last executing test programs:

3.583151894s ago: executing program 1 (id=6744):
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x1, 0x8, 0x22, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x10, 0x9}})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000003000000000001"], 0xfdef)

3.44762357s ago: executing program 1 (id=6746):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})
socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
close(r2)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c060000)
unshare(0x22020600)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$inet(r8, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805)
splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0)
bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r5, 0x0)
connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r9, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.567221457s ago: executing program 1 (id=6755):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x10}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x841)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', <r4=>0x0})
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1c, 0x10001, 0x5, 0x0, 0x28002, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xc, 0x0, 0x7, 0x5, 0x14000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x9, 0x22, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffe91, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @exit, @ldst={0x0, 0x2, 0x2, 0x5, 0x7, 0xfffffffffffffffc, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0xfaf88b42170b04ff, 0x0, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x1, 0xd03e, 0x7ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700)=[0xffffffffffffffff, r6, r7, 0x1, 0x1, r8, r9, 0xffffffffffffffff, r10], &(0x7f0000000740)=[{0x5, 0x5, 0x2, 0x4}, {0x2, 0x2, 0x2, 0xa}, {0x0, 0x1, 0x2, 0x4}, {0x1, 0x1, 0xf, 0x5}], 0x10, 0x7}, 0x94)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xf, 0x10, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x573e}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@generic={0x8, 0x6, 0xb, 0xac, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000940)=""/4096, 0x41000, 0x2, '\x00', r4, @cgroup_device=0x6, r5, 0x8, &(0x7f0000001940)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001980)={0x2, 0x1, 0x7, 0x80}, 0x10, 0xffffffffffffffff, r11, 0x1, 0x0, &(0x7f00000019c0)=[{0x2, 0x2, 0x9, 0xa}], 0x10, 0x5}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001ac0)={<r14=>r13, 0x6, 0x12c84d05, 0xd})
ioctl$HCIINQUIRY(r14, 0x800448f0, &(0x7f0000001b00)={0x1, 0x9, "e79b33", 0x9, 0xd})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b40)={<r15=>0xffffffffffffffff})
r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r12)
sendmsg$DEVLINK_CMD_RATE_GET(r14, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x4c, r16, 0x100, 0x70bd26, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x11)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001d00)={r9, r12, 0x0, r12}, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000001e00)={&(0x7f0000001d40), 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x24, r16, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c001}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r14, 0x8982, &(0x7f0000001e40)={0x2, 'gre0\x00', {0x4}, 0x5})
ioctl$TUNSETFILTEREBPF(r14, 0x800454e1, &(0x7f0000001e80)=r14)
socket$netlink(0x10, 0x3, 0x10)
sendto$packet(r12, &(0x7f0000001ec0)="005fa9e221145fb11948396ed594713236a1c0334d42a62fd83e133e38ba8d42eff940de1fdcf2b01ded9c184f1eb2341327f50e448a73236ddb7a3027d3832224524074586f82b9c6b914d970b038744a3110cbff415d14e3c60092cfd05c49152116", 0x63, 0x4800, &(0x7f0000001f40)={0x11, 0x9, r4, 0x1, 0x95}, 0x14)
getsockopt(r15, 0x9, 0xf94, &(0x7f0000001f80), &(0x7f0000001fc0))
write$tun(r12, &(0x7f0000002000)={@void, @val={0x3, 0x80, 0x2, 0x0, 0x8001, 0x7fff}, @llc={@snap={0x0, 0xaa, "217f", "0ded7e", 0x892f, "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"}}}, 0x1013)
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000003040)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000003140)=0xe8)

2.497749959s ago: executing program 1 (id=6756):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c060000)
unshare(0x22020600)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
pipe(&(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$inet(r6, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805)
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r2, 0x0)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00000003c0)={0x18, 0x0, {0x3, @broadcast, 'dvmrp1\x00'}})
connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031300048008000240000000120800014000000000140003006e657464657673696d30"], 0xac}}, 0x0)
close(r2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
connect$unix(r10, &(0x7f0000000180)=@abs, 0x6e)
sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES16=r7, @ANYRES16=r2, @ANYBLOB="030f0000000000000000070000000a0002800800020000000000040004000100008008000100050000000800010000000000b2fe0100000000c8eeda85792af50000000000"], 0x44}}, 0x20008014)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r12}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a001629032c1f8724d1000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r3, @ANYRES16=r9, @ANYRES32=r13, @ANYRESDEC=r7, @ANYRESOCT=r8, @ANYBLOB="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"/395, @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC=r10], 0x34}, 0x1, 0x0, 0x0, 0x2000}, 0x6000c098)

2.448590541s ago: executing program 1 (id=6757):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000000000))
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0))
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2, 0x0)

2.387561155s ago: executing program 1 (id=6758):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000040)="ac4a099c74c2314011217039118367cf4970b69a8c33a22c162164808b8b9f766b5ac3ab8d02d11fcd7f1ae24545f119ef7dfaf30877c13b70e103acfb6811ea2375703719e381f3004a246ed87d41112b4b106a2e6f1f6f75fab785c802a2de50db1e342373", 0x66)
splice(r1, 0x0, r0, 0x0, 0x30fea7, 0xa)

417.285077ms ago: executing program 0 (id=6779):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x40045)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xa0, 0x3, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xffffffffffffff2f, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc00}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4044801}, 0x54)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="01eafc"], 0x7)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x6)
getsockopt$ax25_int(r5, 0x101, 0x2, 0x0, &(0x7f0000000040))
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYBLOB="0000080008000100ac1e0101080004"], 0x2c}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000"/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r9, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20)
accept$alg(r1, 0x0, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r10, r11}, 0xc)
recvmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000380)=""/32, 0x20}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f00000005c0)=""/207, 0xcf}], 0x8, &(0x7f00000003c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40010000)

347.260477ms ago: executing program 0 (id=6781):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
write(r4, &(0x7f00000001c0)="b40ab29f61", 0x5)
splice(r0, 0x0, r4, 0x0, 0x25a5, 0x0)
pipe(&(0x7f0000000040)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async)
write(r4, &(0x7f00000001c0)="b40ab29f61", 0x5) (async)
splice(r0, 0x0, r4, 0x0, 0x25a5, 0x0) (async)

277.661406ms ago: executing program 2 (id=6782):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfcdb, 0x0, 0x0, 0x0, 0x6}, [@generic={0x3, 0xf, 0xb, 0x19d, 0x8dc}]}, &(0x7f0000000040)='syzkaller\x00', 0xfdf6, 0x37, &(0x7f0000000080)=""/55, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xa, 0xc0}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000180)=[{0x0, 0x5, 0x7}, {0x0, 0x4, 0xb, 0x6}, {0x5, 0x2, 0xf}, {0x2, 0x3, 0x10, 0x2}, {0x0, 0x3, 0xf}, {0x2, 0x2, 0xa}, {0x1, 0x3, 0x4, 0x6}, {0x0, 0x3, 0x4, 0x1}, {0x3, 0x4, 0xe, 0x9}], 0x10, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4)
write(r1, &(0x7f0000000340)="a64db8812356eb15305a40aa0f7fecc5bbfdc5c8c158e80969bb", 0x1a)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r2}, 0xba8, 0x7fffffff, 0x80000000})
sendfile(r2, r0, &(0x7f00000003c0)=0x7, 0x1)
r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @default}, [@default, @netrom, @rose, @netrom, @null, @netrom, @default]}, &(0x7f0000000480)=0x48, 0x800)
ioctl$SIOCNRDECOBS(r3, 0x89e2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e20, @private=0xa010101}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x54, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_to_hsr\x00'})
getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x308)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000640)=r6, 0x4)
ioctl$sock_bt_hci(r6, 0x400448ca, &(0x7f0000000680)="a3c373")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', <r8=>0x0, 0x2f, 0x17, 0x6, 0x4, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x0, 0x1}})
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x7, 0x7, 0x44328, 0x1, 0x3, '\x00', r8, r6, 0x0, 0x3, 0x2}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz1\x00', 0x1ff)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2c}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$isdn(0x22, 0x3, 0x33)
r9 = accept4$ax25(r6, &(0x7f00000009c0)={{0x3, @default}, [@null, @netrom, @netrom, @bcast, @bcast, @null, @default, @rose]}, &(0x7f0000000a40)=0x48, 0x80000)
accept$ax25(r9, &(0x7f0000000a80)={{0x3, @rose}, [@remote, @bcast, @default, @netrom, @bcast, @default, @rose, @default]}, &(0x7f0000000b00)=0x48)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r10, &(0x7f0000000b40)={0x2, 0x4e24, @multicast1}, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmsg$unix(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0x6e, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x12020)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x2cba, '\x00', r8, r11, 0x2, 0x4, 0x5}, 0x50)

275.442976ms ago: executing program 2 (id=6783):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x4e4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRESHEX=r1], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

188.316878ms ago: executing program 2 (id=6784):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x30fea7, 0xa)

187.883359ms ago: executing program 0 (id=6785):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000004100)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001880)="70041bf1af037f02b0e2a31763fb27cf170a0cd27c99482f8378cae752292bd667bda71457062f3643862b46a3fdbd08fdf88d29190d0d3b2169152152d200e10e5ad49d2128ee09fde9724fe910be868caf447520d9a4966303722e0c2d6b263aa9e1f0a2d0e49cfec999b07c3edcf0ef9ff9b97610a1e4412d1ceb10711e4319a9654f3706a3cde5736edf4f3a9df2220e0c360641e47005e95c79d8fb3ca617422afeb3db296bb43b877578df43055af0ce81ff56ef655dcd1f91234faa0095e640dae030805d40c0322b57e9ea", 0xcf}], 0x1, &(0x7f0000000f80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0)
splice(r2, 0x0, r0, 0x0, 0x2, 0xf0ff)

187.465825ms ago: executing program 2 (id=6786):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x400, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)

186.868581ms ago: executing program 0 (id=6787):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec"], 0x0}, 0x94) (async, rerun: 64)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x10) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
unshare(0x60480) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x31, 0x0, 0x0, 0x8000}, 0x50) (rerun: 64)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r2, 0x4}, 0x38) (async)
socket$inet6(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, r0}, 0x50) (rerun: 32)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r3}, 0x38) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1, 0x0, 0x203}, 0xfffffffffffffea2) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000200000085000000a000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000050000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000295"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) (async, rerun: 32)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, 0x0, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) (async, rerun: 32)
r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) (rerun: 32)
close(r9) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)

