last executing test programs:

1.183446477s ago: executing program 0 (id=4152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c060000)
unshare(0x22020600)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805)
splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a2abd", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0x40000c0)
connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031300048008000240000000120800014000000000140003006e657464657673696d30"], 0xac}}, 0x0)
close(r2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r12)
connect$unix(r11, &(0x7f0000000180)=@abs, 0x6e)
sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030f0000000000000000070000000a0002800800020000000000040004000100008008000100050000000800010000000000b2fe0100000000c8eeda85792af50000000000"], 0x44}}, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r13}, 0x10)

1.082393541s ago: executing program 0 (id=4154):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x0, 0x0)
bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0x2, 0x3}, 0x6) (async)
r4 = accept4$phonet_pipe(r3, &(0x7f0000000440), &(0x7f0000000480)=0x10, 0x80800)
ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000004c0)) (async)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000500)={0x0, 0x1, 0x1, 0x0, 0x7a5b7669}, 0xc) (async)
sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@delneigh={0x58, 0x1d, 0x400, 0x70bd2d, 0x25dfdbfd, {0x65f4bfe739a721a5, 0x0, 0x0, r2, 0x40, 0x41, 0x8}, [@NDA_MASTER={0x8, 0x9, 0x1}, @NDA_FDB_EXT_ATTRS={0x28, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x6}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5d}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async)
sendmsg$AUDIT_USER(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, 0x3ed, 0x800, 0x70bd25, 0x25dfdbff, "2b3412cedf5a3e76ef065e77ee570d1ab8a0127b9537b5d66604b710cbb83cdd4ae2dc32127aee0c7ff091341c11384d341b9f21e8b41a4de0e41a2d8b22df8ce4dc313d26fcbf4b0c32138a9d6f240fe40847e7a39d0ad26108d868771fd558e1", ["", "", "", "", "", "", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
write(r3, &(0x7f00000007c0)="4d7fa3401f9e2af35631a8bd2577a0e2675002a7400879b0402f8a99783d824575c165d3bfd65a30f1f519d71e067e13f8320bdfb7d21a729894c06e8f9c1fcad47af03ebd2d99b53dd13da4f81a0bfc190eb568c5c1f491f0343b20ad160832471465ad9f01c71958344f9ba9f0b70c3f66db2f31ac388dd157883209a90ce08f", 0x81) (async)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4008, r0}, 0x18) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa345}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000940)='syzkaller\x00', 0xffffff93, 0x0, 0x0, 0x41000, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000980)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x4, 0xfff, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r3)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x150, r7, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xce1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0xa}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4e5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffeffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4008001}, 0x800) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r8, &(0x7f0000000d40)={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc)
sendmsg$inet6(r3, &(0x7f0000001000)={&(0x7f0000000d80)={0xa, 0x4e21, 0x9, @remote, 0x7}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="3aea709ddb9668d4c637f9dbb67e0ad77a2db87d1c8296c036debd5ae3c56a70d3eb09ae54cb8a19e10e6e64e069a97625cb727cd33fcfc68ab912dd62c4472c2e75e0a7da47cbd3aca313b0f54127311d634989f785da148beda081718bb00d3c56a6f2e65d3ff846d86cffcb38a8c1fa7eb6514e783b351e3f3bed76ac1a15fcab1d8fa04693cc1868661280897ebc619f15b69ff6ed85357240d579b641b64f3bf9f86d7da2f2eeeb3dcc3d1cb4217fe4b635ccaab39a4f2103d037890f4f6222b921e53a18d7278f4214e789c55df940cf4671", 0xd5}, {&(0x7f0000000ec0)="df5d191b9038041ce13fedee12d1f5531cd6caf8e754abb52a1cdf8ba0fd23f3e28053976e523e34b056e8a5cea72c2792e3c449305fa34aa8e12eade3b202e8f4210c68977dc1294aab9af073f8df758580dbdd0bb3f726d96af4b5ef0cccc1d3998593e38ece2a63935c522e72a459d92ef7ffdc67ba1a939948e8ebcd2a1e65", 0x81}], 0x2, &(0x7f0000000fc0)=[@tclass={{0x14}}], 0x18}, 0xcc2a21ef3f55f4e) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r8)
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x5c, r10, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd38}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000)
bind$qrtr(r3, &(0x7f00000011c0)={0x2a, 0x2, 0x2}, 0xc) (async)
ioctl$FIOCLEX(r5, 0x5451)
ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000001200)) (async)
getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000001240)={@ipv4={""/10, ""/2, @broadcast}, <r11=>0x0}, &(0x7f0000001280)=0x14) (async)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001300)=@generic={&(0x7f00000012c0)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x4, '\x00', r11, r3, 0x5, 0x1, 0x5}, 0x50)

1.001126832s ago: executing program 0 (id=4155):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000482b00fe800000000000900c00000000000033ff0200000000000000000000000000014f1c4e20004890780300000000007000fc037d27ed1fc085f00f7bc394383e1fda40bda8d2df030229b9bb4d0ff304b0834743b15bed8c27ffcfba7f13fce58a0944b7c4195e14a8"], 0x82)

804.173155ms ago: executing program 0 (id=4157):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
unshare(0x2c060000)
unshare(0x22020600)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x3, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24)

719.398427ms ago: executing program 1 (id=4158):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c060000)
unshare(0x22020600)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000940)="f4510108c4930d50d5063b220000000000", 0x11}, {&(0x7f0000000580)="ecf12486d0003ef3fd185ecae60c295141566267e78bb200f72c2051d0a14261b89713eca4cea1046f4accb0a1ff2fa391ecff862ab234be51413f793dd4dcb3cd2bcecf88f7f628e440294173dae0ab454ae24497e78813b473e3a7ce9e5ce30a2f51dcb864763502ad2182c0d13fd241da0617bdfae30a36387d8c3f2575abe75c1500f882cb420bfd54d476f1f3fb6745073b3bc98343f72f50aa1c04f4ee7807947cfb50cff27120883ecacfa5b3240d380f0c1c0a63ce9172edc0639799ddcd1328b8d16319e8cd77c76e1a2f73e05a158f770356287bc125a1fbb0ef1d", 0xe0}, {&(0x7f0000000c00)="9d5a07caef49301207e86dc6ac52413ca11b3608b33e35196ef7d8a588bf62eff02161b9918dd775a60082c8e548a83af09d06dc99b0af0400b4583f87ad420a505d5f16192427b3d58105b8232a7011556121338e68ea3892f295d32d69075db2fe9bc19d5cdcb2364e3c8df20498e390312a8599ace2d55de830c085ed87eae07d474a5cd71bffb974a24f63add75bb8dd658ab5ea45d1da1e5cb1f8f5bbb93e3d8db3e3972f509572759836e1688b96d2a6a2ecbac3ddcc013e3301723d3bbc6acd1939a2e5f47990419ad32199dd0bf99b61236927b79d2a95d5f7", 0xdd}, {&(0x7f0000000400)="7f14eb1be45477a0", 0x8}, {&(0x7f0000000440)="40036a24", 0x4}, {&(0x7f0000000780)="d667138340761b8815bfac2f5844aabf8d3ba7853fa3c75eebebabff1e6687aa0320e55a69da23d6b554c576dee207445420e948ba1e93bd7a2ad65fab0277cad78ae1a17e69f95b26f6d81f149d56eb76a0b97bc79d41f55ddce1cd6da80e314bf84da2a93caac488f9368c6ddd23f3e3055460f3e96d6f3bb89a65a8d85ac21490139e651770d2b6a9aec94eebf6303c4d5f73b2f28109c81cb2a97458ea1e704562bba1020ce3c6e4a6c514bee66ade5cb6d63c15721d8014480ce26087df42fdfdaf481150c41607843666923ecb90f8e32b3301b2a9b40c5fcf", 0xdc}], 0x6}}], 0x1, 0x4044805)
splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0)
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r3, 0x0)
connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000000b01020000000000000000070000080800024000000001080002400000000018000100706572dbf1d3f85e8b9d43f462218f676370755f6372656174655f6368756e6b00080002400000000408000240000000017553b8fb400d844fa8"], 0x4c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031300048008000240000000120800014000000000140003006e657464657673696d30"], 0xac}}, 0x0)
close(r3)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
close(r13)
connect$unix(r12, &(0x7f0000000180)=@abs, 0x6e)
sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=<r14=>r11, @ANYBLOB="030f0000000000000000070000000a0002800800020000000000040004000100008008000100050000000800010000000000b2fe0100000000c8eeda85792af50000000000"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="900081ffdbdf25070000", @ANYRES32=r7, @ANYBLOB="180100000483000068003480140035006e696376663000000000000000000000140035006e657464657673696d300000000000001400350076657468305f6d61637674617000000014003500726f736530000000000000000000000014003500766c616e31000000000000000000000008000a00", @ANYRESOCT=0x0, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x4841}, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES8=r4, @ANYRESHEX=r8, @ANYRES64=r11, @ANYRES64=r3, @ANYRES16=<r15=>r1, @ANYRES32=r13, @ANYRES8, @ANYRES32=r12, @ANYRESOCT=r14], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES32=r15, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES8=r15, @ANYRES8=r10], 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008810)

620.174008ms ago: executing program 0 (id=4160):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
unshare(0x2c060000) (async)
unshare(0x22020600)
r1 = socket$unix(0x1, 0x1, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805) (async)
splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031300048008000240000000120800014000000000140003006e657464657673696d30"], 0xac}}, 0x0) (async)
close(r2) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11) (async)
connect$unix(r10, &(0x7f0000000180)=@abs, 0x6e)
sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030f0000000000000000070000000a0002800800020000000000040004000100008008000100050000000800010000000000b2fe0100000000c8eeda85792af50000000000"], 0x44}}, 0x0) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r12}, 0x10) (async)
getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a001629032c1f8724d1000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008810)

562.756827ms ago: executing program 1 (id=4161):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000380)}}], 0x2, 0xc044)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000001400068008000100ac"], 0x78}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c020000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc140011800e000100636f6e6e6c696d69740000000800084000000001f4010980080001407f"], 0x274}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendto$inet(r1, &(0x7f0000000200)="e1", 0x1, 0x4040001, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x30fea7, 0xa)

562.072465ms ago: executing program 0 (id=4162):
vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x81, 0x3, 0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000000)=0x3, 0x4)

544.881171ms ago: executing program 1 (id=4164):
r0 = socket(0x1e, 0x4, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394", 0xf}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x801}, @nested={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x20000000}, 0x300)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r4, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x48}}, 0x4006)

433.168776ms ago: executing program 2 (id=4165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32, @ANYRESOCT, @ANYRES16], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c060000)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000040)=0x1ff, 0x4)
setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000000)=0x2, 0x4)
unshare(0x22020600)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$inet(r6, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805)
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r2, 0x0)
connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4004e20}, 0x6e)
r7 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000240)=ANY=[@ANYBLOB="0d91df5998f1bf57443d0f9c3825a5e23bbef4740f4669fa15ea9efc67f3ba289c01dc37841136"], 0xac}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x2004d800)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x2b0, 0x1f0, 0x1f0, 0x1f0, 0x108, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f0000000480), {[{{@ip={@multicast2, @multicast2, 0xff000000, 0x0, 'vlan1\x00', 'bond_slave_0\x00', {}, {}, 0x67, 0x0, 0xa}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x1, 0x0, 0x3, 0x4, 0x4, 0x2], 0x2, 0x1}}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffbff, 0xffffff80, @dev={0xac, 0x14, 0x14, 0x36}, 0x4e20}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3e}}}, {{@ip={@broadcast, @multicast1, 0xff, 0x0, 'macvtap0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x21, 0x0, 0x48}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x40, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x8, 0x928, 0x2, {0x80}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x43, @broadcast, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0xff000000, 'rose0\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x73, 0x1, 0x4}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'batadv_slave_1\x00', @ifru_map={0x100000000000, 0xd, 0x8006, 0x0, 0x7, 0xf3}})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.swap.current\x00', 0x275a, 0x0)
writev(r11, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c5", 0x41}], 0x1)

