last executing test programs:

2.808686995s ago: executing program 2 (id=4639):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r1=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00')
pipe(&(0x7f0000000240)={<r9=>0xffffffffffffffff})
splice(r9, &(0x7f00000002c0)=0x3, r8, 0x0, 0xfffffffffffffff7, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r8, 0x40046721, &(0x7f0000000340)={r10})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r11, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)

2.748677464s ago: executing program 0 (id=4641):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000200000000000000000000711840000000000000e7000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a80), 0x121101, 0x0)
write$snapshot(r0, &(0x7f0000001ac0)="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", 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000020c0019800800010007000000300001802c0001801400030000000000000000000000ffff0a010102140004"], 0x50}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0)
close(0x3)

2.615233811s ago: executing program 0 (id=4643):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x201)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@overlay={0x2, 0x9, 0x4, 0x8, 0x400, {}, {0x5, 0xc, 0x7, 0x40, 0x4, 0x4, "991e3b82"}, 0x3, 0x3, {}, 0x4, 0x0, r0})
write(r0, &(0x7f0000000f40)="907ef8fedd225c07089e5505f4ecc2a8b3ca111433ff73500059a4f75e5865fde44b9e850e37be023c4a747e068b43f74c9ed680d51c8bb4455f33a2b91589ddc093572f182250ccb7b35e2b6b5a8d0cf2c5da099d406deef5ef1848f272b6f590c0d28ea383bb46b3769c5925d4d491f4175e91a441a6fb30cfbf42b852646b986b0a526451e7bb07e5c1d9334c28f1c659845464b999b758466b0e42395fc2b6be163e982ba4a43b8a3019fe8c387777e3a46deae50051ddf7a321a717d3b91783e1813f00"/210, 0xd2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0)

2.453557164s ago: executing program 0 (id=4644):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x0, 0x1, 0x1, "e38cf156e5b3321b5e0000000000000000967f51670000fd00", 0x43353039})

2.446485451s ago: executing program 0 (id=4645):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xfffffffffffffc70, &(0x7f0000001d80)=ANY=[@ANYRES32=r1], 0x128}, 0x20000041)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x102)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=""/4097, 0x1001}, 0x0)
socket$inet6(0xa, 0x1, 0x100)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r12, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
setsockopt$sock_int(r12, 0x1, 0x12, &(0x7f0000000040)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$netlink(0x10, 0x3, 0x0)

2.369068267s ago: executing program 1 (id=4646):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x4, 0x8, {<r1=>0xffffffffffffffff}, {0xee01}, 0xe, 0xfffffffffffffffc})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r6, 0x0)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x2000)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8280010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4dc, 0x3d, 0x200, 0x70bd27, 0x25dfdbfe, {0x16}, [@generic="78d66330e5ff2b7ecad8ff9277de5809274dd2519275668b04a186c56ca83ed3ef992582", @generic="2e99eb82bf7844ea890017e38801f5af4c5cc4839d200663cbeee28d1646c5b9a4a1e96636421c9881d304ffb32deafc036f74419887579351995d892744c9ccc054925ac40dfde09b280c503b90c92b11d876dc911788c03d939221d96b28ce36cefcc215c4bd113afd37ec5fa856e93e1a2b034ec6596859f85cc8007a4cad482071f2f7ffe8e368dc7f3c8fe1002ba7194002e58393ca66d667774400dd872708d27b3f4b2c40e9841b0cd5a582596299ba48869b907a70a41570410ea123b86dcdbdecb88c4fd61b89b464434dda2c7ee741472eadcf7bc0ff412429421160e6f35ac8d1e0d796df4ae3b292a3a7e787941f56c2107a3b", @nested={0x14a, 0xe3, 0x0, 0x1, [@generic="80e6de9e1da6c94f8c67a3da721c6ec67f1d279a81a99083457dd1", @typed={0x8, 0x11b, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x4d, 0x0, 0x0, @fd=r0}, @generic="bbf71f351330f36edf3b08114275e4f02b8df2065423cd56b236f1d071e03ae8fa72fc4a06d3839e9cc0645f7e2c8739361d652f", @typed={0x8, 0x142, 0x0, 0x0, @u32=0xc35}, @generic="778b9568e5da9085c470511f6f309008bc2dd906c5a36b65554206fd8aa0ad1371d5e28faba881bb4f636871366ad956879acb2b01fcfacda52b61e3f6114a49d07a62a66327862ee57f0420d579f5d2143fdaecf0b2988c98a964facf32aac4216ae4f25d6e41678229228a0bc5802dab3aa4278d1b43eea1ed81cd1ce2849a1197d3be319b778aad24a02fedaff826a0fc2221bf04471f41f2733a290bb1143ce43cecc163d1b38a34f0b834a89ddd6b6feea5cdef5bccdd2df28b1ae5f054d30865d1eb76aeffa9daad4b59f5ad1280256e4885927c71fe92f1b9820eca"]}, @generic="38ce3a94cf86724a9d505ef053bf248c2a68d45f2ab66b5e91d5cfeaec9d8fe0a5459c1ecb0ef22a7b7911ae744eab2ca3eccb83fb5cb1c8c519ce23e73027cd1e0cc55db20b0677d64ef533e2c7da8f948bea97ce9ff7523696816fc79db1af94c660a40da2a5e4d4997251a2f6a1f18f6770b3018cdac658d3586bce876087812c0831ae1aa60871556332ef27d1abe9bd18830cde86cd599facab927bec553beabfafa02fa6f75ef3e58105f29b8f12730d69f80853c29057e0ae341b78e4d07e8310d939dd55424de74fa66144ff5a7f529a69d30e5ffdf729440f4960c23bb5dbea04c77335aa6836d1a5a3a01351acfc3ca8e15d18", @generic="340f6d94389bab2113e62988030b460d0f4900eefcd8d36906cb947e15f96ed3c9d7a86a94cf067ee26142a5ac650819b01eb70dda15603dbc54de3ee6985ab41ac0b6c48f1cce7abd8950807f1f784fbff3591162b6197ec1a7b8de8a16720e5a9360f462c8caa950c79c67a10f480c426d91ba360e20ff4dbdccf550bfb410fee70bdb7b82142ce00521fb0a56608f8545d44c04f3e6814b37aba446b685c738147fd3792ca40c7beb7d14f1a7af264777be7ce8500990ea108426b841a8c460e3ab55c31540588c6e18ddccb7626b1f", @nested={0x87, 0x0, 0x0, 0x1, [@generic="6f513499beb341", @generic="bdf4ded4e02ba363e936d77b052a56c96cd2e455b9457acea563d43c8adb5921ddd8cf0d11286bcd56302c987fbaec1387205294b52082f24b35c252cd8c5e9ef784c927b3d6d943b77d755af09ce3acd4ec5d8b9dbadc2115f0a38488140a176a9f383394abdad989083c560b8ecd0caf42d28e49799afaf25c5149"]}, @typed={0x4, 0x5f}, @typed={0x8, 0xd5, 0x0, 0x0, @fd=r0}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x84}, 0x8010)

2.289156936s ago: executing program 1 (id=4647):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4cb02, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r3=>r2, 0x10, 0x700, 0x400, 0x8c0, {{0x23, 0x4, 0x2, 0x28, 0x8c, 0x67, 0x0, 0x66, 0x2f, 0x0, @local, @private=0xa010102, {[@lsrr={0x83, 0x1b, 0xf5, [@loopback, @loopback, @broadcast, @empty, @empty, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x4, [{@broadcast, 0x6}]}, @end, @timestamp_addr={0x44, 0x4c, 0x56, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x80000000}, {@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@local, 0xfffffffc}, {@multicast1, 0x524}, {@multicast2, 0xaa}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @end]}}}}})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000280))
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r3, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x10)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi0\x00', 0x141000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)

2.217104012s ago: executing program 1 (id=4648):
r0 = syz_io_uring_setup(0x7fdf, &(0x7f0000002e40)={0x0, 0x75a9, 0x2, 0x3, 0x37d}, &(0x7f0000002ec0), &(0x7f0000000200))
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1410, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44000)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000180)={0xf0, 0x240, 0x800, 0x20, 0x3cd, 0x1, 0x5, 0x1, {0xb, 0x9, 0x1}, {0x7, 0x8, 0x1}, {0xfffffe00, 0x0, 0xfd}, {0x0, 0xd8dd}, 0x1, 0x1, 0x0, 0x7, 0x1, 0x0, 0x5423c75d, 0xfffffff7, 0x1, 0x84, 0xffff, 0x101, 0x8, 0x100, 0x3, 0xa})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast2, 0xfffe, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x10000, 0x3, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
io_uring_enter(r0, 0x242b, 0x3971, 0x3, &(0x7f00000000c0)={[0xffff]}, 0x8)

