last executing test programs:

3.787011272s ago: executing program 1 (id=3941):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1})
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x2c, 0x66, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x4}, {0x1, 0x9}, {0xc, 0x2}}, [{0x8, 0xb, 0x80000001}]}, 0x2c}}, 0x0) (async)
write(r0, &(0x7f0000000500)="21000000470010aaaaaaaaaa00000000000000000000ffffffffffffff9700"/76, 0x4d) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000009000000090000000180000001690600", @ANYRES32=0x1], 0x50) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000580)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) (async)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) (async)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000002140100", @ANYRES64=r4, @ANYBLOB="060054"], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x400c010)
getpid() (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, {0x0, 0x3d, 0xea62}, {0x0, 0x8}, {}, 0x200, 0x3506, 0x2, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x12}}}]}, 0x154}}, 0x0)
r8 = socket$kcm(0x2, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4044804) (async)
setsockopt$sock_attach_bpf(r8, 0x84, 0x18, &(0x7f0000000a80), 0x8) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x4, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000bc0)='GPL\x00', 0x9, 0xe2, &(0x7f0000000c00)=""/226}, 0x94) (async)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50)

3.642595397s ago: executing program 2 (id=3944):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000640)={{<r1=>r0, &(0x7f0000000180)='\x00', 0x1, &(0x7f00000001c0)={@_ha_fsid={[0xfffffffe, 0x850]}, {0x9, 0x9, 0xb5, 0x6}}, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0x1}, 0x3, &(0x7f00000005c0)=[{0x1, 0x3, &(0x7f0000000340)='\x00', &(0x7f0000000380)="115186d1165c55852dd1c2d50e9c", 0xe, 0x60}, {0x1, 0x6, &(0x7f00000003c0)='-\x00', &(0x7f0000000400)="9c975be39150d6f1a6c1d7130dae8d9578d208c780eb00e1c7243c7176b18e77772fd565ddd734bbe17f09f5ef40c1aea3e2ec277dc5c1f1f179cbb16881d3500fa5a029d9482ecfcf0ab8a6d0c6ce82f2f5f4d5a259f89edcc83724263a663a4f0a60ae023fb3264aabb9afa57bd0f8a45327b56e13b8aa392be8806d170ab95027357f3f75f64f4b5be2cfa2d9b5bac61a2c2a73f4ba8fe1338456590b0a4ae35970f7a12b41964c78d609cd6e7a7692adb7c2e4e1b13c81b651597f1d0d74709341ddfe1487470561bf96e8b6dba4c6980d8c4157d7438e79c967b45894187917bd2201e85a15705039a65c28d9ccd4f50218a897", 0xf6, 0x20}, {0x3, 0x0, &(0x7f0000000500)='\x00', &(0x7f0000000540)="1351709829e0ffd906601162c31b6eb60df6633d1ee7b0e3ca21dd765b06e0d8d95d771203a126d03225a4a8e180084da5a512b6ac1c2c6fff60a85833077c2faff589de6b6b77f75e520d0b779fdef84561fdaeae308324c711439334aa6592e89a6ca702b7356814d03e14ec233c11b1444fb9a24409e317abb1dc9d", 0x7d, 0x20}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x85, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x9, 0x1}, 0x8}, 0x94)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000200)={@rand_addr, <r2=>0x0}, &(0x7f0000000240)=0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x7f, 0x0, r1, 0x3, '\x00', r2, r1, 0x0, 0x5, 0x3}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000640)={{r0, &(0x7f0000000180)='\x00', 0x1, &(0x7f00000001c0)={@_ha_fsid={[0xfffffffe, 0x850]}, {0x9, 0x9, 0xb5, 0x6}}, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0x1}, 0x3, &(0x7f00000005c0)=[{0x1, 0x3, &(0x7f0000000340)='\x00', &(0x7f0000000380)="115186d1165c55852dd1c2d50e9c", 0xe, 0x60}, {0x1, 0x6, &(0x7f00000003c0)='-\x00', &(0x7f0000000400)="9c975be39150d6f1a6c1d7130dae8d9578d208c780eb00e1c7243c7176b18e77772fd565ddd734bbe17f09f5ef40c1aea3e2ec277dc5c1f1f179cbb16881d3500fa5a029d9482ecfcf0ab8a6d0c6ce82f2f5f4d5a259f89edcc83724263a663a4f0a60ae023fb3264aabb9afa57bd0f8a45327b56e13b8aa392be8806d170ab95027357f3f75f64f4b5be2cfa2d9b5bac61a2c2a73f4ba8fe1338456590b0a4ae35970f7a12b41964c78d609cd6e7a7692adb7c2e4e1b13c81b651597f1d0d74709341ddfe1487470561bf96e8b6dba4c6980d8c4157d7438e79c967b45894187917bd2201e85a15705039a65c28d9ccd4f50218a897", 0xf6, 0x20}, {0x3, 0x0, &(0x7f0000000500)='\x00', &(0x7f0000000540)="1351709829e0ffd906601162c31b6eb60df6633d1ee7b0e3ca21dd765b06e0d8d95d771203a126d03225a4a8e180084da5a512b6ac1c2c6fff60a85833077c2faff589de6b6b77f75e520d0b779fdef84561fdaeae308324c711439334aa6592e89a6ca702b7356814d03e14ec233c11b1444fb9a24409e317abb1dc9d", 0x7d, 0x20}]}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x85, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x9, 0x1}, 0x8}, 0x94) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x14) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x7f, 0x0, r1, 0x3, '\x00', r2, r1, 0x0, 0x5, 0x3}, 0x50) (async)

3.642265128s ago: executing program 2 (id=3945):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000d11d7110bf000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}], 0x18}, 0x2400c804)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0x20075, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000b80)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', <r6=>0x0})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r6, 0x4}}]}, 0xc4}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r9, 0x89e4, &(0x7f0000000480)={0x34, "d44621493a00a8b3d897c01c8b090f2db13665752482c2f0fe7d916830c7cc3f15825b4d6e2c7e21c45a0698154a54ec309a2cd49a968cdc18c4bc3d087d45604cfcc68ab7b3361f271f011ed973839c6333d85cfe69e492dca6b89088a2ebb4c81c61d936f17be09a7f2e65d9b264127065c6f67c6b6ffbf080923de81079f2"})
sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003f000501010000000000000001010000000000000c0001006f76732d64703000080002"], 0x34}}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x58}}, 0x0)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000080)={0x0, 0x4500, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0200000000000000df25250000000e648197b4bc6d0000000f0002006e767464657673096d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)

3.641975479s ago: executing program 0 (id=3946):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000426bd7000fbdbdf2537000000080057000000000008005700020000000800220159020000080022015e02000008002700020000000800570007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x8844)
r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x10, 0xcce5ac832826d491)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000002c0)={0x28, 0x5})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000200100000c000280070002006c6f00001800038004000100080002000500000008000400020000000800050001000000"], 0x40}}, 0x0)
sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000200100000c000280070002006c6f00001800038004000100080002000500000008000400020000000800050002000000"], 0x40}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x40000000, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000426bd7000fbdbdf2537000000080057000000000008005700020000000800220159020000080022015e02000008002700020000000800570007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x8844) (async)
accept4$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x10, 0xcce5ac832826d491) (async)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000002c0)={0x28, 0x5}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000200100000c000280070002006c6f00001800038004000100080002000500000008000400020000000800050001000000"], 0x40}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000200100000c000280070002006c6f00001800038004000100080002000500000008000400020000000800050002000000"], 0x40}}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x40000000, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)

3.542329821s ago: executing program 0 (id=3947):
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000840), 0x4)
sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0xdc}, 0x2000)
pwrite64(r5, 0x0, 0x0, 0x1fb)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.swap.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_bp={0x0, 0x8}, 0x100e68, 0x1, 0x4000, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={<r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x0, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x81400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
recvmsg$unix(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000800)=ANY=[@ANYRES8=r2, @ANYRES8=r6], 0x9a)
bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000940)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

3.392081006s ago: executing program 0 (id=3948):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000009700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000300)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newsa={0x144, 0x1a, 0x633, 0x4, 0x25dfdbff, {{@in6=@local, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x4d6, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {}, {}, 0x70bd26, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x80}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4)
socket$kcm(0xa, 0x5, 0x0)
r4 = perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000b40)={0x3, 0x80, 0x1f, 0x0, 0x4, 0x5, 0x0, 0x84, 0x3a10, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000bc0), 0xc0bf0a624ace8b1}, 0x2021, 0xffffffff80000001, 0x4, 0x8, 0x1, 0x0, 0x9b, 0x0, 0x1})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x20048000)
close(r5)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000d40), 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, @perf_bp={0x0, 0xb}, 0x101807, 0x4, 0x0, 0x4, 0x0, 0x0, 0xfffd, 0x0, 0x80000001, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff0000000000"], 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000e40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x54, 0x11, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x2}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c000)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000fc0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
openat$cgroup(r7, 0x0, 0x200002, 0x0)
close(r7)
socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r7, 0x0, 0x2400c094)
sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000001040)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096)

3.102514821s ago: executing program 2 (id=3949):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x2, 0x6, 0x8d8, 0x550, 0x550, 0x250, 0x250, 0x0, 0x808, 0x808, 0x808, 0x808, 0x808, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x228, 0x250, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010101, [0xff000000, 0x1fe000000, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xffffffff, 0xff, 0xffffffff], 0x4d5, 0x0, 0x1, 0x1, 0x0, 0x16}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff], @ipv4=@broadcast, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 0x4d4, 0x3507, 0x89, 0x1, 0x16, 0x4}, {@ipv4=@remote, [0xffffff00], @ipv6=@mcast1, [0xff, 0xff000000, 0xffffff, 0xff000000], 0x4d2, 0x3505, 0x19, 0x0, 0x10, 0x9}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x32}, [0x0, 0x0, 0x0, 0xff], @ipv4=@rand_addr=0x64010100, [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d5, 0x3502, 0x16, 0x0, 0x10, 0xc}], 0x4, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x938)
socket$packet(0x11, 0xa, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0)
write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305", 0xe)

309.857452ms ago: executing program 0 (id=3950):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000005000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="2800000000000000b702000014000000b7030000000700008500000073000000bf0920000000000055090100410000009500000000000000c5000200fcffffffdd90f8ff00000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x27}, 0x94)

309.575356ms ago: executing program 1 (id=3951):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001002cbd70000200000000000000", @ANYRES32=r1, @ANYBLOB="408e010001533f0645062acc0e00db006970366772657461700000001400028006000f0009000000064011004e220000"], 0x48}, 0x1, 0x0, 0x0, 0x400cc17}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

309.163318ms ago: executing program 1 (id=3952):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000005000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000010b702000014000000b70300000007000085000000ca000000bf0920000000000055090100410000009500000000000000c5000200fcffffffdd90f8ff00000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x27}, 0x94)

308.661458ms ago: executing program 0 (id=3953):
socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0xe, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x57, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x0, 0x5, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e24, 0xfffffffc}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086)
sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000b80)={0xa, 0x4e23, 0x9, @empty, 0x1}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000000)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000bc0)='batadv0\x00')
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020820034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff80008000240"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
socket$kcm(0xa, 0x3, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

230.254852ms ago: executing program 2 (id=3954):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$sock(r2, &(0x7f0000000300)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @mcast1, 0xfffffffb}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="3cecb337eb99481f4cc731416c23c748c00db33083745696dcdf94ae47f45fdf367fcbbaa623fd27a77fa9c6bae2", 0x2e}, {&(0x7f0000000180)="870d29687ea24e548847b60a2ab0e41d14afb6061671ffb7f6a296665aca6bdc911136bf276e1d22c94ce615", 0x2c}], 0x2, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x1c}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xc0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000000000000d81400000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000)

227.671809ms ago: executing program 1 (id=3955):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000050000000000fdff0900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000070000850000002d000000bf0920000000000055090100410000009500000000000000c5000200fcffffffdd90f8ff00000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x27}, 0x94)

62.681126ms ago: executing program 2 (id=3956):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x2000000000000002)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x2, &(0x7f0000000180)=@raw=[@generic={0x40}, @exit], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)

62.482027ms ago: executing program 1 (id=3957):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x90, r1, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3a}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x90}}, 0x800)

1.416578ms ago: executing program 0 (id=3958):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x5820, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, @nested={0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104000000000000007800af19f0ac0587542725c3b1508500100000cc66da9126b0c85cf9d067fb80c6adf12b45a3ec67d2e8d463e43363a1e55ae343b07f3451b2510891abdd49a38451ffec86a8026c09362eec6b369539e754a6d8139f99d2e00e96b24a6eca574125514d", @ANYRES32=r2, @ANYBLOB="5bbf0100000000001c0012800b00010062726964676500000c0002800500190000000000"], 0x3c}}, 0x0)

1.021545ms ago: executing program 2 (id=3959):
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='t', 0x1}], 0x1}, 0x1)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200076, 0x9}, 0x11efa, 0x4, 0x40000198, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x11c21a, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xd)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r4 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000440)=r3, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
r6 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, 0x0, &(0x7f0000000500)=r3}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f0, &(0x7f0000000600))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="00001f001c000000000000000100000002000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r7, @ANYRES32=r5], 0x98, 0x2}, 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair(0x26, 0x80000, 0x0, &(0x7f00000007c0))
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000800))
socket$kcm(0x15, 0x5, 0x0)

0s ago: executing program 1 (id=3960):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000500)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000580)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0xe, 0x4, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0xbe}]}, &(0x7f0000000f80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0xd}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0xe, 0x4, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0xbe}]}, &(0x7f0000000f80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0xd}, 0x94)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', <r2=>0x0})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000040)={{0xffffffffffffffff, &(0x7f0000000200)='^/+\xb4&z,\x00', 0x80, &(0x7f0000000240)={@align=0x1, {0x8, 0x7, 0x2, 0x1}}, 0xc, &(0x7f00000004c0), 0x0}, 0x1, &(0x7f00000002c0)=[{0x1, 0x3, 0x0, &(0x7f0000000300)="ef9218533f6ff88ed8cb13a5b2a661bc07f5ee9454cdf6847b4cec9fef2dd5b27fe24f06dcacd499d138ded41d4130a7e3d36b0a5e66ee8b0d411da2c5164bf787c5b464907144e1deb6aae9d8aa1fa727192a77d9fd52afcf9e6b8c099f6f4344fd58bba3787ce76b8d603840bed751e7ef8c55fc12605372bf2b6baaa8548f9bb49bdf9f0e74ec26661968d41cb5d976693495c788e97c0b95c553a8e72b69e481ebf12ba3a288844acd", 0xab, 0x10}]})
setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000003c0)=0xf3f, 0x4) (async)
setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000003c0)=0xf3f, 0x4)
r3 = socket(0x2d, 0x2, 0x0)
setsockopt(r3, 0x11d, 0x1, 0x0, 0x0) (async)
setsockopt(r3, 0x11d, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0), 0xffffffffffffff15, 0x10, &(0x7f0000000d00), 0xf000000}, 0x48)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0), 0x200002, 0x0)
mkdirat$cgroup(r4, &(0x7f0000001000)='syz1\x00', 0x1ff)
r5 = openat$cgroup(r4, 0x0, 0x200002, 0x0)
ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000001040))
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000010c0)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r6, &(0x7f0000001100)={0x2, 0x4e21, @local}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000001140), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x4894, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0)
connect$inet(r6, &(0x7f0000001180)={0x2, 0x4e24, @broadcast}, 0x10) (async)
connect$inet(r6, &(0x7f0000001180)={0x2, 0x4e24, @broadcast}, 0x10)
perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000003a000100faff070004000000010000000800f000", @ANYRES32=r7, @ANYBLOB="6ec59ee4d5d9d1838f0cc9e8d0e44098e3832f4f03ac00b068668b1b782d51e958895d49352c0b22f032873fe48d63387834714e273fffd58d3fd6"], 0x1c}, 0x1, 0x0, 0x0, 0x30044084}, 0x4008094) (async)
sendmsg$nl_generic(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000003a000100faff070004000000010000000800f000", @ANYRES32=r7, @ANYBLOB="6ec59ee4d5d9d1838f0cc9e8d0e44098e3832f4f03ac00b068668b1b782d51e958895d49352c0b22f032873fe48d63387834714e273fffd58d3fd6"], 0x1c}, 0x1, 0x0, 0x0, 0x30044084}, 0x4008094)
sendto$packet(r1, &(0x7f0000000400)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xfffffffffffffd0b, 0x4040819, &(0x7f0000000480)={0xc9, 0x7, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="40000000000000009500000000040000"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)