432.33015ms ago: executing program 1 (id=4166):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0xb400, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
r5 = accept4$tipc(r0, &(0x7f0000000140)=@id, &(0x7f00000003c0)=0x10, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan0\x00', <r6=>0x0})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000002440)={r4, r3})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x48000)
sendmmsg$sock(r5, &(0x7f0000002200)=[{{&(0x7f0000000440)=@can={0x1d, r6}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)="328c464a8f52f7b4e39ab16914cbdca50cebf8a9ba66e7d0895a190101018fbb1824ba309ac6836ebaecd000ae940055d4a34de53bfc9a32dc6e", 0x3a}, {&(0x7f0000000500)="ac29a7025cc7e73537bc9b60189230548d88114ec2917bc2587bc97069df", 0x1e}], 0x2}}, {{&(0x7f0000000740)=@phonet={0x23, 0x1, 0x3, 0xd}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)="23b471dd6e5dc2a4c3fb9ae08ed082b160a699c61f6527b5409b0ae6256cf09d08ad1285927416bb461c238bd0500ead0870", 0x32}, {&(0x7f0000000800)="c40c4cdd00dc8056585483c4496cd7d5ab9d24c8a5e1b40b44adb55d1399613f2190999afd9cc498bd9abe3d8ccbe60153fadf048a18b0be9b8f01d3dc80ef1c6ddd427956d26311c083da24953e54b520e68602c443b1bc39e4cf705885905174891faee6adbf9bb367668ba629209723a08340e41d358055e6f7670b0ddd88b1d239acd545d6fe", 0x88}], 0x2, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}], 0x90}}, {{&(0x7f00000009c0)=@in={0x2, 0x4e20, @private=0xa010100}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a40)="8dba61c338d2e92f5db5ba042d6c54dd5be85d1b149ee2917dcee0d7d3e537852028ca38a7f80861f15ef326c320afc12b9db3a766", 0x35}, {&(0x7f0000000a80)="b5e60b552b73ccba9ead1bc0bd55a9fe20b1bd0f9c4e4953e1950ceb21acc30deeb78e3389e2111cbdf6911b969a9fd70998a8cd25a91559a5d0b0a633db4c322e073bbfc5fded658a72adba1bda94f0d9d70f075283e47cc3ccbd1e9d52096f56ba42e162c5875c8d40310a869cf479fcd153c6b10500dca7ec4a1c", 0x7c}, {&(0x7f0000000b00)="67bc76e263032250f59b46b51b7ee1478a60600fe13af14dbf0876a6260aa72b4a1f1eca7957009be17dbaa5e594bba1d61113d7143e9ff5b150e5531bc18230562cce88d492353da2e6232b71ec3232149c7335b8954f0927f0bd552846a78cd5ff5d634f048240f82a402459b6477b5067c1ec8d017be7944d075d01f4425820f322b380afd56f7253a6600b222fa0455b5ebb9c007c1ba49305022f10b946fb2ed11d6406a55baa85054a7dc9900985b1", 0xb2}, {&(0x7f0000000bc0)="1317b393cd1e9d2ae1b500c68c4a34b3b44b1506f7ae7dc22bc65063ed74235e4b964efc1293e307e5", 0x29}, {&(0x7f0000000c00)="3cb6d8ec87a8db38ff871529f672fda7931f6023966e0a3511ea54ca6bc5be841296cff08a4ac39b9ae47916026db0ad47c000fa13c2bedff76e22360a9a4f25cdd9b7e2454cb1d1992d0ce57bbfc812d022e30d2a133a7fb0ed132b76e6302af6c0f985d4d9535d18db8b7d3c59a6d1da6cb2a509128a24994d2f394f74e4044d48497b8f947b6c7cb1dcf0b55b7e9ff74abaef61d85a31e3efdd5feb95349355", 0xa1}, {&(0x7f0000000cc0)="4f2684815816d12b4fb1bdbc94fbd843b166c2e9e35eabc2b4dcb2127a12644f8d03b2a85ff5c83a01fae8a3b1e9d54ad05b83b693e2215f1cab2287549289860e4b9dd3bc97574423ea16f2257f71f8d4", 0x51}], 0x6, &(0x7f0000000dc0)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @mark={{0x14, 0x1, 0x24, 0x948}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e80)="52e905a78ac82ba206ea650a9cc81dbb64f49aa0a4696b4b8badf14fa0deb48280c6", 0x22}, {&(0x7f0000000ec0)="4952a4293e119f8b28fcdde0096629c9759e564ba937842f1fcc120446d3b26fc7c0e2f799c86a", 0x27}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0xceb}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x48}}, {{&(0x7f0000000fc0)=@ethernet={0x1, @remote}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001040)="836cdd5383e323d8e798e0a59ebdc1c411effdbad8eb88d5721b8c6c45a62c536ff045d8d567ac3293ae", 0x2a}, {&(0x7f0000001080)="8b1ccf6b78ef08a80d0ecf98f4e7f14f86b0cbfa9f972aa366b41d0fe18ecfe7011539dacc1153adf7b73cd7a698fc8949401f8a01f6e0eadb1a994b877b0b0915d90020cd43d660e705b57813924c9e630695cacbedbce4f2ab5d655aa389d091705ecc1b977b81c317893bc7df3e319d114b6601b93b58e6c9cde8a066d12813526f1940afa79b17e90db67342b38e52d7e0cc5c46fc3add35ab0ee2b141c7dfd5c968b24161c8fdb480411b352bc23e2c369bb4dde781b215ac625e86ef72c3cb3a11f54d7150dfc379fb64899c082348b7e3788639ff958d86734969bbcd1e1c406fd01eaeedb1", 0xe9}, {&(0x7f0000001180)="a760f376c0a1cfee252a7d6bc5ffb44c584bb76205a0b1284944a2f1b1f2296eec5451e2563dc1d97e0313a1f63d471e0cd8ec3f98cf2b5a8e1a03a65442a4d36a602dc732bb049ab32742369dd517286ddb2b", 0x53}, {&(0x7f0000001200)="926fb186783800ad46e8fd44389f05ee1cb1868f2db9bf93c76a55c5a5c6b0c75523cd7e961bd9bae65f5f42473bb967ba2f279e4d0e64e477a6e7e96792c426985ab29f8cf7f03d0df0d2b759f6a8844a437d4df14b456dccffbdb547fd871b26b2e4ac33a66831d6099c847093c2a54b0439aeff2fd46feb56", 0x7a}, {&(0x7f0000001280)="8ae591163c423fa51324b8ff126dfb4e0d2d28c0d5b299b7dc9c6a706b4a056851", 0x21}, {&(0x7f00000012c0)="afe4a0d08ba4becb9713d492b8aa", 0xe}, {&(0x7f0000001300)="9899934d44fc9840d7d67fbf89c5e7a2a194f13d4dbd987cb7b878b4ac8c4c3bfeff3eec54a9e9035eadb6999f27f38a3286297ef05eeb62b40c1c519dc2539737e29ee6ca2d2a3db310feeb89f6cdf4986dff2ebf734833b5d921d27d1ce983b4895cdfe53240f468052ec3bbd55995a18e383bc78e2bbb5246152c767cc1f5bbf821fdd0f7c9c8ed2f2a4850f24187417b4c45c5a0bc1d3ee373b0d3e3b19a50928a671289", 0xa6}], 0x7, &(0x7f0000001440)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x60000}}, @timestamping={{0x14, 0x1, 0x25, 0x91aa}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x160}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7f}}], 0xd8}}, {{&(0x7f0000001540)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x2, 0x3, {0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x80, &(0x7f0000001900)=[{&(0x7f00000015c0)="0399beecbf609c808815a352f920f702a62a3b7fe79e41896f501dafcda44e8dfbb6d9e2570a6b116c86be0b76d235cb6fd93a6ddd3123b5e6d04fd5d280d19ea686bf8c58e5f21e15d8c52e73bfa07e6c3b27732f4432c7577a0dd10fa12d49bae885017daed798b42f2e780eac38943f86adfba1", 0x75}, {&(0x7f0000001640)="be9f763f75ca34281af75d04558df4", 0xf}, {&(0x7f0000001680)="ea1addc829f969353c2a66526221c8cb8b15587286daa57dc65ded5a2aa7b40d6d6c17663ba538d004725a40b36f37bc6adf3824f673f4610f69be509905e9c294a6be04939d9ecc91e5348ba9b7827688c9eae27357d235cce5a9e0bf4d76a47a3c92a9de9af4fb1ad64f1f54162a8742df96596933b9e85e17d878a188e7283600ed1c3a50978d7e4f02fca3dc269b3a5c520c8df351b358633fbc50db404bec872039ef53f54c417df006ef0ce1f72a7d", 0xb2}, {&(0x7f0000001740)="095e2783399483c9bd4934144c6e1358a71e660f8573fb878610532582c6f07659f720e7b3bf6b42310543ceb7ba1200dbff5488acf407e15ec1331f8d64706144b19023704f390f32aea569a369b27e4427068054d14a2661afb3715d62107d021a3cb35814e907ec7da7b0bd554ddb8c0969389bb682fbb9dfefd4fb97d3b981bb644781344ffbab91348c61a90112259e3db102aa469115522f883462dc4277104ea07597cfdb3c41ea8812527f4f51184005758ac16713fc4ff57622713ce8ee9fff36bc40c0f4a74fd90776c7068f88bbec7f893f1355b8a96f94aca052741d5629af46", 0xe6}, {&(0x7f0000001840)="74b2782bfcf285cc17b213f5a53f41a9100f1196a904e6ede6af75aded5afdd0e6", 0x21}, {&(0x7f0000001880)="4a85563ba6d0b5f7a16d6cc31fd935d98b22885b40dc52cee5107b0f9cb4a61fa2bef21d8332a0ce5101f4b18223f39c5c09a0fb91d936dfb760194de5803e9660993cd11eebfe00a173eff502fe7a3b233b5025cbe692d83ac3683b3974e1e51d038fea3e41b0e29d47b15e668a78bf5f839695758e6ab64a8e1a", 0x7b}], 0x6}}, {{&(0x7f0000001980)=@vsock, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001a00)="845eb94a0774012cde292d1dfb4207909ff516c73c4965fd8cd5acac4c7906c7f9f0a407ccffe184d959f4cedf9df2d0b5681b2069bb0ddd5d1774b9f2115a776fb0f7b1112f122c6c3afaf19824abd02345fd184c502d98", 0x58}], 0x1, &(0x7f0000001ac0)=[@txtime={{0x18, 0x1, 0x3d, 0x98a5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xfffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}], 0x60}}, {{&(0x7f0000001b40)=@x25, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="41712758286e4fd4b3b80f2404e78e6f42f553ec56da23f6c57220e9bf2b54cb88eca2abd610f82b30b144d1db96df8aa1dc35fd6eab14d64b5c9547d35726e6a66cfb4510fd16a446a39bf8a12592846b30382a174ae84e7ce26e8bda6b05d4c14a798e5ff7a8d5945c860b25f56f4de079b6a2354133d25f5e96eafd3b5ebe2beddce3089ccc540a1419882bd8af2267b70d5fb3abdeb3ab2351339d4f1351b600a4c9399aac767a8eefe95fa58df0cfe66d4bb78a552f5f66625d077a5475cc6e480bf46553e096dfd2d8", 0xcc}], 0x1, &(0x7f0000001d00)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}}, {{&(0x7f0000001d40)=@nl=@kern={0x10, 0x0, 0x0, 0x40000000}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001dc0)="b209dbb64e3fe124d32d172c135e1f0fcfe15dc162970759227e3d78890643016e157b708c7be93742058c3619773130e416da4241cb108471cd8398adfd5bea86c3483a9076126f726fbda9615423020debb0fcc9f6e4d03b1fcc4bed450f045419bd384245bc814581e377528afd8b479cfa824a6bae99c700f02f501260f1d6", 0x81}, {&(0x7f0000001e80)="234bdda9511650d1e72d347e9a66c8b1e0b8abf446714292fbda96d29e3d725af07020ddf2bfd778d25d229ffc6691db3205872b7a23115dba0bd9efcf1904d0ee38c57689d7baf23a19aa1eb7b00565cc31994142d4a12e4cf8c477ead8c5f5dbf1c7bdc4e3907d565773d80d22498ee73b39e9ccca082c6649a13fa0b83d6cafd47aa92c6ee77800d376077e3fdf88639ab8e8eccd1dbb34e05e0193a93b528f4135f92ad7e65899f2c250dfcb2def2a7f8c43aeb2b684e72aa6435d5151d533daf0bb54941381b1fa4d8983c500397b3fb270aa634131", 0xd8}, {&(0x7f0000001f80)="86117d3507fead8fa1a6a0ac83997891b243dcb7982143cb814e86f30bcf7bf94c5ffb550aa64f523c090af5441ba7ec83e79c7df7c1e2773274d902f27cbe3e2daaca180c82bb4e8b7fe84e778f6985aaa9e99907a2c4c747c3992bd2bde35a3943430a2cd4d42a1ab0e6544a87d256c23e4bfc735bc9a3cb4a4b2133809a1052f44c0d8b70f226098f224d58d0823af8494a375cdfd92c267bf0d06d605ff33f2c183762171214e90b3482158b1af57ff34bdb8e9f4c238efbe26f8b413a6e237df9cdce71c24046d8bbb38b06eb6bb3", 0xd1}, {&(0x7f0000002080)="9eaf97bc8a6ff6452f638d58153175", 0xf}], 0x4, &(0x7f0000002100)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x54d}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0xf7000000}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18}}], 0xd8}}], 0x9, 0x40)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x18, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
splice(r8, &(0x7f00000000c0), r4, &(0x7f0000000100)=0x8, 0xc6e, 0x13)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0)
shutdown(r4, 0x1)
splice(r4, 0x0, r0, 0x0, 0x2, 0x0)

431.455689ms ago: executing program 2 (id=4167):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c060000)
unshare(0x22020600)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805)
splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031300048008000240000000120800014000000000140003006e657464657673696d30"], 0xac}}, 0x0)
close(r2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
connect$unix(r10, &(0x7f0000000180)=@abs, 0x6e)
sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030f0000000000000000070000000a0002800800020000000000040004000100008008000100050000000800010000000000b2fe0100000000c8eeda85792af50000000000"], 0x44}}, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r12}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a001629032c1f8724d1000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008810)

333.241951ms ago: executing program 1 (id=4168):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
unshare(0x2c060000)
unshare(0x22020600)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x3, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24)

332.465897ms ago: executing program 2 (id=4169):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000540)=[{0x28, 0xa9, 0x0, 0xffdff038}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
unshare(0x2c060000)
socket$unix(0x1, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x3, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300), 0x8)
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044811}, 0x20004094)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040040)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
close(0xffffffffffffffff)

262.448549ms ago: executing program 1 (id=4170):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000002ec0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000002f00)=0x1c, 0x80800)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000002f40))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002fc0)=@generic={&(0x7f0000002f80)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000034c0)={0xffffffffffffffff, 0xe0, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000003200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000003240)=[0x0], &(0x7f0000003280)=[0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xa, &(0x7f00000032c0)=[{}, {}], 0x10, 0x10, &(0x7f0000003300), &(0x7f0000003340), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000003380)}}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003500)=@base={0x9, 0xffff, 0x2, 0x2, 0x20000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000035c0)=@o_path={&(0x7f0000003580)='./file0\x00', 0x0, 0x10, r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000003680)={0x0, 0x2, &(0x7f0000003000)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r4}], &(0x7f0000003040)='syzkaller\x00', 0x7ff, 0xe9, &(0x7f0000003080)=""/233, 0x41000, 0x8, '\x00', 0x0, @fallback=0x30, r3, 0x8, &(0x7f0000003180)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000031c0)={0x3, 0x4, 0x3, 0xfed}, 0x10, r5, 0xffffffffffffffff, 0x2, &(0x7f0000003600)=[r6, r7], &(0x7f0000003640)=[{0x4, 0x1, 0x10, 0x4}, {0x0, 0x1, 0xc, 0x7}], 0x10, 0x3ff}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000)
write$tun(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000483200fe800000000000900c00000000000033ff0200000000000000000000000000014f1c4e20004890780300000000000000fc037d27ed1fc085f00f7bc394383e1fda40bda8d2df030229b9bb4d0ff304b0834743b15bed8c27ffcfba7f13fce58a0944b7c4195e14a8"], 0x82)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
pipe(&(0x7f0000000000))
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r10, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000700)=""/145, 0x91}], 0x8, &(0x7f0000000840)=""/213, 0xd5}, 0x65b4}, {{&(0x7f0000000940), 0x80, &(0x7f00000001c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/143, 0x8f}], 0x2, &(0x7f0000001a80)=""/239, 0xef}, 0x19c}, {{&(0x7f0000001b80)=@hci, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/14, 0xe}, {&(0x7f0000002c40)=""/222, 0xde}, {&(0x7f0000002d40)=""/90, 0x5a}], 0x4}, 0x5}], 0x3, 0x1, 0x0)
setsockopt$inet_tcp_int(r10, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r10, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r10, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000380)="b9ff03086844268cb89e0ef086dd", 0x0, 0x0, 0x60000000, 0x0, 0xe2, 0x0, &(0x7f0000000040)="a4"}, 0x48)

113.909402ms ago: executing program 2 (id=4171):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500002c000000000006907800000000ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="04cc077990780000bb020474"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970000303a00fc000018c6ba35000000000000000700ff020000000012000000000000000001"], 0xfdef)

3.501726ms ago: executing program 2 (id=4172):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300001f6d000280080001"], 0x46}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0xffffffffffffff0b}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r2, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x14008004)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