1.90910647s ago: executing program 2 (id=4649):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x3}, 0x8)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = io_uring_setup(0x42d3, &(0x7f00000005c0)={0x0, 0x3ac6, 0x4, 0x5, 0x184})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000b40)={&(0x7f0000001000)={[{&(0x7f0000000640)="8322e1280a1814b3db6946a294c2007136f28c435e983641ed9b2d8a05c4cacb52d37bd9c922592f56a56fa345ab4b3b16c218c2ec4439bb9d40a0ec9d1256729ca8a1c9d2b52047260e333b2f6191", 0x4f, 0x1}, {&(0x7f00000006c0)="939746fb0bf509d3442b34d8d9e05769d4debfd4d24ba6f45256247da8d82586656e328ecc7abb5eb53ecd80d42df38f48297c429f76afc986e7e0908f3117e0e90eb9933446b88dfb46a7793361510bb83b39b0bb6a3e2e6acef6c35b926502e23606651a71acec105e0cad526dd4dedf36a612dd1344add3096927891f2d2810f5887628e3129bfc0732c00696790ea1c70866fc7f59a4f4e1069080012f5cc05a83", 0xa3}, {&(0x7f0000000780)="19536631698b6a6aa23679f32a793887c31b7adb8877c90ac9d62ca0b3c372c00d83573d40a038aaf6e078ca66c6a497db25428372a81616c918ce36663b13505abf05b6d33b091a27168d3381f687828ab8a5aed93c8d18eced4d5667fc7217754ca760e849ab9508774174333bcdfd1a8272ce378ebcee8697f2c84ce48991480eba30a3bd5e645794ebf7cba1c066e1b4964f3b192c4c60ae59bc6fb0a0ca2eee5557441087f1019684e9cf312b581f938aa7d674b4a81c6dacbf607d", 0xbe}, {&(0x7f00000000c0)="d426286df2d2259e4dcc31a590ed9f2884a4c2a4", 0x14}, {&(0x7f0000000880)="aa1929d5d6859fccc207dfc7b30145232068129211b96610aec695a256b8a8e57e4fd29eb7849facb850843868c007705cdc5650bf67881f968eb4bb5bc71ba0a53441e2b1a401bf9bbb14d8c6", 0x4d, 0x2}, {&(0x7f0000000900)="c23df96e147936be234ed68edc5ff528289df6f24e329e70b88b34ed69ab396e5c8c0f9b366522ec516dff8e8922e0da99c695a85962e8d5ebee0d75615a4bbc4dfd5e262c7027e1717d3a08299c5a0b8a3928c24ce64e5a1c41cfb4d6f33d8cc09e57e0ad07c2ca8b6a7abe31fc97e701fbc5d06dc2869b534f0691c445c2b9c2a91282c2f371497ba8bf5a9c6fc4d03c09562c4345b3291dd1c4cf33dc663b72a75391dc155b21d28c15d74e2aaa8427ccbaebfa63b248e1de5fe163d2cb4645f66831d36c3c7ed4dbd2", 0xcb}, {&(0x7f0000000a00)="efae4b99c17f8bc8e2ac5a0bbe581748f7ad823af09afe9271f1461faee2e36bbda417ce17537dadac337fa2528ee7681aa418617f1b60d4", 0x38, 0x2}, {&(0x7f0000000a40)="7ebc0fce85f2da465f5b0f45b46408fb22f6d723e39e64e89514d2b7b140aa631a77c864b6c3949d0c86a32cb0a0297523980355d925b282f295394b6ff49a8a88930320f8d3c1469e8a8282529c2196255cf7cb6427be834820e19952b69b07198366ac7f53ffe373133a1c15226ee4fee50e0806baf5f48fa62d0535c2a9d7379646f28e3710b4c59a9e3afe7656e77b361b641ed332dd330d35467364963afed87686a7e61935c797e9d94fbbf75968d06178e8bb9b78704f88c45d1313f38884efbf6c3be8da", 0xc8}]}, 0x8, 0x2, 0xa00}, 0x1)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000180))
r7 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000040)={0x6, 'wlan0\x00', {0x2}, 0x3})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x3}, 0x1})
socket$l2tp6(0xa, 0x2, 0x73)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r8, 0x8)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={r9}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="022176bb51e03fd54e0d12c288d25bccb58a0a5affffaa5da361b7512de273e21716f7ef8b66b0cb7436079dcd32fea001ce2db44a7827f9bca0e8168ff564ac9073f988284148c3d831bcfc934684f668479e76bd59d14792c58e9a5b16ec2de204891a38ffd174422d50ec368949ba8e2310ae9cf9f5a05c2f1cb9795395cc0c337604613f8125d58832e78ae2d7f63742a4f549e4241e40c627c8b60cc497b7636147f382b588bb4dc172"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x18)

1.839227306s ago: executing program 2 (id=4650):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r5 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000"], 0x3}}, 0x0)
splice(r1, 0x0, r5, 0x0, 0x10d00, 0xf)
read$dsp(r0, &(0x7f0000000100)=""/83, 0x53)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x10)

1.339175141s ago: executing program 1 (id=4651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0xc004) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="01010200000004002400128009000100766c616e000000001400028006000100cb8700000600050088a80000"], 0x44}, 0x1, 0xba01, 0x0, 0x4000000}, 0x810)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e6174"], 0xf0}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="192c2cbd7000ffdbdf251500000008000100", @ANYRES32=0x0, @ANYBLOB="90557341a339b2c8d566737934e9b2cc9451e49df209000080e769bee6f0127c307e31c78eb45bc2614a81b1c23726f19dddcb4196e21477ba4a884ebe8405278fcddf6ef1a0ddf479721cd83cb7f2752b9df858c3b22e8d"], 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x44}}, 0x8040) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00'})
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r11, 0x8983, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x5}) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe7c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe68, 0x1, [@m_pedit={0xe64, 0x1, 0x0, 0x0, {{0xa}, {0xe38, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x8e55a56509386ca0}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe7c}}, 0x0) (async)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000d80)) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r12, 0x84, 0x6c, 0x0, 0x0) (async)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r13, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200), 0x0, 0x0)

1.239092259s ago: executing program 2 (id=4652):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680), 0x900)
clock_gettime(0x0, &(0x7f0000000c40)={<r2=>0x0, <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000c40)={'wpan0\x00', <r6=>0x0})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf251e000000080003006fcdaf4e90769bc1493ed9523b4c73537bb8f5161bb1d5c4537923e5bbc5df60f7786ea83c4ee32ebd9d0177f43e7da9d977130c8d255306ae44468384e294ad01ed42088af6b94530508ab853784dfa034bd14df7da524c98e66b553718203e55737ebdd94229a74f5ad4aa8aabc3169ef52c55b4dfe42883e45e1c6d0fd29ecb07a88b98b401c8f4502b596cdf20c4340b8c1506a33eac4222a61002873a518a", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
ppoll(&(0x7f0000000c00)=[{r1, 0x4005}, {0xffffffffffffffff, 0x420}, {r0, 0x5a0}, {0xffffffffffffffff, 0x2456}], 0x4, &(0x7f0000000c80)={r2, r3+60000000}, &(0x7f0000000cc0)={[0x7]}, 0x8)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
recvmmsg(r8, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0xa03b}], 0x1, 0x10020, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

184.869757ms ago: executing program 2 (id=4653):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/profiling', 0xa202, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000003880)={0x6b, {0x6, 0x2b, 0x10}}, 0xa)

184.126121ms ago: executing program 1 (id=4654):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r11, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40804)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31", 0x24}, {&(0x7f0000000c00)="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", 0x254}], 0x2}, 0x4)

183.539377ms ago: executing program 2 (id=4655):
r0 = socket$kcm(0xa, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x106) (async)
r1 = socket$kcm(0xa, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES64=r0], 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES64=r0], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x28, 0x10}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x9, [@struct={0x0, 0x7, 0x0, 0x4, 0x1, 0x9, [{0x2, 0x1, 0x1}, {0x6, 0x1, 0x3}, {0x100000f, 0x4, 0x26}, {0x10, 0x4, 0x2}, {0xc, 0x5, 0x8}, {0xe, 0x101, 0x8ff}, {0xe, 0x2, 0xfff}]}, @fwd={0x10}]}, {0x0, [0x61, 0x61, 0x2e, 0x2e, 0x61, 0x2e, 0x61]}}, &(0x7f00000002c0)=""/4, 0x8d, 0x4, 0x1, 0xfffffff8}, 0x28)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300f8000000000000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x80, 0x0}, 0x24004059)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5)
sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r9, 0x29, 0x21, &(0x7f00000001c0), 0x4)
sendmsg$kcm(r9, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

101.915487ms ago: executing program 0 (id=4656):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x80, 0x0, &(0x7f0000000400)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x80b}, @flat=@handle={0x73682a85, 0x1001, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/76, 0x4c, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x2f, 0x30}}, 0x400}, @transaction_sg={0x40486311, {0x20000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/17, 0x0, 0x2, 0x3c}}, &(0x7f00000003c0)}, 0x1000}, @decrefs={0x40046307, 0x1}, @clear_death], 0x27, 0x2000000, &(0x7f0000000280)="ce70b3035bb66a4da5ca3a704a4aae6808ac0f5fced4b80a00fb01eef9fae6be206334483ed3d1"})

101.555529ms ago: executing program 1 (id=4657):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x3, 'netdevsim0\x00', {0xae}, 0x2})
ioctl$FITRIM(r0, 0x4008af03, &(0x7f0000000040)={0x9, 0x0, 0xf})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x202041, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0))
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x202200, 0x0)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)