101.921992ms ago: executing program 0 (id=6788):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r1 = socket$inet6(0xa, 0x5, 0x3)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={<r2=>0x0, 0xc3be, 0x3}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x7e, 0x200, 0x2, 0x4, 0x412, 0x2, 0x2, 0x2, r2}, &(0x7f0000000140)=0x20)
close(r1)
r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
getsockname$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x10)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000200)=0x1d, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000240)=0x1, 0x4)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
r6 = getpid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8)
r8 = getgid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000cc0)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000dc0)=0xe8)
sendmsg$netlink(r5, &(0x7f0000000e40)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc, &(0x7f0000000b40)=[{&(0x7f00000002c0)={0x12c, 0x2f, 0x1, 0x70bd26, 0x25dfdbfd, "", [@nested={0x10, 0x5a, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x13}]}, @nested={0x11, 0x89, 0x0, 0x1, [@generic="3e573115151f7609ec3c2be720"]}, @generic="3fb57eb29168a0ee10788fe99a49ba16a50f053aa8c1267e74c1b42b61c99dbe2c4dc0482f9ca1550ceccc9ef4f5fec5be4f53e2ed9ffd6adda340df42e904bf4cc2c8d6675709a4e8663ecb4d5a5d84d33566428989b81a7624e19756be81c3d5bd8015832ebcd71576448fe7df5054a4a738023a1b18e2f9a832fc2c1f6565b72eeb19d0293c861efb79fb10ab637e2a148932ab9649f8061c0b54f9744102502531215f7c6e5bee2adcce6fad033f983d1b6a80aba3986291ff50521f2abf7e7e1193d8c930392f1538d5a190c0363a8d458cf2d88031b9e810edd13344eed3cdf353e8e3189d6aa916aad258ee6260ef3ca5069e"]}, 0x12c}, {&(0x7f0000000400)={0x14c, 0x14, 0x200, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x134, 0x6, 0x0, 0x1, [@nested={0x4, 0x9e}, @nested={0x4, 0x93}, @generic="eda8f0707afa271bab1e078421fbd2d460cf223f96f28d97e0baf7ed1f6913d53dbc1c6f71a029a4406b02ec166aa89299390840dfa1a145", @typed={0x4, 0x2}, @generic="659c60e9ee5911796637ab98080fd0b914105624ccfe91a98e9038a38cb036b468ddab47de6a569306db91ee5a35e27cdf87f43c28a293f33856ab2bd16f69f1756f8787978cc6c648d6597262c52209b0006a10cfdf2774c9711e0983a85980923c7b7e4b4f652dcd3de18930d7ada9947ea6db8234485de11c64bbe227c225d485b16b4e07c19644f828f3a00b565f8af8ce04fa298b9cad51fc1f4b3b27316dce52f51b1bbf098d9f9def3cb5f7107cd40d4ee1d797b0de362567dc97a6df76b9a427ca5549de80f38911b5f5d91d2931010c7d21f6a1b358a7b8f8a958b5196c2a5b05da5e717b5d6cc7"]}]}, 0x14c}, {&(0x7f0000000580)={0x90, 0x1e, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @generic="a8faba69bf05d4c88a6c018b580f15ad82fa82398cae0e8d1a7a9a48340d730d0c52df1a1133cfa73b7dd3e71b89f9ba332dd6bfcd64e1ad6cd7062559d5328b704c4e8362f44ded7931ac9819d058e5fef6f3fd905f3d32dc4f026d28128f39b34b64828cf7543a5d72e7"]}, 0x90}, {&(0x7f0000000640)={0x4d0, 0x3c, 0x300, 0x70bd27, 0x25dfdbfe, "", [@nested={0xc, 0x10a, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4, 0x5}]}, @nested={0x1dc, 0x9a, 0x0, 0x1, [@generic="77fc142c2f61907c835e2d6087d7944b13b1c506529bf96f798ce468789c28b5833da8e6042f4dc2e01237cc70c96450f6df1e287a756651a6b2be1e6a495557926f627295b7a81e7d22f9fde5b5affda1a7cf28c46a2c09e8a915338d5818f501a1aee78a3a62da2ef3b8e986af7eb0dd2e21efbee910ef4649397d146a38837b73e81345a73df678fceabd", @generic="36b0fafe8a01f5dd139b98da9eb0e61475c417374f5589f9d921", @generic="bfcce1f51c4fb8db473e9cd8382326a9c6645d69e6ea62cb24edd1caa99f6bdbe7dd00459c68bb0014520c9a2560eb4f4a24bcc70ddb554861e7960c0103538ca484e69932b9999935e8c799c755fe11b85706e8a94f68f6c522378f890a036f20c82d1d5a7bf6", @generic="0ee179a3aa6888b945639e09cde0c55b28980c68c999608819fdc2d21f807eb40d83e747eece724f401df51ea9747158f65adab767b3f7887386589eec8468376b00c5361ba2559bcf1c28fdada98736e58a76af434b9d55037eb38b20e71efd58e5bcb07b4b49b13025e15db827db1568a70146acfdb1712ad3861ee660257197c80fbbebb24ed01fedc71ca2f9446bb4e2e8632347a03b3f248b729a31d28e16a8e8ae6812010801ee692a5b0abb6250cfa7e05fa37cae7fe763a11e8fa1e3ba35ac570b43e10c36d677"]}, @nested={0x8, 0x86, 0x0, 0x1, [@nested={0x4, 0x101}]}, @generic="8e11acf9296b6de5fdb774bfee02b271f9b2b769b3e8ad8f7fb8726498a0cfd7c065fa85097c68d581e0d265491f944e92124ba26e960587a9947ba2bbc15ea4eb7b14f71427beaa65fa17a79fd13d2100d5472438e421356708ba0dbc3e81d0571d14ea836dca1be5f9b4ef5ff396a37aeae7e3cded04004581a65e175a17bbe8c50a87bc5c7225166bc039f7f37ceb14ad0126050085329c42670e5ac065174707c8", @generic="907b17ce9015ea08b8d068fecdc1959744676471749c8bfd97b09fb83140c53a5a246b3569459ca097efc180b9df1d8b1a1af3cb519719e15e730eb532fb5a4bb46337dfd93232971448d3fc42e7d076b2dafe2cab5099c2b18902105902a456422fd535389944e29a9f706f07c948e247b5239990ade214ab79d5561b9d5316b3d17c50831c03037bb7b4c1aa97eec57d7d278d7af8c6346fdf724ed9587dc4de666f40a17ca50f4d0228d21446b1adc0f4922d94defc9ee2f57907bef073a0dbe6579e984418bfaea298853b6f657aac82e7f4da2d92095b1e5cbf4d85ec9bcec95c6d19b2c7e0", @typed={0x8, 0xbe, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@loopback}, @generic="42c6c1735da0ba8d215a2e6cf8b383ce564b06ab0e6c371af6be4241cc9d4afcea4ccf493405a337e5cbe6217922c41a25f517ebe0a0f2a69a3cd6b2f6305b7353ddc6df0fe43889b81940abd9d5cea7e9ed1d4a6218f2e90a037270f745b20e94b4bc0951c54134e4753e8814beecdd2047adf59ca7715e70f4a3ec02177469388d41b82827553d7f3e71a555b536862f730f465cc4eb9722c0c6cd", @nested={0x95, 0xcb, 0x0, 0x1, [@nested={0x4, 0x10e}, @generic="b2dc14d5cb3eb21e92beab07ec82e1af0fdca8307172d9212f5b9fca0230e4e8966f08920a44ebce4f2d63b95a244d2657ee31a761bb1bf123775ed70fd5742684dff258f9d6f5188642ebf0cb8f79be08c2c5827902dc66e3dc0045a159804891cb7ab4a5108f254a52f267722d49e1a925f8541ae8e3c242864d43a91344638a31fa102a", @nested={0x4, 0x12e}, @typed={0x4, 0xac}]}]}, 0x4d0}], 0x4, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xee01}}}], 0x40, 0x20004010}, 0x4000000)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "0a00de7ffa5793b80054b5e5c229adb1079fab84b60d186f7fcfc82d5cb481ca8373eda3b74d3b7a9889b9182feb2950b5230b8a3ba73146cc950537a50005e546d90683b28c9ef367f670f438dbce33"}, 0xd8)
pipe(&(0x7f0000000f80)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r12, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8048040)
ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000001100)={'vlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r11)
ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000001200)={0x5cd, 0x48, [0xfffffffffffff259, 0xec, 0x4, 0x9], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001240)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e22, @private=0xa010102}}}, 0x108)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001380), &(0x7f00000013c0)=0xc)
r13 = openat$cgroup_ro(r10, &(0x7f0000001400)='blkio.bfq.io_queued\x00', 0x0, 0x0)
sendto$netrom(r13, &(0x7f0000001440)="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", 0x1000, 0x40000c0, &(0x7f0000002440)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000024c0)={0x0, 'wg2\x00', {0x1}})

101.68252ms ago: executing program 2 (id=6789):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
splice(r2, 0x0, r4, 0x0, 0x3, 0x4)
syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
write(r3, &(0x7f00000001c0)="b40ab29f61", 0x5)
unshare(0x24020400)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'tunl0\x00'})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c00180002ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
close(r0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
r7 = socket$pptp(0x18, 0x1, 0x2)
splice(r1, 0x0, r7, 0x0, 0x4, 0xa)

404.195µs ago: executing program 2 (id=6790):
socket$qrtr(0x2a, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4)
getsockopt$packet_int(r2, 0x107, 0x11, 0x0, &(0x7f00000042c0))
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

0s ago: executing program 0 (id=6791):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000) (async, rerun: 64)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'})
r0 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) (async, rerun: 64)
sendmsg$kcm(r0, 0x0, 0x4) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 64)
bind$x25(0xffffffffffffffff, &(0x7f0000000200), 0x12) (rerun: 64)
bind$x25(r1, &(0x7f0000000080), 0x12) (async)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'bond0\x00'})

kernel console output (not intermixed with test programs):