0s ago: executing program 0 (id=3961):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
mmap(&(0x7f0000f96000/0x4000)=nil, 0x4000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff3, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="b7d91cab2cb53d000000"]}]}}]}]}]}}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42082, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x102, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002c0000000e0001006e657464657673696d0000000f0002006e6574646576736900000000"], 0x34}}, 0x8040)
socket$packet(0x11, 0x3, 0x300)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRES16=r3])
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000840)={'vcan0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x200740c0, &(0x7f0000000300)={0x11, 0x16, r8, 0x1, 0x2}, 0x14)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x2b, 0x100, @vifc_lcl_addr=@broadcast, @local}, 0x10)

kernel console output (not intermixed with test programs):

s not specified
[  224.966500][T11725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.201649][T11731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1639'.
[  225.201890][T11732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1639'.
[  226.251886][T11773] hsr_slave_0 (unregistering): left promiscuous mode
[  226.893423][T11782] ovs-dp0: entered promiscuous mode
[  226.897898][T11782] lo: entered promiscuous mode
[  226.898069][T11782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  226.972721][T11787] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  227.030418][T11793] IPv6: addrconf: prefix option has invalid lifetime
[  227.033371][T11793] IPv6: addrconf: prefix option has invalid lifetime
[  227.268746][T11804] 8021q: adding VLAN 0 to HW filter on device bond6
[  227.284710][T11804] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  227.306011][T11804] bond6 (unregistering): (slave geneve3): Releasing backup interface
[  227.310932][T11804] bond6 (unregistering): Released all slaves
[  227.762175][T11818] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.783075][T11818] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.153933][T11849] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  228.198503][T11844] netlink: 'syz.2.1672': attribute type 3 has an invalid length.
[  228.198522][T11844] tc_dump_action: action bad kind
[  228.225994][T11849] syzkaller0: entered promiscuous mode
[  228.226008][T11849] syzkaller0: entered allmulticast mode
[  228.691601][T11880] netlink: 'syz.1.1687': attribute type 2 has an invalid length.
[  228.711922][T11880] __nla_validate_parse: 5 callbacks suppressed
[  228.711992][T11880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1687'.
[  228.733304][T11880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1687'.
[  228.733381][T11880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1687'.
[  228.770397][ T5605] Bluetooth: hci2: unexpected event for opcode 0x1003
[  228.772540][ T5605] Bluetooth: hci2: unexpected event for opcode 0x1003
[  229.548169][T11922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1699'.
[  229.562254][T11922] syzkaller0: left promiscuous mode
[  229.562274][T11922] syzkaller0: left allmulticast mode
[  229.679274][T11924] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  229.812548][T11928] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  230.399400][T11955] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  231.095787][T11975] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  231.308542][ T5605] Bluetooth: hci1: unexpected event for opcode 0x1003
[  231.411942][T11998] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  231.412002][ T1287] lo speed is unknown, defaulting to 1000
[  231.412060][ T1287] syz2: Port: 1 Link ACTIVE
[  231.412119][T11999] netlink: 'syz.1.1730': attribute type 3 has an invalid length.
[  231.412364][T11999] netlink: 'syz.1.1730': attribute type 3 has an invalid length.
[  231.431093][T12001] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  232.464134][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'.
[  232.464167][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'.
[  232.503668][T12023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'.
[  233.069021][T12062] netlink: zone id is out of range
[  233.069036][T12062] netlink: zone id is out of range
[  233.069262][T12062] netlink: zone id is out of range
[  233.069270][T12062] netlink: zone id is out of range
[  233.069285][T12062] netlink: zone id is out of range
[  233.069291][T12062] netlink: zone id is out of range
[  233.633986][T12087] netlink: 'syz.2.1756': attribute type 3 has an invalid length.
[  233.670546][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'.
[  233.778803][T12090] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  234.140691][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'.
[  234.209401][T12109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1763'.
[  235.079821][T12144] netlink: 'syz.0.1770': attribute type 1 has an invalid length.
[  235.079833][T12144] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1770'.
[  235.089794][T12142] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.113318][T12142] bridge_slave_0 (unregistering): left allmulticast mode
[  235.113344][T12142] bridge_slave_0 (unregistering): left promiscuous mode
[  235.113421][T12142] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.581971][T12158] syzkaller0: entered promiscuous mode
[  235.581994][T12158] syzkaller0: entered allmulticast mode
[  235.860706][T12164] tap0: tun_chr_ioctl cmd 1074025678
[  235.860727][T12164] tap0: group set to 0
[  235.870202][T12164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.873281][T12164] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) !
[  237.830420][   T34] audit: type=1107 audit(1792451669.499:4): pid=12174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='pyv<	~pT	j'
[  237.989571][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1785'.
[  237.989593][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1785'.
[  237.990308][T12188] netlink: 'syz.2.1785': attribute type 1 has an invalid length.
[  238.011038][T12188] bond7: entered promiscuous mode
[  238.011381][T12188] 8021q: adding VLAN 0 to HW filter on device bond7
[  238.020778][T12188] ipvlan2: entered allmulticast mode
[  238.020796][T12188] bond7: entered allmulticast mode
[  238.020986][T12188] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  238.020997][T12188] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  238.021005][T12188] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  238.025322][T12188] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  238.298731][T12204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1789'.
[  238.545660][T12210] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1790'.
[  238.824524][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'.
[  239.178599][T12222] net_ratelimit: 10 callbacks suppressed
[  239.178616][T12222] ip_tables: iptables: counters copy to user failed while replacing table
[  239.390239][T12228] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1795'.
[  239.500492][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'.
[  239.582159][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1799'.
[  239.619619][T12239] ifb0: entered allmulticast mode
[  242.463942][T12246] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1802'.
[  242.464059][T12246] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1802'.
[  242.464154][T12246] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1802'.
[  242.464289][T12246] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1802'.
[  242.464384][T12246] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1802'.
[  242.464511][T12246] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1802'.
[  242.464623][T12246] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1802'.
[  242.870606][T12276] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  242.874500][T12276] syzkaller1: entered promiscuous mode
[  242.874513][T12276] syzkaller1: entered allmulticast mode
[  283.542743][T12302] syzkaller0: entered promiscuous mode
[  283.542835][T12302] syzkaller0: entered allmulticast mode
[  283.826527][    C1] af_packet: tpacket_rcv: packet too big, clamped from 258 to 4294967286. macoff=82
[  283.950128][T12317] __nla_validate_parse: 26 callbacks suppressed
[  283.950142][T12317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1818'.
[  284.029681][T12319] digital: digital_start_poll: Unknown protocol
[  284.032675][T12322] digital: digital_start_poll: Unknown protocol
[  284.125617][T12326] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1821'.
[  284.125634][T12326] openvswitch: netlink: Flow key attr not present in new flow.
[  284.432093][T12341] netlink: 'syz.0.1826': attribute type 2 has an invalid length.
[  284.584075][T12352] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  284.665557][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1833'.
[  284.792578][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816b9bc800: rx timeout, send abort
[  284.795124][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88816b9bc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  284.828553][T12376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1835'.
[  284.848605][T12374] bond8: entered promiscuous mode
[  284.850890][T12374] 8021q: adding VLAN 0 to HW filter on device bond8
[  284.864317][T12379] syzkaller0: left promiscuous mode
[  284.864333][T12379] syzkaller0: left allmulticast mode
[  284.865150][T12379] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.930099][T12389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  287.945250][T12390] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  287.949611][ T5636] bond0: (slave bond2): link status definitely down, disabling slave
[  287.960588][T12390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1838'.
[  287.960608][T12390] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1838'.
[  287.960623][T12390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1838'.
[  288.169299][T12405] netlink: 'syz.1.1847': attribute type 8 has an invalid length.
[  288.271544][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'.
[  288.287617][T12409] ovs-dp0: entered promiscuous mode
[  288.421032][T12409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.421054][T12409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.573868][T12409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.573887][T12409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.677396][T12409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.677426][T12409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.753124][T12409] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.753145][T12409] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.876310][ T7341] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  288.876330][ T7341] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.876356][ T7341] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  288.876365][ T7341] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.890191][ T5662] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  288.890210][ T5662] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.890237][ T5662] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  288.890246][ T5662] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.991057][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1853'.
[  290.001475][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'.
[  290.001499][T12451] openvswitch: netlink: Flow actions attr not present in new flow.
[  290.273159][T12479] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  290.648028][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'.
[  290.824817][T12501] bond0: (slave dummy0): Releasing backup interface
[  290.825580][T12501] dummy0: left promiscuous mode
[  290.951949][T12506] syzkaller0: entered promiscuous mode
[  290.951969][T12506] syzkaller0: entered allmulticast mode
[  291.048970][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1869'.
[  291.140194][T12512] macvlan0: entered promiscuous mode
[  291.140208][T12512] macvlan0: entered allmulticast mode
[  291.141137][T12512] bond16: entered promiscuous mode
[  291.141719][T12512] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  291.160511][T12512] bond16: left promiscuous mode
[  291.544231][T12519] netlink: 'syz.2.1872': attribute type 11 has an invalid length.
[  291.559609][T12519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1872'.
[  291.845952][T12527] netlink: 'syz.2.1874': attribute type 10 has an invalid length.
[  291.867246][T12527] team0: Device veth0_vlan failed to register rx_handler
[  293.063850][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'.
[  293.467487][T12566] bond0: (slave bridge0): Releasing backup interface
[  293.469490][T12566] bridge0: left promiscuous mode
[  293.621078][T12566] bridge0: port 4(team0) entered disabled state
[  293.624136][T12566] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.650704][T12566] team0: left allmulticast mode
[  293.650733][T12566] team_slave_1: left allmulticast mode
[  293.650914][T12566] team0: left promiscuous mode
[  293.650923][T12566] team_slave_1: left promiscuous mode
[  293.653326][T12566] bridge0: port 4(team0) entered disabled state
[  294.241030][T12566] bridge_slave_1: left allmulticast mode
[  294.241045][T12566] bridge_slave_1: left promiscuous mode
[  294.241133][T12566] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.242470][T12566] vlan3: left promiscuous mode
[  294.242482][T12566] geneve0: left promiscuous mode
[  294.260295][T12566] bond0: (slave bond_slave_0): Releasing backup interface
[  294.260767][T12566] bond_slave_0: left promiscuous mode
[  294.274072][T12566] bond0: (slave bond_slave_1): Releasing backup interface
[  294.284518][T12566] bond_slave_1: left promiscuous mode
[  294.296703][T12566] team0: Port device team_slave_1 removed
[  294.300288][T12566] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  294.455536][T12586] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.1886'.
[  294.455702][T12586] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.1886'.
[  294.455893][T12586] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.1886'.
[  294.456018][T12586] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.1886'.
[  294.457218][T12586] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.1886'.
[  294.457374][T12586] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.1886'.
[  294.458577][T12586] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.1886'.
[  294.458818][T12586] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.1886'.
[  294.459001][T12586] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.1886'.
[  294.459159][T12586] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.1886'.
[  294.973691][T12616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  295.059602][T12621] netlink: 'syz.1.1893': attribute type 29 has an invalid length.
[  295.060269][T12621] netlink: 'syz.1.1893': attribute type 29 has an invalid length.
[  295.373003][T12632] pim6reg99999999: entered allmulticast mode
[  295.975531][T12658] netlink: 'syz.0.1901': attribute type 12 has an invalid length.
[  296.467670][ T5598] Bluetooth: hci2: command 0x0406 tx timeout
[  296.778638][T12699] ip6t_srh: unknown srh invflags 4000
[  297.007639][T12711] netlink: 'syz.2.1917': attribute type 1 has an invalid length.
[  297.010801][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023a03400: rx timeout, send abort
[  297.011019][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023a03400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  297.230787][T12720] syzkaller0: entered promiscuous mode
[  297.230807][T12720] syzkaller0: entered allmulticast mode
[  297.243977][T12720] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress)
[  297.344318][T12722] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  298.556894][ T5598] Bluetooth: hci2: command 0x0406 tx timeout
[  298.782939][T12792] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  298.923758][T12800] netlink: 'syz.0.1940': attribute type 1 has an invalid length.
[  298.924368][T12802] netlink: 'syz.0.1940': attribute type 10 has an invalid length.
[  299.257083][T12818] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  299.287883][T12822] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  299.350189][T12824] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  299.526684][T12826] __nla_validate_parse: 31 callbacks suppressed
[  299.526699][T12826] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1946'.
[  300.311610][T12853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1954'.
[  300.331963][T12851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1955'.
[  300.342721][T12852] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1955'.
[  300.351541][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1955'.
[  300.353372][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1955'.
[  300.819993][T12885] netlink: 'syz.0.1963': attribute type 1 has an invalid length.
[  300.832616][T12885] bond6: entered promiscuous mode
[  300.832853][T12885] 8021q: adding VLAN 0 to HW filter on device bond6
[  300.834708][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'.
[  300.850077][T12885] bond6 (unregistering): Released all slaves
[  301.220270][T12898] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  301.860711][T12909] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  301.969052][T12913] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1975'.
[  301.974340][T12913] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1975'.
[  302.057277][T12916] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  302.115472][T12918] netlink: 'syz.1.1977': attribute type 2 has an invalid length.
[  302.115494][T12918] netlink: 'syz.1.1977': attribute type 7 has an invalid length.
[  302.130856][T12918] : entered promiscuous mode
[  302.243000][T12924] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1980'.