0s ago: executing program 0 (id=4658):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x12, &(0x7f00000004c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x1, 0xd, 0x8, 0xb}, @call={0x85, 0x0, 0x0, 0xb2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ldst={0x0, 0x1, 0x2, 0x3, 0x5, 0x20, 0xfffffffffffffffc}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x100}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}], &(0x7f0000000080)='GPL\x00', 0x6, 0x73, &(0x7f00000003c0)=""/115, 0x41100, 0x18, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xe, 0x1a, 0x4}, 0x10, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r3, 0x1}, 0xc)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

al tag 0xc
[  322.275887][   T47] hid-generic 0001:0009:FFFFFFFF.0007: collection stack underflow
[  322.278448][   T47] hid-generic 0001:0009:FFFFFFFF.0007: item 0 1 0 12 parsing failed
[  322.282183][   T47] hid-generic 0001:0009:FFFFFFFF.0007: probe with driver hid-generic failed with error -22
[  322.591435][T14842] openvswitch: netlink: nsh attr 0 has unexpected len 5 expected 0
[  322.600622][T14842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.698468][T14849] netlink: 'syz.1.2830': attribute type 1 has an invalid length.
[  322.736647][T14852] netlink: 'syz.1.2831': attribute type 1 has an invalid length.
[  322.739632][T14852] netlink: 'syz.1.2831': attribute type 2 has an invalid length.
[  323.187218][T14870] netlink: 'syz.1.2836': attribute type 10 has an invalid length.
[  323.190296][T14870] __nla_validate_parse: 47 callbacks suppressed
[  323.190309][T14870] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2836'.
[  323.312469][T14874] netlink: 'syz.1.2838': attribute type 3 has an invalid length.
[  323.317299][T14874] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2838'.
[  323.471774][T14886] veth11: left promiscuous mode
[  323.483893][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'.
[  323.591004][T14903] random: crng reseeded on system resumption
[  323.599211][T14903] Unrecognized hibernate image header format!
[  323.601098][T14903] PM: hibernation: Image mismatch: architecture specific data
[  323.646685][T14909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2847'.
[  323.668096][T14895] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  323.671524][T14895] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.729209][T14895] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  323.732308][T14895] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.791791][T14895] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  323.795617][T14895] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.830603][T14895] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  323.833894][T14895] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.909500][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  323.912616][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.937393][ T5640] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  323.940793][ T5640] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.953882][ T5640] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  323.957421][ T5640] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.972601][ T5640] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  323.976206][ T5640] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.049263][T14934] "syz.0.2854" (14934) uses obsolete ecb(arc4) skcipher
[  324.169511][T14944] netlink: 'syz.2.2857': attribute type 29 has an invalid length.
[  324.173178][T14944] netlink: 'syz.2.2857': attribute type 29 has an invalid length.
[  324.183866][T14944] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  324.220227][T14943] netlink: 'syz.0.2858': attribute type 1 has an invalid length.
[  324.225464][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2858'.
[  324.230588][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2858'.
[  324.230718][ T5640] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  324.236569][ T5640] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  324.246366][ T5640] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  324.249438][ T5640] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  324.571709][T14959]  speed is unknown, defaulting to 1000
[  324.717355][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'.
[  325.218124][T14982] SET target dimension over the limit!
[  325.436757][T14994] tap0: tun_chr_ioctl cmd 35108
[  325.458219][T14994] syzkaller0: entered promiscuous mode
[  325.459867][T14994] syzkaller0: entered allmulticast mode
[  325.513773][T14996] mkiss: ax0: crc mode is auto.
[  325.695763][T15004] syzkaller0: entered promiscuous mode
[  325.697749][T15004] syzkaller0: entered allmulticast mode
[  325.712795][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2879'.
[  325.724630][T15006] netlink: 'syz.1.2879': attribute type 12 has an invalid length.
[  325.732898][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2879'.
[  325.736814][T15006] netlink: 'syz.1.2879': attribute type 12 has an invalid length.
[  325.814198][T15010] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2881'.
[  325.880853][T15016] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  325.985571][T15022]  speed is unknown, defaulting to 1000
[  326.625320][T15055] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  327.202653][T15071] vlan5: entered allmulticast mode
[  327.204388][T15071] veth1: entered allmulticast mode
[  327.446390][T15084] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.449488][T15084] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  327.503147][T15084] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.507314][T15084] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  327.529286][   T13] tipc: Subscription rejected, illegal request
[  327.549557][T15084] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.552466][T15084] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  327.611538][T15084] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.634564][T15084] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  327.730480][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  327.734238][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  327.783445][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  327.794051][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  327.800857][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  327.807494][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  327.813707][T15111] netlink: 'syz.2.2915': attribute type 11 has an invalid length.
[  327.820571][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  327.825450][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  327.907573][T15114]  speed is unknown, defaulting to 1000
[  328.230227][T15143] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  328.234537][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.268333][T15146] __nla_validate_parse: 7 callbacks suppressed
[  328.268344][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'.
[  328.388877][T15149] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2922'.
[  329.675688][T15180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.680180][T15180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2934'.
[  330.017307][T15190] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  330.250101][T15211] tap0: tun_chr_ioctl cmd 1074025678
[  330.251731][T15211] tap0: group set to 0
[  330.255593][T15213] nftables ruleset with unbound chain
[  330.258784][T15214] nft_compat: unsupported protocol 0
[  330.262509][T15214] nft_compat: unsupported protocol 0
[  330.264283][T15214] nft_compat: unsupported protocol 0
[  330.271265][T15214] nft_compat: unsupported protocol 0
[  330.273173][T15214] nft_compat: unsupported protocol 0
[  330.275607][T15214] nft_compat: unsupported protocol 0
[  330.278903][T15214] nft_compat: unsupported protocol 0
[  330.280728][T15214] nft_compat: unsupported protocol 0
[  330.282501][T15214] nft_compat: unsupported protocol 0
[  330.284773][T15214] nft_compat: unsupported protocol 0
[  330.289094][T15214] nft_compat: unsupported protocol 0
[  330.292105][T15214] nft_compat: unsupported protocol 0
[  330.300033][T15214] nft_compat: unsupported protocol 0
[  330.301668][T15214] nft_compat: unsupported protocol 0
[  330.303310][T15214] nft_compat: unsupported protocol 0
[  330.307761][T15214] nft_compat: unsupported protocol 0
[  330.379398][T15222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.383150][T15222] syzkaller0: entered promiscuous mode
[  330.385048][T15222] syzkaller0: entered allmulticast mode
[  330.414175][T15222] tipc: Resetting bearer <eth:syzkaller0>
[  330.420689][T15228] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  330.427006][T15221] tipc: Resetting bearer <eth:syzkaller0>
[  330.453309][T15221] tipc: Disabling bearer <eth:syzkaller0>
[  330.494718][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2952'.
[  330.651771][T15257] nvme_fabrics: unknown parameter or missing value 'syz1' in ctrl creation request
[  330.854461][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2965'.
[  330.962635][T15279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2965'.
[  331.191582][T15293] input input19: cannot allocate more than FF_MAX_EFFECTS effects
[  331.745711][T15305] binder: binder_mmap: 15304 200000ffb000-200000ffe000 bad vm_flags failed -1
[  331.775591][T15306]  speed is unknown, defaulting to 1000
[  331.827649][T15311] netlink: 'syz.1.2976': attribute type 6 has an invalid length.
[  331.830908][T15311] netlink: 'syz.1.2976': attribute type 6 has an invalid length.
[  331.886912][T15305]  speed is unknown, defaulting to 1000
[  332.086133][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'.
[  332.091092][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2979'.
[  332.213061][T15328] netlink: 'syz.2.2981': attribute type 1 has an invalid length.
[  332.228939][T15328] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  332.389098][T15338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2982'.
[  332.430400][T15342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2985'.
[  332.450348][T15345] netlink: 'syz.1.2984': attribute type 1 has an invalid length.
[  332.523634][T15345] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address
[  332.528863][T15345] bond17: (slave vxcan1): Error -95 calling set_mac_address
[  332.569853][T15350] bond17: (slave bridge14): Enslaving as an active interface with a down link
[  332.677757][T15357] bond0: (slave rose0): Enslaving as an active interface with an up link
[  332.713459][T15362] bond14: (slave erspan0): Releasing active interface
[  332.723637][T15362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  332.839019][T15366] nbd: device at index 64 is going down
[  333.340179][T15392] syzkaller1: entered promiscuous mode
[  333.341768][T15392] syzkaller1: entered allmulticast mode
[  333.454936][T15406] netlink: 'syz.0.2999': attribute type 6 has an invalid length.
[  333.466721][T15405] __nla_validate_parse: 5 callbacks suppressed
[  333.466731][T15405] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3000'.