an invalid length.
[  381.161158][T20056] x_tables: duplicate underflow at hook 1
[  381.204573][T20056] netlink: 'syz.0.3864': attribute type 5 has an invalid length.
[  381.240023][T20063] openvswitch: netlink: Flow key attribute not present in set flow.
[  381.244462][T20060] lo speed is unknown, defaulting to 1000
[  381.331612][T20063] smc: adding net device bond0 with user defined pnetid SYZ2
[  381.339611][T20063] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.350812][T20066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.271806][T20184] __nla_validate_parse: 60 callbacks suppressed
[  383.271829][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3903'.
[  383.278964][T20185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3903'.
[  383.282028][T20185] net_ratelimit: 4 callbacks suppressed
[  383.282037][T20185] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  383.287894][T20184] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  383.290725][T20185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.294029][T20184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.298253][T20185] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3903'.
[  383.302044][T20185] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3903'.
[  383.342551][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'.
[  383.346893][T20189] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3904'.
[  383.409113][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'.
[  383.412700][T20194] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3906'.
[  383.711225][T20210] lo speed is unknown, defaulting to 1000
[  383.870687][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'.
[  383.873882][T20219] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3913'.
[  383.880137][T20218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.080740][T20224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.350977][T20240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.398270][T20252] netlink: 'syz.1.3923': attribute type 10 has an invalid length.
[  384.401978][T20243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.402619][T20254] sctp: [Deprecated]: syz.0.3924 (pid 20254) Use of int in max_burst socket option.
[  384.402619][T20254] Use struct sctp_assoc_value instead
[  384.809080][T20285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.541064][T20348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.609034][T20406] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  386.907204][T20447] netlink: 'syz.0.3973': attribute type 1 has an invalid length.
[  387.204064][T20464] macvtap0: entered allmulticast mode
[  387.207708][T20464] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  387.213616][T20464] batman_adv: batadv0: Adding interface: macvtap0
[  387.219028][T20464] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1038) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.229053][T20464] batman_adv: batadv0: Interface activated: macvtap0
[  388.211578][T20511] netlink: 'syz.1.3993': attribute type 39 has an invalid length.
[  388.247528][T20512] syzkaller1: entered promiscuous mode
[  388.249485][T20512] syzkaller1: entered allmulticast mode
[  388.372749][T20521] netlink: 'syz.2.3995': attribute type 1 has an invalid length.
[  388.621708][T20538] __nla_validate_parse: 77 callbacks suppressed
[  388.621731][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3998'.
[  388.629267][T20538] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3998'.
[  388.641189][T20535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3998'.
[  388.644914][T20535] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3998'.
[  388.762224][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'.
[  388.766051][T20546] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4001'.
[  388.775090][T20546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4001'.
[  388.780256][T20546] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4001'.
[  388.785259][T20546] net_ratelimit: 2 callbacks suppressed
[  388.785278][T20546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.808520][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4003'.
[  388.812247][T20547] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4003'.
[  388.822163][T20545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.102125][T20558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.299251][T20567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  389.488870][T20577] team0: entered promiscuous mode
[  389.612366][T20577] team0 (unregistering): left promiscuous mode
[  389.636972][T20581] netlink: 'syz.1.4016': attribute type 2 has an invalid length.
[  389.833170][T20597] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  389.901862][T20605] netlink: 'syz.1.4024': attribute type 6 has an invalid length.
[  389.904865][T20605] netlink: 'syz.1.4024': attribute type 5 has an invalid length.
[  389.970810][T20602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.099368][T20616] --map-set only usable from mangle table
[  390.311482][T20628] vlan2: entered allmulticast mode
[  390.313548][T20628] bond10: entered allmulticast mode
[  390.363310][T20632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.482947][T20639] netlink: 'syz.2.4035': attribute type 1 has an invalid length.
[  390.511945][T20641] sctp: [Deprecated]: syz.1.4036 (pid 20641) Use of struct sctp_assoc_value in delayed_ack socket option.
[  390.511945][T20641] Use struct sctp_sack_info instead
[  390.664536][ T5866] IPVS: dh: FWM 3 0x00000003 - no destination available
[  390.903683][T20674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.092313][T20691] netlink: 'syz.2.4048': attribute type 9 has an invalid length.
[  391.698267][T20734] xt_TCPMSS: Only works on TCP SYN packets
[  391.803565][T20740] nbd: illegal input index 65508
[  392.778205][T20757] netlink: 'syz.2.4068': attribute type 1 has an invalid length.
[  393.084013][T20781] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  393.296996][T20795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.675061][T20823] __nla_validate_parse: 87 callbacks suppressed
[  393.675082][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4086'.
[  393.681967][T20823] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4086'.
[  393.691954][T20823] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4086'.
[  393.695060][T20823] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4086'.
[  394.159901][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4087'.
[  394.163629][T20825] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4087'.
[  394.170842][T20825] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4087'.
[  394.174677][T20825] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4087'.
[  394.180568][T20825] net_ratelimit: 2 callbacks suppressed
[  394.180583][T20825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.361386][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4089'.
[  394.364964][T20834] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4089'.
[  394.589186][T20854] lo speed is unknown, defaulting to 1000
[  394.735803][T20867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.769332][T20865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.934117][T20874] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  395.306999][T20896] bridge6: entered promiscuous mode
[  396.575150][T20933] netlink: 'syz.2.4114': attribute type 1 has an invalid length.
[  396.644694][T20933] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  396.845116][T20943] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  398.145139][T20998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  398.687931][T21010] __nla_validate_parse: 59 callbacks suppressed
[  398.687947][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4136'.
[  398.694180][T21010] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4136'.
[  398.973239][T21034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4143'.
[  398.977896][T21034] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4143'.
[  399.212161][T21043] sctp: [Deprecated]: syz.1.4145 (pid 21043) Use of struct sctp_assoc_value in delayed_ack socket option.
[  399.212161][T21043] Use struct sctp_sack_info instead
[  400.163146][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4149'.
[  400.171125][T21058] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4149'.
[  400.183462][T21058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4149'.
[  400.189473][T21058] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4149'.
[  400.196483][T21058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.205446][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4150'.
[  400.217144][T21060] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4150'.
[  400.246960][   T10] IPVS: dh: FWM 3 0x00000003 - no destination available
[  401.550979][T21106] netlink: 'syz.0.4160': attribute type 1 has an invalid length.
[  401.832581][T21127] netlink: 'syz.0.4167': attribute type 11 has an invalid length.
[  401.835947][T21127] netlink: 'syz.0.4167': attribute type 11 has an invalid length.
[  401.842850][T21127] netlink: 'syz.0.4167': attribute type 1 has an invalid length.
[  401.965415][T21131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.045034][T21136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.310927][T21157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.458317][T21161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.530949][T21166] netlink: 'syz.2.4180': attribute type 1 has an invalid length.
[  402.561900][T21166] veth13: entered promiscuous mode
[  402.570240][T21166] bond10: (slave veth13): Enslaving as a backup interface with a down link
[  402.968614][T21187] netlink: 'syz.1.4187': attribute type 1 has an invalid length.
[  402.999086][T21185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.115451][T21201] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  403.125038][T21201] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  403.352723][T21215] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  403.804980][T21239] __nla_validate_parse: 48 callbacks suppressed
[  403.804998][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'.
[  403.812474][T21239] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4200'.
[  403.855692][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4202'.
[  403.860269][T21241] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4202'.
[  403.872269][T21241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4202'.
[  403.876790][T21241] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4202'.
[  403.882860][T21241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.935261][T21243] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4203'.
[  405.049635][T21268] tc_dump_action: action bad kind
[  405.210473][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4211'.
[  405.214056][T21273] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4211'.
[  405.309072][T21280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4213'.
[  405.320188][T21280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.425375][T21282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.709956][T21292] netlink: 'syz.2.4218': attribute type 2 has an invalid length.
[  406.433258][T21336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.617981][T21354] netlink: 'syz.2.4233': attribute type 1 has an invalid length.
[  406.624081][T21354] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  406.745792][T21364] netlink: 'syz.0.4235': attribute type 15 has an invalid length.
[  406.760627][T21364] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  406.770756][T21364] gretap4: entered promiscuous mode
[  406.775057][T21364] gretap4: entered allmulticast mode
[  407.223858][T21389] lo speed is unknown, defaulting to 1000
[  407.438849][T21402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.511197][T21410] netlink: 'syz.2.4250': attribute type 4 has an invalid length.
[  407.525849][T21413] netlink: 'syz.2.4250': attribute type 4 has an invalid length.
[  407.688182][T21421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.952411][T21441] xt_CT: No such helper "snmp"
[  407.957014][T21441] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  408.344213][T21465] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.453659][T21468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.453740][T21469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.866044][T21494] __nla_validate_parse: 55 callbacks suppressed
[  408.866065][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4273'.
[  408.877309][T21494] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4273'.
[  408.877448][T21495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4274'.
[  408.883806][T21495] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4274'.
[  408.895529][T21489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4273'.
[  408.895605][T21496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4275'.
[  408.902558][T21491] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4274'.
[  408.907823][T21496] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4275'.
[  408.912853][T21491] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4274'.
[  408.918715][T21489] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4273'.
[  408.924686][T21489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.989482][T21498] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000
[  409.014648][T21502] dvmrp0: left allmulticast mode
[  409.072428][T21502] rdma_rxe: rxe_newlink: failed to add lo
[  410.059270][T21541] syzkaller1: entered promiscuous mode
[  410.061583][T21541] syzkaller1: entered allmulticast mode
[  410.069744][T21541] rdma_rxe: rxe_newlink: failed to add lo
[  410.454529][T21569] netlink: 'syz.2.4297': attribute type 4 has an invalid length.
[  410.655346][T21575] net_ratelimit: 2 callbacks suppressed
[  410.655366][T21575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.991983][T21596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.034736][T21601] netlink: 'syz.0.4306': attribute type 1 has an invalid length.
[  411.037846][T21601] netlink: 'syz.0.4306': attribute type 2 has an invalid length.
[  411.042527][T21601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  411.922278][T21607] xt_CT: No such helper "syz0"
[  412.111115][T21612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.347464][T21626] netlink: 'syz.0.4312': attribute type 3 has an invalid length.
[  412.350781][T21626] netlink: 'syz.0.4312': attribute type 1 has an invalid length.
[  412.353859][T21626] NCSI netlink: No device for ifindex 0
[  412.493359][T21628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.601513][T21631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.924115][T21651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.293416][T21672] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.348973][T21674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.455462][T21681] netlink: 'syz.0.4328': attribute type 3 has an invalid length.
[  413.460077][T21681] netlink: 'syz.0.4328': attribute type 3 has an invalid length.
[  413.475916][T21681] block nbd0: not configured, cannot reconfigure
[  413.620371][T21685] x_tables: unsorted underflow at hook 4
[  413.907770][T21703] __nla_validate_parse: 61 callbacks suppressed
[  413.907794][T21703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4334'.
[  413.915145][T21703] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4334'.
[  413.924380][T21699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4334'.
[  413.929373][T21699] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4334'.
[  413.934584][T21699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.045104][T21708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4336'.
[  414.049618][T21708] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4336'.
[  414.062477][T21708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4336'.
[  414.067970][T21708] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4336'.
[  414.264520][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4341'.
[  414.268657][T21725] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4341'.
[  414.523943][T21735] netlink: 'syz.0.4344': attribute type 12 has an invalid length.
[  414.903206][T21756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.652499][T21795] netlink: 'syz.2.4361': attribute type 4 has an invalid length.
[  415.771774][T21804] vcan0: entered allmulticast mode
[  416.242667][T21820] net_ratelimit: 1 callbacks suppressed
[  416.242694][T21820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.490156][T21829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.636745][T21839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  416.863418][T21841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.919163][T21844] SET target dimension over the limit!
[  416.959526][T21844] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  417.419804][T21873] nbd: must specify an index to disconnect
[  418.244466][T21942] netlink: 'syz.0.4400': attribute type 4 has an invalid length.
[  418.249761][T21942] netlink: 'syz.0.4400': attribute type 4 has an invalid length.
[  418.460480][T21952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.531102][T21955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.705499][T21959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.880443][T21971] xt_hashlimit: size too large, truncated to 1048576
[  419.008485][T21979] __nla_validate_parse: 76 callbacks suppressed
[  419.008504][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4411'.
[  419.017870][T21979] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4411'.
[  419.074873][T21987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4414'.
[  419.083192][T21987] netlink: 'syz.0.4414': attribute type 7 has an invalid length.
[  419.087011][T21987] netlink: 'syz.0.4414': attribute type 8 has an invalid length.
[  419.089839][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4414'.
[  419.100054][T21987] gretap0: entered promiscuous mode
[  419.102849][T21987] batadv_slave_1: entered promiscuous mode
[  419.105169][T21987] erspan0: entered promiscuous mode
[  419.108696][T21987] hsr0: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  419.112678][T21987] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  419.118046][T21987] hsr0: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  419.289490][T22002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4417'.
[  419.307196][T22002] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4417'.
[  419.323485][T22002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4417'.
[  419.328662][T22002] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4417'.
[  419.391557][T22004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4418'.
[  419.396049][T22004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4418'.
[  419.454342][   T10] IPVS: dh: FWM 3 0x00000003 - no destination available
[  419.983918][T22032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.265736][T22050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.268668][T22046] bond0: entered promiscuous mode
[  420.271052][T22046] bond0: entered allmulticast mode
[  420.338221][T22057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.533846][T22077] netlink: 'syz.2.4440': attribute type 2 has an invalid length.
[  421.618079][T22107] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  421.659667][T22110] netlink: 'syz.2.4449': attribute type 2 has an invalid length.
[  421.702829][   T33] audit: type=1800 audit(1753370194.330:9): pid=22112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4450" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8410 res=0 errno=0
