0x1, 0x4ee, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50)
r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002fc0)={0x0, 0xa45}, 0xc)
r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xe, &(0x7f0000002a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa46}, @call={0x85, 0x0, 0x0, 0x54}, @alu={0x7, 0x1, 0x9, 0x2, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000002a80)='syzkaller\x00', 0x9, 0xe5, &(0x7f0000002ac0)=""/229, 0x41000, 0x20, '\x00', 0x0, @xdp, r10, 0x8, &(0x7f0000002c00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000002c40)={0x3, 0xe, 0x6d, 0x80000001}, 0x10, r11, r12, 0x7, &(0x7f0000003080)=[0xffffffffffffffff, 0x1, r13, r14, 0xffffffffffffffff, r15, 0x1], &(0x7f00000030c0)=[{0x4, 0x2, 0x3, 0x5}, {0x1, 0x2, 0xc, 0x8}, {0x3, 0x4, 0x2, 0x3}, {0x1, 0x5, 0xb, 0x7}, {0x4, 0x5, 0xe}, {0x5, 0x3, 0xa, 0x7}, {0x3, 0x5, 0x8, 0x7}]}, 0x94)
unshare(0x0)

74.10099ms ago: executing program 2 (id=2957):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10000}}, 0x0, 0x0, 0x4, 0x0, "fbb3af84d9d71650485142ed437596fa7f905c1990c91e0323ba5897af26ebf89b6b0412c139cf0b3436d27c8101f3fd8f9ac440ec5a21cbf66c9f22cdf058f9fb3d9f6bbaaea59d8cb4516e1cf9ec21"}, 0xd8)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x89, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x50, 0x1412, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)
listen(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0xe, &(0x7f0000000600)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp, @map_fd={0x18, 0xb, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x4, 0x0, @void, @value=r4}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pB    \x00'}, 0x20)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r9, 0xe6905000)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x2, 0x4, 0x3, 0x140, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x1}, 0x50)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r11, &(0x7f00000002c0)="eab5de4d"}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x103b}, [@generic={0x9, 0x9, 0x3}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x4, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000840)=[0xffffffffffffffff, r4, r6, r7, r8, r9, 0x1, r10, r11], &(0x7f0000000880)=[{0x4, 0x1, 0x8, 0xa}, {0x2, 0x5, 0x5, 0xa}, {0x3, 0xffffffff, 0x3, 0x4}, {0x5, 0x3, 0x1, 0x9}, {0x2, 0x1, 0x2, 0x6}, {0x2, 0x5, 0xc, 0xc}, {0x2, 0x5, 0xd}], 0x10, 0x6}, 0x94)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
bind$inet6(r12, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r13, &(0x7f0000000b40)={0x2, 0x4e22, @empty}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a689297fee3cca9cc34c2a263835e34e09ae067cea299ac864ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a00934784c00"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x9c, &(0x7f0000000540)=""/156, 0x0, 0x4}, 0x2f)
syz_emit_ethernet(0x4b, &(0x7f0000000980)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x7, 0x3d, 0x64, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010101, @remote}, {{0x6e22, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}, {"93"}}}}}}, 0x0)

468.922µs ago: executing program 2 (id=2958):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000009800128009000100766c616e00000000880002800c0002000e0000000c0000000600050088a8000040000380200001007b4b0000000000000c0001e004000000090000000c000100bf000000000400000c00010002000000ff0100000c0001000e000000000001000400048004000480280004800c00010007000000040000000c0001000800000004"], 0xcc}}, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)=0xfdae)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c)
getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000400)=0x4)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000340), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0x44, 0x4, 0x408, 0xffffffff, 0x108, 0x268, 0x268, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0x108, 0x8502}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0xfffffb8b, 0x9, 0x0, 0x1}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {0x0, 0x11}, [@common=@ipv6header={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@private2, @remote, [], [], 'hsr0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468)

0s ago: executing program 2 (id=2959):
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x34}}, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
listen(r0, 0x200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3d}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x55}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20040800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r2, 0x300, 0x70bd27, 0xb73, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2d5a}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10001}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x5}]}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xc}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000045}, 0x40)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e22, @remote}, {0x6, @multicast}, 0x52, {0x2, 0x4e23, @private=0xa010102}, 'vlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x114, r2, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20, 0x34}}}}, [@NL80211_ATTR_TESTDATA={0xe9, 0x45, "fdd50b822b57538aab59c63cb03fbc1b7af36c53c44bf1c7e384da6b9c9d397ddc1ec096426579dc6e0cd5c6fec8f42d9842a651c00d3251d6ec7a584014b44c141332261a633a267476730859ea0e3aa4eb908e341226b7e0c1fcc4efff5b3d86e9a624a2c8085ba45dac88d558c80992da5cd8609a65c786c0a6e85d700c2eca6436a2774b902d859db26096ae6fbeb4ac2589f326f52033b0827656c7cb38544a7febf64e38f602d0af20de82d4bc0e9512fc6e45c7e77ed444b8b5f7383e5806b48bcc2ad65f1c367a92e2609d06a11c98d7b27421f901c8c9db8ef1fcf9bbfc427637"}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x20040800)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000700)={'wg1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x168, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xd6}, @ETHTOOL_A_LINKMODES_OURS={0x138, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "9178031e34a896dd96e4d0064b8c02ad38302dfd94918d7441ece77b3eea16be52d217e14df02c465af535fbe927baad8d9e2c846bf45162989323e0492dc0164b19b0619f2da6fac345dd0f4c5d715f36b3280d4a2eecee47d91aa2fc28b04b25126f101e74ff64491416dafbabbc74f710ac35bf09c253cf01a6a1a783f68a59a9923861f1449ed2ae9ebfe62f77ddf599325fa1225c7c407d1a047b70db35a7a41359a24021df387a7017d7ca77fc7e1951769a330cc120506c9cefa71cb4bb7226f29becf78d311fd7058604d9c99a83d6e8322dc76029cca81c6d5b3c0b761f07dd06"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%]N\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x33}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}$\x00'}]}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0xd0}, 0x4000005)
r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @multicast1}, &(0x7f0000000980)=0x10, 0x80000)
writev(r8, &(0x7f0000000e40)=[{&(0x7f00000009c0)="0e70e01c4d3f649aeb8c626b29305a2757a65aa47ebd6e7958f5cc97c8b6a70dcf0059049a458e1ebda4ecf7dc32488c1578b5345d30f18f3cec5fcb62efb07a605a0b92e0982893c3479bed36e7ae7711fbb113a0d5295af703e0bee8a8e57d960018ee95a7f3d0a857b26956177e49e4a2d3215423e7bda960615dae377fdc91233a5a6510c4062a64b4a3bda8bf886bf57629a98123ea3e79e4e4ac89fa713aa0aa37eb0c71bf9f8a18894c24cb86662afedf63dcf422d397550ffa019c5dbfc5e546a0bd34e6f059eb65fcd6e1da16de7c1a8770fcee014b82581d0a9cdbffc4c41a0e764c93509837096ee69ffa172e", 0xf2}, {&(0x7f0000000ac0)="ba4a7571ee333219553aff39bc1d1363c802b4329b789f1d81004409efbed049939a59d0e6758926d6bef853db124ef6e156019d383ef957df02c0be309f87ab9409d4fbcdf149693b69fbb523c3e3204b78ca", 0x53}, {&(0x7f0000000b40)="877cae15c3ea70797f9144e23caa9e4246aaabdebe2346bbbad5f4a42a0199ab63b573018f0fcf620933337aa26e683ee2e1330d187c4443f57dd06365d7addbd239e3de24efebc57a7b45483f76413c7f1bba27d8d9e190a9356aa17456db698c0161456c982c3b962e793e9197a5101c6215be4e5c4e5d2ca6c405c0cbef04b04c0578bb649dcc5bdb83dc10e07d4c214e4dbdce50b2aacb054f5277c9e2697fc25ecad9361fafac987db453aef8fa6ec05aa79c0fb987efdc0858779da66e5c2d28d83a2e2faedf3d33e495612849096020baab57368558d58a0b1b69691c862458f653f06a6e", 0xe8}, {&(0x7f0000000c40)="d57dc9d33f3f07d9f212c96ded7c3b3b36f1bca2e49a4b3847288336f917a4e89698045ee5ac35eda02333ca8dc6bff6decec8", 0x33}, {&(0x7f0000000c80)="7704d336657deb3a78446efd20cd3073195c80d18f69d4fc4fc15138475b5f1b1529c023903178a0266e5f9f5137793ec2e95e3f7ffb7da512a3d90c87112f7366c93138d48bf4307f5ec5997737995235e7dedc6db01bd03d2249e7e9490f6634e15fa3f12f6fb14f8e81", 0x6b}, {&(0x7f0000000d00)="4db3e8cce209df9ef7316ba089067595210ac90dd528c4c7dc534c293a91f1adc61608bcd00479e0569ab8093d", 0x2d}, {&(0x7f0000000d40)="8146928be10dc70e98eacbd02a2b0ff2b6695eca85980013764e9d7119d4ee4c8d45df41fad08ad4500dc8d1790d67ecc13a90c134f618b5847d2e32c6251501dcad26a7d3094106c5413785b1a7e0f0d5fef0863780e5a1495ce0a69cc9337dfd032d3631aa13f19bd659594faeb43e96314235fc261277cce11bce450b365fc787531c1d3e012ef17f9158954d0539a5c9577e247546541599ec9e38097e39bef5ecd7ac48aff87a0fe9f5df83abc958d91e4587557f9045ca242489c632229a4fc53776ee", 0xc6}], 0x7)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000ec0)={<r9=>0x0, 0x0, <r10=>0x0}, &(0x7f0000000f00)=0xc)
ioctl$TUNSETGROUP(r0, 0x400454ce, r10)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000f40)=@generic={0x0, 0xa, 0x18cbd51c})
r11 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000f80), 0x80000)
setsockopt$netrom_NETROM_N2(r11, 0x103, 0x3, &(0x7f0000000fc0)=0x9, 0x4)
syz_open_procfs$namespace(r9, &(0x7f0000001000)='ns/uts\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
getsockopt(r8, 0x53, 0x6, &(0x7f0000001080)=""/135, &(0x7f0000001140)=0x87)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x11, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0x2, 0x1, 0xfffffffffffffff0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001280)='GPL\x00', 0x4, 0xc, &(0x7f00000012c0)=""/12, 0x41100, 0x4, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f0000001180)='kvm_set_irq\x00', r12, 0x0, 0x14d7}, 0x18)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001440)={'virt_wifi0\x00'})
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, 0x140f, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000015c0)={'vcan0\x00', 0x8000})

kernel console output (not intermixed with test programs):

273] netlink: 224 bytes leftover after parsing attributes in process `syz.1.423'.
[   72.104145][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'.
[   72.452466][ T7282] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   72.539346][ T7284] 8021q: adding VLAN 0 to HW filter on device bond3
[   72.837570][ T7305] bond1: (slave erspan0): Releasing active interface
[   73.285683][ T7305] bond0: (slave bond_slave_0): Releasing backup interface
[   73.528494][ T7305] bond0: (slave bond_slave_1): Releasing backup interface
[   73.538452][ T7305] team0: Port device team_slave_0 removed
[   73.541612][ T7305] team0: Port device team_slave_1 removed
[   73.543814][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.548025][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.552872][ T7305] bond1: (slave veth3): Releasing active interface
[   73.560301][ T7305] bond2: (slave veth7): Releasing active interface
[   73.580387][ T7307] erspan0: left allmulticast mode
[   73.592788][ T7307] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.595511][ T7307] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   73.672697][   T24] hid-generic 0005:FFFC:0005.0001: item fetching failed at offset 0/3
[   73.679055][   T24] hid-generic 0005:FFFC:0005.0001: probe with driver hid-generic failed with error -22
[   73.812590][ T7342] netlink: 'syz.1.440': attribute type 14 has an invalid length.
[   73.832294][ T7342] netlink: 'syz.1.440': attribute type 14 has an invalid length.
[   73.869702][ T7355] netlink: 'syz.0.441': attribute type 2 has an invalid length.
[   74.256969][ T7384] atomic_op ffff88803bf8c198 conn xmit_atomic 0000000000000000
[   74.423420][ T7390] netlink: 'syz.2.455': attribute type 7 has an invalid length.
[   74.685694][ T7404] Bluetooth: MGMT ver 1.23
[   74.689494][ T7404] netlink: 'syz.0.458': attribute type 2 has an invalid length.
[   74.746967][ T7407] 8021q: adding VLAN 0 to HW filter on device bond4
[   74.750172][ T7407] team0: Port device bond4 added
[   74.931396][ T7416] netlink: 'syz.1.462': attribute type 4 has an invalid length.
[   75.494210][ T7475] 8021q: adding VLAN 0 to HW filter on device bond5
[   75.687203][ T7495] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   75.770997][ T7498] syzkaller0: entered promiscuous mode
[   75.772731][ T7498] syzkaller0: entered allmulticast mode
[   75.877461][ T7502] ieee802154 phy0 wpan0: encryption failed: -22
[   76.888193][ T7525] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   76.931500][ T7529] __nla_validate_parse: 76 callbacks suppressed
[   76.931512][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'.
[   77.619302][ T7540] netlink: 248 bytes leftover after parsing attributes in process `syz.1.498'.
[   77.863678][ T7560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.504'.
[   77.877881][ T7560] bond_slave_1: mtu greater than device maximum
[   77.945604][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'.
[   77.958549][ T7572] netlink: 'syz.1.504': attribute type 1 has an invalid length.
[   77.960994][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.504'.
[   78.188913][ T7588] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   78.197077][ T7588] netlink: 144 bytes leftover after parsing attributes in process `syz.2.512'.
[   78.253323][ T7591] netlink: 212 bytes leftover after parsing attributes in process `syz.2.513'.
[   78.256705][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'.
[   78.266373][ T7594] netlink: 'syz.1.514': attribute type 5 has an invalid length.
[   78.268879][ T7594] netlink: 'syz.1.514': attribute type 1 has an invalid length.
[   78.271224][ T7594] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.514'.
[   78.386810][ T7596] netlink: 56 bytes leftover after parsing attributes in process `syz.2.515'.
[   78.882003][ T7627] C: renamed from team_slave_0
[   78.888595][ T7627] netlink: 'syz.0.523': attribute type 3 has an invalid length.
[   78.891181][ T7627] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   79.631231][ T7656] nbd: must specify at least one socket
[   79.720968][ T7671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   80.225877][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[   80.622120][ T7691] IPVS: set_ctl: invalid protocol: 190 127.0.0.1:20001
[   80.626165][ T7693] IPVS: set_ctl: invalid protocol: 190 127.0.0.1:20001
[   80.715765][ T7698] Cannot find del_set index 1 as target
[   80.851931][ T7709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   80.913445][ T7709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   80.972126][ T7709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.036140][ T7709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.096989][ T7709] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   81.106714][ T7709] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   81.116081][ T7709] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   81.124202][ T7709] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   81.194846][   T10] cfg80211: failed to load regulatory.db
[   81.280278][ T7723] ip6gre1: entered promiscuous mode
[   81.853221][ T7768] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551607)
[   81.859066][ T7768] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   81.886864][ T7768] bridge_slave_0: entered promiscuous mode
[   81.891403][ T7768] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   81.933040][ T7767] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   82.298249][ T7803] __nla_validate_parse: 41 callbacks suppressed
[   82.298263][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'.