[  334.372807][T15418] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3003'.
[  334.489551][T15428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3004'.
[  335.435717][T15448] netlink: 'syz.2.3013': attribute type 2 has an invalid length.
[  335.512202][T15454] netlink: 'syz.2.3013': attribute type 2 has an invalid length.
[  335.533350][T15453] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3015'.
[  335.550128][T15457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3016'.
[  335.559882][T15453] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3015'.
[  335.662667][T15465] netlink: 'syz.0.3020': attribute type 4 has an invalid length.
[  335.758133][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3024'.
[  335.774029][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3024'.
[  335.857448][T15479] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  335.861076][T15481] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3028'.
[  335.864997][T15480] [U] 
[  335.890967][T15483] --map-set only usable from mangle table
[  335.917128][T15485] netlink: 'syz.2.3030': attribute type 1 has an invalid length.
[  335.938405][T15485] 8021q: adding VLAN 0 to HW filter on device bond15
[  335.943514][T15485] 8021q: VLANs not supported on ip6_vti0
[  335.955595][T15488] ipvlan0: entered allmulticast mode
[  335.957489][T15488] bond15: entered allmulticast mode
[  335.995648][T15486] syzkaller0: entered promiscuous mode
[  335.997243][T15486] syzkaller0: entered allmulticast mode
[  336.105615][T15500] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.3034'.
[  336.245962][T15519] netlink: 'syz.1.3040': attribute type 4 has an invalid length.
[  336.402193][T15528]  speed is unknown, defaulting to 1000
[  337.481822][T15548] IPv6: sit1: Disabled Multicast RS
[  337.604655][T15561] random: crng reseeded on system resumption
[  337.642179][T15563] syzkaller1: entered promiscuous mode
[  337.643961][T15563] syzkaller1: entered allmulticast mode
[  338.008765][T15598] binder: 15597:15598 ioctl c018620b 200000000080 returned -14
[  338.225492][T15624] validate_nla: 1 callbacks suppressed
[  338.225504][T15624] netlink: 'syz.0.3075': attribute type 12 has an invalid length.
[  338.235091][ T5199] Bluetooth: hci3: command 0x1003 tx timeout
[  338.236144][   T57] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  338.379327][T15638] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  339.180972][T15646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.184116][T15645] syzkaller0: entered promiscuous mode
[  339.186582][T15645] syzkaller0: entered allmulticast mode
[  339.212908][T15646] tipc: Resetting bearer <eth:syzkaller0>
[  339.225039][T15646] __nla_validate_parse: 5 callbacks suppressed
[  339.225056][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'.
[  339.235562][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'.
[  339.239031][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'.
[  339.258397][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'.
[  339.261271][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'.
[  339.263988][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'.
[  339.268720][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'.
[  339.271374][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'.
[  339.274104][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'.
[  339.278645][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'.
[  339.305609][T15644] tipc: Resetting bearer <eth:syzkaller0>
[  339.332272][T15644] tipc: Disabling bearer <eth:syzkaller0>
[  339.554105][T15671] syzkaller0: entered promiscuous mode
[  339.559162][T15671] syzkaller0: entered allmulticast mode
[  339.631072][T15678] bridge15: entered allmulticast mode
[  341.065496][T15689] netlink: 'syz.2.3094': attribute type 2 has an invalid length.
[  341.113369][T15699] [U] 
[  341.341305][T15719] ALSA: mixer_oss: invalid OSS volume ''
[  341.667664][T15735] binder: 15734:15735 ioctl d000941e 200000000740 returned -22
[  341.685537][T15735] binder: 15734:15735 ioctl c0306201 200000000340 returned -14
[  341.689291][T15735] binder: 15734:15735 ioctl c018620c 200000000000 returned -14
[  341.696197][T15735] binder: 15734:15735 ioctl c00c6211 200000000080 returned -14
[  341.751473][T15737] : renamed from vlan0
[  342.078687][T15752] binder: 15751:15752 ioctl c018620c 200000000040 returned -1
[  342.247929][T15769] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  342.266821][T15773] netlink: 'syz.0.3123': attribute type 4 has an invalid length.
[  342.340870][T15778] nbd: must specify a device to reconfigure
[  342.342977][T15780] nbd: must specify a device to reconfigure
[  342.648385][T15791]  speed is unknown, defaulting to 1000
[  343.444154][T15816] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  343.462325][T15816] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  343.866412][T15837] netlink: 'syz.2.3145': attribute type 5 has an invalid length.
[  343.878306][T15837] geneve4: entered promiscuous mode
[  343.880348][T15837] geneve4: entered allmulticast mode
[  343.883801][ T5640] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  343.887310][ T5640] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  343.890501][ T5640] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  343.893708][ T5640] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  344.023687][T15855]  speed is unknown, defaulting to 1000
[  344.157217][T15859] 8021q: adding VLAN 0 to HW filter on device `
[  344.215252][T15859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  344.224764][T15858]  speed is unknown, defaulting to 1000
[  344.910743][T15868] bond20: Unable to set up delay as MII monitoring is disabled
[  344.914119][T15868] bond20 (unregistering): Released all slaves
[  345.044213][T15875] binder: 15874:15875 ioctl d000941e 200000000740 returned -22
[  345.047384][T15875] binder: 15874:15875 ioctl c018620c 200000000000 returned -14
[  345.142063][T15879] __nla_validate_parse: 311 callbacks suppressed
[  345.142074][T15879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3159'.
[  345.218585][T15884] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3161'.
[  345.221391][T15884] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3161'.
[  345.223656][T15887] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3160'.
[  345.224155][T15884] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3161'.
[  345.228440][T15887] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  345.735012][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'.
[  345.773650][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3172'.
[  345.796761][T15916]  speed is unknown, defaulting to 1000
[  346.157636][T15922]  speed is unknown, defaulting to 1000
[  346.161803][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'.
[  346.169710][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'.
[  346.186580][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'.
[  346.428282][T15941] netlink: 'syz.0.3177': attribute type 6 has an invalid length.
[  346.612286][T15950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.615226][T15950] syzkaller0: entered promiscuous mode
[  346.617019][T15950] syzkaller0: entered allmulticast mode
[  346.690397][T15949] tipc: Resetting bearer <eth:syzkaller0>
[  346.717823][T15949] tipc: Disabling bearer <eth:syzkaller0>
[  346.736691][T15960] netlink: 'syz.1.3185': attribute type 12 has an invalid length.
[  346.821567][T15968] random: crng reseeded on system resumption
[  346.859320][T15971] netlink: set zone limit has 8 unknown bytes
[  346.878947][T15971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.881589][T15971] syzkaller0: entered promiscuous mode
[  346.883203][T15971] syzkaller0: entered allmulticast mode
[  346.925265][T15971] tipc: Resetting bearer <eth:syzkaller0>
[  346.933693][T15970] tipc: Resetting bearer <eth:syzkaller0>
[  346.947843][T15970] tipc: Disabling bearer <eth:syzkaller0>
[  347.372232][T16006]  speed is unknown, defaulting to 1000
[  347.801118][T16029] netlink: 'syz.2.3205': attribute type 1 has an invalid length.
[  347.919605][T16039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  347.922337][T16039] IPv6: NLM_F_CREATE should be set when creating new route
[  347.925028][T16039] IPv6: NLM_F_CREATE should be set when creating new route
[  347.949222][T16039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  348.232753][T16050] binder: 16049:16050 ioctl c018620c 200000000000 returned -1
[  348.268881][   T33] audit: type=1800 audit(1761786164.201:5): pid=16045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3210" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=5341 res=0 errno=0
[  348.411283][T16059] bond16: Invalid ad_actor_system MAC address.
[  348.416085][T16059] bond16: option ad_actor_system: invalid value (7)
[  348.422612][T16059] bond16 (unregistering): Released all slaves
[  348.557125][T16068] netlink: 'syz.2.3218': attribute type 1 has an invalid length.
[  348.758615][T16086] netlink: 'syz.0.3222': attribute type 1 has an invalid length.
[  348.788039][T16086] 8021q: adding VLAN 0 to HW filter on device bond20
[  348.807599][T16086] vlan5: entered promiscuous mode
[  348.814283][T16086] bond20: entered promiscuous mode
[  348.816801][T16086] vlan5: entered allmulticast mode
[  348.818697][T16086] bond20: entered allmulticast mode
[  348.983705][T16100] syzkaller1: entered promiscuous mode
[  348.986003][T16100] syzkaller1: entered allmulticast mode
[  349.114568][ T5199] Bluetooth: hci2: command 0x0405 tx timeout
[  349.222131][T16105] : option downdelay: invalid value (18446744073709547007)
[  349.231151][T16105] : option downdelay: allowed values 0 - 2147483647
[  349.235863][T16105]  (unregistering): Released all slaves
[  349.287086][T16111] syzkaller1: entered promiscuous mode
[  349.288754][T16111] syzkaller1: entered allmulticast mode
[  349.709260][T16143] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  350.395876][T16148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.659635][T16157] batadv1: entered promiscuous mode
[  350.661393][T16157] batadv1: entered allmulticast mode
[  350.665759][T16157] 8021q: adding VLAN 0 to HW filter on device batadv1
[  350.732452][T16161] __nla_validate_parse: 57 callbacks suppressed
[  350.732468][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3246'.
[  350.852244][T16170] vxcan4: entered allmulticast mode
[  351.209435][T16180] netlink: 'syz.2.3252': attribute type 83 has an invalid length.
[  351.499864][T16184] 8021q: adding VLAN 0 to HW filter on device bond19
[  351.505226][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3254'.
[  351.818820][T16199] IPVS: set_ctl: invalid protocol: 225 172.20.20.187:20003
[  352.009331][T16210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3260'.
[  352.012048][T16210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3260'.
[  352.016131][T16210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3260'.
[  352.019522][T16210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3260'.
[  352.092173][T16216] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  352.152175][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'.