[  302.454186][T12934] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  302.913198][T12963] ip_tables: iptables: counters copy to user failed while replacing table
[  303.686674][T12967] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  303.770734][T12969] Cannot find add_set index 0 as target
[  303.771259][T12970] Cannot find add_set index 0 as target
[  303.915525][T12982] batadv_slave_0: entered promiscuous mode
[  303.919898][T12981] batadv_slave_0: left promiscuous mode
[  303.984294][T12986] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  304.555291][T13006] __nla_validate_parse: 5 callbacks suppressed
[  304.555312][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2010'.
[  304.803981][T13014] netlink: 'syz.2.2012': attribute type 1 has an invalid length.
[  304.837946][T13014] 8021q: adding VLAN 0 to HW filter on device bond9
[  304.842663][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'.
[  304.845351][T13014] netlink: 'syz.2.2012': attribute type 10 has an invalid length.
[  304.845367][T13014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2012'.
[  304.845481][T13014] dummy0: entered promiscuous mode
[  304.876856][T13014] team0: Port device dummy0 removed
[  304.968141][T13019] pimreg1: tun_chr_ioctl cmd 1074025677
[  304.968312][T13019] pimreg1: linktype set to 272
[  305.054487][T13025] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  305.354567][T13030] 8021q: adding VLAN 0 to HW filter on device bond6
[  305.472599][T13035] netlink: 'syz.0.2019': attribute type 2 has an invalid length.
[  305.697453][T13044] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2021'.
[  305.728991][T13047] netlink: NAT attribute has 8 unknown bytes
[  305.729013][T13047] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.666385][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.666627][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.668109][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.668334][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.668552][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.668770][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.703414][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.703693][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.703888][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.704077][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.725047][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.725338][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.739545][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.739663][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.739764][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.739867][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.739989][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.740092][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.740192][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.740291][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.740393][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.740532][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.740643][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.740744][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.740882][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.740995][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.741096][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.741195][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.741292][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.741391][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.741537][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.741642][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.741741][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.741839][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.741940][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.742047][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.742144][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.742241][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.742397][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.742533][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.742639][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.742736][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.742836][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.742934][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.743048][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.743145][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.743241][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.743339][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.743467][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.743587][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.743686][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.743783][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.743884][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.743990][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.744089][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.744186][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.744283][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.744379][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.744521][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.744645][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.744743][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.744840][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.744939][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.745048][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.745146][T13103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  310.005619][T13113] ip_tables: iptables: counters copy to user failed while replacing table
[  313.197032][T13128] block nbd0: Receive control failed (result -32)
[  313.198680][   T56] block nbd0: Receive control failed (result -32)
[  313.451901][T13148] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  313.485023][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'.
[  313.513505][T13145] tmpfs: Bad value for 'uid'
[  313.513694][T13145] tmpfs: Bad value for 'uid'
[  313.520790][T13156] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  313.583589][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'.
[  313.597079][T13163] 8021q: adding VLAN 0 to HW filter on device bond7
[  313.607782][T13163] bond7 (unregistering): Released all slaves
[  313.625577][T13166] netlink: 'syz.1.2056': attribute type 1 has an invalid length.
[  313.671367][T13160] 8021q: adding VLAN 0 to HW filter on device bond18
[  313.673326][T13160] bond17: (slave bond18): making interface the new active one
[  313.674495][T13160] bond17: (slave bond18): Enslaving as an active interface with an up link
[  313.697245][T13160] bond17: (slave gretap2): Enslaving as a backup interface with an up link
[  313.699547][T13160] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  313.718181][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2058'.
[  313.718355][T13170] netlink: 'syz.0.2058': attribute type 2 has an invalid length.
[  313.751628][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2056'.
[  314.278530][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'.
[  314.343187][T13199] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  314.498935][T13201] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2068'.
[  314.502155][T13201] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2068'.
[  314.550839][T13203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2069'.
[  314.799056][T13224] ipvlan2: entered promiscuous mode
[  314.801873][T13224] team0: Device ipvlan2 failed to register rx_handler
[  314.915153][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'.
[  314.918730][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'.
[  314.918967][T13232] veth1_macvtap: left promiscuous mode
[  314.965566][T13236] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  315.132259][T13249] bridge8: entered promiscuous mode
[  315.132293][T13249] bridge8: entered allmulticast mode
[  315.167141][T13254] netlink: 'syz.2.2082': attribute type 15 has an invalid length.
[  316.163823][T13285] netlink: 'syz.2.2091': attribute type 3 has an invalid length.
[  316.164000][T13285] netlink: 'syz.2.2091': attribute type 3 has an invalid length.
[  316.304001][T13291] syzkaller0: entered promiscuous mode
[  316.304019][T13291] syzkaller0: entered allmulticast mode
[  316.424143][T13302] netlink: 'syz.1.2093': attribute type 4 has an invalid length.
[  318.444725][T13374] netlink: 'syz.2.2112': attribute type 1 has an invalid length.
[  318.498037][T13387] syzkaller0: left promiscuous mode
[  318.498050][T13387] syzkaller0: left allmulticast mode
[  318.510707][T13387] __nla_validate_parse: 7 callbacks suppressed
[  318.510728][T13387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2113'.
[  318.510891][T13387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2113'.
[  318.713268][T13355] cgroup: fork rejected by pids controller in /syz0
[  319.687240][T13435] netlink: 'syz.2.2122': attribute type 10 has an invalid length.
[  319.687265][T13435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.687283][T13435] batman_adv: batadv0: Removing interface: batadv_slave_1
[  320.292122][T13435] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  320.292148][T13435] batman_adv: batadv0: Removing interface: ip6gretap1
[  320.361801][T13438] IPv6: sit1: Disabled Multicast RS
[  320.838284][T13467] syzkaller1: entered promiscuous mode
[  320.838297][T13467] syzkaller1: entered allmulticast mode
[  320.887320][T13474] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2136'.
[  321.744690][T13482] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2139'.
[  321.758245][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'.
[  321.771818][T13484] bond19: option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  321.773092][T13484] bond19 (unregistering): Released all slaves
[  321.848136][T13492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2140'.
[  322.136313][T13506] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2147'.
[  322.267740][T13514] x_tables: duplicate underflow at hook 2
[  322.279171][T13514] IPv6: NLM_F_CREATE should be specified when creating new route
[  322.328381][T13514] sctp: [Deprecated]: syz.2.2150 (pid 13514) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.328381][T13514] Use struct sctp_sack_info instead
[  322.673644][T13522] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2152'.
[  322.778565][T13528] netlink: 'syz.0.2155': attribute type 29 has an invalid length.
[  322.927207][T13528] netlink: 'syz.0.2155': attribute type 29 has an invalid length.
[  324.260116][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'.
[  324.369594][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'.
[  324.370555][T13587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2169'.
[  325.199748][T13584] batadv0: entered promiscuous mode
[  325.199766][T13584] batadv0: entered allmulticast mode
[  325.206767][T13600] syzkaller0: entered promiscuous mode
[  325.206786][T13600] syzkaller0: entered allmulticast mode
[  325.288464][T13616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2171'.
[  326.001352][T13654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2177'.
[  326.070269][T13655] netlink: 412 bytes leftover after parsing attributes in process `syz.2.2179'.
[  326.503272][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'.
[  326.503964][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'.
[  326.503975][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'.
[  326.744388][T13703] syzkaller0: entered promiscuous mode
[  326.744407][T13703] syzkaller0: entered allmulticast mode
[  327.662951][T13754] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  327.898987][T13766] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2208'.
[  327.901234][T13766] netlink: 'syz.0.2208': attribute type 2 has an invalid length.
[  328.089951][T13778] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  328.533745][T13807] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20004
[  328.632582][T13812] syzkaller0: entered promiscuous mode
[  328.632769][T13812] syzkaller0: entered allmulticast mode
[  329.350762][T13834] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  329.683864][T13866] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  333.126476][T14006] __nla_validate_parse: 3 callbacks suppressed
[  333.126490][T14006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2242'.
[  333.126613][T14006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2242'.
[  333.126700][T14006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2242'.
[  333.126767][T14006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2242'.
[  333.126832][T14006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2242'.
[  333.126904][T14006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2242'.
[  333.126970][T14006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2242'.
[  333.127036][T14006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2242'.
[  333.127104][T14006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2242'.
[  333.127181][T14006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2242'.
[  333.604780][T14046] syzkaller1: entered promiscuous mode
[  333.604800][T14046] syzkaller1: entered allmulticast mode
[  333.785430][T14054] 8021q: adding VLAN 0 to HW filter on device bond19
[  334.057828][T14071] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:17
[  334.087666][T14071] netlink: 'syz.1.2259': attribute type 3 has an invalid length.
[  334.293243][T14091] syzkaller0: entered promiscuous mode
[  334.293265][T14091] syzkaller0: entered allmulticast mode
[  334.315029][T14091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.484860][T14093] netlink: 'syz.2.2265': attribute type 10 has an invalid length.
[  335.130958][T14090] tipc: Resetting bearer <eth:syzkaller0>
[  335.156309][T14107] netlink: 'syz.1.2269': attribute type 30 has an invalid length.
[  335.157000][T14090] tipc: Disabling bearer <eth:syzkaller0>
[  338.330322][T14119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  338.523043][T14159] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  338.547920][T14156] Cannot find add_set index 2 as target
[  338.598505][T14164] netlink: 'syz.1.2289': attribute type 1 has an invalid length.
[  338.632336][T14164] 8021q: adding VLAN 0 to HW filter on device bond20
[  338.658358][T14166] bond20: (slave veth9): Enslaving as an active interface with a down link
[  338.671554][T14167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.678021][T14167] bond20: (slave batadv0): making interface the new active one
[  338.687001][T14167] batadv0: entered promiscuous mode
[  338.704217][T14167] bond20: (slave batadv0): Enslaving as an active interface with an up link
[  338.722631][T14172] netlink: 'syz.2.2291': attribute type 1 has an invalid length.
[  339.449033][T14164] bond20 (unregistering): (slave veth9): Releasing active interface
[  339.458884][T14164] bond20 (unregistering): (slave batadv0): Releasing active interface
[  339.458901][T14164] batadv0: left promiscuous mode
[  339.474733][T14164] bond20 (unregistering): Released all slaves
[  339.502657][T14172] bond10: entered promiscuous mode
[  339.502692][T14172] bond10: entered allmulticast mode
[  339.502994][T14172] 8021q: adding VLAN 0 to HW filter on device bond10
[  339.522851][T14173] erspan2: entered allmulticast mode
[  339.547340][T14173] bond10: (slave erspan2): making interface the new active one
[  339.547355][T14173] erspan2: entered promiscuous mode
[  339.550977][T14173] bond10: (slave erspan2): Enslaving as an active interface with an up link
[  339.721776][T14192] netlink: 'syz.1.2297': attribute type 1 has an invalid length.
[  339.727193][T14192] __nla_validate_parse: 12 callbacks suppressed
[  339.727209][T14192] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2297'.
[  339.745893][T14188] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2295'.
[  340.120952][T14203] netlink: 'syz.2.2295': attribute type 1 has an invalid length.
[  340.120968][T14203] netlink: 'syz.2.2295': attribute type 1 has an invalid length.
[  340.184501][T14203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.748074][T14216] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2304'.
[  341.364850][T14248] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2312'.
[  341.547313][T14260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2314'.
[  341.979352][T14285] netlink: 'syz.1.2320': attribute type 21 has an invalid length.
[  341.979366][T14285] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2320'.
[  341.979398][T14285] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2320'.
[  342.197377][T14293] veth0_virt_wifi: left allmulticast mode
[  342.198039][T14295] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  342.201941][T14293] veth0_virt_wifi: left promiscuous mode
[  342.202627][T14293] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  342.233639][T14293] bridge_slave_1: left allmulticast mode
[  342.234163][T14293] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.263669][T14293] bridge_slave_0: left promiscuous mode
[  342.264163][T14293] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.297862][T14293] bond0: (slave bridge0): Releasing backup interface
[  342.442959][T14304] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2327'.
[  343.129648][T14340] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2337'.
[  343.130704][T14339] syzkaller0: entered promiscuous mode
[  343.130715][T14339] syzkaller0: entered allmulticast mode
[  343.190746][T14341] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2337'.
[  343.299289][T14343] x_tables: duplicate underflow at hook 2
[  343.509605][T14362] netlink: zone id is out of range
[  343.509614][T14362] netlink: zone id is out of range