[  421.732251][   T33] audit: type=1800 audit(1753370194.330:10): pid=22112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4450" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8410 res=0 errno=0
[  422.148239][T22142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.191203][T22146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.503261][T22158] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:21
[  423.154436][T22179] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002
[  423.168010][T22177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.284166][T22184] syzkaller1: entered promiscuous mode
[  423.287733][T22184] syzkaller1: entered allmulticast mode
[  423.292971][T22184] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  423.691044][T22196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.016883][T22212] __nla_validate_parse: 52 callbacks suppressed
[  424.016908][T22212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4477'.
[  424.026702][T22212] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4477'.
[  424.041506][T22209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4477'.
[  424.045436][T22209] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4477'.
[  424.175215][T22222] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4479'.
[  424.959204][T22225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4481'.
[  424.962087][T22225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4481'.
[  424.965085][T22225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4481'.
[  424.968331][T22225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4481'.
[  425.003524][T22227] xt_hashlimit: max too large, truncated to 1048576
[  425.006812][T22227] xt_hashlimit: overflow, rate too high: 0
[  425.401158][T22250] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  425.592105][T22254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4489'.
[  426.649976][T22282] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  426.734164][T22289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.795700][T22291] netlink: 'syz.2.4501': attribute type 2 has an invalid length.
[  427.057058][T22310] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  427.230213][T22319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.238569][T22325] lo speed is unknown, defaulting to 1000
[  427.912694][T22344] lo speed is unknown, defaulting to 1000
[  428.068372][T22354] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  428.330772][T22364] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  428.652324][T22372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.056580][   T10] IPVS: dh: FWM 3 0x00000003 - no destination available
[  429.348626][T22406] __nla_validate_parse: 68 callbacks suppressed
[  429.348651][T22406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4529'.
[  429.355191][T22406] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4529'.
[  429.429531][T22400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4529'.
[  429.433387][T22400] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4529'.
[  429.440886][T22400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.595799][T22423] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4535'.
[  429.603787][T22424] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4535'.
[  429.612132][T22422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4535'.
[  429.621653][T22422] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4535'.
[  429.641806][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4534'.
[  429.645637][T22425] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4534'.
[  429.700662][T22425] netlink: 'syz.2.4534': attribute type 1 has an invalid length.
[  429.713027][T22425] netlink: 'syz.2.4534': attribute type 2 has an invalid length.
[  430.078018][T22440] sch_fq: defrate 4294967295 ignored.
[  430.215224][T22442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.257680][T22454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.261884][T22452] syzkaller0: entered promiscuous mode
[  430.264159][T22452] syzkaller0: entered allmulticast mode
[  430.295064][T22452] tipc: Resetting bearer <eth:syzkaller0>
[  430.323364][T22452] tipc: Disabling bearer <eth:syzkaller0>
[  430.542311][T22467] IPv6: sit2: Disabled Multicast RS
[  431.190686][T22476] IPVS: Scheduler module ip_vs_sip not found
[  431.198665][T22476] IPVS: length: 8 != 446622349272
[  432.501494][T22498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.364413][T22538] netlink: 'syz.0.4568': attribute type 2 has an invalid length.
[  434.367554][T22538] netlink: 'syz.0.4568': attribute type 1 has an invalid length.
[  434.370125][T22538] netlink: 'syz.0.4568': attribute type 1 has an invalid length.
[  434.390421][T22539] __nla_validate_parse: 27 callbacks suppressed
[  434.390438][T22539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'.
[  434.399614][T22539] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4567'.
[  434.425425][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4568'.
[  434.429925][T22541] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4568'.
[  434.445911][T22538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4568'.
[  434.450117][T22538] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4568'.
[  434.502537][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4569'.
[  434.505544][T22546] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4569'.
[  434.516041][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4570'.
[  434.523067][T22543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4569'.
[  434.531200][T22543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.543397][T22545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.631930][T22551] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.770474][T22559] xt_CT: No such helper "snmp"
[  434.780182][T22559] xt_TCPMSS: Only works on TCP SYN packets
[  435.152814][T22584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.175134][T22588] lo speed is unknown, defaulting to 1000
[  435.518561][T22607] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001
[  435.641218][T22585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  435.773483][T22619] netlink: 'syz.1.4594': attribute type 7 has an invalid length.
[  435.787570][T22620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.877986][T22622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.982058][T22627] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  436.212064][T22635] netlink: 'syz.1.4599': attribute type 1 has an invalid length.
[  436.255236][T22635] 8021q: adding VLAN 0 to HW filter on device bond12
[  436.293451][T22637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.394601][T22641] pim6reg9: entered allmulticast mode
[  436.803942][T22668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.461671][T22695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.705510][T22709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.070670][T22729] syzkaller1: entered promiscuous mode
[  438.072647][T22729] syzkaller1: entered allmulticast mode
[  438.332525][T22742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.633034][T22759] SET target dimension over the limit!
[  438.635214][T22757] netlink: 'syz.2.4634': attribute type 21 has an invalid length.
[  438.645296][T22757] netlink: 'syz.2.4634': attribute type 4 has an invalid length.
[  438.648961][T22757] netlink: 'syz.2.4634': attribute type 5 has an invalid length.
[  438.656957][  T790] IPVS: dh: FWM 3 0x00000003 - no destination available
[  439.490826][T22801] __nla_validate_parse: 69 callbacks suppressed
[  439.490848][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4639'.
[  439.511167][T22801] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4639'.
[  439.546093][T22801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4639'.
[  439.552680][T22801] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4639'.
[  439.564675][T22801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.661087][T22811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.710193][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4641'.
[  439.713328][T22814] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4641'.
[  439.721005][T22814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.870218][T22828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4647'.
[  439.892400][T22835] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.921487][T22840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4648'.
[  439.941521][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  440.031686][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4651'.
[  440.035164][T22844] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4651'.
[  440.050863][T22845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.055298][T22844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.089797][T22842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  441.114737][T22871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  441.177488][T22874] netlink: 'syz.0.4660': attribute type 6 has an invalid length.
[  441.818060][T22910] netlink: 'syz.0.4670': attribute type 7 has an invalid length.
[  441.820610][T22910] netlink: 'syz.0.4670': attribute type 8 has an invalid length.
[  442.367557][T22928] TCP: TCP_TX_DELAY enabled
[  442.522847][T22940] lo speed is unknown, defaulting to 1000
[  443.401897][T22957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.405656][T22957] syzkaller0: entered promiscuous mode
[  443.410963][T22957] syzkaller0: entered allmulticast mode
[  443.444415][T22956] tipc: Resetting bearer <eth:syzkaller0>
[  443.471146][T22956] tipc: Disabling bearer <eth:syzkaller0>
[  443.732404][T22972] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.249888][T22996] netlink: 'syz.1.4694': attribute type 1 has an invalid length.
[  444.276876][T22996] bond13: entered promiscuous mode
[  444.278990][T22996] bond13: entered allmulticast mode
[  444.281584][T22996] 8021q: adding VLAN 0 to HW filter on device bond13
[  444.383002][T22996] tipc: Resetting bearer <eth:syzkaller0>
[  444.418574][T22996] batman_adv: batadv0: Interface deactivated: macvtap0
[  444.421980][T22996] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[  444.435022][   T10] lo speed is unknown, defaulting to 1000
[  444.438241][   T10] syz0: Port: 1 Link DOWN
[  444.439904][   T10] lo speed is unknown, defaulting to 1000
[  444.455756][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  444.465622][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  444.470974][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  444.474420][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  444.483832][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  444.488128][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  444.491502][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  444.495083][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  444.844746][T23013] xt_CT: No such helper "snmp"
[  444.853825][T23013] __nla_validate_parse: 57 callbacks suppressed
[  444.853839][T23013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4700'.
[  444.864877][T23013] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  444.869581][T23013] tipc: Enabled bearer <udp:syz1>, priority 10
[  444.953059][T23022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4702'.
[  444.955889][T23022] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4702'.
[  445.054466][T23030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4704'.
[  445.065418][T23030] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4704'.
[  445.193601][T23036] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4705'.
[  445.197896][T23036] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4705'.
[  445.369614][T23055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4709'.
[  445.373398][T23055] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4709'.
[  446.258355][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4711'.
[  446.531904][T23082] net_ratelimit: 3 callbacks suppressed
[  446.531917][T23082] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.918956][T23099] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode
[  446.931125][T23101] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  447.392195][T23134] bridge0: entered allmulticast mode
[  447.724652][T23151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.787865][T23159] netlink: 'syz.1.4740': attribute type 1 has an invalid length.
[  447.857388][T23163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  447.859800][T23163] IPv6: NLM_F_CREATE should be set when creating new route
[  447.862330][T23163] IPv6: NLM_F_CREATE should be set when creating new route
[  447.865155][T23163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  447.972501][T23168] netlink: 'syz.1.4743': attribute type 1 has an invalid length.
[  448.059708][T23176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.246969][  T790] IPVS: dh: FWM 3 0x00000003 - no destination available
[  448.683470][T23196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.955852][T23212] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.020781][T23216] x_tables: duplicate underflow at hook 2
[  450.011939][T23283] __nla_validate_parse: 61 callbacks suppressed
[  450.011957][T23283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4777'.
[  450.019846][T23283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4777'.
[  450.315570][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4781'.
[  450.320567][T23298] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4781'.
[  450.332207][T23297] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4781'.
[  450.335968][T23297] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4781'.
[  450.341570][T23297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.428324][T23302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4783'.
[  450.432014][T23302] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4783'.
[  450.475667][T23304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4784'.
[  450.483013][T23304] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4784'.
[  450.499185][T23304] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.754264][T23320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.819376][T23332] No such timeout policy "syz1"
[  451.883458][T23402] lo speed is unknown, defaulting to 1000
[  451.885939][T23402] lo speed is unknown, defaulting to 1000
[  451.913149][T23402] lo speed is unknown, defaulting to 1000
[  451.934228][T23402] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  451.947812][T23405] wg1: entered promiscuous mode
[  451.949885][T23405] wg1: entered allmulticast mode
[  451.979066][T23402] lo speed is unknown, defaulting to 1000
[  451.989074][T23404] net_ratelimit: 2 callbacks suppressed
[  451.989087][T23404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.012079][T23402] lo speed is unknown, defaulting to 1000
[  452.015655][T23402] lo speed is unknown, defaulting to 1000
[  452.155416][    C1] Unknown status report in ack skb
[  452.179653][T23421] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  452.186931][T23422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  453.542083][T23463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  453.748535][T23468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  453.863882][T23471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.203615][T23493] netlink: 'syz.0.4835': attribute type 4 has an invalid length.
[  454.338288][T23500] team_slave_1: entered promiscuous mode
[  454.401496][T23500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.454207][T23509] netlink: 'syz.1.4840': attribute type 14 has an invalid length.
[  454.458749][T23509] netlink: 'syz.1.4840': attribute type 13 has an invalid length.
[  454.513441][T23513] sctp: [Deprecated]: syz.1.4841 (pid 23513) Use of int in max_burst socket option deprecated.
[  454.513441][T23513] Use struct sctp_assoc_value instead
[  454.595420][T23520] tipc: Resetting bearer <eth:syzkaller0>
[  454.922621][T23528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.931790][T23532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.977888][T23534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.044258][T23546] __nla_validate_parse: 68 callbacks suppressed
[  455.044271][T23546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4853'.
[  455.059027][T23548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4851'.
[  455.067774][T23548] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4851'.
[  455.073809][T23546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4853'.
[  455.078055][T23546] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4853'.
[  455.233410][T23562] lo speed is unknown, defaulting to 1000
[  455.382139][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4860'.
[  455.385162][T23576] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4860'.
[  455.393445][T23576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4860'.
[  455.396679][T23576] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4860'.
[  455.400745][T23574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.425479][T23579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4861'.
[  455.451621][T23562] lo speed is unknown, defaulting to 1000
[  456.044224][T23596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.148275][T23604] 8021q: adding VLAN 0 to HW filter on device bond14
[  456.152925][T23604] team0: Port device bond14 added
[  456.472265][T23631] netlink: 'syz.1.4875': attribute type 1 has an invalid length.
[  456.837849][T23662] Cannot find add_set index 3 as target
[  457.091772][T23672] net_ratelimit: 2 callbacks suppressed
[  457.091784][T23672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.859389][  T790] IPVS: dh: FWM 3 0x00000003 - no destination available
[  457.980233][T23702] xt_TPROXY: Can be used only with -p tcp or -p udp
[  458.282692][T23704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.882662][T23730] netlink: 'syz.1.4908': attribute type 7 has an invalid length.
[  459.010314][T23740] netlink: 'syz.1.4910': attribute type 21 has an invalid length.
[  459.160976][T23745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.319800][T23748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.074322][T23763] __nla_validate_parse: 52 callbacks suppressed
[  460.074340][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4917'.
[  460.088639][T23763] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4917'.
[  460.101625][T23760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4917'.
[  460.105326][T23760] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4917'.
[  460.175212][T23767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4919'.
[  460.180491][T23767] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4919'.
[  460.188857][T23765] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4919'.
[  460.191973][T23765] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4919'.
[  460.199044][T23765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.301284][T23774] pim6reg1: entered promiscuous mode
[  460.303470][T23774] pim6reg1: entered allmulticast mode
[  460.323469][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4921'.
[  460.331417][T23775] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4921'.
[  460.337715][T23770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.450066][T23785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.494672][T23777] bond11 (unregistering): Released all slaves
[  460.572371][T23790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.992801][T23800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.013664][T23858] team0: Port device bond14 removed