[  352.155493][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'.
[  352.158991][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'.
[  352.161922][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'.
[  352.634612][T16233] mkiss: ax0: crc mode is auto.
[  353.015090][T16261] syzkaller1: entered promiscuous mode
[  353.023033][T16261] syzkaller1: entered allmulticast mode
[  353.049952][T16264] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  353.052504][T16257]  speed is unknown, defaulting to 1000
[  353.217286][T16269]  speed is unknown, defaulting to 1000
[  353.916198][T16285] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  354.603299][T16343] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.650082][T16343] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.688352][T16343] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.755604][T16350] syzkaller0: entered promiscuous mode
[  354.757411][T16350] syzkaller0: entered allmulticast mode
[  354.813087][T16343] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  356.199847][ T5640] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  356.202372][ T5640] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  356.230238][ T5640] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  356.233318][ T5640] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  356.276187][T16366] __nla_validate_parse: 11 callbacks suppressed
[  356.276199][T16366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3316'.
[  356.280471][T16366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3316'.
[  356.299847][T16371] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3318'.
[  356.317652][T16371] mkiss: ax0: crc mode is auto.
[  356.540407][ T5843] nci: nci_rsp_packet: unsupported rsp opcode 0xf25
[  356.558936][T16392] syzkaller0: entered promiscuous mode
[  356.562212][T16392] syzkaller0: entered allmulticast mode
[  357.298771][T16382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  357.442238][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3330'.
[  357.734220][T16419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.738658][T16419] syzkaller0: entered promiscuous mode
[  357.740897][T16419] syzkaller0: entered allmulticast mode
[  357.749616][T16418] tipc: Resetting bearer <eth:syzkaller0>
[  357.764849][T16418] tipc: Disabling bearer <eth:syzkaller0>
[  358.321224][T16439] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3343'.
[  358.628957][T16466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3350'.
[  358.631841][T16466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3350'.
[  358.634995][T16466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3350'.
[  358.637780][T16466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3350'.
[  358.672759][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3350'.
[  358.885532][T16493] netlink: 'syz.0.3359': attribute type 29 has an invalid length.
[  358.888104][T16493] netlink: 'syz.0.3359': attribute type 29 has an invalid length.
[  358.986714][T16504] netlink: 'syz.1.3363': attribute type 3 has an invalid length.
[  359.386662][T16518] x_tables: duplicate underflow at hook 2
[  360.294282][T16546] netlink: 'syz.0.3380': attribute type 1 has an invalid length.
[  360.337505][T16546] 8021q: adding VLAN 0 to HW filter on device bond21
[  360.425148][T16554] bridge0: entered promiscuous mode
[  360.435950][T16554] bridge0: port 1(macvtap0) entered blocking state
[  360.438637][T16554] bridge0: port 1(macvtap0) entered disabled state
[  360.441562][T16554] macvtap0: entered allmulticast mode
[  360.443593][T16554] bridge0: entered allmulticast mode
[  360.448182][T16554] macvtap0: left allmulticast mode
[  360.449884][T16554] bridge0: left allmulticast mode
[  360.452726][T16554] bridge0: left promiscuous mode
[  360.653206][T16567] bond0: (slave gretap0): Error: Device type is different from other slaves
[  360.661516][T16567] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  360.665798][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.668642][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.741773][T16569] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.746791][T16569] syzkaller0: entered promiscuous mode
[  360.749254][T16569] syzkaller0: entered allmulticast mode
[  360.859755][T16571] netlink: 'syz.0.3388': attribute type 6 has an invalid length.
[  360.863941][T16568] tipc: Resetting bearer <eth:syzkaller0>
[  360.874674][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  360.890534][T16568] tipc: Disabling bearer <eth:syzkaller0>
[  360.909424][T16585] netlink: 'syz.1.3392': attribute type 1 has an invalid length.
[  360.929417][T16585] bond20: entered promiscuous mode
[  360.931509][T16585] 8021q: adding VLAN 0 to HW filter on device bond20
[  361.008466][T16590] syzkaller0: entered promiscuous mode
[  361.010251][T16590] syzkaller0: entered allmulticast mode
[  361.050247][T16590] netlink: 'syz.1.3394': attribute type 21 has an invalid length.
[  362.585929][T16599] __nla_validate_parse: 9 callbacks suppressed
[  362.585947][T16599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3396'.
[  362.672249][T16612] netlink: 'syz.2.3401': attribute type 1 has an invalid length.
[  362.718195][T16610]  speed is unknown, defaulting to 1000
[  362.765758][T16620] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3400'.
[  362.768944][T16620] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3400'.
[  362.795901][T16622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3404'.
[  362.799917][T16622] 8021q: VLANs not supported on ipvlan1
[  362.862222][T16624] netlink: 'syz.1.3405': attribute type 1 has an invalid length.
[  362.892021][T16624] bond21: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  362.898464][   T13] bond21: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  362.898935][T16624] 8021q: adding VLAN 0 to HW filter on device bond21
[  362.926630][T16624] veth25: entered promiscuous mode
[  362.929860][T16624] bond21: (slave veth25): Enslaving as a backup interface with a down link
[  362.933622][T16624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3405'.
[  363.024669][ T5878] bond21: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  363.048840][T16631] binder: 16630:16631 ioctl 4018620d 200000001380 returned -22
[  363.184004][T16641]  speed is unknown, defaulting to 1000
[  363.369160][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'.
[  363.480509][T16655] random: crng reseeded on system resumption
[  363.693003][T16660] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3417'.
[  363.705577][T16662] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3417'.
[  364.158845][T16671] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3420'.
[  364.162445][T16671] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3420'.
[  364.183283][T16671] mac80211_hwsim hwsim6 ;: renamed from wlan0
[  364.259866][T16678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  364.339581][T16686] xt_TPROXY: Can be used only with -p tcp or -p udp
[  364.422049][T16690] binder: 16689:16690 ioctl 4018620d 200000001380 returned -22
[  365.216265][T16720] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  365.369448][T16736] mkiss: ax0: crc mode is auto.
[  365.387876][T16739] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.394722][T16739] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.398835][T16739] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.445643][T16739] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.464611][T16739] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.474476][T16739] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.527493][T16748] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1
[  365.595761][T16739] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.598648][T16739] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.601653][T16739] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.640159][T16739] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.644767][T16739] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.648729][T16739] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.748327][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  365.750798][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  365.754644][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  365.771276][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  365.774284][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  365.777343][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  365.786428][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  365.789649][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  365.794256][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  365.799153][T16761] netlink: 'syz.1.3454': attribute type 1 has an invalid length.
[  365.817065][T16761] 8021q: adding VLAN 0 to HW filter on device bond22
[  365.826695][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  365.829552][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  365.832251][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  365.844568][T16764] mkiss: ax0: crc mode is auto.
[  365.928450][T16768] binder: 16767:16768 ioctl c00c6211 200000000080 returned -14
[  366.034257][T16777] block nbd1: Unsupported socket: should be TCP or UNIX.
[  366.096845][T16779] sch_tbf: burst 0 is lower than device tunl0 mtu (61406) !
[  366.305828][T16796] netlink: 'syz.0.3466': attribute type 12 has an invalid length.
[  366.726661][T16817] syzkaller0: entered promiscuous mode
[  366.728690][T16817] syzkaller0: entered allmulticast mode
[  366.977970][T16831] sctp: [Deprecated]: syz.0.3478 (pid 16831) Use of struct sctp_assoc_value in delayed_ack socket option.
[  366.977970][T16831] Use struct sctp_sack_info instead
[  367.166234][T16839] bridge0: entered allmulticast mode
[  367.335069][T16848] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  367.368760][T16848] syzkaller0: entered promiscuous mode
[  367.371133][T16848] syzkaller0: entered allmulticast mode
[  367.676322][T16866] nbd: couldn't find device at index 536870912
[  367.717992][T16868] __nla_validate_parse: 10 callbacks suppressed
[  367.718004][T16868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3493'.
[  367.724710][T16868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3493'.
[  367.729125][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'.
[  367.803623][T16875] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  367.852502][T16874] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3495'.
[  367.940162][T16880] ALSA: mixer_oss: invalid OSS volume ''
[  368.320605][T16903] netlink: 'syz.0.3505': attribute type 1 has an invalid length.
[  368.347820][T16903] 8021q: adding VLAN 0 to HW filter on device bond22
[  368.373596][T16903] 8021q: adding VLAN 0 to HW filter on device bond22
[  368.376702][T16903] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  368.380312][T16903] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  368.443091][T16900] sit0: left promiscuous mode
[  368.489888][T16900] bridge0: left allmulticast mode