[   82.418128][ T7811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.420559][ T7811] IPv6: NLM_F_CREATE should be set when creating new route
[   82.423136][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'.
[   82.497072][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[   82.617230][ T7825] macsec0: entered promiscuous mode
[   82.619599][ T7825] macsec1: entered allmulticast mode
[   82.621282][ T7825] macsec0: entered allmulticast mode
[   82.622924][ T7825] veth1_macvtap: entered allmulticast mode
[   83.012202][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.591'.
[   83.022706][ T7863] netlink: 'syz.1.591': attribute type 16 has an invalid length.
[   83.025782][ T7863] netlink: 'syz.1.591': attribute type 17 has an invalid length.
[   83.165972][ T7863] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.168560][ T7863] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.171181][ T7863] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.173740][ T7863] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.194882][ T7863] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.197587][ T7863] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.200035][ T7863] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.202594][ T7863] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.283478][ T7869] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[   83.291777][ T7866] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[   83.419860][ T7878] ieee802154 phy0 wpan0: encryption failed: -90
[   83.550161][ T7885] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   83.676871][ T7895] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.715620][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.602'.
[   83.860923][ T7911] macsec0: entered allmulticast mode
[   83.863139][ T7911] veth1_macvtap: entered allmulticast mode
[   83.865392][ T7911] macsec0: left allmulticast mode
[   83.867031][ T7911] veth1_macvtap: left allmulticast mode
[   84.007956][ T7924] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   84.011009][ T7924] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   84.057406][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.610'.
[   84.789895][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[   84.796860][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[   84.838522][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'.
[   84.877797][ T7950] Cannot find add_set index 2 as target
[   85.133685][ T7965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.270599][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'.
[   85.528464][ T7985] syzkaller0: entered promiscuous mode
[   85.530308][ T7985] syzkaller0: entered allmulticast mode
[   85.805462][ T7995] netlink: 'syz.2.626': attribute type 6 has an invalid length.
[   87.098560][  T791] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 0/1
[   87.111993][  T791] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22
[   87.212993][ T8057] netlink: 'syz.2.641': attribute type 2 has an invalid length.
[   87.631408][ T8081] __nla_validate_parse: 9 callbacks suppressed
[   87.631421][ T8081] netlink: 344 bytes leftover after parsing attributes in process `syz.0.649'.
[   87.636878][ T8081] netlink: 56 bytes leftover after parsing attributes in process `syz.0.649'.
[   87.657073][ T8084] netlink: 212316 bytes leftover after parsing attributes in process `syz.1.650'.
[   87.689352][ T8088] lo: entered promiscuous mode
[   87.691499][ T8088] tunl0: entered promiscuous mode
[   87.695491][ T8088] gre0: entered promiscuous mode
[   87.698479][ T8088] gretap0: entered promiscuous mode
[   87.701169][ T8088] erspan0: entered promiscuous mode
[   87.703274][ T8088] ip_vti0: entered promiscuous mode
[   87.705899][ T8088] ip6_vti0: entered promiscuous mode
[   87.708513][ T8088] sit0: entered promiscuous mode
[   87.710516][ T8088] ip6tnl0: entered promiscuous mode
[   87.712829][ T8088] ip6gre0: entered promiscuous mode
[   87.716442][ T8088] syz_tun: entered promiscuous mode
[   87.718437][ T8088] ip6gretap0: entered promiscuous mode
[   87.720434][ T8088] vcan0: entered promiscuous mode
[   87.722280][ T8088] bond0: entered promiscuous mode
[   87.724743][ T8088] team0: entered promiscuous mode
[   87.726374][ T8088] bond4: entered promiscuous mode
[   87.729093][ T8088] 8021q: adding VLAN 0 to HW filter on device team0
[   87.731987][ T8088] dummy0: entered promiscuous mode
[   87.736356][ T8088] nlmon0: entered promiscuous mode
[   87.739461][ T8088] caif0: entered promiscuous mode
[   87.741732][ T8088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.825786][ T8103] batman_adv: batadv0: Adding interface: dummy0
[   87.830663][ T8103] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.840903][ T8103] batman_adv: batadv0: Interface activated: dummy0
[   87.851004][ T8103] batadv0: mtu less than device minimum
[   87.853661][ T8103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.857788][ T8103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.861776][ T8103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.865747][ T8103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.869648][ T8103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.873438][ T8103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.877338][ T8103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   88.531748][ T8142] sctp: [Deprecated]: syz.0.665 (pid 8142) Use of int in max_burst socket option deprecated.
[   88.531748][ T8142] Use struct sctp_assoc_value instead
[   89.398360][ T8165] netlink: 'syz.0.669': attribute type 30 has an invalid length.
[   89.410536][ T8165] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   89.413533][ T8165] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   89.456642][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'.
[   89.530600][ T8171] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   89.554718][ T8171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.671'.
[   89.565292][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'.
[   89.701145][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'.
[   89.703920][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'.
[   90.349490][ T8215] bond0: (slave wlan1): Releasing backup interface
[   90.371306][ T8216] netlink: 'syz.2.683': attribute type 1 has an invalid length.
[   90.429625][ T8216] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.446852][ T8223] bond2: (slave bridge3): making interface the new active one
[   90.450233][ T8223] bond2: (slave bridge3): Enslaving as an active interface with an up link
[   90.463030][ T8215] netlink: 56 bytes leftover after parsing attributes in process `syz.2.683'.
[   90.618063][ T8236] netlink: 'syz.1.688': attribute type 2 has an invalid length.
[   90.620420][ T8236] netlink: 'syz.1.688': attribute type 8 has an invalid length.
[   90.623016][ T8236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.688'.
[   90.633130][ T8240] netlink: 'syz.0.687': attribute type 5 has an invalid length.
[   90.643574][ T8240] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   90.654650][ T8240] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   90.657040][ T8240] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   90.665174][ T8240] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   90.667784][ T8240] geneve4: entered promiscuous mode
[   90.669350][ T8240] geneve4: entered allmulticast mode
[   90.996995][ T8281] lo speed is unknown, defaulting to 1000
[   90.998931][ T8281] lo speed is unknown, defaulting to 1000
[   91.008283][ T8281] lo speed is unknown, defaulting to 1000
[   91.013058][ T8281] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   91.021035][ T8281] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   91.042712][ T8281] lo speed is unknown, defaulting to 1000
[   91.045808][ T8281] lo speed is unknown, defaulting to 1000
[   91.049051][ T8281] lo speed is unknown, defaulting to 1000
[   91.282711][ T8293] lo speed is unknown, defaulting to 1000
[   91.694079][ T8326] lo speed is unknown, defaulting to 1000
[   92.268960][ T8367] pim6reg1: entered promiscuous mode
[   92.270653][ T8367] pim6reg1: entered allmulticast mode
[   92.482081][ T8384] net_ratelimit: 12 callbacks suppressed
[   92.482092][ T8384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.567429][ T8376] lo speed is unknown, defaulting to 1000
[   92.807356][ T8403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.814926][ T8403] syzkaller0: entered promiscuous mode
[   92.818485][ T8403] syzkaller0: entered allmulticast mode
[   92.831092][ T8403] tipc: Resetting bearer <eth:syzkaller0>
[   92.862555][ T8403] tipc: Resetting bearer <eth:syzkaller0>
[   92.879316][ T8403] tipc: Disabling bearer <eth:syzkaller0>
[   92.956027][ T8398] lo speed is unknown, defaulting to 1000
[   93.278388][ T8425] lo speed is unknown, defaulting to 1000
[   93.490806][ T8426] lo speed is unknown, defaulting to 1000
[   93.895867][ T8464] __nla_validate_parse: 15 callbacks suppressed
[   93.895879][ T8464] netlink: 48 bytes leftover after parsing attributes in process `syz.2.747'.
[   94.023267][ T8460] lo speed is unknown, defaulting to 1000
[   94.044073][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[   94.055092][ T8461] ip_vti0: left promiscuous mode
[   94.056693][ T8461] ip_vti0: entered allmulticast mode
[   94.190875][ T8474] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   94.330241][ T8480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.753'.
[   94.335402][ T8480] netlink: 84 bytes leftover after parsing attributes in process `syz.1.753'.
[   94.338725][ T8480] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.341237][ T8480] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.343678][ T8480] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.347516][ T8480] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.351904][ T8480] netlink: 84 bytes leftover after parsing attributes in process `syz.1.753'.
[   94.602947][ T8498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.758'.
[   94.672249][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'.
[   94.675428][ T8507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.759'.
[   94.678185][ T8507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.759'.
[   94.678383][ T8505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.684185][ T8505] syzkaller0: entered promiscuous mode
[   94.687989][ T8505] syzkaller0: entered allmulticast mode
[   94.738847][ T8506] tipc: Resetting bearer <eth:syzkaller0>
[   94.752037][ T8506] tipc: Disabling bearer <eth:syzkaller0>
[   94.779659][ T8513] syz.2.762 (8513) used obsolete PPPIOCDETACH ioctl
[   94.831827][ T8515] tap0: tun_chr_ioctl cmd 1074025677
[   94.833658][ T8515] tap0: linktype set to 0
[   95.053408][ T8521] lo speed is unknown, defaulting to 1000
[   95.485980][ T8535] lo speed is unknown, defaulting to 1000
[   95.515418][ T8538] 8021q: adding VLAN 0 to HW filter on device bond6
[   95.519886][ T8538] bond6: entered promiscuous mode
[   95.522714][ T8538] bond0: (slave bond6): Enslaving as an active interface with an up link
[   95.699640][ T8544] netlink: 34 bytes leftover after parsing attributes in process `syz.2.772'.
[   95.805623][ T8546] block nbd0: not configured, cannot reconfigure
[   95.926646][ T8558] netlink: 'syz.2.776': attribute type 21 has an invalid length.
[   96.142682][ T8558] 8021q: VLANs not supported on wg2
[   96.144691][ T8550] netlink: 'syz.1.774': attribute type 30 has an invalid length.
[   96.156475][ T8550] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.158989][ T8550] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.161453][ T8550] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.163926][ T8550] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.184720][ T8550] netlink: 'syz.1.774': attribute type 30 has an invalid length.
[   96.292578][ T8571] Cannot find add_set index 2 as target
[   96.466167][ T8589] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   96.610000][ T8585] lo speed is unknown, defaulting to 1000
[   96.740329][ T8609] netlink: 'syz.1.791': attribute type 1 has an invalid length.
[   96.743517][ T8610] xt_addrtype: ipv6 does not support BROADCAST matching
[   97.080475][ T8640] bridge_slave_0: left promiscuous mode
[   97.090068][ T8640] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.092612][ T8640] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.095953][ T8640] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.098529][ T8640] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.103775][ T8640] vlan2: left promiscuous mode
[   97.105494][ T8640] bridge0: left promiscuous mode
[   97.107154][ T8640] vlan2: left allmulticast mode
[   97.108702][ T8640] bridge0: left allmulticast mode
[   97.110972][ T8640] bridge4: left promiscuous mode
[   97.112562][ T8640] bridge4: left allmulticast mode
[   97.115350][ T8640] bridge5: left promiscuous mode
[   97.116953][ T8640] bridge5: left allmulticast mode
[   97.118680][ T8640] veth2: left allmulticast mode
[   97.120416][ T8640] veth3: left promiscuous mode
[   97.125997][ T8640] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.128638][ T8640] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.131146][ T8640] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.133729][ T8640] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.914777][ T8666] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   97.992214][ T8673] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   98.908700][ T8732] netlink: 'syz.0.825': attribute type 2 has an invalid length.
[   98.910921][ T8732] __nla_validate_parse: 16 callbacks suppressed
[   98.910930][ T8732] netlink: 119 bytes leftover after parsing attributes in process `syz.0.825'.
[   99.037019][ T8732] batman_adv: batadv0: Interface deactivated: dummy0
[   99.055307][ T8732] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[   99.057935][ T8732] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[   99.060417][ T8732] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[   99.062839][ T8732] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[   99.072239][ T8744] netlink: 72 bytes leftover after parsing attributes in process `syz.1.827'.
[   99.079435][ T8732] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[   99.081920][ T8732] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[   99.085249][ T8732] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[   99.087687][ T8732] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[   99.100128][   T24] lo speed is unknown, defaulting to 1000
[   99.102126][   T24] syz2: Port: 1 Link DOWN
[   99.176074][ T8756] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   99.828277][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'.
[   99.865338][ T8791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.840'.
[   99.894711][ T8789] netlink: 68 bytes leftover after parsing attributes in process `syz.2.837'.
[   99.933527][ T8793] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  100.010854][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'.
[  100.226580][ T8831] veth0: entered promiscuous mode
[  100.238882][ T8831] veth0: left promiscuous mode
[  100.315752][ T8810] lo speed is unknown, defaulting to 1000
[  100.470308][ T8850] sctp: [Deprecated]: syz.2.857 (pid 8850) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.470308][ T8850] Use struct sctp_sack_info instead
[  100.491227][ T8850] sctp: [Deprecated]: syz.2.857 (pid 8850) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.491227][ T8850] Use struct sctp_sack_info instead
[  100.661184][ T8860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.861'.
[  100.712199][ T8863] netlink: 64 bytes leftover after parsing attributes in process `syz.2.862'.
[  100.938706][ T8861] lo speed is unknown, defaulting to 1000
[  101.139722][  T791] IPVS: starting estimator thread 0...
[  101.160199][ T8869] lo speed is unknown, defaulting to 1000
[  101.224381][ T8878] IPVS: using max 61 ests per chain, 146400 per kthread
[  101.249596][ T8881] netlink: 'syz.1.865': attribute type 6 has an invalid length.
[  101.278681][ T8883] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  101.286697][ T8883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  101.357640][ T8886] netlink: 'syz.2.867': attribute type 11 has an invalid length.
[  101.361133][ T8886] netlink: 44 bytes leftover after parsing attributes in process `syz.2.867'.
[  101.577437][ T8900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.869'.
[  101.702004][ T8909] ieee802154 phy0 wpan0: encryption failed: -22
[  102.301239][   T24] IPVS: starting estimator thread 0...
[  102.312918][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.316743][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.338593][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.385944][ T8918] IPVS: using max 61 ests per chain, 146400 per kthread
[  102.496046][ T8937] veth11: entered promiscuous mode
[  103.055180][ T8962] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  103.111997][ T8962] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  103.115959][ T8962] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  103.122302][ T8962] bond4: (slave vti0): making interface the new active one
[  103.127572][ T8962] bond4: (slave vti0): Enslaving as an active interface with an up link
[  103.302758][ T8967] netlink: 'syz.2.889': attribute type 21 has an invalid length.