0s ago: executing program 2 (id=4173):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4aad5b563ae75ddaf9b167d70b0e96f42a4f1c5bef1e777fedcb380707fc7ac87e249f322a01660687c04d1bbeeefeecadf86c3ef805d79964a862877cfbff40eb340f7065bc759013cbdcb25305ba6812a853b8d8e1960227826acb24311ed0e67f84565dd8858ca3be23409569e15ba75120c35dffdc8a4b7688d5d02fedf88434274b828fec979ea029405cd1e7cadc867ebdc98c4a523178715828c1a6361e60ff1f2968efc20d6888ac2a6f81e37cbc7f1e89f3421825cc278df26c8722e1672fc9672a8d0a60dded6f0765ac61f8a91acf0195abc177e56cc91a9c11ccf95d2a58de5494e66cfa1e758438ee4bb163ee05927e551e4d05b308a0eb01cea0e43", 0x480}], 0x2}, 0x0)
sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
getpeername$qrtr(r1, &(0x7f0000000000), &(0x7f0000000080)=0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
sendto$inet6(r0, &(0x7f00000005c0)='s', 0x1, 0x20000000, &(0x7f0000000240)={0xa, 0x4e1f, 0x5, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0x4}, 0x8)

kernel console output (not intermixed with test programs):

file:1255 inactive_file:38255 isolated_file:0
[  190.234338][ T9996]  unevictable:1768 dirty:106 writeback:0
[  190.234338][ T9996]  slab_reclaimable:10021 slab_unreclaimable:84935
[  190.234338][ T9996]  mapped:18216 shmem:2438 pagetables:877
[  190.234338][ T9996]  sec_pagetables:0 bounce:0
[  190.234338][ T9996]  kernel_misc_reclaimable:0
[  190.234338][ T9996]  free:266531 free_pcp:18776 free_cma:0
[  190.251741][ T9996] Node 0 active_anon:9992kB inactive_anon:0kB active_file:2516kB inactive_file:20268kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38828kB dirty:260kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3716kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  190.264271][ T9996] Node 1 active_anon:7552kB inactive_anon:0kB active_file:2504kB inactive_file:132752kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34036kB dirty:164kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8328kB pagetables:1492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  190.276683][ T9996] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  190.287612][ T9996] lowmem_reserve[]: 0 812 812 812 812
[  190.289776][ T9996] Node 0 DMA32 free:357444kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9992kB inactive_anon:0kB active_file:2516kB inactive_file:20268kB unevictable:3536kB writepending:260kB present:1556484kB managed:831796kB mlocked:0kB bounce:0kB free_pcp:36800kB local_pcp:19096kB free_cma:0kB
[  190.302048][ T9996] lowmem_reserve[]: 0 0 0 0 0
[  190.304010][ T9996] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  190.315452][ T9996] lowmem_reserve[]: 0 0 854 854 854
[  190.317582][ T9996] Node 1 Normal free:234828kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7552kB inactive_anon:0kB active_file:2504kB inactive_file:132752kB unevictable:3536kB writepending:164kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38188kB local_pcp:18480kB free_cma:0kB
[  190.329857][ T9996] lowmem_reserve[]: 0 0 0 0 0
[  190.331867][ T9996] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  190.336739][ T9996] Node 0 DMA32: 273*4kB (ME) 559*8kB (UME) 459*16kB (UE) 142*32kB (UME) 146*64kB (UME) 53*128kB (UM) 7*256kB (U) 11*512kB (UME) 5*1024kB (UM) 2*2048kB (U) 75*4096kB (UM) = 357420kB
[  190.342696][ T9996] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  190.348626][ T9996] Node 1 Normal: 411*4kB (UME) 394*8kB (UME) 198*16kB (UM) 300*32kB (UME) 262*64kB (UM) 114*128kB (UM) 38*256kB (UM) 8*512kB (UM) 4*1024kB (M) 4*2048kB (UE) 39*4096kB (M) = 234780kB
[  190.355179][ T9996] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  190.358106][ T9996] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  190.361307][ T9996] 41948 total pagecache pages
[  190.362750][ T9996] 0 pages in swap cache
[  190.364432][ T9996] Free swap  = 124996kB
[  190.365824][ T9996] Total swap = 124996kB
[  190.367169][ T9996] 786301 pages RAM
[  190.368379][ T9996] 0 pages HighMem/MovableOnly
[  190.370024][ T9996] 241104 pages reserved
[  190.371442][ T9996] 0 pages cma reserved
[  190.466386][T10001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.656698][T10011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.704481][T10016] team0: Device gtp0 is of different type
[  190.716156][T10018] veth0_to_bridge: left allmulticast mode
[  190.718917][T10018] veth0_to_bridge: left promiscuous mode
[  190.723214][T10018] bridge0: port 1(veth0_to_bridge) entered disabled state
[  190.733975][T10018] bond2: (slave bridge3): Releasing backup interface
[  190.744230][T10018] team0: Port device gtp0 removed
[  190.757217][T10018] bond3: (slave gretap1): Releasing active interface
[  190.774070][T10018] team0: Port device gtp1 removed
[  190.792178][T10018] team0: Port device gtp2 removed
[  190.795255][   T27] tipc: Resetting bearer <eth:team0>
[  190.863285][ T5218] Bluetooth: hci1: command 0x0406 tx timeout
[  190.864020][   T54] Bluetooth: hci0: command 0x0401 tx timeout
[  190.994338][T10046] __nla_validate_parse: 74 callbacks suppressed
[  190.994349][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'.
[  190.999040][T10046] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1288'.
[  191.004924][T10040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1288'.
[  191.008252][T10040] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1288'.
[  191.057484][T10048] team0: Device gtp0 is of different type
[  191.150944][T10060] netlink: 'syz.0.1296': attribute type 1 has an invalid length.
[  191.176127][T10060] 8021q: adding VLAN 0 to HW filter on device bond3
[  191.189361][T10060] veth5: entered promiscuous mode
[  191.194980][T10060] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  191.206709][T10060] bridge_slave_0: left allmulticast mode
[  191.209066][T10060] bridge_slave_0: left promiscuous mode
[  191.217673][T10060] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.224457][T10060] bridge_slave_1: left allmulticast mode
[  191.226955][T10060] bridge_slave_1: left promiscuous mode
[  191.229363][T10060] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.237614][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'.
[  191.242872][T10066] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1294'.
[  191.250376][T10060] bond0: (slave bond_slave_0): Releasing backup interface
[  191.251955][T10062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1294'.
[  191.256876][T10062] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1294'.
[  191.257815][T10060] bond_slave_0: left promiscuous mode
[  191.271958][T10060] bond_slave_0: left allmulticast mode
[  191.283808][T10060] bond0: (slave bond_slave_1): Releasing backup interface
[  191.288988][T10060] bond_slave_1: left promiscuous mode
[  191.292897][T10060] bond_slave_1: left allmulticast mode
[  191.304947][T10060] team0: Port device team_slave_0 removed
[  191.313578][T10060] team0: Port device team_slave_1 removed
[  191.316989][T10060] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.320027][T10060] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.327181][T10060] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.330329][T10060] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.343237][T10060] bond2: (slave ip6gretap1): Releasing active interface
[  191.352276][T10060] bond3: (slave veth5): Releasing backup interface
[  191.361292][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.489724][T10072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1299'.
[  191.495217][T10072] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1299'.
[  191.500049][T10072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.705272][T10093] lo speed is unknown, defaulting to 1000
[  191.707654][T10093] lo speed is unknown, defaulting to 1000
[  191.714623][T10093] lo speed is unknown, defaulting to 1000
[  191.737174][T10093] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  191.763627][T10093] lo speed is unknown, defaulting to 1000
[  191.766598][T10093] lo speed is unknown, defaulting to 1000
[  191.769619][T10093] lo speed is unknown, defaulting to 1000
[  192.388063][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.401701][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.112048][T10159] net_ratelimit: 6 callbacks suppressed
[  193.112065][T10159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.411488][T10177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.136763][T10191] netlink: 'syz.0.1344': attribute type 1 has an invalid length.
[  194.172848][T10191] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  194.178014][T10191] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  194.228219][T10195] gretap1: entered promiscuous mode
[  194.233271][T10195] bond4: (slave gretap1): making interface the new active one
[  194.236858][T10195] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  194.252317][T10191] macvlan3: entered promiscuous mode
[  194.254542][T10191] macvlan3: entered allmulticast mode
[  194.257411][T10191] bond4: entered promiscuous mode
[  194.260296][T10191] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  194.268178][T10191] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  194.273579][T10191] bond4: left promiscuous mode
[  194.402087][T10202] xt_time: invalid argument - start or stop time greater than 23:59:59
[  194.460994][ T1094] wlan1: Trigger new scan to find an IBSS to join
[  194.526724][T10210] xt_TCPMSS: Only works on TCP SYN packets
[  194.580248][T10208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.801289][T10240] xt_bpf: check failed: parse error
[  194.857834][T10238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.918215][T10247] netlink: 'syz.0.1364': attribute type 2 has an invalid length.
[  194.993210][T10249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.249742][T10285] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.275746][T10279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.296876][T10281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.784600][T10343] syzkaller1: entered promiscuous mode
[  195.786402][T10343] syzkaller1: entered allmulticast mode
[  195.807332][T10345] bridge0: port 1(ipvlan2) entered blocking state
[  195.809943][T10345] bridge0: port 1(ipvlan2) entered disabled state
[  195.813281][T10345] ipvlan2: entered allmulticast mode
[  195.815529][T10345] bridge0: entered allmulticast mode
[  195.819432][T10345] ipvlan2: left allmulticast mode
[  195.822478][T10345] bridge0: left allmulticast mode
[  196.002421][T10359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.009711][T10360] __nla_validate_parse: 79 callbacks suppressed
[  196.009722][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  196.014690][T10360] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1401'.
[  196.033366][T10358] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1399'.
[  196.080165][T10366] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  196.083667][T10366] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  196.139079][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1402'.
[  196.148449][T10370] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1402'.
[  196.158052][T10364] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1402'.
[  196.179212][T10364] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1402'.
[  196.184109][T10364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.275587][T10381] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  196.286421][T10381] tipc: Resetting bearer <eth:team0>
[  196.302197][T10381] netlink: 'syz.1.1407': attribute type 10 has an invalid length.
[  196.305336][T10381] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  196.314407][T10381] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  196.318058][T10381] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  196.433821][T10386] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1409'.
[  196.437179][T10387] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1409'.
[  196.441176][T10386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1409'.
[  196.616848][T10397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.501063][ T6771] wlan1: Trigger new scan to find an IBSS to join
[  197.612131][T10456] netlink: 'syz.1.1431': attribute type 21 has an invalid length.
[  197.658281][T10459] vlan2: entered allmulticast mode
[  197.659983][T10459] hsr0: entered allmulticast mode
[  197.663407][T10459] hsr_slave_0: entered allmulticast mode
[  198.199270][T10487] net_ratelimit: 3 callbacks suppressed
[  198.199285][T10487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.273604][T10488] team0 (unregistering): Port device gtp1 removed
[  198.284490][T10488] team0 (unregistering): Port device gtp2 removed
[  198.349059][T10497] netlink: 'syz.1.1447': attribute type 1 has an invalid length.
[  198.544718][ T5930] IPVS: starting estimator thread 0...
[  198.640650][T10507] IPVS: using max 64 ests per chain, 153600 per kthread
[  198.851754][T10530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.983052][T10541] syz.0.1461 (10541) used greatest stack depth: 19432 bytes left
[  199.224369][T10572] netlink: 'syz.0.1471': attribute type 1 has an invalid length.
[  199.244645][T10572] bond5: entered promiscuous mode
[  199.247136][T10572] 8021q: adding VLAN 0 to HW filter on device bond5
[  199.263759][T10572] 8021q: adding VLAN 0 to HW filter on device bond5
[  199.266805][T10572] bond5: (slave vcan1): The slave device specified does not support setting the MAC address
[  199.270822][T10572] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  199.277597][T10572] bond5: (slave vcan1): making interface the new active one
[  199.280625][T10572] vcan1: entered promiscuous mode
[  199.284984][T10572] bond5: (slave vcan1): Enslaving as an active interface with an up link
[  200.013633][T10598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.193226][T10600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.413443][T10609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.545482][   T26] wlan1: Trigger new scan to find an IBSS to join
[  200.914299][T10642] bond4: (slave gretap1): Releasing active interface
[  200.920064][T10642] bond5: (slave vcan1): Releasing backup interface
[  200.926213][T10642] vcan1: left promiscuous mode
[  200.931805][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.092555][T10655] __nla_validate_parse: 86 callbacks suppressed
[  201.092571][T10655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1499'.
[  201.120245][T10657] netlink: 'syz.0.1500': attribute type 8 has an invalid length.
[  201.125926][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'.
[  201.129383][T10657] bridge_slave_1: default FDB implementation only supports local addresses
[  201.242824][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'.
[  201.246366][T10666] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1501'.
[  201.255491][T10661] IPv6: Can't replace route, no match found
[  201.266377][T10661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1501'.
[  201.270318][T10661] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1501'.
[  201.433399][T10670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1503'.
[  201.436990][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'.
[  201.441247][T10670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1503'.
[  201.460993][ T6771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.541309][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.715846][T10678] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1505'.
[  201.877374][T10683] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  203.864841][T10702] lo speed is unknown, defaulting to 1000
[  204.305296][T10720] netlink: 'syz.2.1519': attribute type 2 has an invalid length.
[  205.281406][T10736] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.458433][T10745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.113663][T10781] __nla_validate_parse: 49 callbacks suppressed
[  206.113683][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'.
[  206.119841][T10781] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1537'.
[  206.128334][T10773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1537'.
[  206.133247][T10773] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1537'.
[  206.198300][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'.
[  206.280759][T10787] block nbd14: server does not support multiple connections per device.
[  206.284460][T10787] block nbd14: shutting down sockets
[  206.329514][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'.
[  206.334855][T10792] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  206.337408][T10792] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.397256][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'.
[  206.400049][T10798] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1545'.
[  206.405129][T10798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1545'.
[  206.407988][T10798] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1545'.
[  206.412627][T10798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.596739][T10813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.677749][T10815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  206.977571][   T95] tipc: Resetting bearer <eth:syzkaller0>
[  207.195486][T10843] netlink: 'syz.0.1561': attribute type 21 has an invalid length.
[  207.206607][T10844] _Z`Ԁ@: entered promiscuous mode
[  207.208927][T10843] netlink: 'syz.0.1561': attribute type 22 has an invalid length.
[  207.212560][T10843] netlink: 'syz.0.1561': attribute type 23 has an invalid length.
[  207.215627][T10843] netlink: 'syz.0.1561': attribute type 25 has an invalid length.
[  207.218736][T10843] netlink: 'syz.0.1561': attribute type 26 has an invalid length.
[  207.986795][T10868] tipc: Resetting bearer <eth:team0>
[  207.999668][T10868] vlan0: left promiscuous mode
[  208.014035][T10868] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  208.017453][T10868] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  208.024947][T10868] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  208.027393][T10868] macsec1: left promiscuous mode
[  208.029093][T10868] macsec1: left allmulticast mode
[  208.034416][T10868] geneve2: left promiscuous mode
[  208.036083][T10868] geneve2: left allmulticast mode
[  208.046074][T10868] ip6gre1: left promiscuous mode
[  208.047789][T10868] ip6gre1: left allmulticast mode
[  208.068664][ T5862] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.071759][ T5862] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  208.074755][ T5862] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  208.077650][ T5862] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.080834][ T5862] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  208.084082][ T5862] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  208.087397][ T5862] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.091409][ T5862] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  208.094740][ T5862] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  208.098170][ T5862] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.101744][ T5862] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  208.105050][ T5862] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  208.479917][T10873] netlink: zone id is out of range
[  208.482919][T10873] netlink: zone id is out of range
[  208.484513][T10873] netlink: zone id is out of range
[  208.486199][T10873] netlink: zone id is out of range
[  209.358732][T10911] netlink: 'syz.1.1582': attribute type 1 has an invalid length.
[  209.362220][T10911] netlink: 'syz.1.1582': attribute type 2 has an invalid length.
[  209.366649][T10909] x_tables: duplicate underflow at hook 1
[  209.372384][T10909] netlink: 'syz.2.1581': attribute type 1 has an invalid length.
[  209.539755][T10925] veth3: entered promiscuous mode
[  209.742699][T10933] netlink: 'syz.2.1589': attribute type 3 has an invalid length.
[  211.191541][T10992] __nla_validate_parse: 22 callbacks suppressed
[  211.191554][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1611'.
[  211.344431][T11003] vlan3: entered promiscuous mode
[  211.346684][T11003] bridge0: entered promiscuous mode
[  211.349047][T11003] vlan3: entered allmulticast mode
[  211.351339][T11003] bridge0: entered allmulticast mode
[  211.449383][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'.
[  211.453254][T11004] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1614'.
[  211.555338][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'.
[  212.309006][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'.
[  212.312917][T11020] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1620'.