[  368.512457][T16900] bond11: left promiscuous mode
[  368.514143][T16900] bond11: left allmulticast mode
[  368.529308][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3503'.
[  368.549641][T16900] vlan0: left promiscuous mode
[  368.551096][T16900] bond12: left promiscuous mode
[  368.552612][T16900] vlan0: left allmulticast mode
[  368.557497][T16900] bond12: left allmulticast mode
[  368.582088][T16900] veth16: left promiscuous mode
[  368.585703][T16900] veth16: left allmulticast mode
[  368.590350][T16900] geneve3: left promiscuous mode
[  368.596309][T16900] geneve3: left allmulticast mode
[  368.650421][T16900] ipvlan0: left allmulticast mode
[  368.655494][T16900] bond15: left allmulticast mode
[  368.658282][T16900] geneve4: left promiscuous mode
[  368.659895][T16900] geneve4: left allmulticast mode
[  368.693521][T16907] veth15: entered promiscuous mode
[  368.699287][T16907] bond22: (slave veth15): Enslaving as an active interface with a down link
[  368.706995][ T5640] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.712869][ T5640] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  368.722468][ T5640] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  368.725447][ T5640] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.727973][ T5640] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  368.733759][ T5640] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  368.743669][ T5640] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.750601][ T5640] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  368.755527][ T5640] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  368.760274][ T5640] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.766145][ T5640] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  368.771286][ T5640] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  368.880038][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3510'.
[  368.883274][T16922] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3510'.
[  369.126070][T16934]  speed is unknown, defaulting to 1000
[  369.165117][T16935] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3513'.
[  369.337500][T16938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3513'.
[  369.404985][T16935]  speed is unknown, defaulting to 1000
[  369.930732][T16946] netlink: 'syz.2.3515': attribute type 4 has an invalid length.
[  369.946182][T16948] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3516'.
[  370.809071][T16952]  speed is unknown, defaulting to 1000
[  371.998561][T16983] netlink: 'syz.0.3525': attribute type 11 has an invalid length.
[  372.586411][T16991] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  372.667613][   T58] block nbd1: Receive control failed (result -32)
[  372.719213][T17013] delete_channel: no stack
[  372.808123][T17020] __nla_validate_parse: 8 callbacks suppressed
[  372.808139][T17020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3536'.
[  372.865686][T17022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3537'.
[  372.868380][T17022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3537'.
[  372.872539][T17024] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3538'.
[  372.876014][T17024] netlink: 'syz.0.3538': attribute type 1 has an invalid length.
[  373.052146][T17037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3541'.
[  373.179675][T17048] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  373.288856][T17051] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  374.005628][T17048] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  374.008398][T17048] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  374.017749][T17048] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  374.060268][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3551'.
[  374.063423][T17065] netlink: 'syz.0.3551': attribute type 21 has an invalid length.
[  374.109415][T17067] netlink: 'syz.2.3552': attribute type 10 has an invalid length.
[  374.122092][T17069] netlink: 'syz.0.3553': attribute type 1 has an invalid length.
[  374.150802][T17069] bond23: entered promiscuous mode
[  374.152716][T17069] bond23: entered allmulticast mode
[  374.155122][T17069] 8021q: adding VLAN 0 to HW filter on device bond23
[  374.178443][T17073] netlink: 'syz.2.3552': attribute type 1 has an invalid length.
[  374.273383][T17082] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  374.383510][T17087] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  374.438225][T17089] sr 2:0:0:0: [sr0] tag#5 unaligned transfer
[  374.440768][T17089] I/O error, dev sr0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  374.446286][T17089] sr 2:0:0:0: [sr0] tag#6 unaligned transfer
[  374.448669][T17089] I/O error, dev sr0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  374.869263][T17109] random: crng reseeded on system resumption
[  374.989335][T17116]  speed is unknown, defaulting to 1000
[  375.020867][T17111] veth0: entered promiscuous mode
[  375.103579][T17125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.114886][T17125] syzkaller0: entered promiscuous mode
[  375.119935][T17125] syzkaller0: entered allmulticast mode
[  375.275642][ T5199] Bluetooth: hci1: command 0x0406 tx timeout
[  375.347586][T17131] tipc: Resetting bearer <eth:syzkaller0>
[  375.366046][T17131] tipc: Disabling bearer <eth:syzkaller0>
[  375.436526][T17135] bond0: (slave gre0): Error: Device type is different from other slaves
[  375.440969][T17135] netlink: 'syz.0.3577': attribute type 39 has an invalid length.
[  375.456278][T17110] veth0: left promiscuous mode
[  375.661126][T17145] syzkaller1: entered promiscuous mode
[  375.663307][T17145] syzkaller1: entered allmulticast mode
[  375.822976][T17147] delete_channel: no stack
[  376.027819][T17153] netlink: 'syz.2.3583': attribute type 4 has an invalid length.
[  376.040692][T17155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3584'.
[  376.049270][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3584'.
[  376.072675][T17157] mkiss: ax0: crc mode is auto.
[  376.087243][ T5199] Bluetooth: hci2: command 0x0405 tx timeout
[  376.093200][T17155] netlink: 'syz.1.3584': attribute type 1 has an invalid length.
[  376.147684][T17159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3586'.
[  376.187695][T17159] bond23: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  376.192286][T17159] bond23: (slave ip6tnl2): Error -95 calling set_mac_address
[  376.295347][T17168] xfrm1: entered allmulticast mode
[  376.337764][T17170] netlink: 'syz.1.3590': attribute type 1 has an invalid length.
[  376.340188][T17170] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3590'.
[  376.459356][T17172] nbd: must specify at least one socket
[  377.309174][T17216] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  377.323474][T17216] can0: slcan on ttynull.
[  377.354730][ T5199] Bluetooth: hci1: command 0x0406 tx timeout
[  377.375650][T17215] can0 (unregistered): slcan off ttynull.
[  378.363092][T17272] __nla_validate_parse: 78 callbacks suppressed
[  378.363103][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3619'.
[  378.370734][T17272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3619'.
[  378.374773][T17272] netlink: 'syz.0.3619': attribute type 2 has an invalid length.
[  378.470610][T17279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3622'.
[  379.527160][T17295] xt_TCPMSS: Only works on TCP SYN packets
[  379.542093][T17295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3629'.
[  379.568982][T17297] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  379.596423][T17299] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  379.765195][   T57] Bluetooth: hci3: command 0x1003 tx timeout
[  379.767228][ T5199] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  379.824490][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3635'.
[  379.843873][T17312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.849717][T17312] syzkaller0: entered promiscuous mode
[  379.851602][T17312] syzkaller0: entered allmulticast mode
[  379.861479][T17317] mkiss: ax0: crc mode is auto.
[  379.882337][T17312] tipc: Resetting bearer <eth:syzkaller0>
[  379.887612][T17311] tipc: Resetting bearer <eth:syzkaller0>
[  379.902199][T17311] tipc: Disabling bearer <eth:syzkaller0>
[  380.000902][T17321] netlink: 'syz.0.3638': attribute type 83 has an invalid length.
[  380.038093][T17324] netlink: 'syz.0.3640': attribute type 28 has an invalid length.
[  380.176656][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'.
[  380.182011][T17331] netlink: 'syz.2.3639': attribute type 5 has an invalid length.
[  380.186455][T17331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3639'.
[  380.190408][T17334] openvswitch: netlink: Missing key (keys=40, expected=80)
[  380.303937][T17341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3645'.
[  380.356229][T17344] xt_CT: No such helper "snmp_trap"
[  380.492706][T17349] binder: 17348:17349 unknown command 0
[  380.494549][T17349] binder: 17348:17349 ioctl c0306201 2000000002c0 returned -22
[  380.528617][T17353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3649'.
[  380.700179][T17364] binder: 17363:17364 ioctl 4018620d 200000001380 returned -22
[  380.800387][T17372] ip6tnl4: entered promiscuous mode
[  380.829663][T17375] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3659'.
[  380.978394][T17392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  380.980685][T17392] IPv6: NLM_F_CREATE should be set when creating new route
[  380.982939][T17392] IPv6: NLM_F_CREATE should be set when creating new route
[  381.047866][T17397] netlink: 'syz.1.3668': attribute type 2 has an invalid length.
[  381.063387][T17397] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  381.177229][T17413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.189782][T17411] tipc: Disabling bearer <eth:syzkaller0>
[  381.276945][T17422] netlink: 'syz.2.3675': attribute type 1 has an invalid length.
[  381.280665][T17422] netlink: 'syz.2.3675': attribute type 1 has an invalid length.
[  381.390362][T17426] netlink: 'syz.1.3676': attribute type 5 has an invalid length.
[  381.392666][T17426] netlink: 'syz.1.3676': attribute type 8 has an invalid length.
[  381.407454][T17426] geneve4: entered promiscuous mode
[  381.409358][T17426] geneve4: entered allmulticast mode
[  381.412585][ T5878] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  381.415580][ T5878] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  381.418424][ T5878] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  381.421348][ T5878] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  381.801341][T17445]  speed is unknown, defaulting to 1000
[  382.169625][   T33] audit: type=1107 audit(1761786198.101:6): pid=17450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  382.255619][T17457] bond19: Unable to set peer notification delay as MII monitoring is disabled
[  382.288525][T17457] bond19 (unregistering): Released all slaves
[  382.407381][T17457] bond19: Unable to set peer notification delay as MII monitoring is disabled
[  382.418561][T17457] bond19 (unregistering): Released all slaves