[  103.306110][ T8967] netlink: 'syz.2.889': attribute type 1 has an invalid length.
[  103.435383][ T8980] delete_channel: no stack
[  103.488061][ T8984] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  103.570721][ T8997] tipc: Started in network mode
[  103.580562][ T8997] tipc: Node identity 1a718008873e, cluster identity 4711
[  103.583671][ T8997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.637695][ T8997] syzkaller0: entered promiscuous mode
[  103.639441][ T8997] syzkaller0: entered allmulticast mode
[  103.641713][ T8997] tipc: Resetting bearer <eth:syzkaller0>
[  103.678553][ T8993] tipc: Resetting bearer <eth:syzkaller0>
[  103.758757][ T9010] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  103.761293][ T9010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.602107][ T8993] tipc: Disabling bearer <eth:syzkaller0>
[  104.607621][ T9020] netlink: 'syz.1.904': attribute type 7 has an invalid length.
[  104.703577][ T9035] netlink: 'syz.1.909': attribute type 9 has an invalid length.
[  104.706416][ T9035] __nla_validate_parse: 10 callbacks suppressed
[  104.706424][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'.
[  104.717347][ T9035] macvlan2: entered promiscuous mode
[  104.719085][ T9035] hsr0: entered promiscuous mode
[  104.724182][ T9035] macvlan2: entered allmulticast mode
[  104.728876][ T9035] hsr0: entered allmulticast mode
[  104.732316][ T9035] hsr_slave_0: entered allmulticast mode
[  104.740057][ T9035] hsr_slave_1: entered allmulticast mode
[  104.982761][ T9051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.914'.
[  105.011061][ T9045] lo speed is unknown, defaulting to 1000
[  105.037753][ T9051] sock: sock_set_timeout: `syz.2.914' (pid 9051) tries to set negative timeout
[  105.131481][ T9069] netlink: 'syz.1.920': attribute type 5 has an invalid length.
[  105.145907][ T9070] syz_tun: entered allmulticast mode
[  105.149569][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'.
[  105.159103][ T9069] syz_tun: left allmulticast mode
[  105.241583][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'.
[  105.322898][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.924'.
[  105.375390][ T9086] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.925'.
[  105.406251][ T9082] lo speed is unknown, defaulting to 1000
[  105.481466][ T9089] vlan2: entered promiscuous mode
[  105.483147][ T9089] bridge0: entered promiscuous mode
[  105.516435][ T9094] xt_nat: multiple ranges no longer supported
[  105.593907][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.929'.
[  105.602267][ T9101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.929'.
[  105.606494][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.929'.
[  105.609163][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.929'.
[  106.129097][ T9112] netlink: 'syz.0.933': attribute type 8 has an invalid length.
[  106.166172][ T9118] netlink: 'syz.0.934': attribute type 25 has an invalid length.
[  106.200550][ T9120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.203115][ T9120] syzkaller0: entered promiscuous mode
[  106.205191][ T9120] syzkaller0: entered allmulticast mode
[  106.218268][ T9120] tipc: Resetting bearer <eth:syzkaller0>
[  106.221873][ T9119] tipc: Resetting bearer <eth:syzkaller0>
[  106.229906][ T9119] tipc: Disabling bearer <eth:syzkaller0>
[  106.336618][ T9122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.339269][ T9122] syzkaller0: entered promiscuous mode
[  106.341086][ T9122] syzkaller0: entered allmulticast mode
[  106.354210][ T9122] tipc: Resetting bearer <eth:syzkaller0>
[  106.420606][ T9121] tipc: Resetting bearer <eth:syzkaller0>
[  106.428431][ T9121] tipc: Disabling bearer <eth:syzkaller0>
[  106.579406][ T9141] netlink: 'syz.2.942': attribute type 12 has an invalid length.
[  106.895800][ T9173] tipc: Cannot configure node identity twice
[  107.067290][ T9175] lo speed is unknown, defaulting to 1000
[  107.407021][ T9192] xt_hashlimit: size too large, truncated to 1048576
[  107.500138][ T9192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.502727][ T9192] syzkaller0: entered promiscuous mode
[  107.505558][ T9192] syzkaller0: entered allmulticast mode
[  107.515637][ T9192] tipc: Resetting bearer <eth:syzkaller0>
[  107.519358][ T9191] tipc: Resetting bearer <eth:syzkaller0>
[  107.526327][ T9191] tipc: Disabling bearer <eth:syzkaller0>
[  107.627414][ T9197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.713576][ T9207] bridge: RTM_NEWNEIGH with invalid ether address
[  107.743420][ T9215] netlink: 'syz.1.964': attribute type 10 has an invalid length.
[  107.751082][ T9215] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.753925][ T9215] team0: Port device bond0 added
[  108.734050][ T9273] lo speed is unknown, defaulting to 1000
[  109.188744][ T9356] netlink: 'syz.2.982': attribute type 2 has an invalid length.
[  109.195321][ T9356] netlink: 'syz.2.982': attribute type 1 has an invalid length.
[  109.506658][ T9372] netlink: 'syz.2.986': attribute type 1 has an invalid length.
[  109.509034][ T9372] netlink: 'syz.2.986': attribute type 1 has an invalid length.
[  109.538038][ T9382] netlink: 'syz.0.988': attribute type 21 has an invalid length.
[  109.540622][ T9382] netlink: 'syz.0.988': attribute type 4 has an invalid length.
[  109.543043][ T9382] netlink: 'syz.0.988': attribute type 3 has an invalid length.
[  109.547626][   T33] audit: type=1800 audit(1752896303.486:2): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.988" name="memory.events" dev="tmpfs" ino=1666 res=0 errno=0
[  109.553960][   T33] audit: type=1804 audit(1752896303.486:3): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.988" name="/newroot/324/memory.events" dev="tmpfs" ino=1666 res=1 errno=0
[  109.574154][ T9386] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.593289][ T9388] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.661895][ T9395] netlink: 'syz.0.993': attribute type 21 has an invalid length.
[  109.731140][ T9403] __nla_validate_parse: 49 callbacks suppressed
[  109.731151][ T9403] netlink: 168 bytes leftover after parsing attributes in process `syz.2.995'.
[  109.827646][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.997'.
[  109.961710][ T9410] lo speed is unknown, defaulting to 1000
[  110.104155][ T9427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.106865][ T9427] syzkaller0: entered promiscuous mode
[  110.108682][ T9427] syzkaller0: entered allmulticast mode
[  110.155153][ T9431] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  110.157687][ T9431] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  110.166043][ T9427] tipc: Resetting bearer <eth:syzkaller0>
[  110.168738][ T9427] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.1002'.
[  110.186573][ T9426] tipc: Resetting bearer <eth:syzkaller0>
[  110.195674][ T9426] tipc: Disabling bearer <eth:syzkaller0>
[  110.379185][ T9451] lo: left promiscuous mode
[  110.384884][ T9451] lo: left allmulticast mode
[  110.394022][ T9451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.422137][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'.
[  110.533391][ T9458] bond4: left promiscuous mode
[  110.539383][ T9458] team0 (unregistering): Port device bond4 removed
[  110.631603][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.634107][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.837017][ T9494] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1023'.
[  111.459371][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'.
[  111.591661][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  111.598642][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1029'.
[  111.853246][ T9518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.856494][ T9518] syzkaller0: entered promiscuous mode
[  111.858336][ T9518] syzkaller0: entered allmulticast mode
[  111.871039][ T9518] tipc: Resetting bearer <eth:syzkaller0>
[  111.883721][ T9521] tipc: Resetting bearer <eth:syzkaller0>
[  111.894111][ T9521] tipc: Disabling bearer <eth:syzkaller0>
[  111.984021][ T9525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1033'.
[  112.020842][ T9527] xt_TPROXY: Can be used only with -p tcp or -p udp
[  112.048026][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1035'.
[  112.058037][ T9531] trusted_key: syz.1.1035 sent an empty control message without MSG_MORE.
[  112.158993][ T9540] validate_nla: 3 callbacks suppressed
[  112.159003][ T9540] netlink: 'syz.1.1038': attribute type 1 has an invalid length.
[  112.161547][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.173175][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.177025][ T9540] 8021q: adding VLAN 0 to HW filter on device bond3
[  112.241259][ T9506] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  112.379140][ T9556] No such timeout policy "syz0"
[  112.397262][ T9557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.435597][ T9552] tipc: Disabling bearer <eth:syzkaller0>
[  112.448563][ T9561] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  112.519199][ T9568] No such timeout policy "syz0"
[  112.524194][ T9567] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  112.635647][ T9579] netlink: 'syz.2.1052': attribute type 11 has an invalid length.
[  112.762711][ T9587] xt_cgroup: xt_cgroup: no path or classid specified
[  112.786697][ T9577] lo speed is unknown, defaulting to 1000
[  112.897702][ T9593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.662325][ T9610] netlink: 'syz.2.1060': attribute type 13 has an invalid length.
[  113.706583][ T9605] lo speed is unknown, defaulting to 1000
[  114.450007][ T9626] netlink: 'syz.2.1065': attribute type 2 has an invalid length.
[  114.452790][ T9626] netlink: 'syz.2.1065': attribute type 32 has an invalid length.
[  114.455583][ T9626] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  114.587899][ T9630] lo speed is unknown, defaulting to 1000
[  114.999486][ T9640] __nla_validate_parse: 14 callbacks suppressed
[  114.999497][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'.
[  115.025065][ T9640] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1069'.
[  115.057006][ T9645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'.
[  115.059832][ T9645] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1070'.
[  115.062896][ T9645] tipc: Invalid UDP bearer configuration
[  115.062922][ T9645] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  115.081153][ T9649] bridge_slave_0: default FDB implementation only supports local addresses
[  115.127063][ T9657] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1074'.
[  115.131610][ T9657] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1074'.
[  115.157193][ T9659] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1075'.
[  115.232890][ T9673] netlink: 'syz.0.1077': attribute type 8 has an invalid length.
[  115.297474][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'.
[  115.401203][ T9654] lo speed is unknown, defaulting to 1000
[  115.522875][ T9693] lo speed is unknown, defaulting to 1000
[  115.597768][ T9693] netlink: 'syz.0.1081': attribute type 2 has an invalid length.
[  115.712375][ T9701] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  115.930234][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1084'.
[  116.072206][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'.
[  116.148495][ T9726] IPVS: Error joining to the multicast group
[  116.211229][ T9735] netlink: 'syz.1.1093': attribute type 15 has an invalid length.
[  116.213514][ T9735] netlink: 'syz.1.1093': attribute type 18 has an invalid length.
[  116.219425][ T9737] bridge0: port 1(veth0_to_bridge) entered blocking state
[  116.225980][ T9737] bridge0: port 1(veth0_to_bridge) entered disabled state
[  116.234464][ T9737] veth0_to_bridge: entered allmulticast mode
[  116.237141][ T9737] veth0_to_bridge: entered promiscuous mode
[  116.253302][ T9735] syzkaller1: entered promiscuous mode
[  116.258077][ T9735] syzkaller1: entered allmulticast mode
[  116.440101][ T9743] lo speed is unknown, defaulting to 1000
[  117.218287][ T9762] xt_connbytes: Forcing CT accounting to be enabled
[  117.223500][ T9763] xt_connbytes: Forcing CT accounting to be enabled
[  117.228770][ T9762] --map-set only usable from mangle table
[  117.233490][ T9763] --map-set only usable from mangle table
[  117.341057][ T9772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.592287][ T9781] vxcan1: entered allmulticast mode
[  117.694157][ T9794] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  117.814548][ T9805] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  118.201981][ T9774] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  118.654074][ T9860] netlink: 'syz.2.1131': attribute type 11 has an invalid length.
[  118.700466][ T9866] xt_l2tp: v2 tid > 0xffff: 4294967295
[  118.705961][ T9867] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  118.848523][ T9878] SET target dimension over the limit!
[  118.914396][ T9888] xt_CT: No such helper "pptp"
[  118.951727][ T9896] netlink: 'syz.0.1140': attribute type 58 has an invalid length.
[  118.962993][ T9898] IPv6: NLM_F_CREATE should be specified when creating new route
[  119.180888][ T9916] macvlan0: entered promiscuous mode
[  119.187305][ T9916] macvlan0: entered allmulticast mode
[  119.236739][ T9921] xt_SECMARK: invalid mode: 0
[  119.241358][ T9923] netlink: 'syz.2.1148': attribute type 21 has an invalid length.
[  119.244869][ T9923] netlink: 'syz.2.1148': attribute type 6 has an invalid length.
[  119.331350][ T9933] Bluetooth: MGMT ver 1.23
[  119.390038][ T9939] netlink: 'syz.0.1151': attribute type 9 has an invalid length.
[  119.492749][ T9947] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  119.548964][ T9951] lo: left promiscuous mode
[  119.550526][ T9951] tunl0: left promiscuous mode
[  119.552145][ T9951] gre0: left promiscuous mode
[  119.553709][ T9951] gretap0: left promiscuous mode
[  119.561112][ T9951] erspan0: left promiscuous mode
[  119.562725][ T9951] ip_vti0: left allmulticast mode
[  119.565850][ T9951] ip6_vti0: left promiscuous mode
[  119.567441][ T9951] sit0: left promiscuous mode
[  119.568978][ T9951] ip6tnl0: left promiscuous mode
[  119.570568][ T9951] ip6gre0: left promiscuous mode
[  119.572165][ T9951] syz_tun: left promiscuous mode
[  119.573753][ T9951] ip6gretap0: left promiscuous mode
[  119.577543][ T9951] vcan0: left promiscuous mode
[  119.579123][ T9951] bond0: left promiscuous mode
[  119.580592][ T9951] bond6: left promiscuous mode
[  119.582276][ T9951] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  119.586365][ T9951] dummy0: left promiscuous mode
[  119.587988][ T9951] nlmon0: left promiscuous mode
[  119.589572][ T9951] caif0: left promiscuous mode
[  119.595771][ T9951] bridge_slave_0: left allmulticast mode
[  119.618373][ T9951] macsec1: left promiscuous mode
[  119.619983][ T9951] macsec1: left allmulticast mode
[  119.621785][ T9951] veth3: left promiscuous mode
[  119.623780][ T9951] geneve3: left promiscuous mode
[  119.626997][ T9951] veth7: left promiscuous mode
[  119.628874][ T9951] ip6gre1: left promiscuous mode
[  119.630491][ T9951] geneve4: left promiscuous mode
[  119.632036][ T9951] geneve4: left allmulticast mode
[  119.634135][ T9951] veth11: left promiscuous mode
[  119.717967][ T9961] netlink: 'syz.0.1155': attribute type 2 has an invalid length.
[  120.309572][T10004] netlink: 'syz.2.1171': attribute type 12 has an invalid length.
[  120.312765][T10005] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  120.318287][T10004] __nla_validate_parse: 63 callbacks suppressed
[  120.318308][T10004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1171'.