[  212.323461][T11020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1620'.
[  212.327897][T11020] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1620'.
[  212.332081][T11019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1620'.
[  212.335650][T11019] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1620'.
[  212.342863][T11019] net_ratelimit: 172 callbacks suppressed
[  212.342874][T11019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.496672][T11030] netlink: 'syz.2.1622': attribute type 64 has an invalid length.
[  212.512900][T11031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.621089][T11049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.976033][T11074] veth0_to_bridge: left promiscuous mode
[  213.978466][T11074] veth0_to_bridge: left allmulticast mode
[  213.987465][T11074] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  213.993595][T11074] gtp0: left promiscuous mode
[  213.995239][T11074] gtp0: left allmulticast mode
[  213.997354][T11074] vlan2: left promiscuous mode
[  213.998951][T11074] bond0: left promiscuous mode
[  214.000674][T11074] vlan2: left allmulticast mode
[  214.019335][ T5862] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  214.022342][ T5862] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  214.025674][ T5862] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  214.028760][ T5862] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  214.473458][T11101] netlink: 'syz.1.1644': attribute type 1 has an invalid length.
[  214.680455][T11122] openvswitch: netlink: Actions may not be safe on all matching packets
[  214.752012][T11127] netlink: 'syz.0.1653': attribute type 1 has an invalid length.
[  214.846775][T11138] netlink: 'syz.0.1658': attribute type 2 has an invalid length.
[  215.238733][T11169] lo speed is unknown, defaulting to 1000
[  215.289059][T11169] netlink: 'syz.0.1669': attribute type 32 has an invalid length.
[  215.855752][T11180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.275754][T11199] __nla_validate_parse: 45 callbacks suppressed
[  216.275764][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1679'.
[  216.458442][T11206] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.462257][T11206] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  216.464654][T11206] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  216.677887][T11214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1684'.
[  216.842940][T11218] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  216.942754][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'.
[  216.946263][T11221] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1687'.
[  216.949611][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'.
[  216.954494][T11222] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1687'.
[  216.959739][T11220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1687'.
[  216.963163][T11220] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1687'.
[  216.966278][T11221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1687'.
[  216.969522][T11221] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1687'.
[  216.973175][T11221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.973250][T11222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.877306][T11229] netlink: 'syz.1.1689': attribute type 1 has an invalid length.
[  218.694724][T11263] netlink: 'syz.0.1700': attribute type 11 has an invalid length.
[  218.866560][T11269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.899319][T11276] netlink: 'syz.0.1704': attribute type 1 has an invalid length.
[  219.047840][T11285] xt_hashlimit: size too large, truncated to 1048576
[  219.165807][T11294] netlink: 'syz.1.1710': attribute type 13 has an invalid length.
[  219.168581][T11294] netlink: 'syz.1.1710': attribute type 17 has an invalid length.
[  219.198639][T11294] 8021q: adding VLAN 0 to HW filter on device team0
[  219.202141][T11294] tipc: Resetting bearer <eth:team0>
[  219.204070][T11294] tipc: Resetting bearer <eth:team0>
[  219.209554][T11294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.226364][T11294] x_tables: duplicate entry at hook 1
[  219.445441][T11310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.735226][T11335] netlink: 'syz.0.1723': attribute type 1 has an invalid length.
[  220.073428][T11373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.126485][T11375] lo speed is unknown, defaulting to 1000
[  220.278607][T11380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.282001][T11382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.377001][T11378] netlink: 'syz.0.1733': attribute type 13 has an invalid length.
[  220.379470][T11378] netlink: 'syz.0.1733': attribute type 17 has an invalid length.
[  220.386061][T11378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.907389][T11412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.042575][T11425] netlink: 'syz.2.1748': attribute type 30 has an invalid length.
[  221.051391][T11425] netlink: 'syz.2.1748': attribute type 30 has an invalid length.
[  221.156491][T11434] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[  221.465898][T11446] __nla_validate_parse: 53 callbacks suppressed
[  221.465915][T11446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1756'.
[  221.589817][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'.
[  222.164409][T11465] tipc: Resetting bearer <eth:team0>
[  222.461124][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'.
[  222.464823][T11476] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1765'.
[  222.471589][T11476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1765'.
[  222.476730][T11476] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1765'.
[  222.479982][T11475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1765'.
[  222.481013][T11476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.483215][T11475] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1765'.
[  222.523211][T11479] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1766'.
[  222.749943][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'.
[  222.901121][T11502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.018792][T11517] vlan0: entered promiscuous mode
[  223.031383][T11517] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  223.169358][T11527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.365722][T11628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.482053][T11632] net_ratelimit: 2 callbacks suppressed
[  224.482071][T11632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.555657][T11635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.643303][T11640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.771686][T11651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.872129][T11655] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  225.594652][T11682] netlink: 'syz.1.1835': attribute type 1 has an invalid length.
[  225.598419][T11682] netlink: 'syz.1.1835': attribute type 5 has an invalid length.
[  226.061617][T11701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.141714][T11674] delete_channel: no stack
[  226.220345][T11715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.691762][T11758] __nla_validate_parse: 57 callbacks suppressed
[  226.691779][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1860'.
[  227.285907][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1872'.
[  227.289437][T11806] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1872'.
[  227.296289][T11805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1872'.
[  227.299961][T11805] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1872'.
[  227.305736][T11805] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.419329][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'.
[  227.424157][T11809] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1873'.
[  227.431804][T11808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1873'.
[  227.434956][T11808] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1873'.
[  227.439442][T11808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.828327][T11834] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1879'.
[  227.851873][T11834] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.095067][T11846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.445591][T11877] netlink: 'syz.0.1894': attribute type 1 has an invalid length.
[  228.464492][T11877] 8021q: adding VLAN 0 to HW filter on device bond7
[  228.479297][T11877] 8021q: adding VLAN 0 to HW filter on device bond7
[  228.483051][T11877] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  228.491314][T11877] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  228.528825][T11881] veth9: entered promiscuous mode
[  228.533534][T11881] bond7: (slave veth9): Enslaving as an active interface with a down link
[  228.684656][T11883] lo speed is unknown, defaulting to 1000
[  228.718713][T11886] tipc: Started in network mode
[  228.720348][T11886] tipc: Node identity 4, cluster identity 4711
[  228.722302][T11886] tipc: Node number set to 4
[  228.933149][T11898] bridge_slave_1: default FDB implementation only supports local addresses
[  229.047399][T11905] netlink: 'syz.2.1902': attribute type 1 has an invalid length.
[  229.312164][T11912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.886723][T11935] block nbd2: must specify backend
[  229.924067][T11942] sctp: [Deprecated]: syz.0.1916 (pid 11942) Use of int in max_burst socket option deprecated.
[  229.924067][T11942] Use struct sctp_assoc_value instead
[  230.593602][T11965] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.718666][T11976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  230.956638][T11984] net_ratelimit: 1 callbacks suppressed
[  230.956654][T11984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.552053][T12009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.910234][T12018] __nla_validate_parse: 56 callbacks suppressed
[  231.910245][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'.
[  231.915274][T12018] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1943'.
[  231.920383][T12018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1943'.
[  231.924249][T12018] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1943'.
[  231.928061][T12018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.959920][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'.
[  231.989276][T12022] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1945'.
[  231.993338][T12022] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  232.047732][T12024] pim6reg1: entered promiscuous mode
[  232.050099][T12024] pim6reg1: entered allmulticast mode
[  232.112752][T12024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1946'.
[  232.116588][T12024] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  232.119638][T12024] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  232.165742][T12027] netlink: 'syz.0.1947': attribute type 15 has an invalid length.
[  232.168255][T12027] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1947'.
[  232.225767][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'.
[  232.229193][T12028] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1947'.
[  232.278261][T12030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.504705][T12036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.581902][T12038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.680630][T12047] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.846604][T12066] netlink: 'syz.2.1961': attribute type 4 has an invalid length.
[  234.303803][T12178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.529233][T12194] netlink: 'syz.0.1998': attribute type 1 has an invalid length.
[  234.801063][T12211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.385437][T12230] block nbd2: must specify backend
[  235.433221][T12232] netlink: 'syz.2.2011': attribute type 1 has an invalid length.
[  235.456497][T12232] 8021q: adding VLAN 0 to HW filter on device bond4
[  235.476721][T12232] 8021q: adding VLAN 0 to HW filter on device bond4
[  235.479640][T12232] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  235.484929][T12232] bond4: (slave vxcan5): Error -95 calling set_mac_address
[  235.533900][T12234] veth5: entered promiscuous mode
[  235.541066][T12234] bond4: (slave veth5): Enslaving as an active interface with a down link
[  235.547017][T12232] erspan0: entered allmulticast mode
[  235.552231][T12232] bond4: (slave erspan0): making interface the new active one
[  235.555835][T12232] bond4: (slave erspan0): Enslaving as an active interface with an up link
[  235.677981][T12238] tipc: Resetting bearer <eth:syzkaller0>
[  235.681334][T12238] tipc: Resetting bearer <eth:syzkaller0>
[  235.840385][T12253] block nbd2: must specify backend
[  236.122790][T12270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.169834][T12277] bond0: option arp_validate: invalid value (18446744073491447809)
[  236.229572][T12280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.277378][T12282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.283346][T12281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.328815][T12288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.455553][T12297] x_tables: duplicate underflow at hook 3
[  236.598038][T12313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.598087][T12312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.981649][T12339] __nla_validate_parse: 66 callbacks suppressed
[  236.981665][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'.
[  236.988021][T12339] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2045'.
[  236.995527][T12336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2045'.
[  236.998799][T12336] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2045'.
[  237.005350][T12336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.348338][T12359] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2053'.
[  237.456032][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'.
[  237.459560][T12362] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2054'.
[  237.467228][T12361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2054'.
[  237.470162][T12361] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2054'.
[  237.474876][T12361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.550092][T12366] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.584094][T12366] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.639043][T12366] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.686149][T12366] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.767724][ T5862] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  237.778648][ T5862] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  237.789262][ T5862] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  237.799801][ T5862] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  237.898244][T12372] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2059'.
[  238.026452][T12374] syz.0.2060 (12374) used greatest stack depth: 18632 bytes left
[  238.118911][T12391] netlink: 'syz.1.2063': attribute type 3 has an invalid length.
[  238.386355][T12400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.512711][T12406] xfrm2: entered promiscuous mode
[  238.514465][T12406] xfrm2: entered allmulticast mode
[  238.527168][T12406] xt_hashlimit: size too large, truncated to 1048576
[  239.255985][T12445] delete_channel: no stack
[  240.245213][T12463] netlink: 'syz.2.2089': attribute type 11 has an invalid length.
[  240.368193][T12463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.469295][T12470] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  241.223222][T12482] netlink: 'syz.0.2094': attribute type 6 has an invalid length.
[  241.455490][T12494] net_ratelimit: 3 callbacks suppressed
[  241.455502][T12494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.526530][T12504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  241.565442][T12506] ip6gre1: entered allmulticast mode
[  241.685421][T12511] nbd: couldn't find a device at index 11176704
[  242.070217][T12539] __nla_validate_parse: 53 callbacks suppressed
[  242.070243][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'.
[  242.077289][T12539] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2114'.
[  242.084399][T12536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2114'.
[  242.088066][T12536] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2114'.
[  242.094842][T12536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.282684][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'.
[  242.285667][T12547] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2117'.
[  242.445459][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'.
[  242.449270][T12561] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2120'.
[  242.455867][T12561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.458848][T12562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.675416][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'.
[  242.678788][T12571] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2123'.
[  242.872246][T12583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.956428][T12586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.007126][T12620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.121835][T12627] netlink: 'syz.2.2140': attribute type 7 has an invalid length.
[  244.125589][T12627] netlink: 'syz.2.2140': attribute type 8 has an invalid length.
[  244.206423][T12631] team0: Mode changed to "loadbalance"
[  244.254520][T12633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.595074][T12666] netlink: 'syz.0.2156': attribute type 12 has an invalid length.
[  244.634751][T12669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.735189][T12676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.936303][T12695] netlink: 'syz.1.2166': attribute type 12 has an invalid length.
[  244.938970][T12695] netlink: 'syz.1.2166': attribute type 12 has an invalid length.
[  245.143607][T12711] lo speed is unknown, defaulting to 1000
[  246.154442][T12762] netlink: 'syz.1.2187': attribute type 5 has an invalid length.
[  246.225905][T12770] geneve3: entered promiscuous mode
[  246.227909][ T5843] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.230417][ T5843] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.235923][ T5843] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.246367][ T5843] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.276940][T12777] netlink: 'syz.2.2192': attribute type 13 has an invalid length.
[  246.277021][T12778] netlink: 'syz.2.2192': attribute type 13 has an invalid length.
[  246.279817][T12777] netlink: 'syz.2.2192': attribute type 17 has an invalid length.
[  246.289378][T12778] netlink: 'syz.2.2192': attribute type 17 has an invalid length.
[  246.291979][T12777] erspan0: left allmulticast mode
[  246.304106][T12777] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.308765][ T5930] lo speed is unknown, defaulting to 1000
[  246.311163][ T5930] syz2: Port: 1 Link ACTIVE
[  246.353879][T12777] lo speed is unknown, defaulting to 1000
[  246.399892][T12776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.458861][T12776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.517191][T12776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.524700][T12789] x_tables: duplicate underflow at hook 1
[  246.828243][T12803] net_ratelimit: 4 callbacks suppressed
[  246.828262][T12803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.919248][T12806] tipc: Resetting bearer <eth:syzkaller0>
[  246.923227][T12806] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  247.107470][T12814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  247.144043][T12815] __nla_validate_parse: 73 callbacks suppressed
[  247.144062][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'.
[  247.150000][T12815] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2201'.
[  247.168712][T12815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2201'.
[  247.171924][T12815] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2201'.
[  247.259374][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'.
[  247.428921][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'.
[  247.435404][T12840] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2208'.
[  247.442333][T12839] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2208'.
[  247.446079][T12839] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2208'.
[  247.453233][T12839] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.519895][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'.
[  247.556302][T12842] hsr_slave_1 (unregistering): left promiscuous mode