[  343.509617][T14362] netlink: zone id is out of range
[  343.509619][T14362] netlink: zone id is out of range
[  343.509637][T14362] netlink: zone id is out of range
[  343.509681][T14362] netlink: zone id is out of range
[  343.509685][T14362] netlink: zone id is out of range
[  344.292902][T14382] net_ratelimit: 3 callbacks suppressed
[  344.292919][T14382] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  344.918778][T14395] __nla_validate_parse: 5 callbacks suppressed
[  344.918922][T14395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2353'.
[  345.118062][T14410] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  345.243308][T14419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2360'.
[  345.243558][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2360'.
[  345.243567][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2360'.
[  345.349180][T14428] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2364'.
[  345.355384][T14428] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2364'.
[  346.017584][T14466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2374'.
[  346.017604][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2374'.
[  346.017839][T14467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2374'.
[  346.017848][T14467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2374'.
[  346.035987][T14467] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  346.345957][T14489] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  346.417321][T14491] syzkaller0: entered promiscuous mode
[  346.417391][T14491] syzkaller0: entered allmulticast mode
[  346.425843][ T5605] Bluetooth: hci2: unexpected cc 0x1005 length: 1 < 8
[  346.425867][ T5605] Bluetooth: hci2: unexpected event for opcode 0x1005
[  346.465034][ T5605] Bluetooth: hci2: unexpected cc 0x1005 length: 1 < 8
[  346.465061][ T5605] Bluetooth: hci2: unexpected event for opcode 0x1005
[  346.615141][T14507] dvmrp0: entered allmulticast mode
[  347.325075][T14570] netlink: 'syz.2.2405': attribute type 4 has an invalid length.
[  347.375043][T14572] tc_dump_action: action bad kind
[  347.418714][T14574] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  347.463177][T14576] syzkaller1: entered promiscuous mode
[  347.463196][T14576] syzkaller1: entered allmulticast mode
[  347.506253][T14580] netlink: 'syz.0.2410': attribute type 5 has an invalid length.
[  347.864686][T14603] netlink: 'syz.2.2415': attribute type 1 has an invalid length.
[  348.238026][T14638] x_tables: unsorted underflow at hook 2
[  348.517714][T14659] netlink: 'syz.0.2427': attribute type 1 has an invalid length.
[  348.711867][T14665] netlink: 'syz.2.2429': attribute type 102 has an invalid length.
[  349.215106][T14714] bridge0: port 3(ip6gretap0) entered disabled state
[  349.221484][T14714] dummy0: left promiscuous mode
[  349.225477][T14714] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.244337][T14714] bond4: left promiscuous mode
[  349.244357][T14714] ip6gre1: left promiscuous mode
[  349.245815][T14714] veth3: left promiscuous mode
[  349.249907][T14714] geneve2: left promiscuous mode
[  349.251481][T14714] macvlan2: left promiscuous mode
[  349.251493][T14714] bond6: left promiscuous mode
[  349.254619][T14714] bond7: left promiscuous mode
[  349.255215][T14714] bond8: left promiscuous mode
[  349.257881][T14714] bond10: left promiscuous mode
[  349.257894][T14714] erspan2: left promiscuous mode
[  349.610068][T14726] netlink: 'syz.2.2445': attribute type 1 has an invalid length.
[  349.822226][T14749] bond19: option mode: unable to set because the bond device is up
[  349.832564][T14749] bond0: left promiscuous mode
[  349.834868][T14750] netlink: 'syz.1.2449': attribute type 2 has an invalid length.
[  349.872103][T14749] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.881022][T14749] bond19: (slave bond0): Enslaving as an active interface with a down link
[  350.191598][T14779] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  350.212925][T14780] netlink: 'syz.0.2457': attribute type 10 has an invalid length.
[  350.409807][T14790] 8021q: VLANs not supported on syzkaller0
[  351.100417][T14797] ip_tables: iptables: counters copy to user failed while replacing table
[  351.290368][T14803] xt_CONNSECMARK: invalid mode: 254
[  351.311566][T14803] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000
[  351.432429][T14809] __nla_validate_parse: 23 callbacks suppressed
[  351.432477][T14809] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2470'.
[  351.550528][T14817] sctp: [Deprecated]: syz.1.2472 (pid 14817) Use of struct sctp_assoc_value in delayed_ack socket option.
[  351.550528][T14817] Use struct sctp_sack_info instead
[  351.643408][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'.
[  351.781012][T14826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.809838][T14867] netlink: 'syz.1.2491': attribute type 1 has an invalid length.
[  352.809855][T14867] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2491'.
[  354.823520][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2498'.
[  355.940278][T14896] netlink: NAT attribute has 8 unknown bytes
[  355.940295][T14896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.942576][T14896] netlink: 'syz.2.2500': attribute type 32 has an invalid length.
[  355.974179][T14896] veth7: entered promiscuous mode
[  356.037692][T14902] hsr0: entered allmulticast mode
[  356.037705][T14902] hsr_slave_1: entered allmulticast mode
[  356.037885][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'.
[  356.040067][T14902] hsr_slave_1: left promiscuous mode
[  356.044022][T14902] hsr0 (unregistering): left allmulticast mode
[  357.340100][T14950] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  357.399138][T14954] ip_tables: iptables: counters copy to user failed while replacing table
[  357.870081][T14982] ip_tables: iptables: counters copy to user failed while replacing table
[  357.871979][T14980] erspan0: entered promiscuous mode
[  358.320610][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2530'.
[  358.353573][T14996] 8021q: adding VLAN 0 to HW filter on device bond20
[  358.591227][T15015] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  358.874989][T10453] IPVS: starting estimator thread 0...
[  358.956981][T15034] IPVS: using max 80 ests per chain, 192000 per kthread
[  359.015678][T15036] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2541'.
[  359.041574][T15036] vlan0: entered allmulticast mode
[  359.041595][T15036] dummy0: entered allmulticast mode
[  359.044643][T15036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2541'.
[  359.358574][ T5598] Bluetooth: hci2: command 0x0406 tx timeout
[  359.589306][T15080] openvswitch: netlink: IPv4 tunnel dst address is zero
[  359.591408][T15082] netlink: 'syz.2.2553': attribute type 1 has an invalid length.
[  359.609996][T15074] openvswitch: netlink: Unknown key attributes 2
[  359.821762][T15099] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2558'.
[  359.883531][T15105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2558'.
[  359.883794][T15106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2558'.
[  360.100304][T15120] ip_tables: iptables: counters copy to user failed while replacing table
[  360.142285][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'.
[  360.166864][ T5636] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  360.166894][ T5636] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  360.166907][ T5636] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  360.166919][ T5636] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  360.194517][T15124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2565'.
[  360.205747][T15124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2565'.
[  360.213389][T15124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2565'.
[  360.744078][T15182] ip_tables: iptables: counters copy to user failed while replacing table
[  361.195514][T15235] net_ratelimit: 1 callbacks suppressed
[  361.195532][T15235] openvswitch: netlink: Missing valid actions attribute.
[  361.232201][T15235] openvswitch: netlink: IPv4 frag type 240 is out of range max 2
[  361.252947][T15238] netlink: 'syz.1.2594': attribute type 1 has an invalid length.
[  361.259585][T15238] openvswitch: netlink: IP tunnel dst address not specified
[  361.304927][T15242] IPVS: Unknown mcast interface: macsec0
[  361.315114][T15245] netlink: 'syz.2.2595': attribute type 5 has an invalid length.
[  361.425369][T15258] netlink: 'syz.2.2599': attribute type 1 has an invalid length.
[  361.426986][ T5598] Bluetooth: hci2: command 0x0406 tx timeout
[  361.478073][T15271] netlink: 'syz.0.2603': attribute type 29 has an invalid length.
[  361.478286][T15272] netlink: 'syz.0.2603': attribute type 29 has an invalid length.
[  361.567060][T15286] IPVS: length: 246 != 24
[  362.080014][T15318] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes
[  362.368997][T15322] batman_adv: batadv0: Adding interface: macvlan1
[  362.369008][T15322] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.369023][T15322] batman_adv: batadv0: Interface activated: macvlan1
[  363.297296][T15352] sctp: [Deprecated]: syz.1.2628 (pid 15352) Use of int in max_burst socket option.
[  363.297296][T15352] Use struct sctp_assoc_value instead
[  363.373859][T15356] netlink: zone id is out of range
[  363.373873][T15356] netlink: zone id is out of range
[  363.373879][T15356] netlink: zone id is out of range
[  363.373885][T15356] netlink: zone id is out of range
[  363.374167][T15356] netlink: zone id is out of range
[  363.374178][T15356] netlink: zone id is out of range
[  363.374183][T15356] netlink: zone id is out of range
[  363.429906][T15347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  363.550551][T15362] __nla_validate_parse: 81 callbacks suppressed
[  363.550619][T15362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2631'.
[  363.718589][T15372] Bluetooth: hci0: unsupported parameter 5134
[  363.718608][T15372] Bluetooth: hci0: unsupported parameter 8192
[  363.718618][T15372] Bluetooth: hci0: unsupported parameter 5134
[  363.718628][T15372] Bluetooth: hci0: unsupported parameter 8192
[  364.630597][T15386] vti0: entered promiscuous mode
[  364.630646][T15386] vti0: entered allmulticast mode
[  364.772415][T15406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.773086][T15406] syzkaller0: entered promiscuous mode
[  364.773096][T15406] syzkaller0: entered allmulticast mode
[  364.785848][T15406] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  364.837137][T15419] bridge3: entered allmulticast mode
[  364.864290][T15406] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  364.874939][T15406] tipc: Resetting bearer <eth:syzkaller0>
[  364.880235][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'.
[  364.883865][T15405] tipc: Resetting bearer <eth:syzkaller0>
[  364.913758][T15405] tipc: Disabling bearer <eth:syzkaller0>
[  364.999619][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'.
[  365.369569][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2652'.
[  366.309658][T15533] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  366.489137][T15548] netlink: 'syz.2.2678': attribute type 10 has an invalid length.
[  366.617858][T15549] net_ratelimit: 51 callbacks suppressed
[  366.617876][T15549] ip_tables: iptables: counters copy to user failed while replacing table
[  366.654693][T15555] ip_tables: iptables: counters copy to user failed while replacing table
[  366.829039][T15548] geneve0: entered promiscuous mode
[  366.830006][T15548] geneve0: entered allmulticast mode
[  366.856653][T15548] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  366.857820][T15553] netlink: 'syz.2.2678': attribute type 4 has an invalid length.
[  366.858046][T15551] netlink: 'syz.2.2678': attribute type 4 has an invalid length.
[  366.880253][ T7338] bond0: (slave geneve0): link status definitely up, 0 Mbps full duplex
[  367.196811][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2686'.
[  368.000381][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'.
[  368.070054][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2691'.
[  368.173287][T15612] ip_tables: iptables: counters copy to user failed while replacing table
[  368.383906][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2696'.
[  368.490505][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2690'.
[  368.629219][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2699'.
[  368.632089][T15636] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  368.829132][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2706'.
[  368.829144][T15655] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2706'.
[  369.282800][T15667] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  369.283022][T15666] openvswitch: netlink: Message has 2 unknown bytes.
[  369.379910][T15674] netlink: 'syz.2.2712': attribute type 1 has an invalid length.
[  369.379928][T15674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2712'.
[  369.382019][T15676] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  369.482178][T15682] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2714'.
[  369.639068][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2714'.
[  369.645982][T15688] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2711'.
[  369.969728][T15695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2717'.
[  370.047932][T15707] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2720'.
[  370.054119][T15707] netlink: 'syz.0.2720': attribute type 1 has an invalid length.
[  370.706805][ T5605] Bluetooth: hci2: command 0x0406 tx timeout
[  371.008720][T15735] netlink: 'syz.2.2730': attribute type 21 has an invalid length.
[  371.008740][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2730'.
[  371.316516][T15754] netlink: 'syz.2.2736': attribute type 1 has an invalid length.
[  371.345106][T15754] bond12: entered promiscuous mode
[  371.345309][T15754] 8021q: adding VLAN 0 to HW filter on device bond12
[  371.399349][T15762] netlink: 'syz.2.2737': attribute type 9 has an invalid length.
[  371.565298][T15774] netlink: NAT attribute has 8 unknown bytes
[  371.565327][T15774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.566529][T15773] xt_hashlimit: Unknown mode mask 3000003, kernel too old?
[  371.608586][T15770] xt_l2tp: invalid flags combination: 0
[  373.079223][T15851] tipc: Can't bind to reserved service type 2
[  375.400792][T15817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  375.502534][T15906] __nla_validate_parse: 3 callbacks suppressed
[  375.502551][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'.
[  375.502682][T15906] tipc: Resetting bearer <eth:syzkaller0>
[  375.545039][T15906] tipc: Disabling bearer <eth:syzkaller0>
[  375.559619][T15913] netlink: 'syz.2.2764': attribute type 1 has an invalid length.
[  375.687954][T15924] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2766'.
[  375.904772][T15951] ip_tables: iptables: counters copy to user failed while replacing table
[  376.080374][T15958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2776'.
[  376.527119][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2784'.
[  376.590695][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2783'.
[  376.990925][T15994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2786'.
[  377.049658][T15999] gretap3: entered promiscuous mode
[  377.433773][T16014] netlink: 'syz.0.2792': attribute type 12 has an invalid length.
[  377.440684][T16014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2792'.
[  377.568197][T16023] netlink: 'syz.0.2794': attribute type 1 has an invalid length.
[  377.810288][T16031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2797'.
[  377.948000][T16037] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2800'.
[  378.148585][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'.
[  378.162553][T16052] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  378.164410][T16051] xt_hashlimit: size too large, truncated to 1048576
[  378.164424][T16051] xt_hashlimit: max too large, truncated to 1048576
[  379.392247][T16146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.783419][T16173] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  380.815918][T16191] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  380.815941][T16191] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  380.838358][T16191] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  380.838378][T16191] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  381.038899][T16221] Set syz0 is full, maxelem 0 reached
[  381.214947][T16233] rxe_eth0 speed is unknown, defaulting to 1000
[  381.435791][T16233] lo speed is unknown, defaulting to 1000
[  382.645507][T16319] tap0: tun_chr_ioctl cmd 1074025681
[  382.649344][T16311] netlink: 'syz.1.2865': attribute type 10 has an invalid length.
[  382.712665][T16320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.775231][T16324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.788365][T16311] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  382.828758][   T13] bond19: (slave bond0): failed to get link speed/duplex
[  382.829982][T16312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.910467][T16333] __nla_validate_parse: 7 callbacks suppressed
[  382.910483][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2871'.
[  382.937201][ T7338] bond19: (slave bond0): failed to get link speed/duplex
[  383.056342][ T5636] bond19: (slave bond0): failed to get link speed/duplex
[  383.166719][ T5636] bond19: (slave bond0): failed to get link speed/duplex
[  383.358036][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  383.476767][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  383.586678][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  383.638309][T16351] netlink: 'syz.0.2876': attribute type 5 has an invalid length.
[  383.639727][T16351] IPVS: rr: UDP [fe80::aa]:8080 - no destination available
[  383.706894][ T7338] bond19: (slave bond0): failed to get link speed/duplex
[  383.878470][T16361] netlink: 'syz.2.2880': attribute type 3 has an invalid length.