[  120.475528][T10002] lo speed is unknown, defaulting to 1000
[  120.685137][T10029] sock: sock_set_timeout: `syz.0.1176' (pid 10029) tries to set negative timeout
[  120.719413][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1179'.
[  120.736978][T10040] netlink: 'syz.0.1180': attribute type 2 has an invalid length.
[  120.743744][T10041] netlink: 'syz.0.1180': attribute type 2 has an invalid length.
[  120.822765][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'.
[  120.828932][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1183'.
[  120.831713][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'.
[  120.845358][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1183'.
[  120.878038][T10043] sctp: [Deprecated]: syz.1.1182 (pid 10043) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.878038][T10043] Use struct sctp_sack_info instead
[  121.017242][T10057] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1185'.
[  121.023400][T10064] sctp: [Deprecated]: syz.1.1187 (pid 10064) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.023400][T10064] Use struct sctp_sack_info instead
[  121.161301][T10081] @: renamed from bond_slave_0
[  121.381941][T10106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.382194][T10091] lo speed is unknown, defaulting to 1000
[  121.526226][T10114] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1196'.
[  121.545442][T10114] tap0: tun_chr_ioctl cmd 1074025680
[  121.728731][T10123] netlink: 'syz.1.1201': attribute type 142 has an invalid length.
[  121.772158][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1199'.
[  121.875912][T10138] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1204'.
[  122.284083][T10183] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.287197][T10183] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.289843][T10183] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.292422][T10183] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.378293][T10191] openvswitch: netlink: IPv6 tunnel dst address is zero
[  122.890241][T10202] bridge0: port 2(vlan2) entered blocking state
[  122.892344][T10202] bridge0: port 2(vlan2) entered disabled state
[  122.895367][T10202] vlan2: entered allmulticast mode
[  122.897148][T10202] bond0: entered allmulticast mode
[  122.898804][T10202] bond6: entered allmulticast mode
[  122.900478][T10202] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  122.906999][T10202] vlan2: entered promiscuous mode
[  122.908725][T10202] bond0: entered promiscuous mode
[  122.910330][T10202] bond6: entered promiscuous mode
[  122.912070][T10202] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  123.102746][T10218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.105717][T10218] syzkaller0: entered promiscuous mode
[  123.107509][T10218] syzkaller0: entered allmulticast mode
[  123.118843][T10218] tipc: Resetting bearer <eth:syzkaller0>
[  123.126332][T10218] macvlan2: entered allmulticast mode
[  123.128120][T10218] veth1_vlan: entered allmulticast mode
[  123.130850][T10218] veth1_vlan: left allmulticast mode
[  123.189609][T10217] tipc: Resetting bearer <eth:syzkaller0>
[  123.202876][T10217] tipc: Disabling bearer <eth:syzkaller0>
[  123.263438][T10226] 8021q: VLANs not supported on vxcan0
[  123.276529][T10226] vlan0: entered allmulticast mode
[  123.279521][T10226] bridge_slave_0: entered allmulticast mode
[  123.513682][T10253] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  123.570076][T10255] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  123.573824][T10255] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  123.581781][T10261] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  123.584925][T10262] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  123.655509][T10255] gretap1: entered promiscuous mode
[  123.659878][T10255] bond4: (slave gretap1): making interface the new active one
[  123.669869][T10255] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  123.855369][T10278] xt_CT: You must specify a L4 protocol and not use inversions on it
[  123.897242][T10302] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  123.984861][T10311] validate_nla: 4 callbacks suppressed
[  123.984873][T10311] netlink: 'syz.1.1255': attribute type 24 has an invalid length.
[  124.049877][T10321] macvtap1: entered promiscuous mode
[  124.051596][T10321] team0: entered promiscuous mode
[  124.053316][T10321] bond0: entered promiscuous mode
[  124.059614][T10321] macvtap1: entered allmulticast mode
[  124.061379][T10321] team0: entered allmulticast mode
[  124.063034][T10321] bond0: entered allmulticast mode
[  124.065479][T10321] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  124.076402][T10321] team0: left allmulticast mode
[  124.078039][T10321] bond0: left allmulticast mode
[  124.079655][T10321] team0: left promiscuous mode
[  124.081146][T10321] bond0: left promiscuous mode
[  124.090724][T10325] vlan3: entered promiscuous mode
[  124.092691][T10325] bridge0: entered promiscuous mode
[  124.193761][T10343] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  124.367652][T10359] syzkaller0: entered promiscuous mode
[  124.369469][T10359] syzkaller0: entered allmulticast mode
[  125.325476][T10379] __nla_validate_parse: 81 callbacks suppressed
[  125.325487][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  125.330439][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  125.333352][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  125.337165][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  125.340246][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  125.343334][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  125.354870][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  125.366941][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  125.445538][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'.
[  125.570871][T10411] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  125.575662][T10411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1283'.
[  125.619109][T10415] xt_TCPMSS: Only works on TCP SYN packets
[  125.767983][T10427] xt_hashlimit: size too large, truncated to 1048576
[  125.838457][T10432] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  125.868402][T10433] team0: Port device bond0 removed
[  125.871932][   T28] smc: removing ib device sw1
[  125.874820][T10433] bond0 (unregistering): Released all slaves
[  126.269768][T10455] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  126.272755][T10455] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  126.302285][T10457] veth0: entered promiscuous mode
[  126.305948][T10456] veth0: left promiscuous mode
[  126.628681][T10476] bond0: entered promiscuous mode
[  126.811785][T10495] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 0, id = 0
[  127.594230][T10498] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.931732][T10522] sctp: [Deprecated]: syz.1.1315 (pid 10522) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.931732][T10522] Use struct sctp_sack_info instead
[  127.941670][T10525] sctp: [Deprecated]: syz.1.1315 (pid 10525) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.941670][T10525] Use struct sctp_sack_info instead
[  128.060513][T10529] 8021q: adding VLAN 0 to HW filter on device bond8
[  128.064939][T10529] bond8: entered promiscuous mode
[  128.066735][T10529] bond8: entered allmulticast mode
[  128.068859][T10529] bond0: (slave bond8): Enslaving as an active interface with an up link
[  128.921578][T10553] openvswitch: netlink: Missing key (keys=40, expected=80)
[  128.964019][T10555] lo speed is unknown, defaulting to 1000
[  129.318573][T10575] xt_hashlimit: size too large, truncated to 1048576
[  129.321076][T10575] xt_hashlimit: max too large, truncated to 1048576
[  129.345020][T10575] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  129.428087][T10584] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  129.431047][T10585] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  129.849422][T10635] netlink: 'syz.2.1347': attribute type 1 has an invalid length.
[  129.868120][T10635] 8021q: adding VLAN 0 to HW filter on device bond8
[  129.882421][T10635] bond8: (slave veth3): Enslaving as an active interface with a down link
[  129.890702][T10635] vlan3: entered allmulticast mode
[  129.892505][T10635] bond8: entered allmulticast mode
[  129.896044][T10635] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  129.975984][T10639] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  130.336934][T10669] __nla_validate_parse: 29 callbacks suppressed
[  130.336946][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'.
[  130.342163][T10669] netlink: 'syz.2.1356': attribute type 1 has an invalid length.
[  130.438616][T10679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1359'.
[  130.528896][T10686] xfrm1: entered allmulticast mode
[  130.532540][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'.
[  130.591969][T10688] lo speed is unknown, defaulting to 1000
[  130.598539][T10689] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1360'.
[  130.864083][T10716] netlink: 'syz.2.1368': attribute type 21 has an invalid length.
[  130.868777][T10716] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1368'.
[  130.872034][T10716] netlink: 'syz.2.1368': attribute type 4 has an invalid length.
[  130.876823][T10716] netlink: 'syz.2.1368': attribute type 3 has an invalid length.
[  130.879344][T10716] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1368'.
[  130.883223][T10718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1369'.
[  130.899421][T10718] netlink: 'syz.1.1369': attribute type 2 has an invalid length.
[  130.901859][T10718] netlink: 'syz.1.1369': attribute type 1 has an invalid length.
[  130.905746][T10718] netlink: 'syz.1.1369': attribute type 1 has an invalid length.
[  130.979029][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'.
[  131.011836][T10735] netlink: 'syz.2.1374': attribute type 1 has an invalid length.
[  131.017636][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'.
[  131.021118][T10736] netlink: 'syz.2.1374': attribute type 1 has an invalid length.
[  131.023446][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'.
[  131.030144][T10732] bond0: (slave bridge7): Enslaving as an active interface with an up link
[  131.045323][T10732] macvlan0: entered promiscuous mode
[  131.047249][T10732] macvlan0: entered allmulticast mode
[  131.049572][T10732] bond0: (slave macvlan0): Error -98 calling set_mac_address
[  131.439592][T10764] IPVS: length: 8 != 446622349272
[  131.651229][T10781] lo speed is unknown, defaulting to 1000
[  131.891143][T10790] SET target dimension over the limit!
[  132.315383][T10813] pim6reg1: entered promiscuous mode
[  132.317206][T10813] pim6reg1: entered allmulticast mode
[  132.731613][T10846] raw_sendmsg: syz.1.1410 forgot to set AF_INET. Fix it!
[  132.807252][T10854] tap0: tun_chr_ioctl cmd 1074025676
[  132.809083][T10854] tap0: owner set to 0
[  132.810469][T10853] tap0: tun_chr_ioctl cmd 1074025673
[  132.812574][T10854] team0: Cannot enslave team device to itself
[  133.310851][T10898] batman_adv: batadv0: Adding interface: dummy0
[  133.313069][T10898] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.322187][T10898] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  133.417142][T10904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.554073][T10916] openvswitch: netlink: Missing key (keys=40, expected=80)
[  133.702835][T10927] x_tables: duplicate underflow at hook 2
[  133.914843][T10939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.511427][T10941] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  134.698543][T10956] dvmrp8: entered allmulticast mode
[  134.713558][T10955] dvmrp8: left allmulticast mode
[  134.797920][T10960] bridge0: entered allmulticast mode
[  135.095800][T10977] _Z`Ԁ@: entered promiscuous mode
[  135.242441][T10983] xt_ipcomp: unknown flags F7
[  135.416245][T10996] xt_addrtype: ipv6 does not support BROADCAST matching
[  135.419536][T10996] __nla_validate_parse: 90 callbacks suppressed
[  135.419546][T10996] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1453'.
[  136.123446][T11033] validate_nla: 3 callbacks suppressed
[  136.123459][T11033] netlink: 'syz.2.1462': attribute type 1 has an invalid length.
[  136.128517][T11033] netlink: 'syz.2.1462': attribute type 2 has an invalid length.
[  136.131925][T11033] netlink: 'syz.2.1462': attribute type 1 has an invalid length.
[  136.135341][T11033] netlink: 'syz.2.1462': attribute type 2 has an invalid length.
[  136.138151][T11033] netlink: 'syz.2.1462': attribute type 1 has an invalid length.
[  136.140496][T11033] netlink: 'syz.2.1462': attribute type 2 has an invalid length.
[  136.143124][T11033] netlink: 'syz.2.1462': attribute type 1 has an invalid length.
[  136.145798][T11033] netlink: 'syz.2.1462': attribute type 2 has an invalid length.
[  136.149869][T11033] netlink: 'syz.2.1462': attribute type 1 has an invalid length.
[  136.152298][T11033] netlink: 'syz.2.1462': attribute type 2 has an invalid length.
[  136.225152][T11042] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1463'.
[  136.229459][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'.
[  136.232246][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'.
[  136.311086][T11048] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1466'.
[  136.467697][T11064] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1470'.
[  136.476569][T11061] openvswitch: netlink: IPv4 tunnel dst address is zero
[  136.966848][T11098] xt_CT: No such helper "snmp"
[  136.995883][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'.
[  136.999735][T11104] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1482'.
[  137.052675][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'.
[  137.055646][T11106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1483'.
[  137.070092][T11106] macvtap2: entered promiscuous mode
[  137.071926][T11106] dummy0: entered promiscuous mode
[  137.075481][T11106] macvtap2: entered allmulticast mode
[  137.077314][T11106] dummy0: entered allmulticast mode
[  137.083625][T11106] dummy0: left allmulticast mode
[  137.085805][T11106] dummy0: left promiscuous mode
[  137.262050][T11113] 8021q: adding VLAN 0 to HW filter on device bond9
[  138.957741][T11169] openvswitch: netlink: Flow key attr not present in new flow.
[  139.180318][T11179] DL<Y: renamed from lo
[  139.240693][T11186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.249730][T11186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.652686][T11214] syzkaller0: entered promiscuous mode
[  139.654776][T11214] syzkaller0: entered allmulticast mode
[  140.753620][T11228] lo speed is unknown, defaulting to 1000
[  140.977479][T11237] xt_CT: You must specify a L4 protocol and not use inversions on it
[  141.109764][T11249] __nla_validate_parse: 19 callbacks suppressed
[  141.109778][T11249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1522'.
[  141.230163][T11258] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1526'.
[  141.322593][T11265] lo speed is unknown, defaulting to 1000
[  141.405525][T11275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'.
[  141.456097][T11279] erspan0: entered promiscuous mode
[  141.466076][T11278] erspan0: left promiscuous mode
[  141.469612][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1531'.
[  141.478448][T11277] xfrm2: entered promiscuous mode
[  141.479978][T11277] xfrm2: entered allmulticast mode
[  141.551909][T11283] validate_nla: 121 callbacks suppressed
[  141.551923][T11283] netlink: 'syz.1.1536': attribute type 1 has an invalid length.
[  141.557378][T11283] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1536'.
[  141.572627][T11284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1536'.
[  141.576329][T11283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1536'.
[  141.580007][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'.
[  141.601198][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'.
[  141.721678][T11298] netlink: 'syz.0.1540': attribute type 21 has an invalid length.
[  141.724064][T11298] netlink: 'syz.0.1540': attribute type 22 has an invalid length.
[  141.741634][T11298] netlink: 'syz.0.1540': attribute type 23 has an invalid length.
[  141.744023][T11298] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1540'.
[  141.864567][T11313] lo speed is unknown, defaulting to 1000
[  142.145348][T11321] netlink: 'syz.2.1547': attribute type 2 has an invalid length.
[  142.748649][T11370] netlink: 'syz.0.1562': attribute type 1 has an invalid length.
[  142.966903][T11385] lo speed is unknown, defaulting to 1000
[  143.048952][T11389] vlan2 (unregistering): left allmulticast mode
[  143.051051][T11389] bond0 (unregistering): left allmulticast mode
[  143.053001][T11389] bond6: left allmulticast mode
[  143.054788][T11389] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  143.056938][T11389] bond8: left allmulticast mode
[  143.058477][T11389] vlan2 (unregistering): left promiscuous mode
[  143.060414][T11389] bond0 (unregistering): left promiscuous mode
[  143.062361][T11389] bond6: left promiscuous mode
[  143.064407][T11389] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  143.066825][T11389] bond8: left promiscuous mode
[  143.068499][T11389] bridge0: port 2(vlan2) entered disabled state
[  143.076436][T11389] bond0 (unregistering): (slave bond6): Releasing backup interface
[  143.080136][T11389] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  143.084188][T11389] bond0 (unregistering): (slave bond8): Releasing backup interface
[  143.088797][T11389] bond0 (unregistering): Released all slaves
[  143.225532][T11401] sctp: [Deprecated]: syz.0.1569 (pid 11401) Use of int in max_burst socket option deprecated.