[  250.500314][T12909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.549071][T12915] delete_channel: no stack
[  250.621559][T12919] validate_nla: 2 callbacks suppressed
[  250.621574][T12919] netlink: 'syz.1.2239': attribute type 1 has an invalid length.
[  250.761983][T12928] lo speed is unknown, defaulting to 1000
[  250.818314][T12933] dvmrp1: tun_chr_ioctl cmd 1074025677
[  250.821401][T12933] dvmrp1: linktype set to 773
[  251.856513][T12966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.908504][T12970] netlink: 'syz.0.2256': attribute type 1 has an invalid length.
[  252.007141][T12976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.035175][T12983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.083783][T12986] block nbd0: must specify backend
[  252.190979][T12996] __nla_validate_parse: 40 callbacks suppressed
[  252.190996][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'.
[  252.196832][T12996] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2264'.
[  252.328953][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2269'.
[  252.400388][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'.
[  252.404552][T13014] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2271'.
[  252.413884][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'.
[  252.417560][T13015] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2270'.
[  252.427669][T13015] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.516368][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'.
[  252.520096][T13018] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2272'.
[  252.527264][T13017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2272'.
[  252.533992][T13017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.979092][T13034] netlink: 'syz.1.2278': attribute type 1 has an invalid length.
[  253.005046][T13034] smc: adding net device bond0 with user defined pnetid SYZ2
[  253.011327][T13034] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.054582][T13034] lo speed is unknown, defaulting to 1000
[  253.099678][T13037] bond0: (slave ip6erspan0): making interface the new active one
[  253.104480][T13037] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link
[  253.109522][T13034] netlink: 'syz.1.2278': attribute type 1 has an invalid length.
[  253.370030][T13049] netlink: 'syz.1.2281': attribute type 1 has an invalid length.
[  253.477061][T13058] openvswitch: netlink: Tunnel attr 7 has unexpected len 4 expected 0
[  253.529210][T13062] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  253.673947][T13066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.773328][T13079] netlink: 'syz.1.2290': attribute type 13 has an invalid length.
[  253.776208][T13079] netlink: 'syz.1.2290': attribute type 17 has an invalid length.
[  253.802287][T13079] 8021q: adding VLAN 0 to HW filter on device team0
[  253.804656][T13079] tipc: Resetting bearer <eth:team0>
[  253.810060][T13079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.825541][T13076] netlink: 'syz.2.2289': attribute type 23 has an invalid length.
[  253.841116][T13077] netlink: 'syz.2.2289': attribute type 23 has an invalid length.
[  253.864523][T13079] lo speed is unknown, defaulting to 1000
[  253.925382][T13082] netlink: 'syz.2.2291': attribute type 1 has an invalid length.
[  254.259340][T13100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.312133][T13108] syzkaller1: entered promiscuous mode
[  254.313912][T13108] syzkaller1: entered allmulticast mode
[  254.458516][T13112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.572421][T13120] 8021q: adding VLAN 0 to HW filter on device bond5
[  254.597873][T13120] bond5: (slave veth7): Enslaving as an active interface with a down link
[  254.621799][T13120] vlan3: entered allmulticast mode
[  254.624019][T13120] veth1: entered allmulticast mode
[  254.626816][T13120] bond5: (slave vlan3): Opening slave failed
[  254.685254][T13119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.278791][T13132] syz.0.2306 (13132) used greatest stack depth: 18296 bytes left
[  255.776414][T13175] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  255.783368][T13175] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  255.787652][T13174] bridge0: port 1(gretap0) entered blocking state
[  255.790117][T13174] bridge0: port 1(gretap0) entered disabled state
[  255.797462][T13174] gretap0: entered allmulticast mode
[  255.806204][T13174] gretap0: entered promiscuous mode
[  255.814374][T13175] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  255.820478][T13175] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  255.834675][T13179] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  255.853196][T13179] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  255.876772][T13174] lo speed is unknown, defaulting to 1000
[  255.963904][T13189] validate_nla: 1 callbacks suppressed
[  255.963920][T13189] netlink: 'syz.1.2325': attribute type 1 has an invalid length.
[  256.122047][T13198] nbd: must specify an index to disconnect
[  256.125034][T13198] x_tables: duplicate underflow at hook 2
[  256.166544][T13198] xt_CT: No such helper "snmp"
[  256.777350][T13226] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.781636][T13226] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  256.783975][T13226] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  256.786625][T13226] tipc: Resetting bearer <eth:syzkaller0>
[  256.789803][T13226] netlink: 'syz.0.2337': attribute type 8 has an invalid length.
[  257.207368][T13263] __nla_validate_parse: 69 callbacks suppressed
[  257.207391][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'.
[  257.213185][T13263] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2347'.
[  257.218348][T13257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2347'.
[  257.221464][T13257] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2347'.
[  257.226176][T13257] net_ratelimit: 2 callbacks suppressed
[  257.226190][T13257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.465753][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'.
[  257.478005][T13274] geneve3: entered promiscuous mode
[  257.480325][T13274] geneve3: entered allmulticast mode
[  258.191719][T13286] tipc: Resetting bearer <eth:team0>
[  258.204655][T13286] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  258.219039][T13286] tipc: Resetting bearer <eth:team0>
[  258.222358][T13286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  258.707675][T13315] vxcan1: entered allmulticast mode
[  258.710336][T13315] vxcan1: left allmulticast mode
[  258.816739][T13318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  259.155132][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'.
[  259.158720][T13333] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2366'.
[  259.165295][T13332] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2366'.
[  259.169062][T13332] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2366'.
[  259.174435][T13332] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2366'.
[  259.773108][T13357] gretap0: left allmulticast mode
[  259.775213][T13357] gretap0: left promiscuous mode
[  259.777343][T13357] bridge0: port 1(gretap0) entered disabled state
[  259.802371][T13357] tipc: Resetting bearer <eth:syzkaller0>
[  259.807423][T13357] bond7: (slave veth9): Releasing active interface
[  260.654902][T13400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.957240][T13449] netlink: 'syz.1.2402': attribute type 11 has an invalid length.
[  261.989006][T13451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  262.128603][T13455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  262.376089][T13465] __nla_validate_parse: 24 callbacks suppressed
[  262.376104][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'.
[  262.382411][T13465] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2407'.
[  262.389137][T13464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2407'.
[  262.393148][T13464] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2407'.
[  262.536366][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2409'.
[  262.539915][T13472] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2409'.
[  262.546485][T13472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2409'.
[  262.549357][T13472] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2409'.
[  262.620046][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.723714][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'.
[  262.726504][T13481] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2412'.
[  262.734493][T13480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.853629][T13485] netlink: 'syz.1.2414': attribute type 1 has an invalid length.
[  262.933255][T13488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.089103][T13502] netlink: 'syz.0.2420': attribute type 11 has an invalid length.
[  263.107763][T13503] netlink: 'syz.1.2419': attribute type 2 has an invalid length.
[  263.244573][T13509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.615681][   T95] lo speed is unknown, defaulting to 1000
[  263.615745][ T5843] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  263.619077][   T95] syz2: Port: 1 Link DOWN
[  263.620776][ T5843] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.631046][ T5861] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  263.634338][ T5861] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.637510][ T5861] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  263.641117][ T5861] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.644370][ T5861] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  263.647765][ T5861] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.669549][T13525] lo speed is unknown, defaulting to 1000
[  264.280232][T13548] : entered promiscuous mode
[  264.449506][T13554] lo speed is unknown, defaulting to 1000
[  264.480620][T13556] lo speed is unknown, defaulting to 1000
[  266.017474][T13607] gretap0: entered promiscuous mode
[  266.033421][T13607] 0{X: renamed from gretap0
[  266.036795][T13607] 0{X: left promiscuous mode
[  266.039003][T13607] 0{X: entered allmulticast mode
[  266.041812][T13607] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  266.064226][T13609] xt_TPROXY: Can be used only with -p tcp or -p udp
[  266.067730][T13610] xt_TPROXY: Can be used only with -p tcp or -p udp
[  266.334921][T13625] bridge_slave_0: entered promiscuous mode
[  266.337762][T13625] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  266.897871][T13634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.049763][T13644] lo speed is unknown, defaulting to 1000
[  267.208943][T13648] syzkaller1: entered promiscuous mode
[  267.212693][T13648] syzkaller1: entered allmulticast mode
[  267.389201][T13655] __nla_validate_parse: 40 callbacks suppressed
[  267.389212][T13655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2466'.
[  267.447937][T13656] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2466'.
[  269.365040][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'.
[  269.369043][T13666] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2470'.
[  269.375281][T13665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2470'.
[  269.378125][T13665] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2470'.
[  270.386874][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'.
[  270.390232][T13694] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2476'.
[  270.405927][T13683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2476'.
[  270.409522][T13683] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2476'.
[  270.579519][T13712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.638854][   T33] audit: type=1800 audit(1753364011.048:5): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2489" name="memory.events" dev="tmpfs" ino=4784 res=0 errno=0
[  270.652286][T13724] tipc: Enabled bearer <eth:gre0>, priority 10
[  270.654916][   T33] audit: type=1804 audit(1753364011.048:6): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2489" name="/newroot/903/memory.events" dev="tmpfs" ino=4784 res=1 errno=0
[  270.983709][T13741] raw_sendmsg: syz.1.2490 forgot to set AF_INET. Fix it!
[  272.107708][T13757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  272.972428][T13781] __nla_validate_parse: 13 callbacks suppressed
[  272.972443][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2505'.
[  273.071441][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'.
[  273.074571][T13789] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2507'.
[  273.081529][T13786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2507'.
[  273.084585][T13786] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2507'.
[  273.088320][T13786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.153587][T13795] bridge0: the hash_elasticity option has been deprecated and is always 16
[  273.156887][T13795] bridge0: entered allmulticast mode
[  273.199232][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'.
[  273.203044][T13800] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2512'.
[  273.207755][T13800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2512'.
[  273.211009][T13800] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2512'.
[  273.373690][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'.
[  273.386294][T13808] netlink: 'syz.2.2515': attribute type 1 has an invalid length.
[  273.389537][T13808] netlink: 'syz.2.2515': attribute type 2 has an invalid length.
[  273.461525][T13816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.603678][T13824] openvswitch: netlink: IPv4 tun info is not correct
[  273.620102][T13827] netlink: 'syz.1.2520': attribute type 1 has an invalid length.
[  273.766084][T13841] netlink: 'syz.1.2524': attribute type 1 has an invalid length.
[  273.769221][T13841] netlink: 'syz.1.2524': attribute type 2 has an invalid length.
[  273.906532][T13852] geneve4: entered promiscuous mode
[  273.909847][ T5861] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  273.914118][ T5861] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  273.918362][ T5861] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  273.922636][ T5861] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  273.966379][T13856] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.199980][T13875] netlink: 'syz.0.2536': attribute type 2 has an invalid length.
[  274.714631][T13912] netlink: 'syz.1.2547': attribute type 6 has an invalid length.
[  275.156636][T13943] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  275.160743][T13943] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  275.626300][T13972] openvswitch: netlink: Flow key attr not present in new flow.
[  275.927798][T13987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.436899][T14012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.547282][T14017] tipc: Resetting bearer <eth:team0>
[  276.785296][T14028] block nbd0: NBD_DISCONNECT
[  276.787224][T14028] block nbd0: Send disconnect failed -89
[  276.794834][T14028] block nbd0: Disconnected due to user request.
[  276.797540][T14028] block nbd0: shutting down sockets
[  276.920319][T14037] vlan3: entered promiscuous mode
[  276.923178][T14037] gretap0: entered promiscuous mode
[  277.178796][T14044] netlink: 'syz.1.2585': attribute type 64 has an invalid length.
[  278.029704][T14054] __nla_validate_parse: 79 callbacks suppressed
[  278.029717][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2587'.
[  278.036279][T14054] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2587'.
[  278.042729][T14054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.948018][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'.
[  278.951198][T14058] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2588'.
[  278.956688][T14057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2588'.
[  278.959631][T14057] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2588'.
[  278.977466][T14057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.054973][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'.
[  279.057962][T14061] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2589'.
[  279.064043][T14060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2589'.
[  279.067230][T14060] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2589'.
[  279.595481][T14078] tipc: Failed to remove unknown binding: 66,1,1/134418688:2870522599/2870522601
[  279.762470][T14083] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  279.843209][T14087] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  280.547705][T14142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.271345][T14188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.646914][T14195] lo speed is unknown, defaulting to 1000
[  282.051328][T14203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.105840][T14206] netlink: 'syz.1.2634': attribute type 3 has an invalid length.
[  282.120436][T14206] tipc: New replicast peer: 0.0.0.0
[  282.123489][T14206] tipc: Enabled bearer <udp:syz2>, priority 10
[  282.126804][T14206] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  282.796551][T14234] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  282.964892][T14238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.227792][T14253] __nla_validate_parse: 48 callbacks suppressed
[  283.227803][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'.
[  283.426805][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'.
[  283.430210][T14274] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2655'.
[  283.435991][T14274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2655'.
[  283.438825][T14274] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2655'.
[  283.442347][T14274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.497836][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2658'.
[  283.502511][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2658'.
[  283.506224][T14283] netlink: 'syz.0.2658': attribute type 1 has an invalid length.
[  283.509246][T14283] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2658'.
[  283.535487][T14282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2659'.
[  283.538512][T14282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2659'.
[  284.063039][T14319] batadv1: entered promiscuous mode
[  284.064759][T14319] batadv1: entered allmulticast mode
[  284.849877][T14333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.936918][T14337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.252893][T14360] netlink: 'syz.1.2681': attribute type 1 has an invalid length.
[  285.256142][T14351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.384248][T14371] x_tables: ip_tables: osf match: only valid for protocol 6
[  285.558277][T14377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.598435][T14381] netlink: 'syz.1.2690': attribute type 1 has an invalid length.
[  285.798422][T14392] netlink: 'syz.0.2693': attribute type 23 has an invalid length.
[  286.197212][T14405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.611979][T14431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  286.717508][T14438] macvtap0: refused to change device tx_queue_len
[  286.719602][T14438] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  287.792818][T14491] netlink: 'syz.2.2727': attribute type 1 has an invalid length.
[  288.058039][T14507] netlink: 'syz.2.2732': attribute type 4 has an invalid length.
[  288.128400][   T33] audit: type=1800 audit(1753364028.538:7): pid=14513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2734" name="x000000000000000900000000000000000000011" dev="tmpfs" ino=4637 res=0 errno=0
[  288.392547][T14527] block nbd0: NBD_DISCONNECT
[  288.394513][T14527] block nbd0: Send disconnect failed -89
[  288.396906][T14527] block nbd0: Disconnected due to user request.
[  288.399412][T14527] block nbd0: shutting down sockets
[  288.491907][T14531] __nla_validate_parse: 68 callbacks suppressed
[  288.491927][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'.
[  288.498435][T14531] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2736'.
[  288.526773][T14529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2736'.
[  288.530315][T14529] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2736'.
[  288.644157][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2739'.
[  288.651015][T14541] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2739'.
[  288.669540][T14538] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2739'.
[  288.673728][T14538] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2739'.
[  288.679423][T14538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.092316][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'.