[  462.042603][T23858] team0: Unable to change to the same mode the team is in
[  462.341338][T23887] net_ratelimit: 5 callbacks suppressed
[  462.341351][T23887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.402131][T23891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.423682][T23902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.550483][T23911] xt_hashlimit: size too large, truncated to 1048576
[  462.743399][T23926] rdma_rxe: rxe_newlink: failed to add lo
[  463.021390][T23943] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[  463.601479][T23960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.712226][T23967] netlink: 'syz.1.4985': attribute type 29 has an invalid length.
[  463.727880][T23967] netlink: 'syz.1.4985': attribute type 29 has an invalid length.
[  463.739938][T23967] unsupported nla_type 58
[  464.133452][T23988] lo speed is unknown, defaulting to 1000
[  464.286901][T23988] lo speed is unknown, defaulting to 1000
[  464.339644][T23987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  464.738550][T23999] IPVS: persistence engine module ip_vs_pe_ not found
[  464.767924][T24005] netlink: 'syz.1.4996': attribute type 4 has an invalid length.
[  464.819357][T24009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.091629][T24022] __nla_validate_parse: 87 callbacks suppressed
[  465.091645][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5003'.
[  465.903412][T24047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5012'.
[  465.907194][T24047] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5012'.
[  466.019340][T24067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5015'.
[  466.022068][T24067] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5015'.
[  466.051076][T24061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5015'.
[  466.055186][T24061] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5015'.
[  466.062233][T24061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.292741][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5023'.
[  466.310534][T24098] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5023'.
[  466.323051][T24091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5023'.
[  466.469805][T24107] delete_channel: no stack
[  466.499036][T24112] Unsupported ieee802154 address type: 0
[  466.503418][T24112] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  466.642825][T24120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.809695][T24136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.252374][T24164] _Z`Ԁ@: entered promiscuous mode
[  467.267832][T24166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.449062][  T790] IPVS: dh: FWM 3 0x00000003 - no destination available
[  467.524062][T24187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.594308][T24195] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  468.411962][T24259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.145868][T24302] syz.0.5086 (24302) used obsolete PPPIOCDETACH ioctl
[  469.349598][T24310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.395089][T24314] xt_CT: You must specify a L4 protocol and not use inversions on it
[  469.491897][T24316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.764717][T24326] xfrm3: entered promiscuous mode
[  469.768566][T24326] xfrm3: entered allmulticast mode
[  470.312675][T24341] __nla_validate_parse: 78 callbacks suppressed
[  470.312699][T24341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5097'.
[  470.319526][T24341] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5097'.
[  470.330214][T24341] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5097'.
[  470.333977][T24341] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5097'.
[  470.882933][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5101'.
[  470.885805][T24353] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5101'.
[  470.896047][T24352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5101'.
[  470.899260][T24352] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5101'.
[  471.261587][T24373] netlink: 404 bytes leftover after parsing attributes in process `syz.2.5108'.
[  471.265488][T24373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5108'.
[  471.485551][T24385] xt_l2tp: v2 sid > 0xffff: 262144
[  472.634738][T24448] netlink: 'syz.1.5131': attribute type 1 has an invalid length.
[  472.660861][T24448] bond14: entered promiscuous mode
[  472.662956][T24448] 8021q: adding VLAN 0 to HW filter on device bond14
[  472.677146][T24448] batadv3: entered promiscuous mode
[  472.679006][T24448] batadv3: entered allmulticast mode
[  472.683394][T24448] 8021q: adding VLAN 0 to HW filter on device batadv3
[  472.687288][T24448] bond14: (slave batadv3): making interface the new active one
[  472.690548][T24448] bond14: (slave batadv3): Enslaving as an active interface with an up link
[  472.733256][T24454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.789887][T24456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.838070][T24469] netlink: 'syz.2.5137': attribute type 12 has an invalid length.
[  472.911328][T24473] macsec2: entered promiscuous mode
[  472.912966][T24473] macsec2: entered allmulticast mode
[  472.958045][T24476] x_tables: duplicate underflow at hook 3
[  473.102406][T24484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.127673][T24486] netlink: 'syz.2.5143': attribute type 1 has an invalid length.
[  473.130458][T24486] netlink: 'syz.2.5143': attribute type 4 has an invalid length.
[  473.161008][T24488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.164861][T24486] lo speed is unknown, defaulting to 1000
[  473.329450][T24486] lo speed is unknown, defaulting to 1000
[  473.591043][T24507] syzkaller1: entered promiscuous mode
[  473.594617][T24507] syzkaller1: entered allmulticast mode
[  473.674370][T24509] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  473.815868][T24514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.871557][T24515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.821192][T24534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.114081][T24559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.165062][T24569] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  475.171162][T24573] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  475.313661][T24586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.353247][T24588] __nla_validate_parse: 63 callbacks suppressed
[  475.353269][T24588] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5172'.
[  475.363571][T24588] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5172'.
[  475.531703][T24606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5177'.
[  475.535292][T24606] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5177'.
[  475.545363][T24603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5177'.
[  475.549601][T24603] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5177'.
[  475.670329][T24615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5178'.
[  475.673791][T24615] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5178'.
[  475.690679][T24610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5178'.
[  475.694118][T24610] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5178'.
[  475.699030][T24610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.023896][T24636] lo speed is unknown, defaulting to 1000
[  476.215618][T24636] lo speed is unknown, defaulting to 1000
[  477.375045][T24689] veth0_to_bridge: entered promiscuous mode
[  477.378794][T24686] veth0_to_bridge: left promiscuous mode
[  478.335875][T24767] macvlan1: entered promiscuous mode
[  478.339021][T24767] macvlan1: entered allmulticast mode
[  478.343009][T24767] bond11: entered promiscuous mode
[  478.345796][T24767] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  478.353877][T24767] bond11: left promiscuous mode
[  478.843466][T24785] netlink: 'syz.2.5224': attribute type 1 has an invalid length.
[  478.849047][T24785] netlink: 'syz.2.5224': attribute type 1 has an invalid length.
[  480.781728][T24816] netlink: 'syz.1.5232': attribute type 1 has an invalid length.
[  480.814228][T24816] bond15: (slave vti1): The slave device specified does not support setting the MAC address
[  480.819692][T24816] bond15: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  480.831078][T24816] bond15: (slave vti1): making interface the new active one
[  480.834811][T24816] bond15: (slave vti1): Enslaving as an active interface with an up link
[  480.943012][T24822] __nla_validate_parse: 47 callbacks suppressed
[  480.943026][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5234'.
[  480.951926][T24822] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5234'.
[  481.294889][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5240'.
[  481.299282][T24843] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5240'.
[  481.303522][T24844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5240'.
[  481.307702][T24844] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5240'.
[  481.314794][T24843] net_ratelimit: 4 callbacks suppressed
[  481.314820][T24843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.495684][T24851] xt_connbytes: Forcing CT accounting to be enabled
[  481.499339][T24851] set match dimension is over the limit!
[  481.546852][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5242'.
[  481.550413][T24858] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5242'.
[  481.559632][T24849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5242'.
[  481.563719][T24849] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5242'.
[  481.579881][T24849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.682720][ T5844] Bluetooth: hci2: link tx timeout
[  481.685196][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  481.700507][ T5220] Bluetooth: hci2: link tx timeout
[  481.703181][ T5220] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  481.705923][ T5220] Bluetooth: hci2: link tx timeout
[  481.710060][ T5220] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  481.775243][T24878] netlink: 'syz.1.5250': attribute type 1 has an invalid length.
[  481.782112][T24878] NCSI netlink: No device for ifindex 813332851
[  482.741307][T24899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  482.961086][T24905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.076041][T24912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.777032][ T5220] Bluetooth: hci2: command 0x0401 tx timeout
[  483.788464][T24931] netlink: 'syz.0.5266': attribute type 1 has an invalid length.
[  483.965611][T24940] lo speed is unknown, defaulting to 1000
[  484.015145][T24939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  484.165591][T24947] veth0: entered promiscuous mode
[  484.170138][T24947] macsec0: entered promiscuous mode
[  484.172218][T24947] macsec0: entered allmulticast mode
[  484.173916][T24947] veth0: entered allmulticast mode
[  484.179103][T24947] veth0: left allmulticast mode
[  484.181015][T24947] veth0: left promiscuous mode
[  484.208149][T24940] lo speed is unknown, defaulting to 1000
[  484.576010][T24964] netlink: 'syz.1.5274': attribute type 2 has an invalid length.
[  486.182952][T25030] __nla_validate_parse: 33 callbacks suppressed
[  486.182972][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5285'.
[  486.189816][T25030] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5285'.
[  486.196977][T25031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5286'.
[  486.197524][T25027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5285'.
[  486.200825][T25031] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5286'.
[  486.204337][T25027] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5285'.
[  486.214416][T25027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.215851][T25029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5286'.
[  486.221903][T25029] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5286'.
[  486.230757][T25029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.302464][T25037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5288'.
[  486.310294][T25037] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5288'.
[  486.512632][T25057] netlink: 'syz.1.5294': attribute type 1 has an invalid length.
[  486.524023][T25058] netlink: 'syz.1.5294': attribute type 4 has an invalid length.
[  486.548743][T25055] openvswitch: netlink: Flow actions attr not present in new flow.
[  486.657123][   T10] IPVS: dh: FWM 3 0x00000003 - no destination available
[  486.682758][T25078] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  486.706023][T25078] x9: renamed from bridge_slave_0
[  486.881042][T25089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.032779][T25095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.290695][T25114] lo speed is unknown, defaulting to 1000
[  487.467839][T25114] lo speed is unknown, defaulting to 1000
[  487.514881][T25125] !: left promiscuous mode
[  487.517432][T25125] !: left allmulticast mode
[  487.528765][T25125] batadv_slave_0: left promiscuous mode
[  487.536065][T25125] tipc: Resetting bearer <eth:syzkaller0>
[  487.540250][T25125] syzkaller0: left promiscuous mode
[  487.542634][T25125] syzkaller0: left allmulticast mode
[  487.551183][T25125] bond0: left promiscuous mode
[  487.553244][T25125] bond0: left allmulticast mode
[  487.568293][T25125] geneve3: left promiscuous mode
[  487.585167][T25125] sit2: left promiscuous mode
[  487.619540][T25125] bridge6: left promiscuous mode
[  487.637767][T25125] gretap4: left promiscuous mode
[  487.641294][T25125] gretap4: left allmulticast mode
[  487.643821][T25125] mac80211_hwsim hwsim22 wlan1: left allmulticast mode
[  487.655613][T25125] xfrm3: left promiscuous mode
[  487.660905][T25125] xfrm3: left allmulticast mode
[  487.663424][T25125] macsec2: left promiscuous mode
[  487.665820][T25125] macsec2: left allmulticast mode
[  487.706465][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.732646][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.753569][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.759408][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.791703][T25132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.035340][T25153] xt_l2tp: v2 doesn't support IP mode
[  489.600425][   T33] audit: type=1107 audit(1753370262.230:11): pid=25169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaɛW8#	0ZGʧ=*j7T7Zaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  489.813898][T25183] xt_CT: No such helper "snmp"
[  489.884804][T25183] v: renamed from ip6_vti0 (while UP)
[  490.674754][T25232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  490.814301][T25240] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  491.245449][T25273] __nla_validate_parse: 45 callbacks suppressed
[  491.245469][T25273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5354'.
[  491.254905][T25273] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5354'.
[  491.263998][T25268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5354'.
[  491.271420][T25268] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5354'.
[  491.277109][T25268] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.693105][T25310] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.5363'.
[  491.693117][T25311] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.5363'.
[  491.702535][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5361'.
[  491.705290][T25312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5361'.
[  491.718510][T25301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5361'.
[  491.722518][T25301] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5361'.
[  491.728288][T25301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.841416][T25317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.512986][T25380] openvswitch: netlink: Flow actions attr not present in new flow.
[  493.835333][T25399] netlink: 'syz.2.5386': attribute type 21 has an invalid length.
[  493.941470][T25403] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  493.944892][T25403] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  493.991284][T25403] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  493.994357][T25403] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  494.042522][T25403] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  494.045815][T25403] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  494.102994][T25403] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  494.108011][T25403] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  494.173229][ T5662] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  494.175954][ T5662] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  494.185356][ T5662] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  494.192990][ T5662] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  494.212503][ T5865] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  494.215985][ T5865] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  494.231225][ T5662] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  494.236686][ T5662] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  494.607939][T25413] pim6reg1: entered allmulticast mode
[  494.809142][T25423] netlink: 'syz.1.5393': attribute type 64 has an invalid length.
[  495.437758][T25434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.598044][T25437] lo speed is unknown, defaulting to 1000
[  495.861901][T25437] lo speed is unknown, defaulting to 1000
[  496.257248][  T790] IPVS: dh: FWM 3 0x00000003 - no destination available
[  497.224706][T25461] __nla_validate_parse: 29 callbacks suppressed
[  497.224725][T25461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5400'.
[  497.246297][T25461] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5400'.
[  497.456855][T25464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5401'.
[  497.460438][T25464] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5401'.
[  498.354191][T25467] SET target dimension over the limit!
[  498.417219][T25427] Set syz1 is full, maxelem 65536 reached
[  498.640109][T25495] lo speed is unknown, defaulting to 1000
[  498.682340][T25500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5411'.
[  498.685127][T25500] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5411'.
[  498.693058][T25499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5411'.
[  498.695888][T25499] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5411'.
[  498.699496][T25500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5411'.
[  498.702397][T25500] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5411'.
[  498.707056][T25499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.710228][T25499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.750044][T25506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.834611][T25519] netlink: 'syz.2.5410': attribute type 3 has an invalid length.
[  498.889475][T25504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  498.955449][T25495] lo speed is unknown, defaulting to 1000
[  499.063343][T25538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.081699][T25535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.361612][T25566] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  499.621476][T25580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.724614][T25590] netlink: 'syz.0.5434': attribute type 1 has an invalid length.
[  500.006697][T25601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  500.139048][T25609] netlink: 'syz.0.5440': attribute type 10 has an invalid length.
[  500.148277][T25609] !: entered promiscuous mode
[  500.152165][T25609] !: entered allmulticast mode
[  500.159792][T25609] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  500.302293][T25615] lo speed is unknown, defaulting to 1000