[  383.878489][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'.
[  383.882409][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2881'.
[  384.108534][T16372] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2883'.
[  384.593050][T16390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2889'.
[  384.611778][T16390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2889'.
[  385.046745][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'.
[  385.637962][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2905'.
[  385.637983][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2905'.
[  385.784122][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'.
[  386.004754][T16471] netlink: 'syz.2.2914': attribute type 15 has an invalid length.
[  386.017137][T16471] netlink: 'syz.2.2914': attribute type 15 has an invalid length.
[  386.030991][   T13] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  386.031022][   T13] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  386.031039][   T13] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  386.031055][   T13] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  386.106787][ T5636] net_ratelimit: 20 callbacks suppressed
[  386.106805][ T5636] bond19: (slave bond0): failed to get link speed/duplex
[  386.125790][T16480] netlink: 'syz.1.2917': attribute type 4 has an invalid length.
[  386.216286][ T5636] bond19: (slave bond0): failed to get link speed/duplex
[  386.326532][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  386.440540][ T5636] bond19: (slave bond0): failed to get link speed/duplex
[  386.545003][T16500] IPv6: sit3: Disabled Multicast RS
[  386.554881][T16500] netlink: 'syz.1.2925': attribute type 2 has an invalid length.
[  386.566540][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  386.676650][   T13] bond19: (slave bond0): failed to get link speed/duplex
[  386.787153][ T5636] bond19: (slave bond0): failed to get link speed/duplex
[  386.897324][   T13] bond19: (slave bond0): failed to get link speed/duplex
[  386.934256][T16509] ip_tables: iptables: counters copy to user failed while replacing table
[  386.986306][T16511] syzkaller1: entered promiscuous mode
[  386.986319][T16511] syzkaller1: entered allmulticast mode
[  387.006632][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  387.540879][T16546] netlink: 'syz.0.2936': attribute type 25 has an invalid length.
[  387.540899][T16546] netlink: 'syz.0.2936': attribute type 3 has an invalid length.
[  388.889122][T16597] __nla_validate_parse: 75 callbacks suppressed
[  388.889138][T16597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2954'.
[  388.961904][T16601] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2957'.
[  389.302741][T16619] pimreg1: tun_chr_ioctl cmd 1074025677
[  389.302829][T16619] pimreg1: linktype set to 825
[  389.447221][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'.
[  389.461863][T16633] netlink: 'syz.1.2967': attribute type 10 has an invalid length.
[  389.470256][T16633] team0: Device bridge0 failed to register rx_handler
[  389.640173][T16641] syzkaller1: entered promiscuous mode
[  389.640190][T16641] syzkaller1: entered allmulticast mode
[  389.836009][T16663] netlink: 'syz.2.2977': attribute type 4 has an invalid length.
[  389.836028][T16663] netlink: 'syz.2.2977': attribute type 10 has an invalid length.
[  389.836035][T16663] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2977'.
[  389.851803][T16663] bond0: left allmulticast mode
[  389.851817][T16663] bond_slave_1: left allmulticast mode
[  389.851824][T16663] bond2: left allmulticast mode
[  389.851842][T16663] geneve0: left allmulticast mode
[  389.851855][T16663] bond0: left promiscuous mode
[  389.851859][T16663] bond_slave_1: left promiscuous mode
[  389.852761][T16663] bond2: left promiscuous mode
[  389.852873][T16663] geneve0: left promiscuous mode
[  389.853013][T16663] : port 1(bond0) entered disabled state
[  390.001955][T16666] netlink: 'syz.2.2978': attribute type 62 has an invalid length.
[  390.080186][T16676] veth7: left promiscuous mode
[  390.100006][T16676] bond12: left promiscuous mode
[  390.115234][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2980'.
[  390.830474][T16683] netlink: 'syz.1.2983': attribute type 1 has an invalid length.
[  390.881583][T16683] netlink: 'syz.1.2983': attribute type 10 has an invalid length.
[  390.881601][T16683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2983'.
[  390.973827][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2986'.
[  390.974498][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2986'.
[  391.062030][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'.
[  391.116489][ T5636] net_ratelimit: 38 callbacks suppressed
[  391.116508][ T5636] bond19: (slave bond0): failed to get link speed/duplex
[  391.226381][ T5636] bond19: (slave bond0): failed to get link speed/duplex
[  391.324349][T16709] netlink: 'syz.2.2991': attribute type 39 has an invalid length.
[  391.336577][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  391.446379][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  391.558537][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  391.562566][T16719] openvswitch: netlink: ct_state flags 806d0004 unsupported
[  391.678053][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  391.692401][T16725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2999'.
[  391.717966][T16729] ip6_vti0: entered allmulticast mode
[  391.789232][   T13] bond19: (slave bond0): failed to get link speed/duplex
[  391.978684][ T5636] bond19: (slave bond0): failed to get link speed/duplex
[  392.086303][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  392.323707][T16770] xt_cgroup: path and classid specified
[  393.299702][T16819] syzkaller0: entered promiscuous mode
[  393.299715][T16819] syzkaller0: entered allmulticast mode
[  393.699267][T16838] netlink: 'syz.0.3027': attribute type 10 has an invalid length.
[  393.710921][T16838] bond0: (slave veth0_to_bond): Releasing backup interface
[  394.444860][T16866] netlink: 'syz.0.3033': attribute type 1 has an invalid length.
[  394.444879][T16866] __nla_validate_parse: 4 callbacks suppressed
[  394.444886][T16866] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3033'.
[  394.529625][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'.
[  394.908283][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'.
[  394.910274][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'.
[  395.504032][T16903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3045'.
[  395.881022][T16925] netlink: 'syz.0.3051': attribute type 3 has an invalid length.
[  396.095827][T16928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3052'.
[  396.143550][ T5662] net_ratelimit: 35 callbacks suppressed
[  396.143571][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  396.248433][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  396.303227][T16948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3059'.
[  396.377121][   T13] bond19: (slave bond0): failed to get link speed/duplex
[  396.407488][T16948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  396.516212][   T13] bond19: (slave bond0): failed to get link speed/duplex
[  396.598180][T16946] netlink: 'syz.1.3058': attribute type 10 has an invalid length.
[  396.718189][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  396.839182][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  396.935365][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'.
[  396.935394][T16974] netlink: 'syz.2.3065': attribute type 10 has an invalid length.
[  396.935404][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3065'.
[  397.069334][T16974] geneve3: entered promiscuous mode
[  397.069352][T16974] geneve3: entered allmulticast mode
[  397.087259][ T5636] bond19: (slave bond0): failed to get link speed/duplex
[  397.217117][   T13] bond19: (slave bond0): failed to get link speed/duplex
[  397.327214][   T13] bond19: (slave bond0): failed to get link speed/duplex
[  397.528147][T17003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3069'.
[  398.094655][T17046] ifb0: entered allmulticast mode
[  398.238374][T17050] netlink: 'syz.1.3079': attribute type 4 has an invalid length.
[  399.048498][T17096] IPv6: NLM_F_CREATE should be specified when creating new route
[  399.458074][T17131] __nla_validate_parse: 9 callbacks suppressed
[  399.458090][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'.
[  399.506699][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3103'.
[  399.512277][T17142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3101'.
[  399.513541][T17142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3101'.
[  399.526746][T17142] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  399.526939][T17141] netlink: 'syz.0.3103': attribute type 8 has an invalid length.
[  399.526949][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'.
[  399.638735][T17153] tipc: New replicast peer: 255.255.255.255
[  399.639348][T17153] tipc: Enabled bearer <udp:syz2>, priority 10
[  399.650315][T17159] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  399.777354][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'.
[  399.812565][T17169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3112'.
[  399.856390][T17166] 0{X: left allmulticast mode
[  400.179135][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3118'.
[  400.200012][T17185] ovs-dp0: entered promiscuous mode
[  400.225593][T17185] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.225609][T17185] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  400.225619][T17185] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.272808][T17185] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.272826][T17185] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  400.272836][T17185] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.298538][T17187] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  400.301794][T17188] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  400.328544][T17185] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.328562][T17185] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  400.328572][T17185] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.419041][T17185] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.420933][T17185] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  400.420956][T17185] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.526990][ T5662] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  400.527015][ T5662] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  400.527030][ T5662] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.527052][ T5662] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  400.527065][ T5662] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  400.527078][ T5662] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.527097][ T5662] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  400.527111][ T5662] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  400.527124][ T5662] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.527143][ T5662] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  400.527156][ T5662] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  400.527169][ T5662] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.247386][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'.
[  401.249658][ T5662] net_ratelimit: 32 callbacks suppressed
[  401.249667][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  401.357271][ T5662] bond19: (slave bond0): failed to get link speed/duplex
[  401.358737][T17244] ip_tables: iptables: counters copy to user failed while replacing table
[  401.686734][T17260] netlink: NAT attribute has 8 unknown bytes
[  401.686760][T17260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.438571][ T5678] lo speed is unknown, defaulting to 1000
[  402.438621][ T5678] syz2: Port: 1 Link DOWN
[  402.467003][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.467027][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  402.467053][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.467067][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  402.467086][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.467099][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  402.467120][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.467134][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  402.683713][T17259] infiniband syz1: set active
[  402.688365][T17259] infiniband syz1: added bond_slave_1
[  402.703077][T17259] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  402.703094][T17259] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  402.703108][T17259] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  402.748287][T17259] RDS/IB: syz1: added
[  402.748313][T17259] smc: adding ib device syz1 with port count 1
[  402.748321][T17259] smc:    ib device syz1 port 1 has no pnetid
[  403.307128][T17292] netlink: 'syz.2.3140': attribute type 4 has an invalid length.
[  403.325727][T17292] x_tables: duplicate underflow at hook 2
[  403.523582][T17300] veth1_to_bond: entered allmulticast mode
[  403.523922][T17299] veth1_to_bond: entered promiscuous mode
[  403.604000][T17309] syzkaller0: entered promiscuous mode
[  403.604022][T17309] syzkaller0: entered allmulticast mode
[  405.222312][T17298] veth1_to_bond: left promiscuous mode
[  405.222481][T17298] veth1_to_bond: left allmulticast mode
[  405.300334][T17312] netlink: 'syz.0.3147': attribute type 1 has an invalid length.
[  405.318625][T17312] bond8: entered promiscuous mode
[  405.318941][T17312] 8021q: adding VLAN 0 to HW filter on device bond8
[  405.329521][T17312] ipvlan0: entered allmulticast mode
[  405.329536][T17312] bond8: entered allmulticast mode
[  405.329768][T17312] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  405.329782][T17312] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  405.329792][T17312] bond8: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  405.330760][T17312] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  405.420754][T17318] ip_tables: iptables: counters copy to user failed while replacing table
[  405.452105][T17324] netlink: 'syz.0.3149': attribute type 10 has an invalid length.
[  405.490122][T17324] wg2: entered promiscuous mode
[  405.490279][T17324] team0: Device wg2 is of different type
[  405.536920][T17329] netlink: 'syz.0.3151': attribute type 4 has an invalid length.
[  405.536934][T17329] netlink: 'syz.0.3151': attribute type 7 has an invalid length.
[  405.832146][T17354] vlan4: entered promiscuous mode
[  405.832158][T17354] bridge0: entered promiscuous mode
[  405.832164][T17354] vlan3: entered promiscuous mode
[  405.832169][T17354] geneve0: entered promiscuous mode
[  405.904936][T17356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3158'.
[  406.383276][T17356] Set syz1 is full, maxelem 65536 reached
[  406.557147][T17388] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3168'.
[  406.731786][T17406] netlink: 'syz.1.3175': attribute type 1 has an invalid length.
[  406.779595][T17406] bond21: entered promiscuous mode
[  406.780009][T17406] 8021q: adding VLAN 0 to HW filter on device bond21
[  406.818249][T17406] bond21: (slave bridge10): making interface the new active one
[  406.818270][T17406] bridge10: entered promiscuous mode
[  406.819142][T17406] bond21: (slave bridge10): Enslaving as an active interface with an up link
[  406.848789][T17413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3177'.
[  406.849341][T17411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3177'.
[  406.929920][T17420] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  407.002065][T17426] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3182'.
[  407.002086][T17426] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3182'.
[  407.128494][T17439] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.149929][T17439] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  407.319857][T17457] sctp: [Deprecated]: syz.0.3185 (pid 17457) Use of int in max_burst socket option deprecated.
[  407.319857][T17457] Use struct sctp_assoc_value instead
[  407.485548][T17460] bond9: entered allmulticast mode
[  407.486756][T17460] 8021q: adding VLAN 0 to HW filter on device bond9
[  407.562720][T17475] veth1_macvtap: entered promiscuous mode
[  407.562981][T17475] macsec0: entered promiscuous mode
[  407.878974][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3188'.
[  407.995702][T17495] vcan0: entered allmulticast mode
[  407.999610][T17495] vcan0: left allmulticast mode
[  408.250622][T17499] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  408.250659][T17499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.289942][T17501] xt_policy: output policy not valid in PREROUTING and INPUT
[  408.645487][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'.
[  409.311673][T17547] netlink: 'syz.1.3206': attribute type 1 has an invalid length.
[  409.311691][T17547] netlink: 'syz.1.3206': attribute type 2 has an invalid length.
[  409.469908][T17551] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3207'.
[  409.470124][T17552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3207'.
[  409.524910][T17554] ip_tables: iptables: counters copy to user failed while replacing table
[  409.571706][T17556] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  409.849858][T17570] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  410.704082][T17587] syzkaller1: entered promiscuous mode
[  410.704103][T17587] syzkaller1: entered allmulticast mode
[  410.761520][T17589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.184383][T17606] __nla_validate_parse: 8 callbacks suppressed
[  411.184400][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3224'.
[  411.245074][T17604] rxe_eth0 speed is unknown, defaulting to 1000
[  411.484033][T17604] lo speed is unknown, defaulting to 1000
[  412.755903][T17639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3233'.
[  412.781595][T17639] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3233'.