[  289.095119][T14559] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2744'.
[  289.101829][T14559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.303338][T14572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.346889][T14573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.389328][T14586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.855574][T14613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.261830][T14628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.282181][T14629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.393291][T14638] netlink: 'syz.2.2773': attribute type 1 has an invalid length.
[  290.572189][T14648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.966924][T14675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  291.013813][T14677] netlink: 'syz.0.2786': attribute type 9 has an invalid length.
[  291.016354][T14677] netlink: 'syz.0.2786': attribute type 6 has an invalid length.
[  291.399950][T14687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  291.529923][T14696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  291.616396][T14699] veth0_to_team: entered promiscuous mode
[  291.618653][T14699] veth0_to_team: entered allmulticast mode
[  292.647933][T14708] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.653236][T14708] bond0: (slave rose0): Enslaving as an active interface with an up link
[  293.369896][T14731] lo speed is unknown, defaulting to 1000
[  293.375869][T14730] block nbd0: NBD_DISCONNECT
[  293.377752][T14730] block nbd0: Send disconnect failed -89
[  293.379915][T14730] block nbd0: Disconnected due to user request.
[  293.382999][T14730] block nbd0: shutting down sockets
[  294.315689][T14765] __nla_validate_parse: 48 callbacks suppressed
[  294.315699][T14765] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2810'.
[  294.324870][T14765] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2810'.
[  294.335934][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2811'.
[  294.338748][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2811'.
[  294.342751][T14767] netlink: 'syz.2.2811': attribute type 1 has an invalid length.
[  294.345932][T14767] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2811'.
[  294.527626][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2816'.
[  294.531849][T14782] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2816'.
[  294.590415][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'.
[  294.601348][T14784] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2814'.
[  294.648658][T14789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'.
[  294.665536][T14786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.764736][T14798] IPVS: length: 182 != 8
[  295.730794][T14824] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  295.969330][T14838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.275412][T14855] lo speed is unknown, defaulting to 1000
[  296.986525][T14887] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  296.990127][T14887] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  297.136824][T14896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  297.140024][T14896] IPv6: NLM_F_CREATE should be set when creating new route
[  297.142985][T14896] IPv6: NLM_F_CREATE should be set when creating new route
[  297.229346][T14902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  297.315608][T14906] netlink: 'syz.0.2859': attribute type 1 has an invalid length.
[  297.565113][T14916] netlink: 'syz.1.2861': attribute type 12 has an invalid length.
[  297.739799][T14936] bond0: (slave ip6erspan0): Releasing active interface
[  297.754485][T14934] delete_channel: no stack
[  297.763485][T14936] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  298.194789][T14973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.198086][T14977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.205705][T14975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.408123][T15002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  298.542440][T15014] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  298.925085][T15044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.274893][T15058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.315457][T15061] netlink: 'syz.1.2911': attribute type 3 has an invalid length.
[  299.412114][T15066] __nla_validate_parse: 126 callbacks suppressed
[  299.412125][T15066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2912'.
[  299.418084][T15066] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2912'.
[  299.625195][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2913'.
[  299.818361][T15087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2916'.
[  299.861116][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2917'.
[  299.866360][T15085] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2917'.
[  300.226805][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2918'.
[  300.230418][T15089] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2918'.
[  300.237316][T15089] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2918'.
[  300.243689][T15089] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2918'.
[  300.249489][T15089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.939690][T15116] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.943988][T15116] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  301.005589][T15116] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.008983][T15116] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  301.139139][T15116] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.143310][T15116] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  301.221294][T15116] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.225237][T15116] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  301.312100][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  301.316411][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  301.330253][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  301.334398][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  301.347981][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  301.352237][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  301.363070][ T5861] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  301.366320][ T5861] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  301.761336][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.764007][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.794940][T15149] block nbd0: NBD_DISCONNECT
[  301.796866][T15149] block nbd0: Send disconnect failed -89
[  301.800142][T15149] block nbd0: Disconnected due to user request.
[  301.803134][T15149] block nbd0: shutting down sockets
[  301.985293][T15165] netlink: 'syz.0.2945': attribute type 1 has an invalid length.
[  302.021730][T15165] 8021q: adding VLAN 0 to HW filter on device bond8
[  302.034478][T15165] veth11: entered promiscuous mode
[  302.039039][T15165] bond8: (slave veth11): Enslaving as a backup interface with a down link
[  302.044255][T15165] tipc: Resetting bearer <eth:gre0>
[  302.052757][T15165] tipc: Resetting bearer <eth:syzkaller0>
[  302.057298][T15165] bond8: (slave veth11): Releasing backup interface
[  302.261584][T15179] netlink: 'syz.0.2952': attribute type 1 has an invalid length.
[  302.527144][T15196] block nbd0: NBD_DISCONNECT
[  302.529111][T15196] block nbd0: Send disconnect failed -89
[  302.533558][T15196] block nbd0: Disconnected due to user request.
[  302.535529][T15196] block nbd0: shutting down sockets
[  302.781400][T15202] v: renamed from ip6_vti0
[  304.722782][T15210] __nla_validate_parse: 22 callbacks suppressed
[  304.722799][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'.
[  305.184263][T15226] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2968'.
[  305.187294][T15226] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2968'.
[  305.226533][T15229] netlink: 'syz.1.2969': attribute type 3 has an invalid length.
[  306.185804][T15249] netlink: 'syz.2.2975': attribute type 13 has an invalid length.
[  306.189294][T15249] netlink: 'syz.2.2975': attribute type 17 has an invalid length.
[  306.202306][T15249] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.207497][T15249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  306.213555][ T5930] lo speed is unknown, defaulting to 1000
[  306.215547][ T5930] syz2: Port: 1 Link ACTIVE
[  306.250056][T15249] lo speed is unknown, defaulting to 1000
[  306.296476][T15251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.356145][T15249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.370149][T15256] geneve5: entered promiscuous mode
[  306.373908][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.378035][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.382079][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.385484][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.471751][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'.
[  306.475669][T15260] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2979'.
[  306.568692][T15267] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  306.572909][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.575588][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.639673][T15267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2981'.
[  306.643322][T15267] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2981'.
[  306.910273][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2986'.
[  306.916908][T15282] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2986'.
[  306.955973][T15279] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2986'.
[  306.968933][T15279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.992629][T15290] netlink: 'syz.2.2990': attribute type 64 has an invalid length.
[  307.412096][T15326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.200167][T15344] lo speed is unknown, defaulting to 1000
[  308.645724][T15371] netlink: 'syz.2.3014': attribute type 1 has an invalid length.
[  309.417105][T15407] xt_hashlimit: size too large, truncated to 1048576
[  309.913450][T15413] lo speed is unknown, defaulting to 1000
[  310.381738][T15419] __nla_validate_parse: 33 callbacks suppressed
[  310.381753][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'.
[  310.387721][T15419] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3029'.
[  310.396445][T15418] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3029'.
[  310.399567][T15418] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3029'.
[  310.403134][T15418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.465317][T15423] xt_bpf: check failed: parse error
[  310.470217][T15423] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3031'.
[  310.501502][T15425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3032'.
[  310.592737][T15428] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3033'.
[  310.595674][T15428] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3033'.
[  311.360603][T15426] delete_channel: no stack
[  311.439054][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'.
[  311.480467][T15436] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3036'.
[  311.754061][T15447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.053664][T15465] xt_policy: output policy not valid in PREROUTING and INPUT
[  312.358557][T15478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.445446][T15484] block nbd0: NBD_DISCONNECT
[  312.446972][T15484] block nbd0: Send disconnect failed -89
[  312.448815][T15484] block nbd0: Disconnected due to user request.
[  312.451608][T15484] block nbd0: shutting down sockets
[  312.669135][T15502] sctp: [Deprecated]: syz.1.3058 (pid 15502) Use of int in maxseg socket option.
[  312.669135][T15502] Use struct sctp_assoc_value instead
[  313.042841][T15529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.069261][T15531] netlink: 'syz.2.3063': attribute type 4 has an invalid length.
[  313.127573][  T791] lo speed is unknown, defaulting to 1000
[  313.129618][  T791] syz2: Port: 1 Link DOWN
[  313.707390][T15542] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.713401][T15542] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  314.051352][T15572] netlink: 'syz.1.3078': attribute type 1 has an invalid length.
[  314.071345][T15572] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  314.165636][T15581] netlink: 'syz.2.3081': attribute type 1 has an invalid length.
[  314.446310][T15611] --map-set only usable from mangle table
[  314.448085][T15609] --map-set only usable from mangle table
[  314.814552][T15645] tipc: Resetting bearer <eth:syzkaller0>
[  314.822152][T15645] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  314.855521][T15643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.421176][T15666] __nla_validate_parse: 53 callbacks suppressed
[  315.421195][T15666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3105'.
[  315.427356][T15666] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3105'.
[  315.432619][T15666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.536945][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'.
[  315.540771][T15669] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3106'.
[  315.622986][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3108'.
[  315.647919][T15676] netlink: 'syz.0.3107': attribute type 1 has an invalid length.
[  315.748404][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'.
[  315.752437][T15683] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3110'.
[  315.759916][T15678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3110'.
[  315.767067][T15678] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3110'.
[  315.809531][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'.
[  316.445871][T15706] netlink: 'syz.0.3120': attribute type 20 has an invalid length.
[  317.637669][T15757] nbd: couldn't find a device at index 65546
[  317.659674][T15759] lo speed is unknown, defaulting to 1000
[  317.776679][T15759] netlink: 'syz.1.3139': attribute type 13 has an invalid length.
[  317.779147][T15759] netlink: 'syz.1.3139': attribute type 17 has an invalid length.
[  317.792008][T15759] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  318.317206][T15796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.454834][T15804] veth13: entered promiscuous mode
[  318.784780][T15828] lo speed is unknown, defaulting to 1000
[  318.876699][T15837] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  319.074877][T15844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.061091][T15878] lo speed is unknown, defaulting to 1000
[  320.687449][T15885] netlink: 'syz.2.3181': attribute type 3 has an invalid length.
[  320.750181][T15889] __nla_validate_parse: 54 callbacks suppressed
[  320.750202][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'.
[  320.761152][T15889] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3182'.
[  320.768177][T15889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3182'.
[  320.773078][T15889] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3182'.
[  320.778182][T15889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.835831][ T5836] Bluetooth: hci2: link tx timeout
[  320.837833][ T5836] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  321.194359][T15893] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  321.197839][T15893] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  322.054398][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'.
[  322.058141][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3194'.
[  322.064263][T15923] netlink: 'syz.2.3194': attribute type 1 has an invalid length.
[  322.067483][T15923] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3194'.
[  322.287369][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'.
[  322.293208][T15930] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3197'.
[  322.300464][T15930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3197'.
[  322.504523][T15943] netlink: 'syz.1.3202': attribute type 1 has an invalid length.
[  322.643389][T15955] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  322.747279][T15958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.792765][T15961] 8021q: VLANs not supported on team0
[  322.862892][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  323.003460][T15973] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  323.019831][T15973] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  323.337235][T15993] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.457902][T15996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.595178][T16001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.687466][T16008] netlink: 'syz.2.3225': attribute type 1 has an invalid length.
[  323.741598][T16010] netlink: 'syz.0.3226': attribute type 1 has an invalid length.
[  324.104875][T16026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.226234][T16040] netlink: 'syz.0.3235': attribute type 1 has an invalid length.
[  324.478200][T16054] block nbd0: NBD_DISCONNECT
[  324.480024][T16054] block nbd0: Send disconnect failed -89
[  324.482298][T16054] block nbd0: Disconnected due to user request.
[  324.484904][T16054] block nbd0: shutting down sockets
[  324.541261][T16056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.586766][T16058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.528652][T16083] netlink: 'syz.2.3249': attribute type 1 has an invalid length.
[  325.797340][T16090] __nla_validate_parse: 60 callbacks suppressed
[  325.797358][T16090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3252'.
[  325.803659][T16090] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3252'.
[  325.843244][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'.
[  325.846102][T16093] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3253'.
[  325.853278][T16093] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3253'.
[  325.856358][T16093] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3253'.
[  325.865764][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'.
[  326.118465][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3257'.
[  326.122461][T16101] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3257'.
[  326.129116][T16101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3257'.
[  326.137750][T16101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.171954][T16102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.369051][T16120] sctp: [Deprecated]: syz.2.3260 (pid 16120) Use of struct sctp_assoc_value in delayed_ack socket option.
[  326.369051][T16120] Use struct sctp_sack_info instead
[  326.393763][T16117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.748719][T16141] macvtap0: entered allmulticast mode
[  326.751178][T16141] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  326.755455][T16141] batman_adv: batadv0: Adding interface: macvtap0
[  326.758228][T16141] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1038) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.769052][T16141] batman_adv: batadv0: Interface activated: macvtap0
[  327.145577][T16157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.956494][T16239] netlink: 'syz.2.3300': attribute type 1 has an invalid length.
[  328.377430][T16266] netlink: 'syz.1.3309': attribute type 1 has an invalid length.
[  328.656661][T16279] net_ratelimit: 2 callbacks suppressed
[  328.656674][T16279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.828474][T16286] syzkaller1: tun_chr_ioctl cmd 1074025672
[  328.837393][T16286] syzkaller1: ignored: set checksum disabled
[  329.108933][T16304] netlink: 'syz.1.3321': attribute type 1 has an invalid length.
[  329.395488][T16316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.693721][T16342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.203025][T16362] lo speed is unknown, defaulting to 1000
[  330.914930][T16369] __nla_validate_parse: 57 callbacks suppressed
[  330.914954][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3343'.
[  330.927708][T16369] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3343'.
[  330.943860][T16368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3343'.
[  330.947787][T16368] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3343'.
[  331.616453][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'.
[  331.619997][T16396] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3352'.
[  331.629252][T16393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3352'.
[  331.634435][T16393] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3352'.