[  382.482261][T17469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.485604][T17469] syzkaller0: entered promiscuous mode
[  382.488029][T17469] syzkaller0: entered allmulticast mode
[  382.545366][T17457] bond19: Unable to set peer notification delay as MII monitoring is disabled
[  382.550478][T17457] bond19 (unregistering): Released all slaves
[  382.573026][T17469] tipc: Resetting bearer <eth:syzkaller0>
[  382.581174][T17468] tipc: Resetting bearer <eth:syzkaller0>
[  382.603245][T17468] tipc: Disabling bearer <eth:syzkaller0>
[  382.621002][T17457] bond19: Unable to set peer notification delay as MII monitoring is disabled
[  382.625328][T17457] bond19 (unregistering): Released all slaves
[  382.738936][T17457] bond19: Unable to set peer notification delay as MII monitoring is disabled
[  382.743237][T17457] bond19 (unregistering): Released all slaves
[  382.806775][T17457] bond19: Unable to set peer notification delay as MII monitoring is disabled
[  382.812403][T17457] bond19 (unregistering): Released all slaves
[  382.886863][T17457] bond19: Unable to set peer notification delay as MII monitoring is disabled
[  382.891527][T17457] bond19 (unregistering): Released all slaves
[  382.980263][T17457] bond19: Unable to set peer notification delay as MII monitoring is disabled
[  382.985082][T17457] bond19 (unregistering): Released all slaves
[  383.060874][T17457] bond19: Unable to set peer notification delay as MII monitoring is disabled
[  383.065660][T17457] bond19 (unregistering): Released all slaves
[  383.252474][T17492] netlink: 'syz.0.3695': attribute type 1 has an invalid length.
[  383.403885][T17507] __nla_validate_parse: 11 callbacks suppressed
[  383.403902][T17507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3700'.
[  383.410710][T17507] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3700'.
[  383.414001][T17507] validate_nla: 1 callbacks suppressed
[  383.414013][T17507] netlink: 'syz.1.3700': attribute type 5 has an invalid length.
[  383.418536][T17507] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3700'.
[  383.571126][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3705'.
[  383.598359][T17520] syzkaller0: entered promiscuous mode
[  383.600518][T17520] syzkaller0: entered allmulticast mode
[  385.275784][T17563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3720'.
[  385.713764][T17574]  speed is unknown, defaulting to 1000
[  385.827073][T17575]  speed is unknown, defaulting to 1000
[  386.225514][T17587] wg1 speed is unknown, defaulting to 1000
[  386.227747][T17587] wg1 speed is unknown, defaulting to 1000
[  386.228642][T17588]  speed is unknown, defaulting to 1000
[  386.254641][T17587] wg1 speed is unknown, defaulting to 1000
[  386.304896][T17587] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  386.383544][T17587] wg1 speed is unknown, defaulting to 1000
[  386.418041][T17587] wg1 speed is unknown, defaulting to 1000
[  386.426788][T17587] wg1 speed is unknown, defaulting to 1000
[  386.430426][T17587] wg1 speed is unknown, defaulting to 1000
[  387.007800][T17608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3730'.
[  387.469822][T17637] netlink: 'syz.2.3737': attribute type 1 has an invalid length.
[  387.491197][T17637] 8021q: adding VLAN 0 to HW filter on device bond19
[  387.498208][T17637] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  387.533066][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3739'.
[  387.539492][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3739'.
[  387.615981][T17651] ip6tnl2: entered allmulticast mode
[  387.623564][T17653] syzkaller0: entered promiscuous mode
[  387.626159][T17653] syzkaller0: entered allmulticast mode
[  387.688507][T17657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3745'.
[  387.692306][T17657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3745'.
[  387.993533][T17670] binder: 17669:17670 ioctl c00c6211 200000000080 returned -14
[  388.024284][T17673] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  388.031069][T17673] AppArmor: change_hat: Invalid input '0x000000000000Gjv/zero'
[  388.051495][T17675]  speed is unknown, defaulting to 1000
[  388.086135][T17676] netlink: 'syz.1.3751': attribute type 3 has an invalid length.
[  388.089349][T17676] netlink: 'syz.1.3751': attribute type 1 has an invalid length.
[  388.264534][T17675] wg1 speed is unknown, defaulting to 1000
[  388.732328][T17709] __nla_validate_parse: 3 callbacks suppressed
[  388.732338][T17709] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3758'.
[  388.841556][T17716] netlink: 'syz.0.3762': attribute type 3 has an invalid length.
[  388.845116][T17716] 8021q: VLANs not supported on 60X
[  389.021697][T17726] netlink: 'syz.1.3766': attribute type 2 has an invalid length.
[  389.026014][T17726] netlink: 'syz.1.3766': attribute type 1 has an invalid length.
[  389.028269][T17726] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3766'.
[  389.542248][T17748] No such timeout policy "syz1"
[  389.725651][T17756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3778'.
[  389.820790][T17758] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  390.469284][T17786] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3787'.
[  390.698139][T17794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3790'.
[  390.703464][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3790'.
[  390.712273][T17794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3790'.
[  390.883436][   T33] audit: type=1400 audit(1761786206.811:7): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17818 comm="syz.1.3799"
[  390.968241][T17829] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3801'.
[  390.977178][T17829] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3801'.
[  391.178870][T17842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3807'.
[  391.287135][T17852] netlink: 'syz.2.3810': attribute type 11 has an invalid length.
[  391.341880][T17856] netlink: 'syz.2.3812': attribute type 1 has an invalid length.
[  391.398112][T17862] netlink: 'syz.1.3815': attribute type 1 has an invalid length.
[  391.526479][T17869] netlink: 'syz.1.3818': attribute type 2 has an invalid length.
[  391.709893][T17876] pim6reg: entered allmulticast mode
[  391.712543][T17876] pim6reg: left allmulticast mode
[  391.769272][T17882] pim6reg: entered allmulticast mode
[  391.817594][T17885] binder: 17884:17885 ioctl c018620c 2000000000c0 returned -22
[  391.883140][T17889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  391.896519][T17889] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  391.899118][T17889] sctp: [Deprecated]: syz.1.3824 (pid 17889) Use of struct sctp_assoc_value in delayed_ack socket option.
[  391.899118][T17889] Use struct sctp_sack_info instead
[  391.907682][T17889] netlink: 'syz.1.3824': attribute type 30 has an invalid length.
[  392.005603][ T5843] bond21: (slave ip6gretap3): link status up again after 0 ms
[  392.009357][ T5843] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  392.114951][ T5878] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  392.294733][ T5640] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  392.341813][T17909] netlink: 'syz.1.3829': attribute type 4 has an invalid length.
[  392.414631][ T5843] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  392.524592][ T5640] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  392.655307][ T5640] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  392.695849][T17934] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  392.784623][ T5640] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  393.061488][T17970] netlink: 'syz.0.3846': attribute type 5 has an invalid length.
[  393.281781][T17984] SET target dimension over the limit!
[  393.340102][T17986] syzkaller0: entered promiscuous mode
[  393.342325][T17986] syzkaller0: entered allmulticast mode
[  393.526864][T17991] ALSA: mixer_oss: invalid OSS volume ''
[  393.728960][T18008] syzkaller0: entered promiscuous mode
[  393.731141][T18008] syzkaller0: entered allmulticast mode
[  394.041352][T18029] netlink: 'syz.0.3866': attribute type 16 has an invalid length.
[  394.048918][T18029] netlink: 'syz.0.3866': attribute type 17 has an invalid length.
[  394.218275][ T5843] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.222558][ T5843] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.270138][T18032] __nla_validate_parse: 13 callbacks suppressed
[  394.270157][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3866'.
[  394.285904][ T5843] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.288542][ T5843] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.420931][T18051]  speed is unknown, defaulting to 1000
[  394.629558][T18051] wg1 speed is unknown, defaulting to 1000
[  395.282176][T18061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3874'.
[  395.285888][T18061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3874'.
[  395.350335][T18065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3874'.
[  395.482190][T18073] netlink: 'syz.0.3878': attribute type 1 has an invalid length.
[  395.485149][T18074] netlink: 'syz.0.3878': attribute type 1 has an invalid length.
[  395.517478][T18074] bond25: (slave gretap3): making interface the new active one
[  395.520548][T18074] bond25: (slave gretap3): Enslaving as an active interface with an up link
[  395.543467][T18070]  speed is unknown, defaulting to 1000
[  395.637003][T18082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.645352][T18082] syzkaller0: entered promiscuous mode
[  395.648778][T18082] syzkaller0: entered allmulticast mode
[  395.657178][T18080] tipc: Resetting bearer <eth:syzkaller0>
[  395.680482][T18080] tipc: Disabling bearer <eth:syzkaller0>
[  395.799427][T18070] wg1 speed is unknown, defaulting to 1000
[  395.834736][T18086] netlink: 'syz.0.3881': attribute type 3 has an invalid length.
[  395.935836][T18094] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3883'.
[  396.273514][T18104] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  396.338248][T18108] random: crng reseeded on system resumption
[  396.345369][T18108] Unrecognized hibernate image header format!
[  396.347289][T18108] PM: hibernation: Image mismatch: architecture specific data
[  396.351252][T18108] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3888'.
[  396.354246][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3888'.
[  396.454751][T18113] netlink: 'syz.2.3890': attribute type 29 has an invalid length.
[  396.457511][T18113] netlink: 'syz.2.3890': attribute type 29 has an invalid length.
[  396.459975][T18114] netlink: 'syz.2.3890': attribute type 29 has an invalid length.
[  396.567570][T18114] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3890'.
[  396.581737][T18114] bond20: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  396.587220][T18114] bond20 (unregistering): Released all slaves
[  396.649325][T18115] bond20: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  396.656262][T18115] bond20 (unregistering): Released all slaves
[  396.766824][T18121] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  396.914779][ T5843] net_ratelimit: 31 callbacks suppressed