[  500.514585][T25615] lo speed is unknown, defaulting to 1000
[  500.702373][T25635] lo speed is unknown, defaulting to 1000
[  500.845681][T25644] syzkaller1: entered promiscuous mode
[  500.848111][T25644] syzkaller1: entered allmulticast mode
[  500.967884][T25635] lo speed is unknown, defaulting to 1000
[  501.488475][T25653] lo speed is unknown, defaulting to 1000
[  501.704449][T25653] lo speed is unknown, defaulting to 1000
[  502.054140][T25679] 8021q: adding VLAN 0 to HW filter on device bond16
[  502.058450][T25679] bridge0: port 1(bond16) entered blocking state
[  502.061179][T25679] bridge0: port 1(bond16) entered disabled state
[  502.063945][T25679] bond16: entered allmulticast mode
[  502.070555][T25679] bond16: entered promiscuous mode
[  502.243468][T25690] gtp2: entered promiscuous mode
[  502.245633][T25690] gtp2: entered allmulticast mode
[  502.457108][T25697] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  502.637119][T25708] __nla_validate_parse: 68 callbacks suppressed
[  502.637133][T25708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5467'.
[  502.642154][T25708] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5467'.
[  502.980904][T25735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5474'.
[  502.985245][T25735] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5474'.
[  502.991126][T25734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5476'.
[  502.997752][T25732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5474'.
[  503.001160][T25732] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5474'.
[  503.205084][T25753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5479'.
[  503.214919][T25753] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5479'.
[  503.230319][T25747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5479'.
[  503.367484][T25767] tap0: tun_chr_ioctl cmd 1074025678
[  503.369739][T25767] tap0: group set to 0
[  504.607871][T25826] net_ratelimit: 5 callbacks suppressed
[  504.607902][T25826] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  504.774210][T25837] netlink: 'syz.1.5506': attribute type 2 has an invalid length.
[  505.858659][   T10] IPVS: dh: FWM 3 0x00000003 - no destination available
[  505.864436][ T6579] IPVS: dh: FWM 3 0x00000003 - no destination available
[  506.452688][T25874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.510227][T25877] netlink: 'syz.2.5520': attribute type 1 has an invalid length.
[  506.513250][T25877] netlink: 'syz.2.5520': attribute type 4 has an invalid length.
[  506.738081][T25893] netlink: 'syz.0.5525': attribute type 10 has an invalid length.
[  506.740846][T25893] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  507.385321][T25936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.601738][T25949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.714834][T25954] __nla_validate_parse: 54 callbacks suppressed
[  507.714855][T25954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5541'.
[  507.723223][T25954] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5541'.
[  507.733001][T25953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5541'.
[  507.736425][T25953] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5541'.
[  507.740214][T25953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.852884][T25957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5542'.
[  507.855916][T25957] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5542'.
[  507.867409][T25956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.962951][T25962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5543'.
[  507.967476][T25962] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5543'.
[  507.978718][T25959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5543'.
[  507.982002][T25959] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5543'.
[  508.199277][T25975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.561514][   T33] audit: type=1107 audit(1753370281.190:12): pid=26015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  509.061005][T26069] lo: MTU too low for tipc bearer
[  509.063374][T26069] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  509.100741][T26072] tipc: Enabling of bearer <ib:lo> rejected, max 3 bearers permitted
[  509.869972][T26088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  509.962875][T26087] tipc: Disabling bearer <eth:syzkaller0>
[  510.128817][T26096] syzkaller1: entered promiscuous mode
[  510.131541][T26096] syzkaller1: entered allmulticast mode
[  510.408689][T26108] net_ratelimit: 2 callbacks suppressed
[  510.408706][T26108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  510.568107][T26103] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  510.585078][T26120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.617444][ T6579] IPVS: dh: FWM 3 0x00000003 - no destination available
[  511.813306][T26162] set match dimension is over the limit!
[  511.971946][T26169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  512.180740][T26179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  513.515553][T26210] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  513.599587][T26216] __nla_validate_parse: 60 callbacks suppressed
[  513.599603][T26216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5616'.
[  513.604793][T26216] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5616'.
[  513.660617][T26218] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5618'.
[  513.783916][T26228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5620'.
[  513.787712][T26228] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5620'.
[  513.794533][T26228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5620'.
[  513.799318][T26228] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5620'.
[  513.818662][T26229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5621'.
[  513.822370][T26229] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5621'.
[  513.830156][T26227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5621'.
[  513.835235][T26227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  514.278296][T26246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  514.716017][T26254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.274444][T26287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.524236][T26306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.842821][T26319] ksmbd: Unknown IPC event: 3, ignore.
[  516.354952][T26348] netlink: 'syz.2.5654': attribute type 1 has an invalid length.
[  516.523948][T26355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.561328][T26361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.695050][T26365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.934606][T26387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.951451][T26385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.090842][T26392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.192529][T26395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.304397][T26403] x_tables: duplicate underflow at hook 1
[  517.335142][T26405] netlink: 'syz.0.5672': attribute type 1 has an invalid length.
[  517.367733][ T7578] IPVS: dh: FWM 3 0x00000003 - no destination available
[  517.525928][T26413] pim6reg1: entered promiscuous mode
[  517.531409][T26413] pim6reg1: entered allmulticast mode
[  517.607843][T26413] syzkaller0: left promiscuous mode
[  517.609529][T26413] syzkaller0: left allmulticast mode
[  517.644929][T26413] 8021q: adding VLAN 0 to HW filter on device bond17
[  517.650625][T26413] team0: Port device bond17 added
[  517.886963][T26437] : renamed from team_slave_1
[  517.968618][T26434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.645141][T26484] netlink: 'syz.1.5694': attribute type 9 has an invalid length.
[  518.653592][T26484] netlink: 'syz.1.5694': attribute type 10 has an invalid length.
[  518.661765][T26484] batman_adv: batadv0: Removing interface: macvtap0
[  518.668971][T26484] bond14: (slave batadv3): Releasing active interface
[  518.678338][T26484] bond15: (slave vti1): Releasing backup interface
[  518.683181][T26484] bond16: left allmulticast mode
[  518.685404][T26484] bond16: left promiscuous mode
[  518.688991][T26484] bridge0: port 1(bond16) entered disabled state
[  518.701758][T26484] team0: Port device bond17 removed
[  518.940380][T26494] pimreg: entered allmulticast mode
[  518.942872][T26495] pimreg: left allmulticast mode
[  518.990341][T26493] syzkaller0: Caught tx_queue_len zero misconfig
[  518.993243][T26494] netlink: 'syz.1.5699': attribute type 1 has an invalid length.
[  518.996688][T26494] netlink: 'syz.1.5699': attribute type 1 has an invalid length.
[  519.381498][T26507] __nla_validate_parse: 84 callbacks suppressed
[  519.381514][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5702'.
[  519.388356][T26507] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5702'.
[  519.435157][T26511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5703'.
[  519.442372][T26511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5703'.
[  519.582368][T26519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5704'.
[  519.585814][T26519] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5704'.
[  519.591836][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5705'.
[  519.595501][T26520] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5705'.
[  519.603130][T26516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5704'.
[  519.610699][T26516] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5704'.
[  519.768532][T26526] sctp: [Deprecated]: syz.1.5707 (pid 26526) Use of int in maxseg socket option.
[  519.768532][T26526] Use struct sctp_assoc_value instead
[  520.052161][T26532] bridge: RTM_NEWNEIGH with invalid ether address
[  520.451559][T26550] netlink: 'syz.2.5715': attribute type 2 has an invalid length.
[  520.742296][T26565] net_ratelimit: 3 callbacks suppressed
[  520.742313][T26565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  520.960006][T26578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.552409][T26621] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  521.557798][T26621] syzkaller0: entered promiscuous mode
[  521.559997][T26621] syzkaller0: entered allmulticast mode
[  521.564396][T26621] syzkaller0: Caught tx_queue_len zero misconfig
[  521.814114][T26643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.127848][ T7578] IPVS: dh: FWM 3 0x00000003 - no destination available
[  523.132572][T26690] SET target dimension over the limit!
[  523.207131][   T10] page_pool_release_retry() stalled pool shutdown: id 71, 1 inflight 60 sec
[  523.772220][T26719] lo speed is unknown, defaulting to 1000
[  523.938258][T26719] lo speed is unknown, defaulting to 1000
[  524.337866][T26727] sctp: [Deprecated]: syz.1.5765 (pid 26727) Use of int in max_burst socket option.
[  524.337866][T26727] Use struct sctp_assoc_value instead
[  524.418675][T26729] __nla_validate_parse: 49 callbacks suppressed
[  524.418687][T26729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5766'.
[  524.423555][T26729] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5766'.
[  524.498270][T26731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5767'.
[  524.501832][T26731] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5767'.
[  524.625203][T26736] lo speed is unknown, defaulting to 1000
[  524.732340][T26736] lo speed is unknown, defaulting to 1000
[  524.775094][T26736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.201277][T26740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5770'.
[  525.205051][T26740] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5770'.
[  525.310158][T26743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5771'.
[  525.313679][T26743] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5771'.
[  525.321459][T26742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5771'.
[  525.325563][T26742] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5771'.
[  525.334656][T26742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.428153][T26735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.724229][T26759] pim6reg0: tun_chr_ioctl cmd 1074025694
[  525.882731][T26766] netlink: 'syz.0.5780': attribute type 1 has an invalid length.
[  525.925694][T26766] 8021q: adding VLAN 0 to HW filter on device bond16
[  525.930727][T26766] bond15: (slave bond16): making interface the new active one
[  525.934174][T26766] bond15: (slave bond16): Enslaving as an active interface with an up link
[  525.968781][T26766] bond15: (slave gretap5): Enslaving as a backup interface with an up link
[  526.379167][T26795] netlink: 'syz.0.5789': attribute type 1 has an invalid length.
[  526.394480][T26787] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  526.436316][T26795] vlan0: entered allmulticast mode
[  526.440995][T26795] bond17: entered allmulticast mode
[  526.621001][T26824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  526.880631][T26846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  526.907902][T26851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.031786][T26855] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.065655][T26863] netlink: 'syz.1.5808': attribute type 4 has an invalid length.
[  527.481560][T26892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.620692][T26905] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  527.749193][T26914] bridge11: entered promiscuous mode
[  527.751264][T26914] bridge11: entered allmulticast mode
[  527.968523][T26928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.140586][T26938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.687343][T12105] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  528.700328][T12105] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  528.707601][T12105] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  528.711991][T12105] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  528.744263][T12105] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  528.747377][T12105] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  528.758691][ T5865] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  528.762142][ T5865] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  528.844420][T26980] netlink: 'syz.2.5832': attribute type 12 has an invalid length.
[  529.729488][T26999] __nla_validate_parse: 67 callbacks suppressed
[  529.729507][T26999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5835'.
[  529.734659][T26999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5835'.
[  529.798672][T27009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5835'.
[  529.802398][T27009] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5835'.
[  529.815273][T26999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5835'.
[  529.820321][T26999] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5835'.
[  530.201832][T27037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5844'.
[  530.205905][T27037] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5844'.
[  530.321381][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5846'.
[  530.325528][T27047] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5846'.
[  530.485753][T27065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.547404][T27068] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  531.332404][T27131] lo speed is unknown, defaulting to 1000
[  531.366941][T27134] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003
[  531.481509][T27131] lo speed is unknown, defaulting to 1000
[  531.842556][T27147] lo speed is unknown, defaulting to 1000
[  532.185006][T27147] lo speed is unknown, defaulting to 1000
[  532.358010][T27167] netlink: 'syz.0.5877': attribute type 10 has an invalid length.
[  532.361568][T27167] veth0_vlan: left promiscuous mode
[  532.364003][T27167] veth0_vlan: entered promiscuous mode
[  532.367386][T27167] veth0_vlan: entered allmulticast mode
[  532.378638][T27167] net_ratelimit: 4 callbacks suppressed
[  532.378655][T27167] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  532.488529][T27167] syz.0.5877 (27167) used greatest stack depth: 19800 bytes left
[  532.698054][T27182] netlink: 'syz.0.5881': attribute type 3 has an invalid length.
[  533.665208][T27213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  533.728806][T27215] syzkaller1: entered promiscuous mode
[  533.730649][T27215] syzkaller1: entered allmulticast mode
[  534.192076][T27242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  534.270027][T27248] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  534.275066][T27248] netlink: 'syz.0.5902': attribute type 3 has an invalid length.
[  535.108086][T27263] __nla_validate_parse: 63 callbacks suppressed
[  535.108106][T27263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5907'.
[  535.114479][T27263] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5907'.
[  535.122729][T27263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5907'.
[  535.127438][T27263] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5907'.
[  535.503689][T27275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5911'.
[  535.507370][T27275] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5911'.
[  535.514914][T27274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5911'.
[  535.519154][T27274] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5911'.
[  535.524533][T27274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.601417][T27279] openvswitch: netlink: Flow key attr not present in new flow.
[  535.694651][T27282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5914'.
[  535.697869][T27282] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5914'.
[  535.705933][T27281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.862248][T27292] rdma_rxe: rxe_newlink: failed to add macvlan1
[  536.060431][T27298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  536.104337][T27300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  536.146593][T27308] bond15: (slave bond16): Releasing backup interface
[  536.156234][T27308] bond15: (slave bond16): the permanent HWaddr of slave - 16:ad:e7:6e:d9:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  536.165169][T27308] bond15: (slave gretap5): making interface the new active one
[  536.175998][T27308] bond15: (slave gretap5): Releasing backup interface
[  536.186058][T27306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  536.861153][T27372] xt_bpf: check failed: parse error
[  537.593005][T27398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.162933][T27415] lo speed is unknown, defaulting to 1000
[  538.287559][T27415] lo speed is unknown, defaulting to 1000
[  539.733201][T27431] openvswitch: netlink: Flow actions attr not present in new flow.
[  539.736686][T27432] openvswitch: netlink: Flow actions attr not present in new flow.
[  540.145786][T27443] netlink: 'syz.1.5962': attribute type 25 has an invalid length.
[  540.882633][T27447] __nla_validate_parse: 48 callbacks suppressed
[  540.882646][T27447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5964'.
[  540.888795][T27447] netlink: 'syz.0.5964': attribute type 1 has an invalid length.
[  540.914824][T27450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5963'.
[  540.918394][T27450] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5963'.
[  541.030683][T27456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'.
[  541.034277][T27456] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5966'.
[  541.043036][T27456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5966'.
[  541.046051][T27456] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5966'.
[  541.138011][T27461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5968'.
[  541.140983][T27461] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5968'.