[  331.644435][T16393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.762458][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3354'.
[  331.771226][T16404] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3354'.
[  331.785142][T16400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.907563][T16468] Bluetooth: MGMT ver 1.23
[  333.324043][T16492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.594505][T16520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.022513][T16552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.144277][T16559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.473949][T16607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.575376][T16614] ipvlan2: entered promiscuous mode
[  335.577479][T16614] ipvlan2: entered allmulticast mode
[  335.579516][T16614] batadv0: entered allmulticast mode
[  335.588354][T16614] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  335.643905][T16620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.771888][T16638] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  335.862154][T16637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.985962][T16650] __nla_validate_parse: 53 callbacks suppressed
[  335.985981][T16650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3433'.
[  335.992078][T16650] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3433'.
[  335.998801][T16650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.008099][T16656] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  336.041798][T16659] netlink: 'syz.0.3436': attribute type 4 has an invalid length.
[  336.108588][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'.
[  336.159771][T16665] lo speed is unknown, defaulting to 1000
[  336.347828][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'.
[  336.353577][T16678] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3442'.
[  336.403130][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'.
[  336.407404][T16680] netlink: 'syz.2.3443': attribute type 1 has an invalid length.
[  336.409751][T16680] netlink: 'syz.2.3443': attribute type 1 has an invalid length.
[  336.414320][T16680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3443'.
[  336.693922][T16693] netlink: 'syz.2.3448': attribute type 12 has an invalid length.
[  336.696545][T16693] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3448'.
[  336.754727][T16697] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  336.958021][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3449'.
[  336.961099][T16700] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3449'.
[  337.019608][T16700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.786390][T16710] bond0 (unregistering): Released all slaves
[  337.960141][T16715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.445028][T16749] nbd: illegal input index 65508
[  339.489457][T16754] net_ratelimit: 2 callbacks suppressed
[  339.489476][T16754] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  339.547591][T16755] lo speed is unknown, defaulting to 1000
[  339.756040][T16766] netlink: 'syz.1.3472': attribute type 4 has an invalid length.
[  339.785033][T16766] syzkaller1: tun_chr_ioctl cmd 1074025672
[  339.787545][T16766] syzkaller1: ignored: set checksum enabled
[  340.633264][T16805] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.444283][T16807] netlink: 'syz.1.3486': attribute type 83 has an invalid length.
[  342.062544][T16814] __nla_validate_parse: 38 callbacks suppressed
[  342.062558][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3489'.
[  342.067935][T16814] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3489'.
[  342.074629][T16814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3489'.
[  342.077839][T16814] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3489'.
[  342.084216][T16814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.388875][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3494'.
[  342.392685][T16826] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3494'.
[  342.398920][T16825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3494'.
[  342.402510][T16825] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3494'.
[  342.529262][T16834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3498'.
[  342.535710][T16834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3498'.
[  342.657899][T16839] lo speed is unknown, defaulting to 1000
[  342.694367][T16842] macvlan3: entered allmulticast mode
[  342.696482][T16842] veth1_vlan: entered allmulticast mode
[  342.755822][   T33] audit: type=1800 audit(1753364083.158:8): pid=16847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3503" name=66FFFF dev="tmpfs" ino=6424 res=0 errno=0
[  342.822528][T16838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.504453][T16872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.094556][T16876] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  344.100797][T16876] Bluetooth: MGMT ver 1.23
[  344.230291][T16883] xt_CT: No such helper "syz0"
[  344.343786][T16888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.422034][T16903] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  344.821639][T16919] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  344.920234][T16922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.081313][T16927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.258130][T16937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.272678][T16939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.484492][T16967] netlink: 'syz.0.3541': attribute type 1 has an invalid length.
[  345.523135][T16967] bond9: entered promiscuous mode
[  345.525006][T16967] 8021q: adding VLAN 0 to HW filter on device bond9
[  345.573369][T16967] 8021q: adding VLAN 0 to HW filter on device bond10
[  345.584141][T16967] bond9: (slave bond10): making interface the new active one
[  345.586525][T16967] bond10: entered promiscuous mode
[  345.588890][T16967] bond9: (slave bond10): Enslaving as an active interface with an up link
[  345.607213][   T95] IPVS: starting estimator thread 0...
[  345.692353][T16983] IPVS: using max 64 ests per chain, 153600 per kthread
[  345.706736][T16986] block nbd0: NBD_DISCONNECT
[  345.709836][T16986] block nbd0: Send disconnect failed -89
[  345.716630][T16986] block nbd0: Disconnected due to user request.
[  345.733833][T16986] block nbd0: shutting down sockets
[  345.795937][T16994] IPVS: Unknown mcast interface: wg0
[  346.151118][ T5836] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  346.154903][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  346.406766][T17030] lo speed is unknown, defaulting to 1000
[  346.442795][T17031] netlink: 'syz.2.3560': attribute type 13 has an invalid length.
[  346.449886][T17031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  346.456011][ T5930] lo speed is unknown, defaulting to 1000
[  346.461955][ T5930] syz2: Port: 1 Link ACTIVE
[  346.645048][T17038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.229627][T17070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.242606][T17070] tipc: Resetting bearer <eth:syzkaller0>
[  347.433320][T17077] __nla_validate_parse: 63 callbacks suppressed
[  347.433342][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3574'.
[  347.439529][T17077] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3574'.
[  347.449812][T17076] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3574'.
[  347.454357][T17076] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3574'.
[  347.503754][T17079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3575'.
[  347.507972][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3575'.
[  347.511711][T17079] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3575'.
[  347.516189][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3575'.
[  347.695405][T17084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3577'.
[  347.698885][T17084] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3577'.
[  347.703585][T17084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.800992][T17087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.948042][T17093] netlink: 'syz.0.3580': attribute type 29 has an invalid length.
[  347.952740][T17093] netlink: 'syz.0.3580': attribute type 29 has an invalid length.
[  348.149848][T17100] tipc: Resetting bearer <eth:gre0>
[  348.162172][T17100] batman_adv: batadv0: Interface deactivated: macvtap0
[  348.164342][T17100] batman_adv: batadv0: Removing interface: macvtap0
[  348.169705][T17100] bond9: (slave bond10): Releasing backup interface
[  348.172239][T17100] bond10: left promiscuous mode
[  348.497457][T17102] netlink: 'syz.2.3583': attribute type 10 has an invalid length.
[  348.766830][T17111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.080141][T17155] netlink: 'syz.0.3597': attribute type 1 has an invalid length.
[  350.330205][T17187] netlink: 'syz.2.3609': attribute type 1 has an invalid length.
[  350.551592][T17195] netlink: 'syz.1.3612': attribute type 2 has an invalid length.
[  350.557762][T17195] netlink: 'syz.1.3612': attribute type 10 has an invalid length.
[  350.692790][T17202] lo speed is unknown, defaulting to 1000
[  351.203823][T17208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.399289][T17218] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  351.403413][T17218] tipc: Resetting bearer <eth:syzkaller0>
[  351.490836][T17218] nbd0: detected capacity change from 0 to 127
[  351.522868][T16308] block nbd0: Receive control failed (result -32)
[  351.698799][T17236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.903904][T17246] openvswitch: netlink: Multiple metadata blocks provided
[  352.733612][T17278] __nla_validate_parse: 39 callbacks suppressed
[  352.733629][T17278] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3634'.
[  352.739870][T17278] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3634'.
[  352.947682][T17284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3636'.
[  352.952555][T17284] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3636'.
[  353.416451][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3637'.
[  353.419358][T17297] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3637'.
[  353.425535][T17287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3637'.
[  353.428499][T17287] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3637'.
[  353.605501][T17306] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3642'.
[  353.619443][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'.
[  353.663224][T17305] netlink: 'syz.1.3643': attribute type 1 has an invalid length.
[  353.766068][T17312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  353.846858][T17314] lo speed is unknown, defaulting to 1000
[  353.909983][T17321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.919130][T17316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.153475][T17333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.282083][T17339] netlink: 'syz.2.3653': attribute type 1 has an invalid length.
[  354.505247][T17346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.644702][T17349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.752367][T17355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.945043][T17368] netlink: 'syz.2.3661': attribute type 1 has an invalid length.
[  354.958617][T17369] netlink: 'syz.0.3662': attribute type 1 has an invalid length.
[  355.027915][T17371] ip6tnl2: entered promiscuous mode
[  355.030741][T17371] ip6tnl2: entered allmulticast mode
[  355.150941][T17375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.255071][T17388] netlink: 'syz.0.3667': attribute type 4 has an invalid length.
[  355.393454][T17403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  355.396298][T17403] IPv6: NLM_F_CREATE should be set when creating new route
[  355.398747][T17403] IPv6: NLM_F_CREATE should be set when creating new route
[  355.401058][T17403] IPv6: NLM_F_CREATE should be set when creating new route
[  356.229615][T17457] veth0: entered promiscuous mode
[  356.250430][T17457] veth0 (unregistering): left promiscuous mode
[  356.429574][T17463] net_ratelimit: 3 callbacks suppressed
[  356.429591][T17463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.543230][T17477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.623271][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  357.005967][T17494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.504303][T17525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  357.752124][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.886028][T17553] __nla_validate_parse: 88 callbacks suppressed
[  357.886044][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3720'.
[  357.890935][T17553] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3720'.
[  357.896424][T17548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3720'.
[  357.899567][T17548] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3720'.
[  357.899735][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3721'.
[  357.911713][T17554] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3721'.
[  357.938640][T17550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3721'.
[  357.941618][T17550] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3721'.
[  357.962092][T17558] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3724'.
[  357.966279][T17559] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3724'.
[  358.007582][T17566] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  358.119391][T17579] ip6gretap0: entered promiscuous mode
[  358.171213][   T95] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  358.269310][T17584] nbd: must specify an index to disconnect
[  358.559902][T17603] lo speed is unknown, defaulting to 1000
[  358.585205][   T95] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  358.632650][T17604] lo speed is unknown, defaulting to 1000
[  358.863118][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  359.019085][T17627] nbd: must specify a device to reconfigure
[  359.212125][T17641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.349278][T17650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  359.594069][T17676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.835154][T17692] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  359.839089][T17692] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  359.903046][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  359.906796][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  359.931317][ T5296] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  360.202656][T17720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.366154][T17737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.735263][T17768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.942702][T17781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.425877][T17828] batadv_slave_0: entered promiscuous mode
[  361.441661][T17828] batadv_slave_0: left promiscuous mode
[  362.097872][T17889] net_ratelimit: 2 callbacks suppressed
[  362.097882][T17889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.164782][T17895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  362.177015][T17897] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  362.311504][T17915] tipc: Enabled bearer <udp:syz2>, priority 10
[  363.135980][T17953] __nla_validate_parse: 145 callbacks suppressed
[  363.135997][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3837'.
[  363.141840][T17953] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3837'.
[  363.459806][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3838'.
[  363.468292][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3838'.
[  363.852501][T17958] delete_channel: no stack
[  363.858638][T17958] tipc: New replicast peer: 255.255.255.255
[  363.862273][T17958] tipc: Enabled bearer <udp:syz2>, priority 10
[  363.971099][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3840'.
[  363.974719][T17965] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3840'.
[  363.980400][T17962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3840'.
[  363.983777][T17962] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3840'.
[  363.987543][T17962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.990785][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.087289][T17979] netlink: 'syz.1.3844': attribute type 12 has an invalid length.
[  364.089856][T17979] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3844'.
[  364.097462][T17979] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3844'.
[  364.217564][T17985] netlink: 'syz.2.3847': attribute type 2 has an invalid length.
[  366.560008][T18055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.595224][T18057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.601098][T18061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.703701][T18063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.905427][T18072] netlink: 'syz.0.3875': attribute type 1 has an invalid length.
[  366.930179][T18072] 8021q: adding VLAN 0 to HW filter on device bond11
[  366.942436][T18072] bond11: (slave gretap0): making interface the new active one
[  366.946527][T18072] bond11: (slave gretap0): Enslaving as an active interface with an up link
[  367.054449][T18075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.183982][T18086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.267193][T18088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.338004][T18098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  367.390451][T18100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.605196][T18108] openvswitch: netlink: Message has 4 unknown bytes.
[  368.072488][T18123] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  368.150126][T18133] __nla_validate_parse: 75 callbacks suppressed
[  368.150139][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3896'.
[  368.166670][T18133] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3896'.
[  368.174872][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3896'.
[  368.180795][T18138] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3896'.
[  368.195253][T18128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3896'.
[  368.198904][T18128] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3896'.
[  368.246504][T18147] netlink: 'syz.0.3901': attribute type 13 has an invalid length.
[  368.253035][T18147] netlink: 'syz.0.3901': attribute type 17 has an invalid length.
[  368.256939][T18147] tipc: Resetting bearer <eth:gre0>
[  368.259029][T18147] 0{X: refused to change device tx_queue_len
[  368.261562][T18147] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  368.269338][T18147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3901'.
[  368.272866][T18147] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3901'.
[  368.394311][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3902'.
[  368.397879][T18152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3903'.
[  368.405409][T18152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.413550][T18153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.509192][T18159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.569569][T18167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.775067][T18184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.898885][T18270] vlan0: left allmulticast mode
[  369.901866][ T5296] page_pool_release_retry() stalled pool shutdown: id 64, 1 inflight 60 sec
[  369.909338][T18270] bond0: left allmulticast mode
[  369.927023][T18260] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  370.606030][T18340] xt_recent: Unsupported userspace flags (00000048)
[  370.613290][   T33] audit: type=1800 audit(1753364111.028:9): pid=18339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3960" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6813 res=0 errno=0
[  370.714850][T18347] veth0_vlan: entered allmulticast mode
[  370.717008][T18347] 6: renamed from vlan1
[  370.999612][T18371] netlink: 'syz.1.3968': attribute type 1 has an invalid length.
[  371.113117][T18382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  371.614428][T18425] netlink: 'syz.0.3989': attribute type 1 has an invalid length.
[  371.661050][T18425] bond12: (slave gretap2): making interface the new active one
[  371.664786][T18425] bond12: (slave gretap2): Enslaving as an active interface with an up link
[  371.949750][ T5843] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.953741][ T5843] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.956823][ T5843] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.959851][ T5843] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.460726][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  372.578100][T18477] netlink: 'syz.1.4003': attribute type 2 has an invalid length.