[  412.923491][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'.
[  413.474424][T17684] netlink: 'syz.1.3244': attribute type 1 has an invalid length.
[  413.514990][T17690] netlink: 'syz.0.3245': attribute type 1 has an invalid length.
[  413.750012][T17690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3245'.
[  413.800254][T17692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3245'.
[  414.421688][T17715] netlink: zone id is out of range
[  414.421702][T17715] netlink: zone id is out of range
[  414.421708][T17715] netlink: zone id is out of range
[  414.421713][T17715] netlink: zone id is out of range
[  414.421718][T17715] netlink: zone id is out of range
[  414.421724][T17715] netlink: zone id is out of range
[  414.421728][T17715] netlink: zone id is out of range
[  414.421734][T17715] netlink: zone id is out of range
[  414.421739][T17715] netlink: zone id is out of range
[  414.421744][T17715] netlink: set zone limit has 4 unknown bytes
[  414.425051][T17715] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3253'.
[  414.425067][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3253'.
[  414.670064][T17726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3256'.
[  414.831766][T17740] netlink: 'syz.0.3262': attribute type 16 has an invalid length.
[  414.831778][T17740] netlink: 'syz.0.3262': attribute type 17 has an invalid length.
[  414.910649][T17740] netlink: 508 bytes leftover after parsing attributes in process `syz.0.3262'.
[  415.035250][T17744] bridge11: entered allmulticast mode
[  415.049975][T17744] bridge12: entered allmulticast mode
[  415.055539][T17744] bridge13: entered allmulticast mode
[  415.060841][T17744] bridge14: entered allmulticast mode
[  415.065577][T17744] bridge15: entered allmulticast mode
[  415.072913][T17744] bridge16: entered allmulticast mode
[  415.102644][T17744] bridge17: entered allmulticast mode
[  415.132847][T17744] bridge18: entered allmulticast mode
[  415.145535][T17744] bridge19: entered allmulticast mode
[  415.158808][T17744] bridge20: entered allmulticast mode
[  415.171892][T17744] bridge21: entered allmulticast mode
[  415.178046][T17744] bridge22: entered allmulticast mode
[  415.199240][T17744] bridge23: entered allmulticast mode
[  415.208766][T17744] bridge24: entered allmulticast mode
[  415.209419][T17749] pimreg1: tun_chr_ioctl cmd 1074025677
[  415.209488][T17749] pimreg1: linktype set to 825
[  415.253913][T17744] bridge25: entered allmulticast mode
[  415.268435][T17744] bridge26: entered allmulticast mode
[  415.280552][T17744] bridge27: entered allmulticast mode
[  415.301333][T17744] bridge28: entered allmulticast mode
[  415.324855][T17744] bridge29: entered allmulticast mode
[  415.334928][T17744] bridge30: entered allmulticast mode
[  415.345064][T17744] bridge31: entered allmulticast mode
[  415.352406][T17744] bridge32: entered allmulticast mode
[  415.358951][T17744] bridge33: entered allmulticast mode
[  415.369640][T17744] bridge34: entered allmulticast mode
[  415.388966][T17744] bridge35: entered allmulticast mode
[  415.398218][T17744] bridge36: entered allmulticast mode
[  415.411204][T17744] bridge37: entered allmulticast mode
[  415.418855][T17744] bridge38: entered allmulticast mode
[  415.424302][T17744] bridge39: entered allmulticast mode
[  415.442389][T17744] bridge40: entered allmulticast mode
[  415.455658][T17744] bridge41: entered allmulticast mode
[  415.471711][T17744] bridge42: entered allmulticast mode
[  415.485970][T17744] bridge43: entered allmulticast mode
[  415.543675][T17771] syzkaller1: entered promiscuous mode
[  415.543687][T17771] syzkaller1: entered allmulticast mode
[  416.532068][    T9] dummy0: entered promiscuous mode
[  416.574077][T17797] __nla_validate_parse: 5 callbacks suppressed
[  416.574121][T17797] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3277'.
[  416.574132][T17797] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3277'.
[  417.229946][T17828] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3289'.
[  417.230067][T17828] unsupported nlmsg_type 40
[  417.797524][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'.
[  418.056792][T17878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3305'.
[  418.064626][T17878] syzkaller0: entered promiscuous mode
[  418.064645][T17878] syzkaller0: entered allmulticast mode
[  418.065214][T17878] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[  418.333377][T17897] xt_REDIRECT: bad MAP_IPS.
[  418.394223][T17899] netlink: 'syz.0.3312': attribute type 25 has an invalid length.
[  418.394242][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'.
[  418.466954][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'.
[  418.944953][T17920] : renamed from bridge_slave_1 (while UP)
[  419.000820][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'.
[  419.002032][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'.
[  420.844485][T17937] bond0: entered promiscuous mode
[  420.844498][T17937] bond_slave_1: entered promiscuous mode
[  420.845362][T17937] batadv0: entered promiscuous mode
[  420.853107][T17937] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  420.853120][T17937] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  420.863181][T17937] 8021q: adding VLAN 0 to HW filter on device hsr0
[  420.864414][T17937] bond0: left promiscuous mode
[  420.864426][T17937] bond_slave_1: left promiscuous mode
[  420.874384][T17937] batadv0: left promiscuous mode
[  421.494662][T17986] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3333'.
[  421.657701][T17998] bridge45: entered allmulticast mode
[  421.719769][T17996] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  422.602203][T18011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3339'.
[  422.602222][T18011] net_ratelimit: 4 callbacks suppressed
[  422.602229][T18011] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  425.051695][T18059] netlink: 'syz.0.3346': attribute type 2 has an invalid length.
[  425.238093][T18077] netlink: 'syz.1.3352': attribute type 3 has an invalid length.
[  425.238108][T18077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3352'.
[  425.242183][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3352'.
[  426.093741][T18088] bond0: (slave bond_slave_1): Releasing backup interface
[  426.114461][ T5677] syz1: Port: 1 Link DOWN
[  426.222894][T18099] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3357'.
[  426.224305][T18099] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3357'.
[  426.224631][T18099] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3357'.
[  426.227219][T18099] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3357'.
[  426.229501][T18099] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3357'.
[  426.232990][T18099] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3357'.
[  426.241074][T18099] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3357'.
[  426.387881][T18113] bond12: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  426.389316][T18113] bond12 (unregistering): Released all slaves
[  426.734033][T18134] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  427.181309][T18157] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  427.340531][T18167] ip_tables: iptables: counters copy to user failed while replacing table
[  427.720192][T18204] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  427.850269][T18206] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  427.852004][T18206] netlink: 'syz.0.3393': attribute type 1 has an invalid length.
[  427.922557][T18206] bond12: entered promiscuous mode
[  427.923168][T18206] 8021q: adding VLAN 0 to HW filter on device bond12
[  427.977816][T18209] rxe_eth0 speed is unknown, defaulting to 1000
[  427.978337][T18206] __nla_validate_parse: 36 callbacks suppressed
[  427.978351][T18206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3393'.
[  427.978526][T18206] bond12: entered allmulticast mode
[  428.086865][T18206] bond12: (slave bridge0): making interface the new active one
[  428.086880][T18206] bridge0: entered promiscuous mode
[  428.087037][T18206] bridge0: entered allmulticast mode
[  428.088695][T18206] bond12: (slave bridge0): Enslaving as an active interface with an up link
[  428.149141][T18215] netlink: 'syz.0.3395': attribute type 3 has an invalid length.
[  428.205685][T18209] lo speed is unknown, defaulting to 1000
[  428.234597][T18215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3395'.
[  428.397749][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3400'.
[  428.397761][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3400'.
[  428.489995][T18238] gretap0: entered promiscuous mode
[  428.494507][T18238] openvswitch: netlink: IP tunnel dst address not specified
[  428.664069][T18250] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  428.888113][T18267] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  428.888321][T18268] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  429.074972][T18280] block nbd0: reconnected socket
[  429.075074][T18280] block nbd0: reconnected socket
[  429.081632][T13128] block nbd0: Receive control failed (result -32)
[  429.087595][   T56] block nbd0: Receive control failed (result -32)
[  429.143742][T18285] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  429.360200][T18305] IPv6: NLM_F_CREATE should be specified when creating new route
[  429.378181][T18305] syzkaller1: entered promiscuous mode
[  429.378198][T18305] syzkaller1: entered allmulticast mode
[  429.440304][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3419'.
[  429.441414][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3419'.
[  429.441599][T18306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3419'.
[  429.712583][T18320] netlink: 'syz.1.3422': attribute type 2 has an invalid length.
[  429.712668][T18320] netlink: 'syz.1.3422': attribute type 2 has an invalid length.
[  429.922796][T18331] bond19: (slave bond0): Releasing active interface
[  429.933881][T18331] bond0: (slave veth0_to_bond): Releasing backup interface
[  429.936545][T18331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  429.939500][T18331] team0: Device xfrm0 is of different type
[  429.965382][T18331] tipc: Enabled bearer <eth:team0>, priority 0
[  430.095510][T18337] openvswitch: netlink: ct_state flags 0000c1ff unsupported
[  430.141707][T18344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3429'.
[  430.149556][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3429'.
[  430.223945][T18353] syzkaller0: entered promiscuous mode
[  430.223965][T18353] syzkaller0: entered allmulticast mode
[  430.315483][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3436'.
[  430.767751][T18392] netlink: 'syz.2.3446': attribute type 1 has an invalid length.
[  430.789871][T18392] 8021q: adding VLAN 0 to HW filter on device bond14
[  430.804998][T18392] bond14: (slave gretap1): making interface the new active one
[  430.812968][T18392] bond14: (slave gretap1): Enslaving as an active interface with an up link
[  430.819158][   T34] audit: type=1107 audit(1792451862.489:5): pid=18395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='9)p'
[  431.169895][T18415] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  431.394232][T18424] openvswitch: netlink: Key type 226 is out of range max 32
[  431.395078][T18424] netlink: 'syz.0.3455': attribute type 10 has an invalid length.
[  431.501680][T18426] netlink: 'syz.0.3456': attribute type 10 has an invalid length.
[  432.425923][T18469] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  432.942621][T18513] netlink: 'syz.1.3480': attribute type 1 has an invalid length.
[  432.966380][T18515] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  433.272968][T18524] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  433.286618][T18526] __nla_validate_parse: 39 callbacks suppressed
[  433.286634][T18526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3485'.
[  434.212687][T18556] netlink: 'syz.0.3491': attribute type 1 has an invalid length.
[  435.641141][T18595] ip_tables: iptables: counters copy to user failed while replacing table
[  436.217610][T18610] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  436.281479][T18613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3502'.
[  436.281511][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3502'.
[  436.828366][T18613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3502'.
[  436.828396][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3502'.
[  436.942085][T18624] openvswitch: netlink: Message has 2 unknown bytes.
[  436.944334][T18625] openvswitch: netlink: Message has 2 unknown bytes.
[  436.950281][T18629] netlink: 'syz.1.3505': attribute type 7 has an invalid length.
[  436.950296][T18629] netlink: 'syz.1.3505': attribute type 8 has an invalid length.
[  437.007055][T18634] netlink: 'syz.1.3505': attribute type 21 has an invalid length.
[  437.007074][T18634] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3505'.
[  437.067357][T18640] openvswitch: netlink: Missing valid actions attribute.
[  437.067388][T18640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.073781][T18639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3507'.
[  437.291835][T18657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3514'.
[  437.427181][T18661] netlink: 'syz.2.3516': attribute type 10 has an invalid length.
[  437.429871][T18661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3516'.
[  437.447894][T18667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3515'.
[  437.822341][T18696] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  438.151157][T18717] openvswitch: netlink: Flow key attr not present in new flow.
[  438.622614][T18744] __nla_validate_parse: 6 callbacks suppressed
[  438.622756][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3538'.
[  439.043419][T18765] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3545'.
[  439.063164][T18767] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3546'.
[  439.097420][T18769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3547'.
[  439.105112][T18769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  439.422789][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3559'.
[  439.485601][T18808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3559'.
[  439.813095][T18812] netlink: 'syz.2.3560': attribute type 4 has an invalid length.
[  439.820579][T18825] bridge6: entered promiscuous mode
[  439.873022][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3562'.
[  439.925700][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3565'.
[  440.020683][T18837] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3565'.
[  440.743138][T18869] netlink: 'syz.1.3574': attribute type 12 has an invalid length.
[  440.847270][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'.
[  441.259902][T18894] tc_dump_action: action bad kind
[  441.399196][T18901] netlink: 'syz.0.3583': attribute type 1 has an invalid length.
[  441.422384][T18901] 8021q: adding VLAN 0 to HW filter on device bond13
[  441.433777][T18901] bond13: entered allmulticast mode
[  442.437342][T18926] netlink: 'syz.1.3593': attribute type 1 has an invalid length.
[  443.018009][T18951] IPVS: set_ctl: invalid protocol: 4 172.20.20.42:20001
[  443.050295][T18938] netlink: 'syz.2.3597': attribute type 2 has an invalid length.
[  443.618349][T18991] geneve3: entered promiscuous mode
[  444.175262][T19002] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  444.536602][T19006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.570587][T19017] netlink: 'syz.0.3619': attribute type 1 has an invalid length.
[  444.605230][T19017] 8021q: adding VLAN 0 to HW filter on device bond14
[  444.760402][T19023] netlink: 'syz.1.3621': attribute type 1 has an invalid length.
[  444.772927][T19023] 8021q: adding VLAN 0 to HW filter on device bond22
[  444.781119][T19023] bond22: entered allmulticast mode
[  444.783952][T19023] __nla_validate_parse: 42 callbacks suppressed
[  444.783964][T19023] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3621'.
[  444.832081][T19029] 8021q: adding VLAN 0 to HW filter on device bond2
[  444.834037][T19029] bond2: (slave gtp4): The slave device specified does not support setting the MAC address
[  444.834056][T19029] bond2: (slave gtp4): Setting fail_over_mac to active for active-backup mode
[  444.864346][T19029] bond2: (slave gtp4): making interface the new active one
[  444.868300][ T5636] bond0: (slave bond2): link status up, enabling it in 4 ms
[  444.874764][T19029] bond2: (slave gtp4): Enslaving as an active interface with an up link
[  444.886412][ T7343] bond0: (slave bond2): link status up, enabling it in 4 ms
[  444.886713][T19035] netlink: 'syz.1.3624': attribute type 1 has an invalid length.
[  444.916344][ T7343] bond0: (slave bond2): link status up, enabling it in 4 ms
[  444.946709][ T5636] bond0: (slave bond2): link status up, enabling it in 4 ms
[  444.967279][T19035] bond23: entered promiscuous mode
[  444.967630][T19035] 8021q: adding VLAN 0 to HW filter on device bond23
[  444.979425][   T13] bond0: (slave bond2): link status up, enabling it in 4 ms
[  445.012147][   T13] bond0: (slave bond2): link status up, enabling it in 4 ms
[  445.026600][   T13] bond0: (slave bond2): link status up, enabling it in 4 ms
[  445.048389][ T5636] bond0: (slave bond2): link status up, enabling it in 4 ms
[  445.066777][ T5636] bond0: (slave bond2): link status definitely up, 0 Mbps full duplex
[  445.089029][T19045] netlink: zone id is out of range
[  445.283994][T19063] netlink: 'syz.2.3630': attribute type 9 has an invalid length.
[  445.316263][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3631'.
[  445.342806][T19065] vlan3: entered allmulticast mode
[  445.357492][T19065] bridge7: entered allmulticast mode
[  446.765623][T19124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3646'.
[  447.555126][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3655'.
[  448.885983][T19197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3662'.
[  448.889110][T19197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3662'.