[  541.147266][T27460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5968'.
[  541.195722][T27463] netlink: 'syz.0.5969': attribute type 21 has an invalid length.
[  541.203451][T27463] netlink: 'syz.0.5969': attribute type 5 has an invalid length.
[  541.295261][T27470] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  541.364620][T27473] netlink: 'syz.0.5972': attribute type 1 has an invalid length.
[  541.370095][T27473] netlink: 'syz.0.5972': attribute type 10 has an invalid length.
[  541.372876][T27473] netlink: 'syz.0.5972': attribute type 4 has an invalid length.
[  541.475255][T27479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.579706][T27484] x_tables: duplicate underflow at hook 1
[  541.762236][T27497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.813061][T27504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.040530][T27516] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  542.161583][T27518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.490812][T27529] netlink: 'syz.0.5989': attribute type 1 has an invalid length.
[  542.517255][T27529] 8021q: adding VLAN 0 to HW filter on device bond19
[  542.578314][T27531] netlink: 'syz.0.5989': attribute type 4 has an invalid length.
[  543.622313][T27579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.883519][T27586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.942890][T27589] syzkaller0: left promiscuous mode
[  543.944768][T27589] syzkaller0: left allmulticast mode
[  544.317484][T27617] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  544.641668][T27634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.719443][T27643] netlink: 'syz.1.6027': attribute type 4 has an invalid length.
[  544.991084][T27654] lo speed is unknown, defaulting to 1000
[  545.015589][T27661] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  545.019639][T27662] syzkaller0: entered promiscuous mode
[  545.022049][T27662] syzkaller0: entered allmulticast mode
[  545.072500][T27659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.243406][T27654] lo speed is unknown, defaulting to 1000
[  545.831596][T27704] netlink: 'syz.1.6043': attribute type 1 has an invalid length.
[  545.897252][T27705] __nla_validate_parse: 64 callbacks suppressed
[  545.897269][T27705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6043'.
[  545.903870][T27704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6043'.
[  546.000581][T27708] netlink: 'syz.1.6045': attribute type 1 has an invalid length.
[  546.039232][T27708] bond18: (slave ip6gretap6): Enslaving as a backup interface with an up link
[  546.347063][T27721] xt_CT: You must specify a L4 protocol and not use inversions on it
[  547.003046][T27725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6050'.
[  547.009559][T27725] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6050'.
[  547.776710][ T6579] wlan0: Trigger new scan to find an IBSS to join
[  547.815579][T27727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6051'.
[  547.822884][T27727] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6051'.
[  547.837303][T27727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6051'.
[  547.841002][T27727] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6051'.
[  547.981181][T27732] netlink: 'syz.2.6053': attribute type 11 has an invalid length.
[  548.922943][T27742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6056'.
[  548.926800][T27742] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6056'.
[  549.605775][T27780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  549.784631][T27778] sctp: [Deprecated]: syz.2.6067 (pid 27778) Use of struct sctp_assoc_value in delayed_ack socket option.
[  549.784631][T27778] Use struct sctp_sack_info instead
[  550.102374][T27812] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  550.376408][T27827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  550.422308][T27829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  551.125670][T27876] __nla_validate_parse: 38 callbacks suppressed
[  551.125687][T27876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6094'.
[  551.939968][T27902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6099'.
[  551.943565][T27902] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6099'.
[  551.953042][T27901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6099'.
[  551.956621][T27901] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6099'.
[  552.122532][T27909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'.
[  552.127051][T27909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6102'.
[  552.215406][T27913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6104'.
[  552.234759][T27913] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6104'.
[  552.256027][T27913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.338855][T27923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6105'.
[  552.348366][T27923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.726787][ T7578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.744436][T27935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.968032][T27941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.015670][T27946] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  553.153925][T27954] netlink: 'syz.1.6116': attribute type 3 has an invalid length.
[  553.154470][T27950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.197079][T27952] openvswitch: netlink: Flow actions attr not present in new flow.
[  553.922484][T28006] netlink: 'syz.1.6133': attribute type 6 has an invalid length.
[  553.943837][T28006] ipvlan0: entered promiscuous mode
[  554.206903][T28022] netlink: 'syz.0.6137': attribute type 2 has an invalid length.
[  554.881920][T28055] net_ratelimit: 5 callbacks suppressed
[  554.881941][T28055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.651658][T28084] xt_hashlimit: size too large, truncated to 1048576
[  556.043632][T28112] netlink: 'syz.1.6164': attribute type 1 has an invalid length.
[  556.244952][T28133] __nla_validate_parse: 67 callbacks suppressed
[  556.244968][T28133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6170'.
[  556.252856][T28133] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6170'.
[  556.261924][T28133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6170'.
[  556.266787][T28133] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6170'.
[  556.270774][T28134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  556.271323][T28135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  556.330670][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6169'.
[  556.334422][T28139] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6169'.
[  556.351186][T28136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6169'.
[  556.354889][T28136] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6169'.
[  556.364775][T28136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  557.102694][T28142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6172'.
[  557.208358][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6173'.
[  557.512578][T28159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  557.899443][T28164] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  558.380848][T28178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.554492][T28185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.652755][T28191] xt_CT: You must specify a L4 protocol and not use inversions on it
[  559.381252][T28237] netlink: 'syz.2.6203': attribute type 4 has an invalid length.
[  559.391965][T28237] netlink: 'syz.2.6203': attribute type 4 has an invalid length.
[  559.756829][T28249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.874992][T28257] netlink: 'syz.2.6207': attribute type 10 has an invalid length.
[  559.880587][T28257] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  560.368226][T28285] lo: entered allmulticast mode
[  560.370170][T28285] lo: left allmulticast mode
[  560.483529][T28298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.569139][T28301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.842188][T28321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  561.052990][T28335] bond14: entered promiscuous mode
[  561.055524][T28335] 8021q: adding VLAN 0 to HW filter on device bond14
[  561.080121][T28335] 8021q: adding VLAN 0 to HW filter on device bond14
[  561.083475][T28335] bond14: (slave vcan1): The slave device specified does not support setting the MAC address
[  561.090256][T28335] bond14: (slave vcan1): Error -95 calling set_mac_address
[  561.291662][T28349] bridge0: left allmulticast mode
[  561.449443][T28353] __nla_validate_parse: 63 callbacks suppressed
[  561.449464][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6238'.
[  561.455768][T28353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6238'.
[  561.460805][T28353] netlink: 'syz.2.6238': attribute type 1 has an invalid length.
[  561.463890][T28353] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6238'.
[  561.471773][T28353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6238'.
[  562.228329][T28373] netlink: 'syz.0.6244': attribute type 1 has an invalid length.
[  562.315346][T28380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6247'.
[  562.375821][T28385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6246'.
[  562.386318][T28385] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6246'.
[  562.417724][T28387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6248'.
[  562.429966][T28387] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6248'.
[  562.499800][T28391] netlink: 'syz.1.6251': attribute type 1 has an invalid length.
[  562.550196][T28390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.602041][T28395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6252'.
[  562.820854][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  564.066000][T28466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.141121][T28468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.514691][T28479] bond18: (slave ip6gretap6): Releasing backup interface
[  564.534760][T28479] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  564.961170][T28492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.493421][T28551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.775130][T28553] __nla_validate_parse: 63 callbacks suppressed
[  566.775152][T28553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6296'.
[  566.782403][T28553] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6296'.
[  566.791623][T28553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.974934][T28565] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.6300'.
[  567.151318][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6301'.
[  567.154478][T28570] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6301'.
[  567.162406][T28569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6301'.
[  567.165696][T28569] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6301'.
[  567.251549][T28577] pim6reg0: tun_chr_ioctl cmd 1074025694
[  567.372288][T28579] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6304'.
[  567.733267][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6308'.
[  567.737430][T28595] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6308'.
[  567.745794][T28591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.054451][T28620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.079491][T28626] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  569.282623][T28659] openvswitch: netlink: EtherType 0 is less than min 600
[  570.193060][T28698] sctp: [Deprecated]: syz.0.6342 (pid 28698) Use of int in maxseg socket option.
[  570.193060][T28698] Use struct sctp_assoc_value instead
[  571.743001][T28731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  572.560786][T28742] tipc: Resetting bearer <eth:syzkaller0>
[  572.596907][T28742] netlink: 'syz.0.6349': attribute type 21 has an invalid length.
[  572.601213][T28742] __nla_validate_parse: 93 callbacks suppressed
[  572.601224][T28742] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6349'.
[  572.651592][T28748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6352'.
[  572.690530][T28751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6353'.
[  572.835417][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6355'.
[  572.839946][T28762] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6355'.
[  572.849604][T28759] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6355'.
[  572.852757][T28759] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6355'.
[  572.923240][T28765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6356'.
[  572.927411][T28765] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6356'.
[  572.944602][T28761] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6356'.
[  572.951181][T28761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  573.057142][T28771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  573.098525][T28771] syzkaller0: entered promiscuous mode
[  573.100866][T28771] syzkaller0: entered allmulticast mode
[  573.103527][T28771] tipc: Resetting bearer <eth:syzkaller0>
[  573.135028][T28770] tipc: Resetting bearer <eth:syzkaller0>
[  575.854460][T28770] tipc: Disabling bearer <eth:syzkaller0>
[  575.975418][T28793] netlink: 'syz.1.6365': attribute type 1 has an invalid length.
[  576.016919][T28793] nbd: socks must be embedded in a SOCK_ITEM attr
[  576.019591][T28793] block nbd0: shutting down sockets
[  576.660405][T28840] netlink: 'syz.1.6379': attribute type 1 has an invalid length.
[  576.664419][T28840] netlink: 'syz.1.6379': attribute type 1 has an invalid length.
[  576.675452][T28839] netlink: 'syz.1.6379': attribute type 15 has an invalid length.
[  576.686780][T28839] netlink: 'syz.1.6379': attribute type 18 has an invalid length.
[  577.284145][T28882] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  577.802545][T28909] __nla_validate_parse: 37 callbacks suppressed
[  577.802568][T28909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6399'.
[  577.810977][T28909] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6399'.
[  577.909630][T28915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6400'.
[  577.913689][T28915] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6400'.
[  577.927230][T28912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6400'.
[  577.931127][T28912] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6400'.
[  577.936936][T28912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  577.991219][T28917] sctp: [Deprecated]: syz.0.6402 (pid 28917) Use of int in max_burst socket option.
[  577.991219][T28917] Use struct sctp_assoc_value instead
[  578.056936][T28923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6402'.
[  578.060566][T28923] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6402'.
[  578.070416][T28917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6402'.
[  578.074145][T28925] batadv_slave_0: entered promiscuous mode
[  578.074399][T28925] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6404'.
[  578.134709][T28928] netlink: 'syz.2.6404': attribute type 4 has an invalid length.
[  578.154440][T28928] netlink: 'syz.2.6404': attribute type 4 has an invalid length.
[  578.183933][T28927] lo speed is unknown, defaulting to 1000
[  578.245207][T28934] syzkaller1: entered promiscuous mode
[  578.258179][T28934] syzkaller1: entered allmulticast mode
[  578.447289][T28927] lo speed is unknown, defaulting to 1000
[  578.552115][T28949] lo speed is unknown, defaulting to 1000
[  578.716057][T28949] lo speed is unknown, defaulting to 1000
[  579.209915][T28959] lo speed is unknown, defaulting to 1000
[  579.563849][T28959] lo speed is unknown, defaulting to 1000
[  579.797912][T28991] rdma_rxe: rxe_newlink: failed to add lo
[  579.803081][T28991] gre0: left allmulticast mode
[  579.820712][T28991] vcan0: left allmulticast mode
[  579.829776][T28991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  580.017071][T29003] netlink: 'syz.2.6426': attribute type 1 has an invalid length.
[  580.020301][T29003] netlink: 'syz.2.6426': attribute type 2 has an invalid length.
[  580.765072][T29058] netlink: 'syz.1.6439': attribute type 1 has an invalid length.
[  582.205279][T29105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  582.209824][T29104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  582.252335][T29107] netlink: 'syz.0.6455': attribute type 3 has an invalid length.
[  582.351390][T29109] vlan0: entered allmulticast mode
[  582.353893][T29109] bond19: entered allmulticast mode
[  582.465692][T29114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  582.689937][T29128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  582.783516][T29134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  582.902771][T29140] __nla_validate_parse: 41 callbacks suppressed
[  582.902787][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6465'.
[  582.911895][T29140] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6465'.
[  582.920922][T29139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6465'.
[  582.925068][T29139] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6465'.
[  583.109358][T29146] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6468'.
[  583.380731][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6471'.
[  583.384023][T29155] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6471'.
[  583.391824][T29152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6471'.
[  583.395164][T29152] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6471'.
[  583.402434][T29154] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  583.410721][T29152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  583.420680][T29154] netlink: 'syz.0.6472': attribute type 4 has an invalid length.
[  583.492889][T29158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6473'.
[  583.671135][T29162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  583.844353][T29177] veth0: entered promiscuous mode
[  583.925092][T29176] veth0: left promiscuous mode
[  584.135794][T29196] netlink: 'syz.1.6485': attribute type 1 has an invalid length.
[  584.341965][T29203] xt_CT: No such helper "pptp"
[  584.345907][T29211] --map-set only usable from mangle table
[  584.822992][T29244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  585.207519][ T7576] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  585.371115][T29275] bridge0: failed insert local address into bridge forwarding table
[  585.480245][T29279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  585.657707][T29286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  585.855342][T29295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  586.397553][T29321] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20002
[  586.718190][T29334] netlink: 'syz.1.6528': attribute type 11 has an invalid length.
[  586.883498][T29339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  587.003739][T29352] netlink: 'syz.0.6536': attribute type 9 has an invalid length.
[  587.013228][T29352] macvlan2: entered promiscuous mode
[  587.020078][T29352] hsr0: entered promiscuous mode
[  587.022778][T29352] macvlan2: entered allmulticast mode
[  587.024462][T29352] hsr0: entered allmulticast mode
[  587.030297][T29352] gretap0: entered allmulticast mode
[  587.032225][T29352] batadv_slave_1: entered allmulticast mode
[  587.188712][T29357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  587.489852][T29375] : entered promiscuous mode
[  587.802091][T29387] lo speed is unknown, defaulting to 1000
[  588.002296][T29391] __nla_validate_parse: 72 callbacks suppressed
[  588.002318][T29391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6547'.