[  143.225532][T11401] Use struct sctp_assoc_value instead
[  143.373529][T11409] xt_CT: You must specify a L4 protocol and not use inversions on it
[  143.431931][T11413] netlink: 'syz.1.1573': attribute type 10 has an invalid length.
[  143.479044][T11420] lo speed is unknown, defaulting to 1000
[  143.732187][T11427] netlink: 'syz.1.1577': attribute type 30 has an invalid length.
[  143.802720][T11429] 8021q: adding VLAN 0 to HW filter on device bond6
[  143.806171][T11429] team0: Port device bond6 added
[  144.305885][T11460] netlink: zone id is out of range
[  144.307498][T11460] netlink: get zone limit has 8 unknown bytes
[  144.433353][T11473] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  144.509009][T11480] syzkaller1: entered promiscuous mode
[  144.510912][T11480] syzkaller1: entered allmulticast mode
[  144.573988][T11486] netlink: 'syz.2.1594': attribute type 126 has an invalid length.
[  144.921262][T11529] syz_tun: entered allmulticast mode
[  144.937669][T11528] syz_tun: left allmulticast mode
[  144.958769][T11527] bridge8: entered promiscuous mode
[  144.960418][T11527] bridge8: entered allmulticast mode
[  144.977083][T11527] team0: Port device bridge8 added
[  145.120150][T11550] hsr0: left allmulticast mode
[  145.121812][T11550] hsr_slave_0: left allmulticast mode
[  145.123484][T11550] hsr_slave_1: left allmulticast mode
[  145.124821][T11541] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  145.125308][T11550] hsr0: left promiscuous mode
[  145.404971][T11566] bridge4: entered promiscuous mode
[  146.134831][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  146.220886][T11602] __nla_validate_parse: 27 callbacks suppressed
[  146.220899][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'.
[  146.227517][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'.
[  146.231785][T11602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1629'.
[  146.236198][T11602] netlink: 'syz.0.1629': attribute type 7 has an invalid length.
[  146.238663][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'.
[  146.245535][T11602] erspan0: entered promiscuous mode
[  146.248229][T11602] batadv_slave_1: entered promiscuous mode
[  146.250947][T11602] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  146.253877][T11602] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.303746][T11608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1632'.
[  146.304837][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'.
[  146.372967][T11617] xt_hashlimit: size too large, truncated to 1048576
[  146.372976][T11618] xt_hashlimit: size too large, truncated to 1048576
[  147.486512][T11664] validate_nla: 1 callbacks suppressed
[  147.486526][T11664] netlink: 'syz.0.1645': attribute type 3 has an invalid length.
[  147.752920][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'.
[  148.215185][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  148.536726][T11679] lo speed is unknown, defaulting to 1000
[  148.805034][T11693] netlink: 'syz.1.1655': attribute type 10 has an invalid length.
[  148.852686][T11695] openvswitch: netlink: IP tunnel dst address not specified
[  148.921847][T11697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1657'.
[  148.933173][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1657'.
[  148.995483][T11715] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1661'.
[  149.112111][T11725] dvmrp0: entered allmulticast mode
[  149.162812][T11725] netlink: 'syz.0.1665': attribute type 10 has an invalid length.
[  149.370292][T11745] bond2: (slave bridge3): Releasing active interface
[  149.377505][T11745] bond4: (slave vti0): Releasing backup interface
[  149.383148][T11745] bond8: (slave veth3): Releasing active interface
[  149.460814][T11752] Unknown options in mask 700
[  149.677007][T11758] netlink: 'syz.2.1676': attribute type 5 has an invalid length.
[  149.981687][T11777] netlink: 'syz.2.1680': attribute type 62 has an invalid length.
[  150.191092][T11803] batman_adv: batadv0: Removing interface: dummy0
[  150.199858][T11803] bond4: (slave gretap1): Releasing active interface
[  150.204082][T11803] bond0: (slave bridge7): Releasing backup interface
[  150.210226][T11803] team0: Port device bond6 removed
[  150.213468][T11803] team0: Port device bridge8 removed
[  150.226970][T11804] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  150.231801][T11804] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  150.253397][T11804] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  150.259990][T11804] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  150.267255][T11804] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  150.273579][T11804] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  150.280254][T11804] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  150.293976][T11804] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  150.302666][T11809] lo speed is unknown, defaulting to 1000
[  150.306275][T11804] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  150.311086][T11804] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  150.379297][T11818] netlink: 'syz.2.1691': attribute type 83 has an invalid length.
[  150.811083][T11844] tipc: Enabling of bearer <ib:pim6reg> rejected, failed to enable media
[  150.821049][T11844] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (96)
[  151.171506][T11869] xt_TCPMSS: Only works on TCP SYN packets
[  151.291617][T11878] netlink: 'syz.2.1710': attribute type 1 has an invalid length.
[  151.294139][T11878] netlink: 'syz.2.1710': attribute type 2 has an invalid length.
[  151.327804][T11884] __nla_validate_parse: 7 callbacks suppressed
[  151.327816][T11884] netlink: 644 bytes leftover after parsing attributes in process `syz.2.1713'.
[  151.496217][T11905] lo speed is unknown, defaulting to 1000
[  151.502422][T11909] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.505751][T11909] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.508358][T11909] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.510854][T11909] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.513602][T11909] geneve2: entered promiscuous mode
[  151.591819][T11907] 8021q: VLANs not supported on xfrm0
[  151.597808][T11907] netlink: 'syz.0.1720': attribute type 10 has an invalid length.
[  151.791143][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'.
[  151.821236][T11932] netlink: 'syz.0.1728': attribute type 1 has an invalid length.
[  151.823523][T11932] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1728'.
[  151.831090][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1728'.
[  151.880289][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'.
[  151.972093][T11947] lo speed is unknown, defaulting to 1000
[  152.023681][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'.
[  152.036186][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1735'.
[  152.128545][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'.
[  152.383917][T11988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1744'.
[  152.616263][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'.
[  153.014098][T12036] bond8: entered promiscuous mode
[  153.016507][T12036] 8021q: adding VLAN 0 to HW filter on device bond8
[  153.090199][T12041] bond9: entered promiscuous mode
[  153.091879][T12041] bond9: entered allmulticast mode
[  154.083852][T12077] bond0 (unregistering): Released all slaves
[  154.211346][T12066] netlink: 'syz.0.1768': attribute type 11 has an invalid length.
[  154.214197][T12066] validate_nla: 2 callbacks suppressed
[  154.214208][T12066] netlink: 'syz.0.1768': attribute type 4 has an invalid length.
[  154.320653][T12091] netlink: 'syz.1.1774': attribute type 1 has an invalid length.
[  154.364956][T12094] sctp: [Deprecated]: syz.1.1776 (pid 12094) Use of struct sctp_assoc_value in delayed_ack socket option.
[  154.364956][T12094] Use struct sctp_sack_info instead
[  155.195294][T12151] bond0: (slave rose0): Error: Device can not be enslaved while up
[  155.515917][T12177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.518452][T12177] syzkaller0: entered promiscuous mode
[  155.520353][T12177] syzkaller0: entered allmulticast mode
[  155.545367][T12177] tipc: Resetting bearer <eth:syzkaller0>
[  155.637691][T12181] x_tables: duplicate underflow at hook 2
[  155.846371][T12199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.848847][T12199] syzkaller0: entered promiscuous mode
[  155.850635][T12199] syzkaller0: entered allmulticast mode
[  155.876413][T12199] tipc: Resetting bearer <eth:syzkaller0>
[  155.881689][T12198] tipc: Resetting bearer <eth:syzkaller0>
[  155.893367][T12198] tipc: Disabling bearer <eth:syzkaller0>
[  156.118386][T12233] wg2: entered promiscuous mode
[  156.120107][T12233] wg2: entered allmulticast mode
[  156.528237][ T5825] tipc: Node number set to 2581635862
[  157.023515][T12259] __nla_validate_parse: 27 callbacks suppressed
[  157.023527][T12259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1828'.
[  157.305165][T12275] syz_tun: entered allmulticast mode
[  157.313352][T12275] macsec2: entered promiscuous mode
[  157.316351][T12275] macsec2: entered allmulticast mode
[  157.318014][T12275] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  157.323208][T12274] syz_tun: left allmulticast mode
[  157.361070][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'.
[  157.368486][T12277] bridge_slave_1: entered promiscuous mode
[  157.701388][T12303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1837'.
[  157.705993][T12305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1838'.
[  157.731702][T12307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1839'.
[  157.735524][T12308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1839'.
[  158.081884][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'.
[  158.093540][T12336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  158.127086][T12343] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1849'.
[  158.130730][T12343] bridge2: entered promiscuous mode
[  158.134213][T12343] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.1849'.
[  158.170658][T12345] can: request_module (can-proto-3) failed.
[  158.299876][T12353] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1853'.
[  158.457192][T12362] netlink: 'syz.2.1855': attribute type 1 has an invalid length.
[  158.528492][T12177] tipc: Resetting bearer <eth:syzkaller0>
[  158.538942][T12177] tipc: Disabling bearer <eth:syzkaller0>
[  158.808561][T12394] net_ratelimit: 26 callbacks suppressed
[  158.808574][T12394] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  158.953503][T12410] macsec0: entered promiscuous mode
[  158.969396][T12408] xt_CT: No such helper "snmp"
[  159.061664][T12420] lo speed is unknown, defaulting to 1000
[  159.125460][   T33] audit: type=1800 audit(1752896353.056:4): pid=12426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1874" name="memory.events" dev="tmpfs" ino=3151 res=0 errno=0
[  159.174969][T12438] delete_channel: no stack
[  159.276254][T12448] netlink: 'syz.2.1878': attribute type 1 has an invalid length.
[  159.393874][T12459] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  159.468877][T12468] netlink: 'syz.1.1886': attribute type 11 has an invalid length.
[  159.480907][T12471] netlink: 'syz.0.1887': attribute type 83 has an invalid length.
[  159.487421][T12471] @: renamed from bond_slave_0
[  159.538792][T12477] SET target dimension over the limit!
[  159.548963][T12477] syzkaller0: entered promiscuous mode
[  159.550726][T12477] syzkaller0: entered allmulticast mode
[  159.575875][T12476] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  159.897339][T12501] dvmrp0: entered allmulticast mode
[  160.141485][T12517] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  160.535186][T12531] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  160.538318][T12531] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  160.541438][T12531] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  160.544100][T12531] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  160.548765][T12531] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  160.551468][T12531] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  160.555470][T12531] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  160.558394][T12531] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  160.751266][T12546] lo speed is unknown, defaulting to 1000
[  160.891453][T12558] netlink: 'syz.1.1916': attribute type 5 has an invalid length.
[  160.931641][T12562] netlink: 'syz.0.1915': attribute type 15 has an invalid length.
[  160.937274][T12562] IPv6: NLM_F_REPLACE set, but no existing node found!
[  161.075454][   T33] audit: type=1800 audit(1752896355.016:5): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1920" name="memory.events" dev="tmpfs" ino=3250 res=0 errno=0
[  161.081650][   T33] audit: type=1804 audit(1752896355.016:6): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1920" name="/newroot/631/memory.events" dev="tmpfs" ino=3250 res=1 errno=0
[  161.107462][T12576] netlink: 'syz.1.1921': attribute type 21 has an invalid length.
[  161.129056][T12578] lo speed is unknown, defaulting to 1000
[  161.301719][T12588] syzkaller0: entered promiscuous mode
[  161.303481][T12588] syzkaller0: entered allmulticast mode
[  161.416445][T12594] netlink: 'syz.1.1925': attribute type 8 has an invalid length.
[  161.419017][T12593] netlink: 'syz.1.1925': attribute type 8 has an invalid length.
[  161.542599][T12607] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  161.549718][T12607] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  161.597313][T12617] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  161.927777][T12652] xt_hashlimit: size too large, truncated to 1048576
[  161.930132][T12652] xt_hashlimit: overflow, try lower: 3/0
[  162.063474][T12662] __nla_validate_parse: 45 callbacks suppressed
[  162.063488][T12662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1943'.
[  162.070076][T12662] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1943'.
[  162.239898][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'.
[  162.246799][T12671] wg2: left promiscuous mode
[  162.256082][T12671] xfrm2: left promiscuous mode
[  162.257674][T12671] bridge2: left promiscuous mode
[  162.277455][T12673] netlink: 'syz.1.1947': attribute type 5 has an invalid length.
[  162.281183][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'.
[  162.783555][T12691] xt_TCPMSS: Only works on TCP SYN packets
[  162.806432][T12693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.810183][T12693] syzkaller0: entered promiscuous mode
[  162.811870][T12693] syzkaller0: entered allmulticast mode
[  162.833195][T12693] tipc: Resetting bearer <eth:syzkaller0>
[  162.839182][T12692] tipc: Resetting bearer <eth:syzkaller0>
[  162.856004][T12692] tipc: Disabling bearer <eth:syzkaller0>
[  162.946574][T12705] tc_dump_action: action bad kind
[  162.948794][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1959'.
[  162.955258][T12703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'.
[  162.958038][T12703] netlink: 'syz.1.1958': attribute type 5 has an invalid length.
[  163.052464][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1963'.
[  163.170956][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1962'.
[  163.179338][T12724] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1962'.
[  163.252426][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1966'.
[  163.285454][T12732] IPVS: Unknown mcast interface: ip6erspan0
[  163.401691][T12751] lo speed is unknown, defaulting to 1000
[  163.945490][T12782] bridge0: left allmulticast mode
[  165.228747][T12810] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.298945][T12818] validate_nla: 2 callbacks suppressed
[  165.298958][T12818] netlink: 'syz.0.1995': attribute type 13 has an invalid length.
[  165.366398][T12818] batman_adv: batadv0: Interface activated: dummy0
[  165.372181][T12818] net_ratelimit: 29 callbacks suppressed
[  165.372191][T12818] batadv0: mtu less than device minimum
[  165.377107][T12818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  165.380923][T12818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  165.385007][T12818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  165.388708][T12818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  165.392484][T12818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  165.396252][T12818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  165.400001][T12818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  165.403698][T12818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  165.407429][T12818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  165.419733][  T791] lo speed is unknown, defaulting to 1000
[  165.421761][  T791] syz2: Port: 1 Link ACTIVE
[  165.454000][T12827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  165.456881][T12826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  165.492066][T12840] syzkaller1: entered promiscuous mode
[  165.493782][T12840] syzkaller1: entered allmulticast mode
[  165.582303][ T5841] syzkaller0: tun_net_xmit 76
[  165.588482][T12845] syzkaller0: create flow: hash 1152883650 index 1
[  165.590822][ T5841] syzkaller0: tun_net_xmit 48
[  165.604645][  T791] syzkaller0: tun_net_xmit 76
[  165.623558][T12844] syzkaller0: delete flow: hash 1152883650 index 1
[  166.039133][T12849] xt_l2tp: v2 tid > 0xffff: 4294967295
[  166.640461][T12859] netlink: 'syz.2.2005': attribute type 1 has an invalid length.