[  448.889181][T19197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3662'.
[  448.889231][T19197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3662'.
[  448.889282][T19197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3662'.
[  448.889331][T19197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3662'.
[  449.733233][T19227] netlink: 'syz.1.3668': attribute type 21 has an invalid length.
[  449.733730][T19227] netlink: 'syz.1.3668': attribute type 21 has an invalid length.
[  449.739250][T19227] netlink: 'syz.1.3668': attribute type 21 has an invalid length.
[  449.739605][T19227] netlink: 'syz.1.3668': attribute type 21 has an invalid length.
[  449.739988][T19227] netlink: 'syz.1.3668': attribute type 21 has an invalid length.
[  449.740217][T19227] netlink: 'syz.1.3668': attribute type 21 has an invalid length.
[  449.740480][T19227] netlink: 'syz.1.3668': attribute type 21 has an invalid length.
[  449.740729][T19227] netlink: 'syz.1.3668': attribute type 21 has an invalid length.
[  449.744275][T19227] netlink: 'syz.1.3668': attribute type 21 has an invalid length.
[  449.752406][T19227] netlink: 'syz.1.3668': attribute type 21 has an invalid length.
[  450.328526][T19237] pim6reg1: entered promiscuous mode
[  450.328539][T19237] pim6reg1: entered allmulticast mode
[  450.618719][T19250] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  450.618733][T19250] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  450.753634][T19258] __nla_validate_parse: 60 callbacks suppressed
[  450.753647][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3676'.
[  450.922980][T19267] net_ratelimit: 17 callbacks suppressed
[  450.922999][T19267] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  451.004177][T19264] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3678'.
[  451.646996][T19284] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3685'.
[  451.700724][T19290] xt_l2tp: v2 doesn't support IP mode
[  452.230824][T19303] ip_tables: iptables: counters copy to user failed while replacing table
[  453.272895][T19327] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.3699'.
[  453.342363][T19331] bond0: entered promiscuous mode
[  453.425860][T19333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3702'.
[  453.491284][T19339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3704'.
[  453.493064][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3704'.
[  453.698975][T19353] C: entered allmulticast mode
[  453.699670][T19353] C: left allmulticast mode
[  453.928343][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3709'.
[  453.930548][T19358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3709'.
[  454.074288][T19275] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  454.448794][T19382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3712'.
[  454.860607][T19412] tc_dump_action: action bad kind
[  455.015358][T19421] syzkaller1: entered promiscuous mode
[  455.015370][T19421] syzkaller1: entered allmulticast mode
[  455.483499][T19443] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  455.622545][T19453] syzkaller1: entered promiscuous mode
[  455.622558][T19453] syzkaller1: entered allmulticast mode
[  455.858286][T19464] __nla_validate_parse: 3 callbacks suppressed
[  455.858297][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3730'.
[  455.858309][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3730'.
[  455.958615][T19471] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  456.250571][T19492] validate_nla: 57 callbacks suppressed
[  456.250583][T19492] netlink: 'syz.1.3737': attribute type 16 has an invalid length.
[  456.250595][T19492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3737'.
[  456.283261][T19492] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3737'.
[  456.346584][T19494] netlink: 'syz.1.3738': attribute type 3 has an invalid length.
[  456.414745][T19498] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3739'.
[  456.488396][T19501] netlink: 'syz.1.3739': attribute type 21 has an invalid length.
[  456.488417][T19501] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3739'.
[  456.488492][T19501] netlink: 'syz.1.3739': attribute type 4 has an invalid length.
[  456.488502][T19501] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3739'.
[  456.977539][T19508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3740'.
[  457.268982][T19518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3742'.
[  457.269003][T19518] netlink: 'syz.2.3742': attribute type 7 has an invalid length.
[  457.269009][T19518] netlink: 'syz.2.3742': attribute type 8 has an invalid length.
[  457.269013][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3742'.
[  457.352862][T19525] syzkaller1: entered promiscuous mode
[  457.352883][T19525] syzkaller1: entered allmulticast mode
[  457.692784][T19551] netlink: zone id is out of range
[  457.692796][T19551] netlink: zone id is out of range
[  457.692805][T19551] netlink: zone id is out of range
[  457.692809][T19551] netlink: zone id is out of range
[  457.692814][T19551] netlink: zone id is out of range
[  457.692820][T19551] netlink: zone id is out of range
[  457.692824][T19551] netlink: zone id is out of range
[  457.692829][T19551] netlink: zone id is out of range
[  457.692834][T19551] netlink: zone id is out of range
[  457.787104][T19556] netlink: 'syz.2.3751': attribute type 1 has an invalid length.
[  457.835465][T19556] 8021q: adding VLAN 0 to HW filter on device bond15
[  457.853493][T19549] gretap2: entered promiscuous mode
[  457.895079][T19549] bond16 (unregistering): Released all slaves
[  458.333685][T19580] netlink: 'syz.2.3757': attribute type 1 has an invalid length.
[  458.361539][T19580] xt_hashlimit: size too large, truncated to 1048576
[  458.467084][T19583] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.644187][T19583] bridge_slave_0 (unregistering): left allmulticast mode
[  458.644215][T19583] bridge_slave_0 (unregistering): left promiscuous mode
[  458.644382][T19583] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.876787][T19602] bond12: entered allmulticast mode
[  458.893664][T19600] bond12: left allmulticast mode
[  459.951616][T19623] xt_IDLETIMER: timeout value is zero
[  460.084425][T19635] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  461.274597][T19691] __nla_validate_parse: 4 callbacks suppressed
[  461.274608][T19691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3780'.
[  461.411793][T19697] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3783'.
[  461.487366][T19700] netlink: 'syz.1.3785': attribute type 1 has an invalid length.
[  461.490687][T19697] bond16: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  461.492587][T19697] bond16 (unregistering): Released all slaves
[  461.702688][T19700] 8021q: adding VLAN 0 to HW filter on device bond24
[  462.010981][T19719] net_ratelimit: 8 callbacks suppressed
[  462.011001][T19719] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  464.561113][T19735] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3794'.
[  464.835981][T19748] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  464.956499][T19751] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3801'.
[  465.003263][T19755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3802'.
[  465.049230][T19762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3804'.
[  465.064290][T19760] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3803'.
[  465.079216][T19765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3805'.
[  465.154516][T19773] bridge0: port 1(ip6gretap0) entered blocking state
[  465.154553][T19773] bridge0: port 1(ip6gretap0) entered disabled state
[  465.154652][T19773] ip6gretap0: entered allmulticast mode
[  465.155373][T19773] ip6gretap0: entered promiscuous mode
[  465.160651][T19770] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  465.315838][T19776] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  465.370728][T19785] ip_tables: iptables: counters copy to user failed while replacing table
[  465.444336][T19785] netlink: 'syz.0.3811': attribute type 16 has an invalid length.
[  465.444357][T19785] netlink: 'syz.0.3811': attribute type 17 has an invalid length.
[  465.483796][T19785] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  465.712469][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'.
[  465.724386][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'.
[  465.763717][T19798] veth1_macvtap: left promiscuous mode
[  465.807323][T19799] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI %
[  465.808076][T19802] netlink: 'syz.1.3814': attribute type 1 has an invalid length.
[  465.836544][T19802] 8021q: adding VLAN 0 to HW filter on device bond25
[  466.685011][T19843] netlink: 'syz.1.3823': attribute type 46 has an invalid length.
[  466.743763][T19843] syzkaller0: entered promiscuous mode
[  466.743784][T19843] syzkaller0: entered allmulticast mode
[  468.778011][T19871] netlink: 'syz.1.3831': attribute type 10 has an invalid length.
[  468.782239][T19874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3832'.
[  468.880842][T19872] netlink: 'syz.1.3831': attribute type 10 has an invalid length.
[  468.965529][T19878] netlink: 'syz.2.3834': attribute type 39 has an invalid length.
[  468.995598][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'.
[  469.001480][T19883] lo: left promiscuous mode
[  469.002095][T19883] sit0: left promiscuous mode
[  469.002524][T19883] bond0: left promiscuous mode
[  469.008357][T19883] bond2: left promiscuous mode
[  469.008373][T19883] bond2: left allmulticast mode
[  469.008432][T19883] bond3: left promiscuous mode
[  469.008466][T19883] bridge1: left promiscuous mode
[  469.008545][T19883] bond3: left allmulticast mode
[  469.008553][T19883] bridge1: left allmulticast mode
[  469.009234][T19883] bond7: left promiscuous mode
[  469.009244][T19883] xfrm1: left promiscuous mode
[  469.009817][T19883] bond8: left promiscuous mode
[  469.009828][T19883] bridge3: left promiscuous mode
[  469.011666][T19883] bridge6: left promiscuous mode
[  469.011676][T19883] bridge6: left allmulticast mode
[  469.012905][T19883] gretap1: left promiscuous mode
[  469.012987][T19883] bond14: left promiscuous mode
[  469.014402][T19883] bridge8: left promiscuous mode
[  469.014413][T19883] bridge8: left allmulticast mode
[  469.015653][T19883] gretap3: left promiscuous mode
[  469.031914][T19883] bond21: left promiscuous mode
[  469.031933][T19883] bridge10: left promiscuous mode
[  469.065806][T19883] bridge11: left allmulticast mode
[  469.074808][T19884] netlink: zone id is out of range
[  469.074823][T19884] netlink: zone id is out of range
[  469.074828][T19884] netlink: zone id is out of range
[  469.074833][T19884] netlink: zone id is out of range
[  469.074903][T19884] netlink: zone id is out of range
[  469.074909][T19884] netlink: zone id is out of range
[  469.074916][T19884] netlink: zone id is out of range
[  469.074922][T19884] netlink: zone id is out of range
[  469.074927][T19884] netlink: zone id is out of range
[  469.074932][T19884] netlink: zone id is out of range
[  469.089754][T19883] bridge12: left allmulticast mode
[  469.116814][T19883] bridge13: left allmulticast mode
[  469.139022][T19883] bridge14: left allmulticast mode
[  469.171077][T19883] bridge15: left allmulticast mode
[  469.178014][T19883] bridge16: left allmulticast mode
[  469.201051][T19883] bridge17: left allmulticast mode
[  469.218560][T19883] bridge18: left allmulticast mode
[  469.233036][T19883] bridge19: left allmulticast mode
[  469.245784][T19883] bridge20: left allmulticast mode
[  469.261498][T19883] bridge21: left allmulticast mode
[  469.273340][T19883] bridge22: left allmulticast mode
[  469.274503][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3838'.
[  469.285070][T19883] bridge23: left allmulticast mode
[  469.300196][T19883] bridge24: left allmulticast mode
[  469.315619][T19883] bridge25: left allmulticast mode
[  469.338308][T19883] bridge26: left allmulticast mode
[  469.362393][T19883] bridge27: left allmulticast mode
[  469.376245][T19883] bridge28: left allmulticast mode
[  469.388915][T19883] bridge29: left allmulticast mode
[  469.400189][T19883] bridge30: left allmulticast mode
[  469.415767][T19883] bridge31: left allmulticast mode
[  469.430136][T19883] bridge32: left allmulticast mode
[  469.450492][T19883] bridge33: left allmulticast mode
[  469.464945][T19883] bridge34: left allmulticast mode
[  469.480675][T19883] bridge35: left allmulticast mode
[  469.501223][T19883] bridge36: left allmulticast mode
[  469.517676][T19883] bridge37: left allmulticast mode
[  469.537729][T19883] bridge38: left allmulticast mode
[  469.554284][T19883] bridge39: left allmulticast mode
[  469.572359][T19883] bridge40: left allmulticast mode
[  469.602774][T19883] bridge41: left allmulticast mode
[  469.611119][T19883] bridge42: left allmulticast mode
[  469.623769][T19883] bridge43: left allmulticast mode
[  469.652278][T19883] bridge45: left allmulticast mode
[  469.671329][T19883] bond22: left allmulticast mode
[  469.673205][T19883] bond23: left promiscuous mode
[  469.730516][T19895] bond16: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  469.733948][T19895] bond16 (unregistering): Released all slaves
[  470.077579][T19917] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.077604][T19917] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.167104][T19908] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3842'.
[  470.243047][T19917] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.243064][T19917] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.309595][T19935] netlink: 'syz.2.3849': attribute type 11 has an invalid length.
[  470.337633][T19917] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.337686][T19917] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.383958][T19917] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.383983][T19917] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.475645][T19944] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3851'.
[  470.547221][ T7338] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  470.547247][ T7338] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.547671][ T7338] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  470.547688][ T7338] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.562710][ T5636] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  470.562733][ T5636] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.562758][ T5636] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  470.562774][ T5636] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.644169][T19954] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3854'.
[  470.725561][T19964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3857'.
[  470.725751][T19964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3857'.
[  470.727553][T19965] IPv6: NLM_F_CREATE should be specified when creating new route
[  471.610425][T19997] netlink: 'syz.0.3868': attribute type 21 has an invalid length.
[  471.610607][T19997] netlink: 'syz.0.3868': attribute type 1 has an invalid length.
[  471.692955][T20004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3871'.
[  471.719548][T20013] sit2: entered promiscuous mode
[  471.937370][T20020] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3874'.
[  471.938582][T20020] netlink: 'syz.0.3874': attribute type 1 has an invalid length.
[  471.993776][T20020] 8021q: adding VLAN 0 to HW filter on device bond16
[  472.404312][T20041] hsr_slave_0 (unregistering): left promiscuous mode
[  472.431388][T20055] netlink: 'syz.2.3886': attribute type 3 has an invalid length.
[  472.432667][T20057] netlink: 'syz.2.3886': attribute type 12 has an invalid length.
[  473.083479][T20090] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  473.211150][T20102] syzkaller0: entered promiscuous mode
[  473.211168][T20102] syzkaller0: entered allmulticast mode
[  473.321686][T20109] netlink: 'syz.0.3903': attribute type 15 has an invalid length.
[  473.382628][T20116] syzkaller1: entered promiscuous mode
[  473.382643][T20116] syzkaller1: entered allmulticast mode
[  473.395536][T20116] nbd2: detected capacity change from 0 to 63
[  473.395715][T20115] nbd: nbd2 already in use
[  473.402021][T20115] block nbd2: NBD_DISCONNECT
[  473.408380][T20115] block nbd2: Disconnected due to user request.
[  473.408785][T20115] block nbd2: shutting down sockets
[  473.411076][  T136] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  473.411380][  T136] Buffer I/O error on dev nbd2, logical block 1, async page read
[  473.413762][  T136] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  473.413777][  T136] Buffer I/O error on dev nbd2, logical block 2, async page read
[  473.413784][  T136] Buffer I/O error on dev nbd2, logical block 3, async page read
[  473.426855][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  473.426903][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  473.429770][  T136] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  473.429785][  T136] Buffer I/O error on dev nbd2, logical block 0, async page read
[  473.435401][  T136] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  473.435414][  T136] Buffer I/O error on dev nbd2, logical block 1, async page read
[  473.446288][ T1057] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  473.446305][ T1057] Buffer I/O error on dev nbd2, logical block 2, async page read
[  473.446312][ T1057] Buffer I/O error on dev nbd2, logical block 3, async page read
[  473.449325][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  473.449341][ T1057] Buffer I/O error on dev nbd2, logical block 0, async page read
[  473.449348][ T1057] Buffer I/O error on dev nbd2, logical block 1, async page read
[  473.450319][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  473.451094][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  473.451180][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  473.451591][T20011] ldm_validate_partition_table(): Disk read failed.
[  473.454127][T20011] Dev nbd2: unable to read RDB block 0