[  374.895605][T18504] __nla_validate_parse: 94 callbacks suppressed
[  374.895617][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4013'.
[  374.900321][T18504] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4013'.
[  374.906851][T18503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4013'.
[  374.909676][T18503] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4013'.
[  374.913684][T18503] net_ratelimit: 9 callbacks suppressed
[  374.913694][T18503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.234217][T18519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  375.272570][T18521] netlink: 'syz.0.4020': attribute type 2 has an invalid length.
[  375.378845][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4021'.
[  375.381652][T18524] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4021'.
[  375.386766][T18523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4021'.
[  375.389570][T18523] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4021'.
[  375.944651][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4023'.
[  375.947783][T18536] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4023'.
[  375.994172][T18541] netlink: 'syz.2.4027': attribute type 2 has an invalid length.
[  376.097362][T18549] smc: removing net device bond0 with user defined pnetid SYZ2
[  376.100001][T18549] bond0 (unregistering): Released all slaves
[  376.202760][T18556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  376.351547][T18564] netlink: 'syz.2.4037': attribute type 4 has an invalid length.
[  376.474004][T18577] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  376.481674][T18568] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.522341][T18575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.896673][T18619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  376.915085][T18621] netlink: 'syz.1.4060': attribute type 12 has an invalid length.
[  376.990063][T18623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.139251][T18634] netlink: 'syz.1.4062': attribute type 1 has an invalid length.
[  377.167621][T18634] smc: adding net device bond0 with user defined pnetid SYZ2
[  377.337946][T18643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.892518][T18676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.997548][T18684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  378.016727][T18679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.224064][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  378.224491][T18715] IPv6: NLM_F_REPLACE set, but no existing node found!
[  378.309892][T18713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.438645][T18730] xfrm2: entered promiscuous mode
[  378.444314][T18730] xfrm2: entered allmulticast mode
[  378.451269][T18730] tipc: Enabling of bearer <eth:macvtap0> rejected, max 3 bearers permitted
[  378.517733][T18736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  379.430168][T18779] 8021q: VLANs not supported on team0
[  379.449682][T18783] netlink: 'syz.2.4115': attribute type 2 has an invalid length.
[  379.527445][T18788] netlink: 'syz.2.4117': attribute type 2 has an invalid length.
[  379.633125][T18796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  379.636128][T18796] IPv6: NLM_F_CREATE should be set when creating new route
[  379.639028][T18796] IPv6: NLM_F_CREATE should be set when creating new route
[  379.755555][T18800] hsr_slave_1 (unregistering): left promiscuous mode
[  379.788122][T18805] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  379.792798][T18805] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  379.796501][T18805] tipc: Resetting bearer <eth:syzkaller0>
[  379.920455][T18816] __nla_validate_parse: 103 callbacks suppressed
[  379.920466][T18816] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4127'.
[  379.967655][T18822] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4128'.
[  380.014393][T18825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4127'.
[  380.096068][T18831] netlink: 'syz.1.4131': attribute type 3 has an invalid length.
[  380.099222][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'.
[  380.120401][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4129'.
[  380.123887][T18832] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4129'.
[  380.130068][T18827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4129'.
[  380.134093][T18827] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4129'.
[  380.139543][T18827] net_ratelimit: 1 callbacks suppressed
[  380.139556][T18827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.145568][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4130'.
[  380.149092][T18834] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4130'.
[  380.353749][T18846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  381.105778][T18854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  381.220482][T18861] netlink: 'syz.0.4140': attribute type 9 has an invalid length.
[  381.609600][T18873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.433160][T18919] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003
[  382.626015][T18924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.874149][T18949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.233527][T18963] netlink: 'syz.2.4172': attribute type 1 has an invalid length.
[  383.237864][T18963] netlink: 'syz.2.4172': attribute type 1 has an invalid length.
[  383.340867][    C0] ==================================================================
[  383.344056][    C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  383.347119][    C0] Read of size 2 at addr ffff88802e3dac2a by task swapper/0/0
[  383.350764][    C0] 
[  383.352096][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  383.352115][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  383.352124][    C0] Call Trace:
[  383.352131][    C0]  <IRQ>
[  383.352139][    C0]  dump_stack_lvl+0x189/0x250
[  383.352160][    C0]  ? rcu_is_watching+0x15/0xb0
[  383.352177][    C0]  ? __kasan_check_byte+0x12/0x40
[  383.352199][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  383.352214][    C0]  ? rcu_is_watching+0x15/0xb0
[  383.352229][    C0]  ? lock_release+0x4b/0x3e0
[  383.352245][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  383.352264][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  383.352282][    C0]  print_report+0xca/0x230
[  383.352295][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  383.352308][    C0]  kasan_report+0x118/0x150
[  383.352327][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  383.352343][    C0]  rose_timer_expiry+0x471/0x4b0
[  383.352358][    C0]  call_timer_fn+0x17e/0x5f0
[  383.352372][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  383.352384][    C0]  ? call_timer_fn+0xbe/0x5f0
[  383.352397][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  383.352414][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  383.352435][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  383.352448][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  383.352460][    C0]  __run_timer_base+0x61a/0x860
[  383.352480][    C0]  ? ktime_get+0x3e/0x1f0
[  383.352501][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  383.352520][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  383.352545][    C0]  run_timer_softirq+0xb7/0x180
[  383.352565][    C0]  handle_softirqs+0x286/0x870
[  383.352584][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  383.352601][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  383.352617][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  383.352647][    C0]  __irq_exit_rcu+0xca/0x1f0
[  383.352662][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  383.352681][    C0]  irq_exit_rcu+0x9/0x30
[  383.352694][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  383.352716][    C0]  </IRQ>
[  383.352721][    C0]  <TASK>
[  383.352727][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  383.352769][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  383.352783][    C0] Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 0d 18 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  383.352797][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  383.352811][    C0] RAX: c515195e636b5900 RBX: ffffffff81976a48 RCX: c515195e636b5900
[  383.352822][    C0] RDX: 0000000000000001 RSI: ffffffff8d99f40a RDI: ffffffff8be28c40
[  383.352832][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  383.352843][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa22cf0
[  383.352853][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  383.352864][    C0]  ? do_idle+0x1e8/0x510
[  383.352883][    C0]  default_idle+0x13/0x20
[  383.352899][    C0]  default_idle_call+0x74/0xb0
[  383.352914][    C0]  do_idle+0x1e8/0x510
[  383.352932][    C0]  ? __pfx_do_idle+0x10/0x10
[  383.352952][    C0]  cpu_startup_entry+0x44/0x60
[  383.352968][    C0]  rest_init+0x2de/0x300
[  383.352984][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  383.353002][    C0]  start_kernel+0x47d/0x500
[  383.353022][    C0]  x86_64_start_reservations+0x24/0x30
[  383.353036][    C0]  x86_64_start_kernel+0x143/0x1c0
[  383.353049][    C0]  common_startup_64+0x13e/0x147
[  383.353076][    C0]  </TASK>
[  383.353081][    C0] 
[  383.483437][    C0] Allocated by task 18606:
[  383.485205][    C0]  kasan_save_track+0x3e/0x80
[  383.487059][    C0]  __kasan_kmalloc+0x93/0xb0
[  383.488943][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  383.491068][    C0]  __genradix_ptr_alloc+0x352/0x4a0
[  383.493119][    C0]  __genradix_prealloc+0x44/0x90
[  383.495080][    C0]  sctp_stream_init+0x14b/0x440
[  383.497017][    C0]  sctp_association_new+0x10dd/0x25f0
[  383.499137][    C0]  sctp_connect_new_asoc+0x2c5/0x690
[  383.501227][    C0]  __sctp_connect+0x5ba/0xd50
[  383.503149][    C0]  sctp_getsockopt_connectx3+0x2c4/0x440
[  383.505372][    C0]  sctp_getsockopt+0x98a/0xb60
[  383.507269][    C0]  do_sock_getsockopt+0x372/0x450
[  383.509267][    C0]  __x64_sys_getsockopt+0x1a5/0x250
[  383.511331][    C0]  do_syscall_64+0xfa/0x3b0
[  383.513141][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.515436][    C0] 
[  383.516393][    C0] Freed by task 18606:
[  383.518010][    C0]  kasan_save_track+0x3e/0x80
[  383.519851][    C0]  kasan_save_free_info+0x46/0x50
[  383.521827][    C0]  __kasan_slab_free+0x62/0x70
[  383.523687][    C0]  kfree+0x18e/0x440
[  383.525234][    C0]  genradix_free_recurse+0x5d/0xa0
[  383.527222][    C0]  genradix_free_recurse+0x5d/0xa0
[  383.529269][    C0]  sctp_stream_free+0xd5/0x110
[  383.531115][    C0]  sctp_association_free+0x26d/0x7f0
[  383.533180][    C0]  sctp_do_sm+0x3eba/0x5a20
[  383.534980][    C0]  sctp_primitive_SHUTDOWN+0x98/0xc0
[  383.537061][    C0]  sctp_close+0x409/0x900
[  383.538788][    C0]  inet_release+0x144/0x190
[  383.540558][    C0]  sock_close+0xc3/0x240
[  383.542302][    C0]  __fput+0x44c/0xa70
[  383.543887][    C0]  task_work_run+0x1d4/0x260
[  383.545739][    C0]  get_signal+0x11ed/0x1340
[  383.547528][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  383.549708][    C0]  exit_to_user_mode_loop+0x75/0x110
[  383.551823][    C0]  do_syscall_64+0x2bd/0x3b0
[  383.553635][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.555974][    C0] 
[  383.556936][    C0] The buggy address belongs to the object at ffff88802e3dac00
[  383.556936][    C0]  which belongs to the cache kmalloc-512 of size 512
[  383.562307][    C0] The buggy address is located 42 bytes inside of
[  383.562307][    C0]  freed 512-byte region [ffff88802e3dac00, ffff88802e3dae00)
[  383.567592][    C0] 
[  383.568544][    C0] The buggy address belongs to the physical page:
[  383.571066][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e3da400 pfn:0x2e3d8
[  383.574985][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  383.578276][    C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  383.581548][    C0] page_type: f5(slab)
[  383.583160][    C0] raw: 00fff00000000240 ffff88801a441c80 ffffea0000c32210 ffffea0000891210
[  383.586545][    C0] raw: ffff88802e3da400 000000000010000a 00000000f5000000 0000000000000000
[  383.589904][    C0] head: 00fff00000000240 ffff88801a441c80 ffffea0000c32210 ffffea0000891210
[  383.593181][    C0] head: ffff88802e3da400 000000000010000a 00000000f5000000 0000000000000000
[  383.596424][    C0] head: 00fff00000000002 ffffea0000b8f601 00000000ffffffff 00000000ffffffff
[  383.599688][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  383.603020][    C0] page dumped because: kasan: bad access detected
[  383.605534][    C0] page_owner tracks the page as allocated
[  383.607794][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5837, tgid 5837 (syz-executor), ts 68064911591, free_ts 68039938157
[  383.616205][    C0]  post_alloc_hook+0x240/0x2a0
[  383.618104][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  383.620290][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  383.622571][    C0]  alloc_pages_mpol+0x232/0x4a0
[  383.624503][    C0]  allocate_slab+0x8a/0x3b0
[  383.626309][    C0]  ___slab_alloc+0xbfc/0x1480
[  383.628138][    C0]  __kmalloc_noprof+0x305/0x4f0
[  383.629809][    C0]  fib6_info_alloc+0x30/0xf0
[  383.631590][    C0]  ip6_route_info_create+0x142/0x860
[  383.633656][    C0]  ip6_route_add+0x49/0x1b0
[  383.635465][    C0]  inet6_addr_add+0x6b2/0xc00
[  383.637307][    C0]  inet6_rtm_newaddr+0x93d/0xd20
[  383.639247][    C0]  rtnetlink_rcv_msg+0x7cf/0xb70
[  383.641205][    C0]  netlink_rcv_skb+0x208/0x470
[  383.643106][    C0]  netlink_unicast+0x82f/0x9e0
[  383.645007][    C0]  netlink_sendmsg+0x805/0xb30
[  383.646900][    C0] page last free pid 5837 tgid 5837 stack trace:
[  383.648963][    C0]  __free_frozen_pages+0xc71/0xe70
[  383.650911][    C0]  stack_depot_save_flags+0x445/0x900
[  383.652975][    C0]  kasan_save_track+0x4f/0x80
[  383.654414][    C0]  __kasan_slab_alloc+0x6c/0x80
[  383.655896][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  383.657906][    C0]  fdb_create+0x1b8/0x14c0
[  383.659647][    C0]  fdb_add_local+0x128/0x250
[  383.661487][    C0]  br_fdb_change_mac_address+0x12d/0x570
[  383.663738][    C0]  br_stp_change_bridge_id+0xb7/0x3d0
[  383.665846][    C0]  br_set_mac_address+0x195/0x2b0
[  383.667823][    C0]  netif_set_mac_address+0x2fc/0x4c0
[  383.669869][    C0]  do_setlink+0x88c/0x41c0
[  383.671574][    C0]  rtnl_newlink+0x160b/0x1c70
[  383.673400][    C0]  rtnetlink_rcv_msg+0x7cf/0xb70
[  383.675272][    C0]  netlink_rcv_skb+0x208/0x470
[  383.677168][    C0]  netlink_unicast+0x82f/0x9e0
[  383.679007][    C0] 
[  383.679958][    C0] Memory state around the buggy address:
[  383.682148][    C0]  ffff88802e3dab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  383.685291][    C0]  ffff88802e3dab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  383.688321][    C0] >ffff88802e3dac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  383.691334][    C0]                                   ^
[  383.693349][    C0]  ffff88802e3dac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  383.696398][    C0]  ffff88802e3dad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  383.699509][    C0] ==================================================================
[  383.702770][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  383.705590][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  383.710263][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  383.714208][    C0] Call Trace:
[  383.715534][    C0]  <IRQ>
[  383.716692][    C0]  dump_stack_lvl+0x99/0x250
[  383.718553][    C0]  ? __asan_memcpy+0x40/0x70
[  383.720387][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  383.722445][    C0]  ? __pfx__printk+0x10/0x10
[  383.724300][    C0]  panic+0x2db/0x790
[  383.725901][    C0]  ? __pfx_panic+0x10/0x10
[  383.727667][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  383.730021][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  383.732360][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  383.734857][    C0]  ? print_memory_metadata+0x314/0x400
[  383.737038][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  383.739180][    C0]  check_panic_on_warn+0x89/0xb0
[  383.741222][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  383.743256][    C0]  end_report+0x78/0x160
[  383.744735][    C0]  kasan_report+0x129/0x150
[  383.746134][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  383.748078][    C0]  rose_timer_expiry+0x471/0x4b0
[  383.750192][    C0]  call_timer_fn+0x17e/0x5f0
[  383.752098][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  383.754111][    C0]  ? call_timer_fn+0xbe/0x5f0
[  383.755774][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  383.757666][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  383.759732][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  383.761378][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  383.763000][    C0]  __run_timer_base+0x61a/0x860
[  383.764530][    C0]  ? ktime_get+0x3e/0x1f0
[  383.765890][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  383.767495][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  383.769547][    C0]  run_timer_softirq+0xb7/0x180
[  383.771368][    C0]  handle_softirqs+0x286/0x870
[  383.773201][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  383.775088][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  383.777192][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  383.779264][    C0]  __irq_exit_rcu+0xca/0x1f0
[  383.781106][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  383.783158][    C0]  irq_exit_rcu+0x9/0x30
[  383.784869][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  383.787067][    C0]  </IRQ>
[  383.788231][    C0]  <TASK>
[  383.789301][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  383.791642][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  383.793841][    C0] Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 0d 18 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  383.801241][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  383.803616][    C0] RAX: c515195e636b5900 RBX: ffffffff81976a48 RCX: c515195e636b5900
[  383.806729][    C0] RDX: 0000000000000001 RSI: ffffffff8d99f40a RDI: ffffffff8be28c40
[  383.809775][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  383.812863][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa22cf0
[  383.815949][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  383.818992][    C0]  ? do_idle+0x1e8/0x510
[  383.820659][    C0]  default_idle+0x13/0x20
[  383.822377][    C0]  default_idle_call+0x74/0xb0
[  383.824250][    C0]  do_idle+0x1e8/0x510
[  383.825906][    C0]  ? __pfx_do_idle+0x10/0x10
[  383.827759][    C0]  cpu_startup_entry+0x44/0x60
[  383.829627][    C0]  rest_init+0x2de/0x300
[  383.831314][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  383.833524][    C0]  start_kernel+0x47d/0x500
[  383.835338][    C0]  x86_64_start_reservations+0x24/0x30
[  383.837490][    C0]  x86_64_start_kernel+0x143/0x1c0
[  383.839525][    C0]  common_startup_64+0x13e/0x147
[  383.841492][    C0]  </TASK>
[  383.843401][    C0] Kernel Offset: disabled
[  383.845121][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:35:23  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007470
R8 =ffff8881084b8237 R9 =1ffff11021097046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff8d2 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f26dce0efc8 CR3=0000000027f42000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6a37586478 00007f6a37586450 XMM03=00007f6a37586488 00007f6a37586480
XMM04=00007f6a380ed100 00007f6a37586440 XMM05=00007f6a37586458 00007f6a375864a0
XMM06=00007f6a37586498 00007f6a37586490 XMM07=00007f6a37586488 00007f6a37586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f6a37411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b1e71759ba7d9500 RBX=ffffffff81976a48 RCX=b1e71759ba7d9500 RDX=0000000000000001
RSI=ffffffff8d99f40a RDI=ffffffff8be28c40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa22cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b7024f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005607c584a000 CR3=000000001f648000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=a200005900000000 06e0ff806047840a
XMM02=0000002000000089 7f0f0000ca0356bc XMM03=ede5c700ffff5bff 0903000000ff0101
XMM04=000000000000005e ede5c700ffff5bff XMM05=0903000000ff0101 0000002000000089
XMM06=7f0f0000ca0356bc a200005900000000 XMM07=06e0ff806047840a 568c0dfdea4b0009
XMM08=a8145e19c4b74409 8ae5fc137fbacfff XMM09=0000000000000000 00007f8256611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