[  167.059338][T12897] lo speed is unknown, defaulting to 1000
[  167.297563][T12921] __nla_validate_parse: 19 callbacks suppressed
[  167.297576][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'.
[  167.317691][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'.
[  167.432000][T12931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'.
[  167.435494][T12931] netlink: 'syz.2.2027': attribute type 1 has an invalid length.
[  167.437743][T12931] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2027'.
[  167.442688][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'.
[  167.454796][T12931] geneve3: entered promiscuous mode
[  167.622612][T12938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'.
[  167.625555][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'.
[  167.633349][T12938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'.
[  167.637197][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'.
[  167.938179][T12943] veth6: entered allmulticast mode
[  167.944254][T12943] veth7: entered promiscuous mode
[  168.041576][T12947] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2032'.
[  168.168264][T12958] netlink: 'syz.0.2036': attribute type 21 has an invalid length.
[  168.565236][T12999] syz_tun: entered allmulticast mode
[  168.607298][T13006] lo speed is unknown, defaulting to 1000
[  169.017798][T13046] Cannot find add_set index 3 as target
[  169.172066][T13063] netlink: 'syz.1.2070': attribute type 11 has an invalid length.
[  169.663802][T13112] No such timeout policy "syz1"
[  170.157372][T13142] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  170.161626][T13142] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  170.217034][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  170.571643][T13170] sctp: [Deprecated]: syz.0.2107 (pid 13170) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.571643][T13170] Use struct sctp_sack_info instead
[  170.594113][T13177] chnl_net:caif_netlink_parms(): no params data found
[  170.679293][T13184] netlink: 'syz.1.2112': attribute type 1 has an invalid length.
[  170.710557][T13188] tun0: tun_chr_ioctl cmd 1074025681
[  171.019305][T13212] set match dimension is over the limit!
[  171.070629][T13214] syzkaller0: entered promiscuous mode
[  171.073049][T13214] syzkaller0: entered allmulticast mode
[  171.093268][T13218] x_tables: duplicate underflow at hook 2
[  171.572585][T13239] netlink: 'syz.1.2125': attribute type 1 has an invalid length.
[  171.575290][T13239] netlink: 'syz.1.2125': attribute type 2 has an invalid length.
[  172.182842][T13228] lo speed is unknown, defaulting to 1000
[  172.334097][T13249] x_tables: duplicate underflow at hook 1
[  172.555922][T13254] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  172.671738][T13264] syzkaller1: entered promiscuous mode
[  172.673538][T13264] syzkaller1: entered allmulticast mode
[  172.787061][T13266] No such timeout policy "syz0"
[  172.901867][T13272] netlink: 'syz.1.2136': attribute type 1 has an invalid length.
[  173.219155][T13290] __nla_validate_parse: 23 callbacks suppressed
[  173.219167][T13290] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2141'.
[  173.260048][T13292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2142'.
[  173.424970][T13309] net_ratelimit: 13 callbacks suppressed
[  173.424983][T13309] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  173.465499][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.469209][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.768705][T13315] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  173.787947][T13319] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2151'.
[  173.790600][T13319] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2151'.
[  174.731936][T13347] netlink: 'syz.0.2159': attribute type 10 has an invalid length.
[  174.742431][T13348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2158'.
[  174.750127][T13348] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2158'.
[  174.884211][T13357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  174.958129][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2165'.
[  175.122949][T13375] x_tables: duplicate underflow at hook 1
[  175.224055][T13384] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2169'.
[  175.506780][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'.
[  175.510597][T13400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2174'.
[  175.548394][T13404] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  175.691354][T13418] netlink: 'syz.1.2180': attribute type 27 has an invalid length.
[  175.702283][T13418] wg1 speed is unknown, defaulting to 1000
[  175.704023][T13422] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  175.713364][T13418] wg1 speed is unknown, defaulting to 1000
[  175.715935][T13418] wg1 speed is unknown, defaulting to 1000
[  175.739675][T13418] infiniband z0: RDMA CMA: cma_listen_on_dev, error -98
[  175.757817][T13418] wg1 speed is unknown, defaulting to 1000
[  175.760466][T13418] wg1 speed is unknown, defaulting to 1000
[  175.763024][T13418] wg1 speed is unknown, defaulting to 1000
[  175.909539][T13440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.912801][T13440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.992766][T13440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.996323][T13440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.063646][T13440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.067971][T13440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.130499][T13440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.135521][T13440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.209218][T13440] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.212008][T13440] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.236579][T13440] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.239410][T13440] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.248558][T13440] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.251231][T13440] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.259926][T13440] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.263244][T13440] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.286041][ T5859] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00
[  176.479238][T13494] xt_SECMARK: invalid mode: 0
[  176.535083][T13499] netlink: 'syz.2.2201': attribute type 4 has an invalid length.
[  176.635596][T13503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.699708][T13510] nftables ruleset with unbound chain
[  176.776776][T13514] delete_channel: no stack
[  176.805636][   T12] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00
[  177.110250][T13556] netlink: 'syz.0.2215': attribute type 17 has an invalid length.
[  177.113505][T13556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.315415][ T5859] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00
[  177.349516][T13581] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  177.352547][T13581] syzkaller1: entered promiscuous mode
[  177.354514][T13581] syzkaller1: entered allmulticast mode
[  177.470712][T13583] bridge0: entered allmulticast mode
[  177.824534][ T5859] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00
[  177.830575][T13602] netlink: 'syz.2.2229': attribute type 1 has an invalid length.
[  177.833090][T13602] netlink: 'syz.2.2229': attribute type 1 has an invalid length.
[  177.881197][T13606] ip6t_srh: unknown srh invflags 4000
[  177.957864][T13608] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  178.041220][T13615] xt_policy: too many policy elements
[  178.110532][T13619] hsr_slave_0: left promiscuous mode
[  178.113102][T13619] hsr_slave_1: left promiscuous mode
[  178.488559][T13636] netlink: 'syz.2.2238': attribute type 1 has an invalid length.
[  178.490995][T13636] __nla_validate_parse: 17 callbacks suppressed
[  178.491003][T13636] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2238'.
[  178.509990][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2239'.
[  178.651365][T13641] netlink: 'syz.0.2240': attribute type 1 has an invalid length.
[  178.653824][T13641] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2240'.
[  178.688691][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2241'.
[  178.787792][T13654] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  178.864702][ T5859] net_ratelimit: 1 callbacks suppressed
[  178.864717][ T5859] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00
[  179.008702][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'.
[  179.011700][T13664] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  179.016524][T13664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.077367][T13669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2248'.
[  179.081286][T13671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2248'.
[  179.116359][T13674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2249'.
[  179.165960][T13667] netlink: 'syz.0.2247': attribute type 1 has an invalid length.
[  179.199217][T13667] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.217553][T13679] x_tables: duplicate underflow at hook 3
[  179.218134][T13667] ipvlan2: entered allmulticast mode
[  179.222110][T13667] bond0: entered allmulticast mode
[  179.245035][T13667] bond0: (slave gretap1): making interface the new active one
[  179.260969][T13667] gretap1: entered allmulticast mode
[  179.266286][T13667] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  179.271372][T13684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2252'.
[  179.276064][T13667] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  179.308266][T13686] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.316285][T13686] syzkaller0: entered promiscuous mode
[  179.318013][T13686] syzkaller0: entered allmulticast mode
[  179.344533][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  179.368647][T13686] tipc: Resetting bearer <eth:syzkaller0>
[  179.371790][T13685] tipc: Resetting bearer <eth:syzkaller0>
[  179.375103][ T5859] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00
[  179.394665][T13685] tipc: Disabling bearer <eth:syzkaller0>
[  179.514055][T13693] syzkaller0: entered promiscuous mode
[  179.518419][T13693] syzkaller0: entered allmulticast mode
[  179.523809][T13698] ip6_vti0: entered promiscuous mode
[  179.526811][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'.
[  179.716299][T13715] netlink: 'syz.1.2262': attribute type 1 has an invalid length.
[  179.718971][T13715] block nbd0: Unsupported socket: shutdown callout must be supported.
[  179.884762][   T12] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00
[  180.398502][ T5841] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00
[  180.675344][T13723] can: request_module (can-proto-0) failed.
[  180.727200][T13733] batman_adv: batadv0: Interface deactivated: dummy0
[  180.729268][T13733] batman_adv: batadv0: Removing interface: dummy0
[  180.790527][T13741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.818727][T13745] tipc: Disabling bearer <eth:syzkaller0>
[  180.864695][ T5835] Bluetooth: hci0: command tx timeout
[  181.052614][T13778] xt_recent: Unsupported userspace flags (00000048)
[  181.191377][T13792] netlink: 'syz.1.2287': attribute type 1 has an invalid length.
[  181.193827][T13792] netlink: 'syz.1.2287': attribute type 1 has an invalid length.
[  181.232098][T13800] netlink: 'syz.2.2289': attribute type 42 has an invalid length.
[  181.513551][T13826] syzkaller1: entered promiscuous mode
[  181.517434][T13826] syzkaller1: entered allmulticast mode
[  181.790895][T13865] bridge: RTM_NEWNEIGH with invalid ether address
[  181.868246][T13877] lo speed is unknown, defaulting to 1000
[  181.870806][T13877] wg1 speed is unknown, defaulting to 1000
[  181.938612][T13885] C: renamed from team_slave_0
[  181.942085][T13885] netlink: 'syz.1.2313': attribute type 3 has an invalid length.
[  181.945628][T13885] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  182.093740][T13900] lo speed is unknown, defaulting to 1000
[  182.096634][T13900] wg1 speed is unknown, defaulting to 1000
[  182.266800][   T24] hid-generic 0005:16C0:05DF.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  182.407158][T13938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.541819][T13961] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  182.699420][T13969] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:21
[  182.701714][T13969] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20003
[  182.734453][T13988] x_tables: unsorted entry at hook 3
[  182.985845][T14003] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  183.440684][T14063] mac80211_hwsim hwsim2 ": renamed from wlan0 (while UP)
[  183.484025][T14063] bridge6: entered promiscuous mode
[  183.485878][T14063] bridge6: entered allmulticast mode
[  183.534904][T14064] bridge6: entered promiscuous mode
[  183.536537][T14064] bridge6: entered allmulticast mode
[  183.792919][T14080] ksmbd: Unknown IPC event: 3, ignore.
[  183.891718][T14089] __nla_validate_parse: 68 callbacks suppressed
[  183.891731][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'.
[  183.931551][T14092] netlink: 'syz.2.2368': attribute type 4 has an invalid length.
[  184.048635][T14107] syzkaller1: entered promiscuous mode
[  184.050368][T14107] syzkaller1: entered allmulticast mode
[  184.393185][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'.
[  184.399855][T14124] netlink: 'syz.2.2375': attribute type 1 has an invalid length.
[  184.423362][T14124] 8021q: adding VLAN 0 to HW filter on device bond10
[  184.439998][T14124] ipvlan0: entered allmulticast mode
[  184.441794][T14124] bond10: entered allmulticast mode
[  184.456940][T14124] bond10: (slave gretap2): making interface the new active one
[  184.459361][T14124] gretap2: entered allmulticast mode
[  184.462948][T14124] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  184.547583][T14132] lo speed is unknown, defaulting to 1000
[  184.550286][T14132] wg1 speed is unknown, defaulting to 1000
[  184.671902][T14150] netlink: 'syz.2.2380': attribute type 58 has an invalid length.
[  184.925588][T14170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2389'.
[  184.965311][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2390'.
[  184.978674][T14173] sch_tbf: burst 0 is lower than device bridge6 mtu (1514) !
[  185.047647][T14182] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2394'.
[  185.146972][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'.
[  185.528545][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'.
[  185.531271][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2407'.
[  185.533971][T14222] netlink: 'syz.1.2407': attribute type 15 has an invalid length.
[  185.536568][T14222] netlink: 'syz.1.2407': attribute type 18 has an invalid length.
[  185.595565][T14231] batman_adv: batadv0: Adding interface: dummy0
[  185.597976][T14231] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  186.427852][T14275] lo speed is unknown, defaulting to 1000
[  186.430442][T14275] wg1 speed is unknown, defaulting to 1000
[  187.397767][T14335] sctp: [Deprecated]: syz.1.2420 (pid 14335) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.397767][T14335] Use struct sctp_sack_info instead
[  187.413907][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2425'.
[  187.469290][T14356] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2426'.
[  188.160218][T14367] netlink: 'syz.1.2429': attribute type 10 has an invalid length.
[  189.033038][T14411] __nla_validate_parse: 2 callbacks suppressed
[  189.033049][T14411] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2444'.
[  189.073230][T14414] netlink: 'syz.0.2445': attribute type 13 has an invalid length.
[  189.077568][T14414] netlink: 'syz.0.2445': attribute type 17 has an invalid length.
[  189.082902][T14414] gretap0: refused to change device tx_queue_len
[  189.085473][T14414] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  189.092579][T14414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.196128][T14422] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2447'.
[  189.239692][T14424] lo speed is unknown, defaulting to 1000
[  189.242314][T14424] wg1 speed is unknown, defaulting to 1000
[  189.382939][T14424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2448'.
[  189.386241][T14424] netlink: 'syz.0.2448': attribute type 4 has an invalid length.
[  189.514047][T14429] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  189.829642][T14439] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2453'.
[  189.832579][T14439] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  189.931512][T14446] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2456'.
[  190.315418][T14449] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  217.255388][T14456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2459'.
[  217.258133][T14456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2459'.
[  217.309870][T14460] openvswitch: netlink: Message has 16 unknown bytes.
[  217.350631][T14464] xt_hashlimit: size too large, truncated to 1048576
[  217.408162][T14468] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  217.587872][ T5835] Bluetooth: hci2: link tx timeout
[  217.589883][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.595176][   T54] Bluetooth: hci2: link tx timeout
[  217.596941][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  218.543280][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'.
[  218.543364][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'.
[  218.568427][T14519] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  218.599508][T14523] netlink: 'syz.1.2481': attribute type 20 has an invalid length.
[  218.649558][T14533] netlink: 'syz.0.2482': attribute type 4 has an invalid length.
[  218.685371][T14538] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  218.691475][T14538] netlink: 'syz.0.2484': attribute type 10 has an invalid length.
[  218.707261][T14538] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  218.865272][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2489'.
[  219.525621][T14571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2492'.
[  219.664630][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  219.836804][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2499'.
[  219.839862][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2499'.
[  219.898207][T14605] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2502'.
[  219.931998][T14610] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  220.441431][T14636] netlink: 'syz.2.2507': attribute type 4 has an invalid length.