[  588.010077][T29391] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6547'.
[  588.024917][T29390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6547'.
[  588.029681][T29390] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6547'.
[  588.037395][T29390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  588.041124][T29387] lo speed is unknown, defaulting to 1000
[  588.263465][T29403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6550'.
[  588.273998][T29404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6550'.
[  588.300643][T29401] lo speed is unknown, defaulting to 1000
[  588.389741][T29409] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6549'.
[  588.430054][T29410] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  588.574201][T29401] lo speed is unknown, defaulting to 1000
[  588.576480][T29415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6553'.
[  588.576503][T29415] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6553'.
[  588.587483][T29415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6553'.
[  588.837501][T29425] xt_ecn: cannot match TCP bits for non-tcp packets
[  588.866957][T29425] lo speed is unknown, defaulting to 1000
[  588.904164][T29426] netlink: 'syz.2.6555': attribute type 1 has an invalid length.
[  589.047773][T29425] lo speed is unknown, defaulting to 1000
[  589.904668][T29453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  591.884415][T29514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  592.722894][T29524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  592.914204][T29543] chnl_net:caif_netlink_parms(): no params data found
[  593.104128][T29552] __nla_validate_parse: 47 callbacks suppressed
[  593.104153][T29552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6589'.
[  593.110877][T29552] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6589'.
[  593.124180][T29550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6590'.
[  593.137393][T29547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.142246][T29550] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6590'.
[  593.407445][T29567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6594'.
[  593.411148][T29567] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6594'.
[  593.440399][T29562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6594'.
[  593.443632][T29562] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6594'.
[  593.495113][T29570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6596'.
[  593.501086][T29570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6596'.
[  593.770846][T29584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.911978][T29589] netlink: 'syz.1.6602': attribute type 4 has an invalid length.
[  593.924058][T20020] lo speed is unknown, defaulting to 1000
[  593.929204][T20020] syz1: Port: 1 Link ACTIVE
[  594.491399][T29595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  594.619737][T29598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  594.829477][T29603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  594.993135][T29610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  595.214354][T29629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  595.253017][T29638] siw: device registration error -23
[  595.331062][T29636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  595.911567][T29692] sctp: [Deprecated]: syz.1.6633 (pid 29692) Use of int in max_burst socket option.
[  595.911567][T29692] Use struct sctp_assoc_value instead
[  596.118089][T29706] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0
[  596.324662][T29706] bond0 (unregistering): Released all slaves
[  596.705911][T29723] syzkaller1: entered promiscuous mode
[  596.712237][T29723] syzkaller1: entered allmulticast mode
[  597.892849][T29763] net_ratelimit: 4 callbacks suppressed
[  597.892872][T29763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  597.993707][T29768] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  598.002350][T29768] netdevsim0: entered promiscuous mode
[  598.004877][T29768] netdevsim0: entered allmulticast mode
[  598.035790][T29768] delete_channel: no stack
[  598.119745][T29772] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  598.254689][T29777] __nla_validate_parse: 65 callbacks suppressed
[  598.254713][T29777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6661'.
[  598.264041][T29777] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6661'.
[  598.264281][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6662'.
[  598.272197][T29778] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6662'.
[  598.283385][T29776] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6662'.
[  598.291433][T29776] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6662'.
[  598.390332][T29783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6663'.
[  598.393582][T29783] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6663'.
[  598.403548][T29782] bond0 (unregistering): Released all slaves
[  598.412342][T29780] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6663'.
[  598.423142][T29780] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6663'.
[  598.429034][T29780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.532922][T29788] vcan0: tx drop: invalid da for name 0x0000000000000001
[  598.633820][T29792] batadv0: entered promiscuous mode
[  599.371613][T29826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  599.933170][T29850] netlink: 'syz.1.6683': attribute type 1 has an invalid length.
[  600.260169][T29863] block nbd0: server does not support multiple connections per device.
[  600.284404][T29863] block nbd0: shutting down sockets
[  600.408369][T29871] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  600.524005][T29875] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  601.004085][T29898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  601.141583][T29903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  603.452091][T29969] __nla_validate_parse: 43 callbacks suppressed
[  603.452111][T29969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6717'.
[  603.460698][T29969] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6717'.
[  603.474983][T29965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  603.771205][T29980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6722'.
[  603.774645][T29980] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6722'.
[  603.780877][T29980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6722'.
[  603.783712][T29980] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6722'.
[  603.925338][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6723'.
[  603.928718][T29984] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6723'.
[  603.934725][T29983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6723'.
[  603.938059][T29983] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6723'.
[  604.419315][T29991] netlink: 'syz.1.6725': attribute type 3 has an invalid length.
[  604.768917][T29997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  605.712253][T30020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  605.875693][T30030] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  606.042287][T30039] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  606.282943][T30060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  606.318555][T30060] lo speed is unknown, defaulting to 1000
[  606.437677][T30060] lo speed is unknown, defaulting to 1000
[  606.446797][T30064] lo speed is unknown, defaulting to 1000
[  606.571235][T30064] lo speed is unknown, defaulting to 1000
[  606.734924][T30076] xt_socket: unknown flags 0xd0
[  606.892147][T30080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  607.048729][T30085] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  607.389382][T30097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  607.453519][T30109] !: left promiscuous mode
[  607.455189][T30109] !: left allmulticast mode
[  607.468341][T30109] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  607.590423][T30112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  607.806575][T30123] gretap0 speed is unknown, defaulting to 1000
[  607.809141][T30123] gretap0 speed is unknown, defaulting to 1000
[  607.811685][T30123] gretap0 speed is unknown, defaulting to 1000
[  607.821581][T30123] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  607.836806][T30123] gretap0 speed is unknown, defaulting to 1000
[  607.840896][T30123] gretap0 speed is unknown, defaulting to 1000
[  607.843930][T30123] gretap0 speed is unknown, defaulting to 1000
[  608.042083][T30132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  608.061657][T30136] netlink: 'syz.0.6766': attribute type 1 has an invalid length.
[  608.492142][T30161] __nla_validate_parse: 49 callbacks suppressed
[  608.492169][T30161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6775'.
[  608.498839][T30161] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6775'.
[  608.512947][T30161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  609.281424][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6778'.
[  609.309339][T30168] bridge13: entered promiscuous mode
[  609.311282][T30168] bridge13: entered allmulticast mode
[  609.317603][T30168] team0: Port device bridge13 added
[  609.320683][T30168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6778'.
[  609.324084][T30168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6778'.
[  609.763753][T30202] 8021q: VLANs not supported on wg2
[  609.838255][T30212] 
[  609.839316][T30212] ======================================================
[  609.842088][T30212] WARNING: possible circular locking dependency detected
[  609.844511][T30212] 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 Not tainted
[  609.848552][T30212] ------------------------------------------------------
[  609.851565][T30212] syz.0.6791/30212 is trying to acquire lock:
[  609.853507][T30212] ffff8880363ac270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_device_down+0x12a/0x720
[  609.856966][T30212] 
[  609.856966][T30212] but task is already holding lock:
[  609.860148][T30212] ffffffff8f677d58 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  609.864067][T30212] 
[  609.864067][T30212] which lock already depends on the new lock.
[  609.864067][T30212] 
[  609.868281][T30212] 
[  609.868281][T30212] the existing dependency chain (in reverse order) is:
[  609.871945][T30212] 
[  609.871945][T30212] -> #2 (nr_node_list_lock){+...}-{3:3}:
[  609.875049][T30212]        lock_acquire+0x120/0x360
[  609.877058][T30212]        _raw_spin_lock_bh+0x36/0x50
[  609.879311][T30212]        nr_rt_device_down+0xa9/0x720
[  609.881555][T30212]        nr_device_event+0x137/0x150
[  609.883860][T30212]        notifier_call_chain+0x1b6/0x3e0
[  609.886216][T30212]        netif_close_many+0x29c/0x410
[  609.888467][T30212]        netif_close+0x158/0x210
[  609.890486][T30212]        dev_close+0x10a/0x220
[  609.892193][T30212]        bpq_device_event+0x2f4/0x600
[  609.894000][T30212]        notifier_call_chain+0x1b6/0x3e0
[  609.895909][T30212]        __dev_notify_flags+0x18d/0x2e0
[  609.897810][T30212]        netif_change_flags+0xe8/0x1a0
[  609.899716][T30212]        dev_change_flags+0x130/0x260
[  609.901505][T30212]        dev_ioctl+0x7b4/0x1150
[  609.903099][T30212]        sock_do_ioctl+0x22c/0x300
[  609.904833][T30212]        sock_ioctl+0x576/0x790
[  609.906563][T30212]        __se_sys_ioctl+0xfc/0x170
[  609.908271][T30212]        do_syscall_64+0xfa/0x3b0
[  609.909892][T30212]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.911964][T30212] 
[  609.911964][T30212] -> #1 (nr_neigh_list_lock){+...}-{3:3}:
[  609.914573][T30212]        lock_acquire+0x120/0x360
[  609.916328][T30212]        _raw_spin_lock_bh+0x36/0x50
[  609.918372][T30212]        nr_remove_neigh+0x25/0xe0
[  609.920801][T30212]        nr_add_node+0x1d9f/0x2570
[  609.922901][T30212]        nr_rt_ioctl+0xc12/0xd50
[  609.924686][T30212]        sock_do_ioctl+0xdc/0x300
[  609.926473][T30212]        sock_ioctl+0x576/0x790
[  609.928099][T30212]        __se_sys_ioctl+0xfc/0x170
[  609.930304][T30212]        do_syscall_64+0xfa/0x3b0
[  609.932487][T30212]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.934546][T30212] 
[  609.934546][T30212] -> #0 (&nr_node->node_lock){+...}-{3:3}:
[  609.937102][T30212]        validate_chain+0xb9b/0x2140
[  609.938839][T30212]        __lock_acquire+0xab9/0xd20
[  609.940495][T30212]        lock_acquire+0x120/0x360
[  609.942142][T30212]        _raw_spin_lock_bh+0x36/0x50
[  609.943848][T30212]        nr_rt_device_down+0x12a/0x720
[  609.945706][T30212]        nr_device_event+0x137/0x150
[  609.947478][T30212]        notifier_call_chain+0x1b6/0x3e0
[  609.949361][T30212]        netif_close_many+0x29c/0x410
[  609.951128][T30212]        netif_close+0x158/0x210
[  609.952711][T30212]        dev_close+0x10a/0x220
[  609.954221][T30212]        bpq_device_event+0x2f4/0x600
[  609.955874][T30212]        notifier_call_chain+0x1b6/0x3e0
[  609.957666][T30212]        __dev_notify_flags+0x18d/0x2e0
[  609.959402][T30212]        netif_change_flags+0xe8/0x1a0
[  609.961252][T30212]        dev_change_flags+0x130/0x260
[  609.962983][T30212]        dev_ioctl+0x7b4/0x1150
[  609.964629][T30212]        sock_do_ioctl+0x22c/0x300
[  609.966316][T30212]        sock_ioctl+0x576/0x790
[  609.967829][T30212]        __se_sys_ioctl+0xfc/0x170
[  609.969442][T30212]        do_syscall_64+0xfa/0x3b0
[  609.971022][T30212]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.973354][T30212] 
[  609.973354][T30212] other info that might help us debug this:
[  609.973354][T30212] 
[  609.976979][T30212] Chain exists of:
[  609.976979][T30212]   &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock
[  609.976979][T30212] 
[  609.982199][T30212]  Possible unsafe locking scenario:
[  609.982199][T30212] 
[  609.984682][T30212]        CPU0                    CPU1
[  609.986549][T30212]        ----                    ----
[  609.988681][T30212]   lock(nr_node_list_lock);
[  609.990436][T30212]                                lock(nr_neigh_list_lock);
[  609.993131][T30212]                                lock(nr_node_list_lock);
[  609.995629][T30212]   lock(&nr_node->node_lock);
[  609.997323][T30212] 
[  609.997323][T30212]  *** DEADLOCK ***
[  609.997323][T30212] 
[  610.000145][T30212] 3 locks held by syz.0.6791/30212:
[  610.001877][T30212]  #0: ffffffff8f51ed08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  610.005143][T30212]  #1: ffffffff8f677cf8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  610.009078][T30212]  #2: ffffffff8f677d58 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  610.012424][T30212] 
[  610.012424][T30212] stack backtrace:
[  610.014418][T30212] CPU: 0 UID: 0 PID: 30212 Comm: syz.0.6791 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  610.014432][T30212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  610.014439][T30212] Call Trace:
[  610.014448][T30212]  <TASK>
[  610.014456][T30212]  dump_stack_lvl+0x189/0x250
[  610.014472][T30212]  ? __pfx_dump_stack_lvl+0x10/0x10
[  610.014481][T30212]  ? __pfx__printk+0x10/0x10
[  610.014492][T30212]  ? print_lock_name+0xde/0x100
[  610.014502][T30212]  print_circular_bug+0x2ee/0x310
[  610.014514][T30212]  check_noncircular+0x134/0x160
[  610.014525][T30212]  validate_chain+0xb9b/0x2140
[  610.014539][T30212]  __lock_acquire+0xab9/0xd20
[  610.014547][T30212]  ? nr_rt_device_down+0x12a/0x720
[  610.014560][T30212]  lock_acquire+0x120/0x360
[  610.014567][T30212]  ? nr_rt_device_down+0x12a/0x720
[  610.014579][T30212]  ? nr_rt_device_down+0x12a/0x720
[  610.014589][T30212]  _raw_spin_lock_bh+0x36/0x50
[  610.014603][T30212]  ? nr_rt_device_down+0x12a/0x720
[  610.014613][T30212]  nr_rt_device_down+0x12a/0x720
[  610.014625][T30212]  nr_device_event+0x137/0x150
[  610.014636][T30212]  notifier_call_chain+0x1b6/0x3e0
[  610.014648][T30212]  netif_close_many+0x29c/0x410
[  610.014658][T30212]  ? __pfx_netif_close_many+0x10/0x10
[  610.014665][T30212]  ? bond_netdev_event+0x227/0xe80
[  610.014679][T30212]  netif_close+0x158/0x210
[  610.014686][T30212]  ? __pfx_netif_close+0x10/0x10
[  610.014691][T30212]  ? tun_device_event+0x77/0x1020
[  610.014702][T30212]  ? __pfx___neigh_ifdown+0x10/0x10
[  610.014713][T30212]  ? macsec_notify+0x104/0x660
[  610.014726][T30212]  dev_close+0x10a/0x220
[  610.014735][T30212]  bpq_device_event+0x2f4/0x600
[  610.014747][T30212]  notifier_call_chain+0x1b6/0x3e0
[  610.014761][T30212]  __dev_notify_flags+0x18d/0x2e0
[  610.014774][T30212]  ? __pfx___dev_notify_flags+0x10/0x10
[  610.014786][T30212]  ? __dev_change_flags+0x4cc/0x6d0
[  610.014798][T30212]  ? __pfx___dev_change_flags+0x10/0x10
[  610.014808][T30212]  ? dev_ioctl+0x7a4/0x1150
[  610.014819][T30212]  ? full_name_hash+0x92/0xe0
[  610.014835][T30212]  netif_change_flags+0xe8/0x1a0
[  610.014850][T30212]  dev_change_flags+0x130/0x260
[  610.014863][T30212]  dev_ioctl+0x7b4/0x1150
[  610.014877][T30212]  sock_do_ioctl+0x22c/0x300
[  610.014894][T30212]  ? __pfx_sock_do_ioctl+0x10/0x10
[  610.014910][T30212]  ? __lock_acquire+0xab9/0xd20
[  610.014924][T30212]  sock_ioctl+0x576/0x790
[  610.014934][T30212]  ? __pfx_sock_ioctl+0x10/0x10
[  610.014943][T30212]  ? __fget_files+0x2a/0x420
[  610.014950][T30212]  ? __fget_files+0x3a0/0x420
[  610.014956][T30212]  ? __fget_files+0x2a/0x420
[  610.014963][T30212]  ? bpf_lsm_file_ioctl+0x9/0x20
[  610.014973][T30212]  ? __pfx_sock_ioctl+0x10/0x10
[  610.014981][T30212]  __se_sys_ioctl+0xfc/0x170
[  610.014992][T30212]  do_syscall_64+0xfa/0x3b0
[  610.015002][T30212]  ? lockdep_hardirqs_on+0x9c/0x150
[  610.015009][T30212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.015017][T30212]  ? exc_page_fault+0x9f/0xf0
[  610.015024][T30212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.015032][T30212] RIP: 0033:0x7f68e7f8e9a9
[  610.015044][T30212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  610.015051][T30212] RSP: 002b:00007f68e5dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  610.015060][T30212] RAX: ffffffffffffffda RBX: 00007f68e81b6080 RCX: 00007f68e7f8e9a9
[  610.015066][T30212] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 000000000000004c
[  610.015071][T30212] RBP: 00007f68e8010d69 R08: 0000000000000000 R09: 0000000000000000
[  610.015076][T30212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.015080][T30212] R13: 0000000000000000 R14: 00007f68e81b6080 R15: 00007fff3a0bc418
[  610.015089][T30212]  </TASK>

VM DIAGNOSIS:
15:19:42  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000297edd0
R8 =ffff888108c48237 R9 =1ffff11021189046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff8d5 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f68e5dd56c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562194dcc3e0 CR3=000000011f8fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 ff00000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dfeefc27179e8500 RBX=ffff8881126221d8 RCX=0000000000000000 RDX=ffffffff99fd4ea0
RSI=ffffffff8c924240 RDI=ffff8881126221d8 RBP=0000000000000000 RSP=ffffc900085d7ca0
R8 =0000000000000003 R9 =0000000000000000 R10=000000000000000d R11=ffffffff81ad0050
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99fd4ea0 R15=ffffffff8c924240
RIP=ffffffff819e2a79 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f68e5df66c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f08480d1e88 CR3=000000011f8fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f68e8186478 00007f68e8186450 XMM03=00007f68e8186488 00007f68e8186480
XMM04=00007f68e8ced100 00007f68e8186440 XMM05=00007f68e8186458 00007f68e81864a0
XMM06=00007f68e8186498 00007f68e8186490 XMM07=00007f68e8186488 00007f68e8186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f68e8011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