[  473.454536][T20011]  nbd2: unable to read partition table
[  473.467836][T20011] ldm_validate_partition_table(): Disk read failed.
[  473.468977][T20011] Dev nbd2: unable to read RDB block 0
[  473.469633][T20011]  nbd2: unable to read partition table
[  474.129205][T20146] __nla_validate_parse: 7 callbacks suppressed
[  474.129217][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'.
[  474.236512][T20161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3918'.
[  474.290059][T20164] xt_ecn: cannot match TCP bits for non-tcp packets
[  474.293410][T20165] syzkaller0: entered promiscuous mode
[  474.293428][T20165] syzkaller0: entered allmulticast mode
[  474.455850][T20168] netlink: 'syz.2.3920': attribute type 28 has an invalid length.
[  474.455864][T20168] netlink: 'syz.2.3920': attribute type 3 has an invalid length.
[  474.455868][T20168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3920'.
[  474.986260][T20198] syz_tun: entered allmulticast mode
[  475.018158][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3929'.
[  475.022387][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'.
[  475.022413][T20206] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3929'.
[  475.040192][T20207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3929'.
[  475.821794][T20233] netlink: 'syz.0.3937': attribute type 22 has an invalid length.
[  475.821813][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3937'.
[  475.836835][T20236] netlink: 'syz.0.3937': attribute type 22 has an invalid length.
[  475.836931][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3937'.
[  475.837986][T20231] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3936'.
[  475.980072][T20242] netlink: 'syz.1.3938': attribute type 1 has an invalid length.
[  476.078154][T20242] bond27: (slave bridge47): Enslaving as a backup interface with an up link
[  476.100519][T20242] macvlan1: entered promiscuous mode
[  476.100538][T20242] macvlan1: entered allmulticast mode
[  476.100977][T20242] bond27: entered promiscuous mode
[  476.100988][T20242] bridge47: entered promiscuous mode
[  476.104198][T20242] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  476.105550][T20242] bond27: left promiscuous mode
[  476.105565][T20242] bridge47: left promiscuous mode
[  476.340229][T20254] netlink: 'syz.1.3941': attribute type 84 has an invalid length.
[  476.526587][T20281] openvswitch: ovs-dp0: Dropping previously announced user features
[  476.989713][T20289] xt_policy: neither incoming nor outgoing policy selected
[  479.734050][T20299] __nla_validate_parse: 4 callbacks suppressed
[  479.734066][T20299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3951'.
[  479.875112][T20305] net_ratelimit: 503 callbacks suppressed
[  479.875133][T20305] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  479.895095][T20307] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3953'.
[  479.895130][T20307] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3953'.
[  480.072328][T20317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  480.078039][T20320] validate_nla: 2 callbacks suppressed
[  480.078053][T20320] netlink: 'syz.0.3958': attribute type 2 has an invalid length.
[  480.078295][T20320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'.
[  480.152530][T20323] 
[  480.153662][T20323] ======================================================
[  480.156579][T20323] WARNING: possible circular locking dependency detected
[  480.159527][T20323] syzkaller #0 Not tainted
[  480.161470][T20323] ------------------------------------------------------
[  480.164375][T20323] syz.0.3961/20323 is trying to acquire lock:
[  480.166970][T20323] ffffffff8fe95920 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x5f/0x600
[  480.170878][T20323] 
[  480.170878][T20323] but task is already holding lock:
[  480.173947][T20323] ffff8881b0814080 (&mm->mmap_lock){++++}-{4:4}, at: upgrade_mmap_lock_carefully+0xba/0x1b0
[  480.178105][T20323] 
[  480.178105][T20323] which lock already depends on the new lock.
[  480.178105][T20323] 
[  480.182420][T20323] 
[  480.182420][T20323] the existing dependency chain (in reverse order) is:
[  480.186148][T20323] 
[  480.186148][T20323] -> #10 (&mm->mmap_lock){++++}-{4:4}:
[  480.189327][T20323]        __might_fault+0xcb/0x130
[  480.191473][T20323]        _copy_from_user+0x28/0xb0
[  480.193628][T20323]        memdup_user+0x5e/0xd0
[  480.195684][T20323]        strndup_user+0x68/0xd0
[  480.197750][T20323]        perf_ioctl+0x7ba/0x20d0
[  480.199850][T20323]        __se_sys_ioctl+0xfc/0x170
[  480.202034][T20323]        do_syscall_64+0x166/0x520
[  480.204211][T20323]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.206912][T20323] 
[  480.206912][T20323] -> #9 (&cpuctx_mutex){+.+.}-{4:4}:
[  480.210049][T20323]        __mutex_lock+0x19d/0x1550
[  480.212201][T20323]        perf_event_init_cpu+0x66b/0x7a0
[  480.214575][T20323]        perf_event_init+0x16c/0x220
[  480.216817][T20323]        start_kernel+0x20b/0x3e0
[  480.218978][T20323]        x86_64_start_reservations+0x24/0x30
[  480.221545][T20323]        x86_64_start_kernel+0x137/0x1b0
[  480.223914][T20323]        common_startup_64+0x13e/0x157
[  480.226235][T20323] 
[  480.226235][T20323] -> #8 (pmus_lock){+.+.}-{4:4}:
[  480.229227][T20323]        __mutex_lock+0x19d/0x1550
[  480.231239][T20323]        perf_event_init_cpu+0x1d1/0x7a0
[  480.233583][T20323]        cpuhp_invoke_callback+0x434/0x810
[  480.236033][T20323]        cpuhp_thread_fun+0x362/0x780
[  480.238281][T20323]        smpboot_thread_fn+0x565/0xa70
[  480.240591][T20323]        kthread+0x38b/0x480
[  480.242575][T20323]        ret_from_fork+0x514/0xb70
[  480.244768][T20323]        ret_from_fork_asm+0x1a/0x30
[  480.246998][T20323] 
[  480.246998][T20323] -> #7 (cpuhp_state-up){+.+.}-{0:0}:
[  480.250126][T20323]        cpuhp_thread_fun+0x127/0x780
[  480.252331][T20323]        smpboot_thread_fn+0x565/0xa70
[  480.254655][T20323]        kthread+0x38b/0x480
[  480.256616][T20323]        ret_from_fork+0x514/0xb70
[  480.258774][T20323]        ret_from_fork_asm+0x1a/0x30
[  480.261006][T20323] 
[  480.261006][T20323] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  480.264256][T20323]        cpus_read_lock+0x42/0x160
[  480.266409][T20323]        static_key_slow_inc+0x12/0x30
[  480.268753][T20323]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  480.271401][T20323]        nbd_genl_foreach_sock+0x265/0x450
[  480.273890][T20323]        nbd_genl_reconfigure+0xbbb/0x1040
[  480.276273][T20323]        genl_family_rcv_msg_doit+0x233/0x340
[  480.278809][T20323]        genl_rcv_msg+0x614/0x7a0
[  480.280946][T20323]        netlink_rcv_skb+0x226/0x4a0
[  480.283180][T20323]        genl_rcv+0x28/0x40
[  480.285142][T20323]        netlink_unicast+0x7bd/0x940
[  480.287364][T20323]        netlink_sendmsg+0x813/0xb40
[  480.289624][T20323]        sock_sendmsg_nosec+0x13a/0x180
[  480.291982][T20323]        ____sys_sendmsg+0x54e/0x850
[  480.294237][T20323]        ___sys_sendmsg+0x2a5/0x360
[  480.296416][T20323]        __x64_sys_sendmsg+0x1b1/0x290
[  480.298714][T20323]        do_syscall_64+0x166/0x520
[  480.300836][T20323]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.303383][T20323] 
[  480.303383][T20323] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  480.306653][T20323]        __mutex_lock+0x19d/0x1550
[  480.308851][T20323]        nbd_queue_rq+0x373/0xff0
[  480.310981][T20323]        blk_mq_dispatch_rq_list+0x499/0x1990
[  480.313560][T20323]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  480.316409][T20323]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  480.319171][T20323]        blk_mq_run_work_fn+0x16c/0x300
[  480.321389][T20323]        process_scheduled_works+0xc3d/0x1630
[  480.323615][T20323]        worker_thread+0xa47/0xfb0
[  480.325533][T20323]        kthread+0x38b/0x480
[  480.327397][T20323]        ret_from_fork+0x514/0xb70
[  480.329553][T20323]        ret_from_fork_asm+0x1a/0x30
[  480.331709][T20323] 
[  480.331709][T20323] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  480.334298][T20323]        __mutex_lock+0x19d/0x1550
[  480.336169][T20323]        nbd_queue_rq+0xc1/0xff0
[  480.338038][T20323]        blk_mq_dispatch_rq_list+0x499/0x1990
[  480.340240][T20323]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  480.342719][T20323]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  480.345121][T20323]        blk_mq_run_work_fn+0x16c/0x300
[  480.347130][T20323]        process_scheduled_works+0xc3d/0x1630
[  480.349326][T20323]        worker_thread+0xa47/0xfb0
[  480.351240][T20323]        kthread+0x38b/0x480
[  480.352949][T20323]        ret_from_fork+0x514/0xb70
[  480.354811][T20323]        ret_from_fork_asm+0x1a/0x30
[  480.356741][T20323] 
[  480.356741][T20323] -> #3 (set->srcu){.+.+}-{0:0}:
[  480.359303][T20323]        __synchronize_srcu+0xc9/0x2f0
[  480.361278][T20323]        elevator_switch+0x1e8/0x7b0
[  480.363207][T20323]        elevator_change+0x2fa/0x480
[  480.365138][T20323]        elevator_set_default+0x375/0x440
[  480.367259][T20323]        blk_register_queue+0x3f3/0x4e0
[  480.369268][T20323]        __add_disk+0x6b8/0xdb0
[  480.371072][T20323]        add_disk_fwnode+0x100/0x3a0
[  480.373000][T20323]        nbd_dev_add+0x733/0xb60
[  480.374814][T20323]        nbd_init+0x168/0x1f0
[  480.376580][T20323]        do_one_initcall+0x250/0x870
[  480.378509][T20323]        do_initcall_level+0x10a/0x1a0
[  480.380587][T20323]        do_initcalls+0x59/0xa0
[  480.382558][T20323]        kernel_init_freeable+0x29d/0x3e0
[  480.384719][T20323]        kernel_init+0x22/0x1d0
[  480.386728][T20323]        ret_from_fork+0x514/0xb70
[  480.388878][T20323]        ret_from_fork_asm+0x1a/0x30
[  480.391102][T20323] 
[  480.391102][T20323] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  480.394393][T20323]        __mutex_lock+0x19d/0x1550
[  480.396545][T20323]        elevator_change+0x1af/0x480
[  480.398765][T20323]        elevator_set_none+0xb5/0x140
[  480.401015][T20323]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  480.403672][T20323]        nbd_start_device+0x189/0xb30
[  480.405943][T20323]        nbd_genl_connect+0x167d/0x1cd0
[  480.408274][T20323]        genl_family_rcv_msg_doit+0x233/0x340
[  480.410834][T20323]        genl_rcv_msg+0x614/0x7a0
[  480.412949][T20323]        netlink_rcv_skb+0x226/0x4a0
[  480.415177][T20323]        genl_rcv+0x28/0x40
[  480.417136][T20323]        netlink_unicast+0x7bd/0x940
[  480.419363][T20323]        netlink_sendmsg+0x813/0xb40
[  480.421615][T20323]        sock_sendmsg_nosec+0x13a/0x180
[  480.423951][T20323]        ____sys_sendmsg+0x54e/0x850
[  480.426198][T20323]        ___sys_sendmsg+0x2a5/0x360
[  480.428309][T20323]        __x64_sys_sendmsg+0x1b1/0x290
[  480.430462][T20323]        do_syscall_64+0x166/0x520
[  480.432466][T20323]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.434817][T20323] 
[  480.434817][T20323] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  480.438214][T20323]        blk_alloc_queue+0x544/0x690
[  480.440493][T20323]        __blk_mq_alloc_disk+0x194/0x390
[  480.442591][T20323]        nbd_dev_add+0x494/0xb60
[  480.444513][T20323]        nbd_init+0x168/0x1f0
[  480.446401][T20323]        do_one_initcall+0x250/0x870
[  480.448651][T20323]        do_initcall_level+0x10a/0x1a0
[  480.450927][T20323]        do_initcalls+0x59/0xa0
[  480.452920][T20323]        kernel_init_freeable+0x29d/0x3e0
[  480.455194][T20323]        kernel_init+0x22/0x1d0
[  480.457103][T20323]        ret_from_fork+0x514/0xb70
[  480.459032][T20323]        ret_from_fork_asm+0x1a/0x30
[  480.461011][T20323] 
[  480.461011][T20323] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  480.463903][T20323]        __lock_acquire+0x164c/0x2de0
[  480.466034][T20323]        lock_acquire+0x115/0x350
[  480.468018][T20323]        fs_reclaim_acquire+0x71/0x100
[  480.470211][T20323]        kmem_cache_alloc_noprof+0x5f/0x600
[  480.472569][T20323]        mas_alloc_nodes+0x291/0x350
[  480.474805][T20323]        mas_preallocate+0x42a/0x840
[  480.476747][T20323]        expand_downwards+0x42d/0xc40
[  480.478747][T20323]        lock_mm_and_find_vma+0x1da/0x340
[  480.480848][T20323]        do_user_addr_fault+0x343/0x1340
[  480.483068][T20323]        exc_page_fault+0x6a/0xc0
[  480.485036][T20323]        asm_exc_page_fault+0x26/0x30
[  480.487895][T20323]        rep_movs_alternative+0x30/0xa0
[  480.490209][T20323]        _copy_from_user+0x7a/0xb0
[  480.492369][T20323]        copy_from_sockptr+0x48/0x70
[  480.494614][T20323]        ip_mroute_setsockopt+0x76b/0x10d0
[  480.496995][T20323]        do_ip_setsockopt+0xeba/0x2e30
[  480.499127][T20323]        ip_setsockopt+0x66/0x110
[  480.501054][T20323]        do_sock_setsockopt+0x17c/0x1b0
[  480.503072][T20323]        __x64_sys_setsockopt+0x13d/0x1b0
[  480.505464][T20323]        do_syscall_64+0x166/0x520
[  480.507391][T20323]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.509935][T20323] 
[  480.509935][T20323] other info that might help us debug this:
[  480.509935][T20323] 
[  480.513828][T20323] Chain exists of:
[  480.513828][T20323]   fs_reclaim --> &cpuctx_mutex --> &mm->mmap_lock
[  480.513828][T20323] 
[  480.518687][T20323]  Possible unsafe locking scenario:
[  480.518687][T20323] 
[  480.521502][T20323]        CPU0                    CPU1
[  480.523649][T20323]        ----                    ----
[  480.525742][T20323]   lock(&mm->mmap_lock);
[  480.527513][T20323]                                lock(&cpuctx_mutex);
[  480.530202][T20323]                                lock(&mm->mmap_lock);
[  480.532817][T20323]   lock(fs_reclaim);
[  480.534292][T20323] 
[  480.534292][T20323]  *** DEADLOCK ***
[  480.534292][T20323] 
[  480.537497][T20323] locks held by syz.0.3961/20323: 2, last CPU#0:
[  480.540143][T20323]  #0: ffffffff9125ad80 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0
[  480.543983][T20323]  #1: ffff8881b0814080 (&mm->mmap_lock){++++}-{4:4}, at: upgrade_mmap_lock_carefully+0xba/0x1b0
[  480.547800][T20323] 
[  480.547800][T20323] stack backtrace:
[  480.549989][T20323] CPU: 0 UID: 0 PID: 20323 Comm: syz.0.3961 Not tainted syzkaller #0 PREEMPT(full) 
[  480.553468][T20323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.557001][T20323] Call Trace:
[  480.558127][T20323]  <TASK>
[  480.559145][T20323]  dump_stack_lvl+0xe8/0x150
[  480.560961][T20323]  print_circular_bug+0x2e2/0x300
[  480.562774][T20323]  check_noncircular+0x12f/0x150
[  480.564532][T20323]  __lock_acquire+0x164c/0x2de0
[  480.566435][T20323]  ? is_bpf_text_address+0x26/0x2b0
[  480.568585][T20323]  lock_acquire+0x115/0x350
[  480.570358][T20323]  ? kmem_cache_alloc_noprof+0x5f/0x600
[  480.572717][T20323]  ? mas_wr_walk_descend+0x574/0x8b0
[  480.574899][T20323]  ? mas_alloc_nodes+0x291/0x350
[  480.576773][T20323]  fs_reclaim_acquire+0x71/0x100
[  480.578571][T20323]  ? kmem_cache_alloc_noprof+0x5f/0x600
[  480.580639][T20323]  kmem_cache_alloc_noprof+0x5f/0x600
[  480.582727][T20323]  ? mas_alloc_nodes+0x291/0x350
[  480.584703][T20323]  mas_alloc_nodes+0x291/0x350
[  480.586525][T20323]  mas_preallocate+0x42a/0x840
[  480.588467][T20323]  ? __pfx_mas_preallocate+0x10/0x10
[  480.590600][T20323]  ? __mas_set_range+0x11a/0x3a0
[  480.592463][T20323]  expand_downwards+0x42d/0xc40
[  480.594240][T20323]  ? __pfx_expand_downwards+0x10/0x10
[  480.596344][T20323]  ? rep_movs_alternative+0x30/0xa0
[  480.598467][T20323]  ? upgrade_mmap_lock_carefully+0x105/0x1b0
[  480.600842][T20323]  lock_mm_and_find_vma+0x1da/0x340
[  480.602930][T20323]  do_user_addr_fault+0x343/0x1340
[  480.604975][T20323]  ? trace_page_fault_kernel+0x84/0x1e0
[  480.607155][T20323]  exc_page_fault+0x6a/0xc0
[  480.608823][T20323]  asm_exc_page_fault+0x26/0x30
[  480.610592][T20323] RIP: 0010:rep_movs_alternative+0x30/0xa0
[  480.612763][T20323] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  480.620271][T20323] RSP: 0018:ffffc900047d7ab0 EFLAGS: 00010212
[  480.622740][T20323] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010
[  480.625909][T20323] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc900047d7b90
[  480.629003][T20323] RBP: 0000000000000000 R08: ffffc900047d7b9f R09: 1ffff920008faf73
[  480.632102][T20323] R10: dffffc0000000000 R11: fffff520008faf74 R12: f8f8f8f8f8f8f2f2
[  480.635106][T20323] R13: dffffc0000000000 R14: ffffc900047d7b90 R15: 0000200000000000
[  480.638274][T20323]  _copy_from_user+0x7a/0xb0
[  480.640106][T20323]  copy_from_sockptr+0x48/0x70
[  480.641982][T20323]  ip_mroute_setsockopt+0x76b/0x10d0
[  480.643951][T20323]  ? __pfx_ip_mroute_setsockopt+0x10/0x10
[  480.646273][T20323]  do_ip_setsockopt+0xeba/0x2e30
[  480.648364][T20323]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  480.650582][T20323]  ? __pfx_perf_trace_lock+0x10/0x10
[  480.652435][T20323]  ? lock_acquire+0x115/0x350
[  480.654173][T20323]  ? __fget_files+0x2a/0x420
[  480.655861][T20323]  ? aa_sock_opt_perm+0xe8/0x1e0
[  480.657954][T20323]  ip_setsockopt+0x66/0x110
[  480.659842][T20323]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  480.662022][T20323]  do_sock_setsockopt+0x17c/0x1b0
[  480.664040][T20323]  __x64_sys_setsockopt+0x13d/0x1b0
[  480.666069][T20323]  do_syscall_64+0x166/0x520
[  480.668001][T20323]  ? trace_irq_disable+0x3b/0x140
[  480.669995][T20323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.672086][T20323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.674248][T20323] RIP: 0033:0x7f39aa39e559
[  480.676006][T20323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.683435][T20323] RSP: 002b:00007f39a85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  480.686604][T20323] RAX: ffffffffffffffda RBX: 00007f39aa625fa0 RCX: 00007f39aa39e559
[  480.689660][T20323] RDX: 00000000000000cb RSI: 0000000000000000 RDI: 0000000000000005
[  480.692651][T20323] RBP: 00007f39aa4358b0 R08: 0000000000000010 R09: 0000000000000000
[  480.695708][T20323] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  480.699037][T20323] R13: 00007f39aa626038 R14: 00007f39aa625fa0 R15: 00007ffd05a74398
[  480.702378][T20323]  </TASK>