[  220.483875][T14639] veth1_to_team: entered allmulticast mode
[  220.491466][T14639] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  220.541209][T14641] netlink: 'syz.2.2509': attribute type 1 has an invalid length.
[  220.543883][T14641] netlink: 'syz.2.2509': attribute type 10 has an invalid length.
[  220.547622][T14641] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2509'.
[  220.594015][T14646] bond10: (slave gretap2): Releasing active interface
[  220.598571][T14646] gretap2: left allmulticast mode
[  220.611701][T14648] syzkaller1: entered allmulticast mode
[  220.730233][T14659] netlink: 'syz.2.2514': attribute type 58 has an invalid length.
[  220.770795][T14664] netlink: 'syz.2.2517': attribute type 29 has an invalid length.
[  220.998663][T14687] netlink: 'syz.1.2523': attribute type 3 has an invalid length.
[  221.000569][T14688] netlink: 'syz.2.2524': attribute type 7 has an invalid length.
[  221.606654][T14707] pim6reg1: entered allmulticast mode
[  221.722288][T14712] 8021q: adding VLAN 0 to HW filter on device bond10
[  221.773659][T14716] sctp: [Deprecated]: syz.0.2534 (pid 14716) Use of int in max_burst socket option.
[  221.773659][T14716] Use struct sctp_assoc_value instead
[  221.925005][T14726] blkio.reset_stats is deprecated
[  221.935583][T14726] xt_bpf: check failed: parse error
[  222.034082][T14743] syzkaller0: entered promiscuous mode
[  222.037937][T14743] syzkaller0: entered allmulticast mode
[  222.048892][T14743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.051981][T14738] tipc: Resetting bearer <eth:syzkaller0>
[  222.073396][T14738] tipc: Disabling bearer <eth:syzkaller0>
[  222.078114][T14739] bridge_slave_0: invalid flags given to default FDB implementation
[  222.083883][T14739] gretap0: mtu less than device minimum
[  222.109771][T14745] lo speed is unknown, defaulting to 1000
[  222.112355][T14745] wg1 speed is unknown, defaulting to 1000
[  222.123715][T14747] bond0: entered promiscuous mode
[  222.127834][T14747] gretap1: entered promiscuous mode
[  222.130263][T14747] bond0: left promiscuous mode
[  222.132001][T14747] gretap1: left promiscuous mode
[  222.380284][T14766] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (52)
[  222.395941][T14771] __nla_validate_parse: 8 callbacks suppressed
[  222.395954][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2551'.
[  222.447154][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  222.459934][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  222.463186][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  222.479601][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  222.482328][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  222.494486][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  222.497221][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  222.502302][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  222.640848][T14801] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2562'.
[  222.806127][T14817] x_tables: duplicate underflow at hook 1
[  222.844021][T14819] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  223.570057][T14838] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001
[  224.256225][T14888] validate_nla: 5 callbacks suppressed
[  224.256238][T14888] netlink: 'syz.2.2583': attribute type 39 has an invalid length.
[  224.473583][T14896] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  224.673470][T14921] syzkaller1: entered promiscuous mode
[  224.675443][T14921] syzkaller1: entered allmulticast mode
[  224.881330][T14942] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  224.883345][T14949] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  224.899318][T14942] delete_channel: no stack
[  224.973578][T14955] sctp: [Deprecated]: syz.1.2603 (pid 14955) Use of int in max_burst socket option deprecated.
[  224.973578][T14955] Use struct sctp_assoc_value instead
[  225.236079][T14969] netlink: 'syz.1.2607': attribute type 13 has an invalid length.
[  225.296142][T14969] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.298684][T14969] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.301144][T14969] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.303579][T14969] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.549781][ T5859] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  226.683530][T15023] xt_l2tp: unknown flags: 10
[  227.081844][T15046] tls_set_device_offload_rx: netdev not found
[  227.157519][T15050] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.160126][T15050] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.162583][T15050] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.165075][T15050] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.167633][T15050] geneve5: entered promiscuous mode
[  228.279952][T15116] __nla_validate_parse: 30 callbacks suppressed
[  228.279965][T15116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2654'.
[  228.802407][T15126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2656'.
[  228.809364][T15126] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  228.812028][T15126] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  228.815258][T15126] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  228.817879][T15126] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  229.163362][T15151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.168283][T15151] syzkaller0: entered promiscuous mode
[  229.170151][T15151] syzkaller0: entered allmulticast mode
[  229.171050][T15153] netlink: 'syz.0.2663': attribute type 1 has an invalid length.
[  229.175944][T15151] tipc: Resetting bearer <eth:syzkaller0>
[  229.180102][T15150] tipc: Resetting bearer <eth:syzkaller0>
[  229.196761][T15150] tipc: Disabling bearer <eth:syzkaller0>
[  229.388037][T15183] syzkaller0: entered promiscuous mode
[  229.389796][T15183] syzkaller0: entered allmulticast mode
[  229.396089][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'.
[  229.431496][T15190] xt_addrtype: ipv6 does not support BROADCAST matching
[  229.439587][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'.
[  229.442227][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2673'.
[  229.453548][T15190] netlink: 'syz.1.2673': attribute type 11 has an invalid length.
[  229.464075][T15183] netlink: 'syz.2.2671': attribute type 1 has an invalid length.
[  229.600247][T15208] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.603218][T15208] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.606608][T15208] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  229.653439][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'.
[  229.658241][T15219] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2678'.
[  229.665261][T15208] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.668219][T15208] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.680605][T15208] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  229.697166][T15219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2678'.
[  229.704636][T15225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.727795][T15208] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.730890][T15208] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.733860][T15208] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  229.751216][T15228] netlink: 183120 bytes leftover after parsing attributes in process `syz.0.2683'.
[  229.787651][T15208] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.790769][T15208] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.793680][T15208] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  229.818539][T15239] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2686'.
[  229.869475][T15208] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  229.872096][T15208] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  229.875752][T15208] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  229.883157][T15208] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  229.886195][T15208] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  229.891051][T15208] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  229.899831][T15208] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  229.902203][T15208] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  229.907490][T15208] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  229.919925][T15245] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  229.925139][T15208] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  229.928196][T15208] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  229.930949][T15208] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  230.072164][T15258] wg2: left allmulticast mode
[  230.077619][T15258] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  230.080498][T15258] bridge0: left allmulticast mode
[  230.084109][T15258] xfrm1: left allmulticast mode
[  230.086786][T15258] xfrm2: left allmulticast mode
[  230.099403][T15258] ipvlan2: left allmulticast mode
[  230.101076][T15258] bond0: left allmulticast mode
[  230.102686][T15258] gretap1: left allmulticast mode
[  230.107200][T15258] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.109704][T15258] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.112265][T15258] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.115027][T15258] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.117578][T15258] geneve5: left promiscuous mode
[  230.120475][ T2229] lo speed is unknown, defaulting to 1000
[  230.127231][ T2229] syz2: Port: 1 Link DOWN
[  230.387568][T15300] netlink: 'syz.0.2704': attribute type 2 has an invalid length.
[  230.396178][T15300] : entered promiscuous mode
[  230.652967][T15325] netlink: 'syz.0.2711': attribute type 6 has an invalid length.
[  231.603708][T15365] sock: sock_set_timeout: `syz.1.2721' (pid 15365) tries to set negative timeout
[  231.619888][T15365] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  231.670990][T15369] netlink: 'syz.0.2724': attribute type 62 has an invalid length.
[  231.683946][T15369] netlink: 'syz.0.2724': attribute type 11 has an invalid length.
[  231.688441][T15372] netlink: 'syz.1.2725': attribute type 1 has an invalid length.
[  231.729531][T15372] bond10: (slave bridge12): making interface the new active one
[  231.732428][T15372] bond10: (slave bridge12): Enslaving as an active interface with an up link
[  231.792042][T15378] veth0_to_team: entered promiscuous mode
[  231.793862][T15378] veth0_to_team: entered allmulticast mode
[  232.108611][T15404] sctp: [Deprecated]: syz.0.2735 (pid 15404) Use of struct sctp_assoc_value in delayed_ack socket option.
[  232.108611][T15404] Use struct sctp_sack_info instead
[  232.209634][T15416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.228640][T15418] netlink: 'syz.0.2740': attribute type 3 has an invalid length.
[  232.533909][T15444] xt_hashlimit: size too large, truncated to 1048576
[  233.103541][T15496] netlink: 'syz.1.2755': attribute type 12 has an invalid length.
[  233.111742][T15496] netlink: 'syz.1.2755': attribute type 11 has an invalid length.
[  233.346380][T15511] nbd: couldn't find device at index 0
[  233.412421][T15525] __nla_validate_parse: 39 callbacks suppressed
[  233.412432][T15525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2762'.
[  233.419219][T15525] openvswitch: netlink: Flow key attr not present in new flow.
[  233.460439][T15531] IPv6: sit4: Disabled Multicast RS
[  233.462631][T15531] sit4: entered allmulticast mode
[  233.491490][T15533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2764'.
[  233.536994][T15537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2764'.
[  233.539872][T15533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2764'.
[  234.288327][T15572] netlink: 'syz.1.2773': attribute type 11 has an invalid length.
[  234.380439][T15581] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2775'.
[  234.383831][T15581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2775'.
[  234.390080][T15581] openvswitch: netlink: Flow key attr not present in new flow.
[  234.424735][T15587] x_tables: duplicate underflow at hook 1
[  234.489755][T15589] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2778'.
[  234.492641][T15589] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2778'.
[  234.599957][T15596] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2780'.
[  234.603929][T15596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.674477][T15604] xt_CT: No such helper "snmp"
[  234.901316][T15626] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2786'.
[  234.960629][T15630] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  234.969370][T15633] netlink: 'syz.0.2787': attribute type 3 has an invalid length.
[  235.328734][T15662] syzkaller1: entered promiscuous mode
[  235.330497][T15662] syzkaller1: entered allmulticast mode
[  235.386723][T15667] netlink: 'syz.2.2799': attribute type 1 has an invalid length.
[  235.489222][T15673] C: renamed from team_slave_0
[  235.492276][T15673] netlink: 'syz.2.2802': attribute type 3 has an invalid length.
[  235.495215][T15673] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  236.057632][T15697] openvswitch: netlink: IP tunnel dst address not specified
[  236.063732][T15697] : entered promiscuous mode
[  236.247959][T15705] veth0_macvtap: left promiscuous mode
[  236.314157][T15711] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  236.323855][T15711] netlink: 'syz.1.2814': attribute type 1 has an invalid length.
[  236.643386][T15738] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  236.656486][T15738] syzkaller1: entered promiscuous mode
[  236.658777][T15738] syzkaller1: entered allmulticast mode
[  237.009013][T15754] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  237.011499][T15754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.046330][T15759] ip6erspan0: entered allmulticast mode
[  237.176136][T15763] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  237.294495][T15769] netlink: 'syz.0.2833': attribute type 6 has an invalid length.
[  237.364190][T15771] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  237.579860][T15803] lo speed is unknown, defaulting to 1000
[  237.582527][T15803] wg1 speed is unknown, defaulting to 1000
[  237.634132][T15803] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  237.756421][T15817] rdma_op ffff88803c5499f0 conn xmit_rdma 0000000000000000
[  238.150797][T15854] netlink: 'syz.2.2862': attribute type 6 has an invalid length.
[  238.156888][T15854] netlink: 'syz.2.2862': attribute type 6 has an invalid length.
[  238.258890][T15866] netlink: 'syz.0.2865': attribute type 21 has an invalid length.
[  238.261901][T15868] netlink: 'syz.2.2866': attribute type 4 has an invalid length.
[  238.317144][T15873] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  238.540153][T15890] __nla_validate_parse: 32 callbacks suppressed
[  238.540165][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'.
[  238.592275][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'.
[  238.663358][T15898] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551604)
[  238.668930][T15898] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  238.703717][T15898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2876'.
[  238.735635][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'.
[  238.811025][T15906] netlink: 'syz.0.2879': attribute type 1 has an invalid length.
[  238.879764][T15908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2880'.
[  238.936807][T15911] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2881'.
[  239.039276][T15918] SET target dimension over the limit!
[  239.208828][T15931] ip6erspan0: entered allmulticast mode
[  239.290021][T15944] syzkaller1: entered promiscuous mode
[  239.294984][T15944] syzkaller1: entered allmulticast mode
[  239.302259][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2888'.
[  239.512883][T15962] lo speed is unknown, defaulting to 1000
[  239.515914][T15962] wg1 speed is unknown, defaulting to 1000
[  239.562435][T15965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2894'.
[  239.637840][T15972] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  239.642013][T15972] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  239.648780][T15970] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  239.652068][T15972] openvswitch: netlink: Missing key (keys=40, expected=80)
[  239.867428][T15997] bridge7: the hash_elasticity option has been deprecated and is always 16
[  239.870289][T15997] bridge7: entered allmulticast mode
[  239.916987][T15999] syzkaller0: entered promiscuous mode
[  239.918712][T15999] syzkaller0: entered allmulticast mode
[  239.939104][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2905'.
[  240.007955][T16019] validate_nla: 5 callbacks suppressed
[  240.007968][T16019] netlink: 'syz.2.2910': attribute type 5 has an invalid length.
[  240.077429][T16024] SET target dimension over the limit!
[  240.083203][T16024] syz.0.2911 uses old SIOCAX25GETINFO
[  240.106279][T16025] netlink: 'syz.2.2910': attribute type 16 has an invalid length.
[  240.109687][T16025] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2910'.
[  241.108278][T16037] 8021q: adding VLAN 0 to HW filter on device bond12
[  241.120122][T16037] bond0: (slave bond12): Enslaving as an active interface with a down link
[  241.192343][T16045] 8021q: VLANs not supported on wg0
[  241.208802][T16048] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  241.361322][T16062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.364216][T16063] syzkaller0: entered promiscuous mode
[  241.368290][T16063] syzkaller0: entered allmulticast mode
[  241.389828][T16063] tipc: Resetting bearer <eth:syzkaller0>
[  241.403078][T16063] tipc: Disabling bearer <eth:syzkaller0>
[  241.506601][T16073] lo speed is unknown, defaulting to 1000
[  241.509411][T16073] wg1 speed is unknown, defaulting to 1000
[  242.081023][T16092] netlink: 'syz.0.2928': attribute type 5 has an invalid length.
[  242.504032][T16123] netlink: 'syz.1.2938': attribute type 29 has an invalid length.
[  242.509912][T16123] netlink: 'syz.1.2938': attribute type 29 has an invalid length.
[  242.527983][T16124] netlink: 'syz.2.2934': attribute type 2 has an invalid length.
[  242.539321][T16124] `: entered promiscuous mode
[  242.621105][T16133] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  242.632325][T16132] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  242.738488][T16143] netlink: 'syz.1.2947': attribute type 7 has an invalid length.
[  242.740955][T16143] netlink: 'syz.1.2947': attribute type 3 has an invalid length.
[  242.938711][T16143] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.941138][T16143] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  242.945097][T16143] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  243.091830][T16163] xt_CT: You must specify a L4 protocol and not use inversions on it
[  243.131203][T16167] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  243.306529][T16186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.328070][T16187] tipc: Disabling bearer <eth:syzkaller0>
[  243.496877][T16137] ==================================================================
[  243.499306][T16137] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  243.501997][T16137] Read of size 1 at addr ffff88803523b832 by task syz.0.2944/16137
[  243.505477][T16137] 
[  243.506727][T16137] CPU: 0 UID: 0 PID: 16137 Comm: syz.0.2944 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  243.506751][T16137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.506762][T16137] Call Trace:
[  243.506771][T16137]  <TASK>
[  243.506803][T16137]  dump_stack_lvl+0x189/0x250
[  243.506827][T16137]  ? __kasan_check_byte+0x12/0x40
[  243.506850][T16137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.506869][T16137]  ? lock_release+0x4b/0x3e0
[  243.506889][T16137]  ? __virt_addr_valid+0x4a5/0x5c0
[  243.506909][T16137]  print_report+0xd2/0x2b0
[  243.506919][T16137]  ? rose_transmit_link+0x5c3/0x740
[  243.506932][T16137]  kasan_report+0x118/0x150
[  243.506953][T16137]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  243.506975][T16137]  ? rose_transmit_link+0x5c3/0x740
[  243.506992][T16137]  rose_transmit_link+0x5c3/0x740
[  243.507005][T16137]  ? skb_put+0x11b/0x210
[  243.507027][T16137]  rose_write_internal+0x11dc/0x1ac0
[  243.507045][T16137]  ? __pfx_rose_write_internal+0x10/0x10
[  243.507060][T16137]  ? __timer_delete+0x5d/0x390
[  243.507083][T16137]  rose_release+0x24e/0x520
[  243.507106][T16137]  sock_close+0xc3/0x240
[  243.507121][T16137]  ? __pfx_sock_close+0x10/0x10
[  243.507136][T16137]  __fput+0x44c/0xa70
[  243.507155][T16137]  task_work_run+0x1d4/0x260
[  243.507180][T16137]  ? __pfx_task_work_run+0x10/0x10
[  243.507203][T16137]  ? task_work_add+0x377/0x420
[  243.507226][T16137]  ? __pfx_task_work_add+0x10/0x10
[  243.507248][T16137]  get_signal+0x11ed/0x1340
[  243.507266][T16137]  arch_do_signal_or_restart+0x9a/0x750
[  243.507289][T16137]  ? __pfx___sys_connect+0x10/0x10
[  243.507308][T16137]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  243.507363][T16137]  ? exit_to_user_mode_loop+0x40/0x110
[  243.507382][T16137]  exit_to_user_mode_loop+0x75/0x110
[  243.507397][T16137]  do_syscall_64+0x2bd/0x3b0
[  243.507414][T16137]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.507430][T16137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.507446][T16137]  ? exc_page_fault+0x9f/0xf0
[  243.507462][T16137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.507474][T16137] RIP: 0033:0x7f0ff178e9a9
[  243.507487][T16137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.507521][T16137] RSP: 002b:00007f0fef5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  243.507540][T16137] RAX: fffffffffffffe00 RBX: 00007f0ff19b5fa0 RCX: 00007f0ff178e9a9
[  243.507551][T16137] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004
[  243.507561][T16137] RBP: 00007f0ff1810d69 R08: 0000000000000000 R09: 0000000000000000
[  243.507571][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.507580][T16137] R13: 0000000000000000 R14: 00007f0ff19b5fa0 R15: 00007ffd8ff7fbf8
[  243.507598][T16137]  </TASK>
[  243.507603][T16137] 
[  243.598176][T16137] Allocated by task 16081:
[  243.599582][T16137]  kasan_save_track+0x3e/0x80
[  243.600991][T16137]  __kasan_kmalloc+0x93/0xb0
[  243.602470][T16137]  __kmalloc_cache_noprof+0x230/0x3d0
[  243.604097][T16137]  rose_add_node+0x23a/0xde0
[  243.605515][T16137]  rose_rt_ioctl+0xa48/0xfb0
[  243.606893][T16137]  rose_ioctl+0x3ce/0x8b0
[  243.608163][T16137]  sock_do_ioctl+0xdc/0x300
[  243.609613][T16137]  sock_ioctl+0x576/0x790
[  243.610890][T16137]  __se_sys_ioctl+0xfc/0x170
[  243.612259][T16137]  do_syscall_64+0xfa/0x3b0
[  243.613632][T16137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.615443][T16137] 
[  243.616180][T16137] Freed by task 16143:
[  243.617478][T16137]  kasan_save_track+0x3e/0x80
[  243.618943][T16137]  kasan_save_free_info+0x46/0x50
[  243.620539][T16137]  __kasan_slab_free+0x62/0x70
[  243.622031][T16137]  kfree+0x18e/0x440
[  243.623261][T16137]  rose_rt_device_down+0x473/0x4c0
[  243.624865][T16137]  rose_device_event+0x603/0x6a0
[  243.626446][T16137]  notifier_call_chain+0x1b6/0x3e0
[  243.628021][T16137]  dev_close_many+0x29c/0x410
[  243.629516][T16137]  netif_close+0x158/0x210
[  243.630912][T16137]  dev_close+0x10a/0x220
[  243.632234][T16137]  bpq_device_event+0x2f4/0x600
[  243.633768][T16137]  notifier_call_chain+0x1b6/0x3e0
[  243.635361][T16137]  dev_close_many+0x29c/0x410
[  243.636770][T16137]  netif_close+0x158/0x210
[  243.638101][T16137]  dev_close+0x10a/0x220
[  243.639420][T16137]  bond_setup_by_slave+0x5f/0x3f0
[  243.640960][T16137]  bond_enslave+0x7a0/0x3a20
[  243.642355][T16137]  bond_do_ioctl+0x635/0x9b0
[  243.643750][T16137]  dev_ifsioc+0x90b/0xf00
[  243.645033][T16137]  dev_ioctl+0x7b4/0x1150
[  243.646396][T16137]  sock_do_ioctl+0x22c/0x300
[  243.647841][T16137]  sock_ioctl+0x576/0x790
[  243.649199][T16137]  __se_sys_ioctl+0xfc/0x170
[  243.650802][T16137]  do_syscall_64+0xfa/0x3b0
[  243.652228][T16137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.654075][T16137] 
[  243.654852][T16137] The buggy address belongs to the object at ffff88803523b800
[  243.654852][T16137]  which belongs to the cache kmalloc-512 of size 512
[  243.659072][T16137] The buggy address is located 50 bytes inside of
[  243.659072][T16137]  freed 512-byte region [ffff88803523b800, ffff88803523ba00)
[  243.663158][T16137] 
[  243.663899][T16137] The buggy address belongs to the physical page:
[  243.665845][T16137] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35238
[  243.668542][T16137] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  243.671124][T16137] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  243.673564][T16137] page_type: f5(slab)
[  243.674790][T16137] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  243.677365][T16137] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  243.679957][T16137] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  243.682638][T16137] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  243.685297][T16137] head: 00fff00000000002 ffffea0000d48e01 00000000ffffffff 00000000ffffffff
[  243.687913][T16137] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  243.690537][T16137] page dumped because: kasan: bad access detected
[  243.692497][T16137] page_owner tracks the page as allocated
[  243.694224][T16137] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13305, tgid 13304 (syz.1.2146), ts 173423810436, free_ts 172621103371
[  243.700862][T16137]  post_alloc_hook+0x240/0x2a0
[  243.702399][T16137]  get_page_from_freelist+0x21e4/0x22c0
[  243.704103][T16137]  __alloc_frozen_pages_noprof+0x181/0x370
[  243.705866][T16137]  alloc_pages_mpol+0x232/0x4a0
[  243.707376][T16137]  allocate_slab+0x8a/0x3b0
[  243.708821][T16137]  ___slab_alloc+0xbfc/0x1480
[  243.710307][T16137]  __kmalloc_cache_noprof+0x296/0x3d0
[  243.712021][T16137]  __genradix_ptr_alloc+0x352/0x4a0
[  243.713654][T16137]  __genradix_prealloc+0x44/0x90
[  243.715147][T16137]  sctp_stream_init+0x14b/0x440
[  243.716638][T16137]  sctp_association_new+0x10dd/0x25f0
[  243.718229][T16137]  sctp_connect_new_asoc+0x2c5/0x690
[  243.719826][T16137]  sctp_sendmsg+0x155c/0x2810
[  243.721262][T16137]  __sock_sendmsg+0x19c/0x270
[  243.722711][T16137]  __sys_sendto+0x3bd/0x520
[  243.724123][T16137]  __x64_sys_sendto+0xde/0x100
[  243.725647][T16137] page last free pid 13248 tgid 13240 stack trace:
[  243.727694][T16137]  __free_frozen_pages+0xc71/0xe70
[  243.729306][T16137]  __slab_free+0x326/0x400
[  243.730744][T16137]  qlist_free_all+0x97/0x140
[  243.732159][T16137]  kasan_quarantine_reduce+0x148/0x160
[  243.733875][T16137]  __kasan_slab_alloc+0x22/0x80
[  243.735429][T16137]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  243.737233][T16137]  __alloc_skb+0x112/0x2d0
[  243.738614][T16137]  alloc_skb_with_frags+0xca/0x890
[  243.740155][T16137]  sock_alloc_send_pskb+0x857/0x990
[  243.741745][T16137]  llc_ui_sendmsg+0x477/0xdd0
[  243.743203][T16137]  __sock_sendmsg+0x21c/0x270
[  243.744636][T16137]  sock_sendmsg+0x158/0x230
[  243.745986][T16137]  splice_to_socket+0x8ff/0xf10
[  243.747517][T16137]  direct_splice_actor+0x101/0x160
[  243.749081][T16137]  splice_direct_to_actor+0x5a8/0xcc0
[  243.750695][T16137]  do_splice_direct+0x181/0x270
[  243.752128][T16137] 
[  243.752852][T16137] Memory state around the buggy address:
[  243.754547][T16137]  ffff88803523b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  243.757002][T16137]  ffff88803523b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  243.759489][T16137] >ffff88803523b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.761906][T16137]                                      ^
[  243.763654][T16137]  ffff88803523b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.766013][T16137]  ffff88803523b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.768515][T16137] ==================================================================
[  243.776372][T16137] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  243.778568][T16137] CPU: 0 UID: 0 PID: 16137 Comm: syz.0.2944 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  243.782134][T16137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.785104][T16137] Call Trace:
[  243.786121][T16137]  <TASK>
[  243.787033][T16137]  dump_stack_lvl+0x99/0x250
[  243.788457][T16137]  ? __asan_memcpy+0x40/0x70
[  243.789838][T16137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.791530][T16137]  ? __pfx__printk+0x10/0x10
[  243.792922][T16137]  panic+0x2db/0x790
[  243.794140][T16137]  ? __pfx_preempt_schedule+0x10/0x10
[  243.795761][T16137]  ? __pfx_panic+0x10/0x10
[  243.797136][T16137]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  243.798942][T16137]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  243.800865][T16137]  ? rose_transmit_link+0x5c3/0x740
[  243.802441][T16137]  check_panic_on_warn+0x89/0xb0
[  243.803907][T16137]  ? rose_transmit_link+0x5c3/0x740
[  243.805518][T16137]  end_report+0x78/0x160
[  243.806869][T16137]  kasan_report+0x129/0x150
[  243.808291][T16137]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  243.810218][T16137]  ? rose_transmit_link+0x5c3/0x740
[  243.811861][T16137]  rose_transmit_link+0x5c3/0x740
[  243.813420][T16137]  ? skb_put+0x11b/0x210
[  243.814736][T16137]  rose_write_internal+0x11dc/0x1ac0
[  243.816402][T16137]  ? __pfx_rose_write_internal+0x10/0x10
[  243.818110][T16137]  ? __timer_delete+0x5d/0x390
[  243.819603][T16137]  rose_release+0x24e/0x520
[  243.821048][T16137]  sock_close+0xc3/0x240
[  243.822411][T16137]  ? __pfx_sock_close+0x10/0x10
[  243.823881][T16137]  __fput+0x44c/0xa70
[  243.825116][T16137]  task_work_run+0x1d4/0x260
[  243.826575][T16137]  ? __pfx_task_work_run+0x10/0x10
[  243.828121][T16137]  ? task_work_add+0x377/0x420
[  243.829613][T16137]  ? __pfx_task_work_add+0x10/0x10
[  243.831163][T16137]  get_signal+0x11ed/0x1340
[  243.832604][T16137]  arch_do_signal_or_restart+0x9a/0x750
[  243.834349][T16137]  ? __pfx___sys_connect+0x10/0x10
[  243.835894][T16137]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  243.837799][T16137]  ? exit_to_user_mode_loop+0x40/0x110
[  243.839451][T16137]  exit_to_user_mode_loop+0x75/0x110
[  243.841045][T16137]  do_syscall_64+0x2bd/0x3b0
[  243.842663][T16137]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.844251][T16137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.846133][T16137]  ? exc_page_fault+0x9f/0xf0
[  243.847625][T16137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.849455][T16137] RIP: 0033:0x7f0ff178e9a9
[  243.850799][T16137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.856633][T16137] RSP: 002b:00007f0fef5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  243.859153][T16137] RAX: fffffffffffffe00 RBX: 00007f0ff19b5fa0 RCX: 00007f0ff178e9a9
[  243.861580][T16137] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004
[  243.863946][T16137] RBP: 00007f0ff1810d69 R08: 0000000000000000 R09: 0000000000000000
[  243.866403][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.868860][T16137] R13: 0000000000000000 R14: 00007f0ff19b5fa0 R15: 00007ffd8ff7fbf8
[  243.871347][T16137]  </TASK>
[  243.872886][T16137] Kernel Offset: disabled
[  243.874235][T16137] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:40:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001209 RDI=000000000000120a RBP=00000000000003f8 RSP=ffffc900039af210
R8 =ffff888020710237 R9 =1ffff110040e2046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8cf R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0fef5f66c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555e949808 CR3=0000000120dd4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0ff1986478 00007f0ff1986450 XMM03=00007f0ff1986488 00007f0ff1986480
XMM04=00007f0ff24ed100 00007f0ff1986440 XMM05=00007f0ff1986458 00007f0ff19864a0
XMM06=00007f0ff1986498 00007f0ff1986490 XMM07=00007f0ff1986488 00007f0ff1986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0ff1811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d17d9f0b8f429d00 RBX=ffffffff81976c78 RCX=d17d9f0b8f429d00 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110201d5000
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559526410000 CR3=0000000038386000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa584786478 00007fa584786450 XMM03=00007fa584786488 00007fa584786480
XMM04=00007fa5852ed100 00007fa584786440 XMM05=00007fa584786458 00007fa5847864a0
XMM06=00007fa584786498 00007fa584786490 XMM07=00007fa584786488 00007fa584786480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fa584611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