[  396.914792][ T5843] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  397.024428][   T13] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  397.134769][   T13] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  397.175823][T18137] openvswitch: netlink: Message has 8 unknown bytes.
[  397.177867][T18137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.241588][T18144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3902'.
[  397.247823][ T5843] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  397.365146][ T5640] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  397.475740][ T5640] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  397.587701][ T5843] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  397.694774][   T13] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  397.713373][T18181] netlink: 'syz.2.3911': attribute type 62 has an invalid length.
[  397.751624][T18187] netlink: 'syz.2.3913': attribute type 10 has an invalid length.
[  397.766849][T18187]  speed is unknown, defaulting to 1000
[  398.049625][T18196]  speed is unknown, defaulting to 1000
[  398.078595][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3918'.
[  398.299596][T18191]  speed is unknown, defaulting to 1000
[  398.370380][T18187] wg1 speed is unknown, defaulting to 1000
[  398.630068][T18196] wg1 speed is unknown, defaulting to 1000
[  398.900799][T18191] wg1 speed is unknown, defaulting to 1000
[  399.302071][T18235] __nla_validate_parse: 7 callbacks suppressed
[  399.302083][T18235] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3928'.
[  399.489545][T18239] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3930'.
[  399.713540][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3932'.
[  399.862364][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3935'.
[  399.973456][T18261] binder: 18260:18261 ioctl c018620c 2000000000c0 returned -22
[  400.007338][T18266] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.3940'.
[  400.015635][T18268] syzkaller0: entered promiscuous mode
[  400.017339][T18268] syzkaller0: entered allmulticast mode
[  400.020812][T18266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.033988][T18266] tipc: Resetting bearer <eth:syzkaller0>
[  400.053015][T18266] tipc: Disabling bearer <eth:syzkaller0>
[  400.188068][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3947'.
[  400.237500][T18289] @0: renamed from bond_slave_1
[  400.268739][T18292] netlink: 'syz.0.3950': attribute type 58 has an invalid length.
[  400.273110][T18292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3950'.
[  400.336757][T18296] syzkaller1: entered promiscuous mode
[  400.338507][T18296] syzkaller1: entered allmulticast mode
[  400.372004][T18303] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  400.378568][T18303] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  400.660101][T18333] sctp: [Deprecated]: syz.0.3964 (pid 18333) Use of int in max_burst socket option.
[  400.660101][T18333] Use struct sctp_assoc_value instead
[  400.676570][T18337] netlink: 'syz.2.3961': attribute type 13 has an invalid length.
[  400.679310][T18337] netlink: 'syz.2.3961': attribute type 17 has an invalid length.
[  400.706296][T18337] 8021q: adding VLAN 0 to HW filter on device `
[  400.721070][T18340] netlink: 'syz.1.3965': attribute type 1 has an invalid length.
[  400.766339][T18335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3965'.
[  400.771118][T18335] 8021q: adding VLAN 0 to HW filter on device bond25
[  400.785472][T18337]  speed is unknown, defaulting to 1000
[  400.856841][T18327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  400.892676][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3966'.
[  401.048909][T18357] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'
[  401.153390][T18363] syzkaller0: entered promiscuous mode
[  401.157047][T18363] syzkaller0: entered allmulticast mode
[  401.253271][T18337] wg1 speed is unknown, defaulting to 1000
[  401.263637][T18367] binder: 18366:18367 ioctl c018620c 2000000000c0 returned -22
[  401.336296][T18370] netlink: 'syz.0.3975': attribute type 27 has an invalid length.
[  401.347546][T18370] vlan5: left promiscuous mode
[  401.349018][T18370] bond20: left promiscuous mode
[  401.350661][T18370] vlan5: left allmulticast mode
[  401.352111][T18370] bond20: left allmulticast mode
[  401.353633][T18370] batadv1: left promiscuous mode
[  401.364686][T18370] batadv1: left allmulticast mode
[  401.367654][T18370] veth15: left promiscuous mode
[  401.369435][T18370] bond23: left promiscuous mode
[  401.371264][T18370] bond23: left allmulticast mode
[  401.417891][   T47]  speed is unknown, defaulting to 1000
[  401.420315][   T47] syz2: Port: 1 Link ACTIVE
[  401.422025][   T47]  speed is unknown, defaulting to 1000
[  401.468607][T18374] netlink: 'syz.1.3977': attribute type 10 has an invalid length.
[  401.536129][T18382] pimreg: entered allmulticast mode
[  401.560213][T18385] ALSA: mixer_oss: invalid OSS volume ''
[  401.799706][T18398]  speed is unknown, defaulting to 1000
[  401.875930][ T5864] hid-generic 0EEF:0004:0003.0008: unknown main item tag 0x0
[  401.880294][ T5864] hid-generic 0EEF:0004:0003.0008: unknown main item tag 0x0
[  401.883043][ T5864] hid-generic 0EEF:0004:0003.0008: unknown main item tag 0x0
[  401.905961][ T5864] hid-generic 0EEF:0004:0003.0008: unknown main item tag 0x0
[  401.908768][ T5864] hid-generic 0EEF:0004:0003.0008: unknown main item tag 0x0
[  401.911522][ T5864] hid-generic 0EEF:0004:0003.0008: unknown main item tag 0x0
[  401.914280][ T5864] hid-generic 0EEF:0004:0003.0008: unknown main item tag 0x0
[  401.919520][ T5864] hid-generic 0EEF:0004:0003.0008: unknown main item tag 0x0
[  401.923228][ T5864] hid-generic 0EEF:0004:0003.0008: unknown main item tag 0x0
[  401.926841][ T5864] hid-generic 0EEF:0004:0003.0008: unknown main item tag 0x0
[  401.937362][T18408] can0: slcan on ttynull.
[  401.941081][ T5864] hid-generic 0EEF:0004:0003.0008: hidraw0: <UNKNOWN> HID vf.ff Device [syz1] on syz0
[  401.947953][   T13] net_ratelimit: 32 callbacks suppressed
[  401.947969][   T13] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  402.085276][ T5640] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  402.145586][T18407] can0 (unregistered): slcan off ttynull.
[  402.195231][ T5640] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  402.315410][ T5640] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  402.425555][   T13] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  402.535399][ T5640] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  402.665589][   T12] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  402.677230][T18414] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  402.682843][T18413] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  402.748107][T18398] wg1 speed is unknown, defaulting to 1000
[  402.757894][T18412]  speed is unknown, defaulting to 1000
[  402.980418][   T13] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  403.085111][   T13] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  403.102908][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3994'.
[  403.194898][ T5878] bond21: (slave ip6gretap3): failed to get link speed/duplex
[  403.222806][T18412] wg1 speed is unknown, defaulting to 1000
[  403.727471][T18438] netlink: 'syz.2.3999': attribute type 4 has an invalid length.
[  404.118386][T18447]  speed is unknown, defaulting to 1000
[  404.146744][T18448] net veth1_virt_wifi : renamed from virt_wifi0
[  404.326417][T18447] wg1 speed is unknown, defaulting to 1000
[  404.632219][T18458]  speed is unknown, defaulting to 1000
[  404.674264][T18456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.730142][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4006'.
[  404.812469][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4008'.
[  404.816594][T18467] netlink: 'syz.1.4008': attribute type 13 has an invalid length.
[  405.073201][T18467] gretap0: left allmulticast mode
[  405.324740][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.327215][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  405.329707][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  405.332149][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.341223][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  405.345258][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  405.348113][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.350606][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  405.353045][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  405.356573][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.359613][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  405.362525][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  405.451333][T18458] wg1 speed is unknown, defaulting to 1000
[  405.998849][T18483] netlink: 'syz.2.4012': attribute type 6 has an invalid length.
[  406.079370][T18490] xt_hashlimit: invalid rate
[  406.339189][T18500] pim6reg1: entered promiscuous mode
[  406.342130][T18500] pim6reg1: entered allmulticast mode
[  406.403282][T18510] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  406.406369][T18510] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  406.490146][T18514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4022'.
[  406.540226][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4022'.
[  406.692113][T18524] netlink: 'syz.2.4027': attribute type 142 has an invalid length.
[  406.778032][T18531]  speed is unknown, defaulting to 1000
[  406.831469][T18525] : entered promiscuous mode
[  406.893499][T18532] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  407.066278][T18531] wg1 speed is unknown, defaulting to 1000
[  407.088224][T18537] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4030'.
[  407.092472][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4030'.
[  407.139299][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'.
[  407.333480][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4033'.
[  407.390414][T18552] netlink: 'syz.0.4034': attribute type 4 has an invalid length.
[  407.524482][    C0] net_ratelimit: 17 callbacks suppressed
[  407.524493][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  407.583146][T18563] netlink: 'syz.0.4038': attribute type 2 has an invalid length.
[  407.628908][T18570] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4041'.
[  407.676289][T18575] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  407.678085][T18575] netlink: 'syz.1.4043': attribute type 10 has an invalid length.
[  407.743050][T18575] netlink: 'syz.1.4043': attribute type 1 has an invalid length.
[  407.772223][T18582] comedi: valid board names for 8255 driver are:
[  407.776132][T18582]  8255
[  407.777396][T18582] comedi: valid board names for vmk80xx driver are:
[  407.779919][T18582]  vmk80xx
[  407.781196][T18582] comedi: valid board names for usbduxsigma driver are:
[  407.783818][T18582]  usbduxsigma
[  407.785336][T18582] comedi: valid board names for usbduxfast driver are:
[  407.787994][T18582]  usbduxfast
[  407.789371][T18582] comedi: valid board names for usbdux driver are:
[  407.791872][T18582]  usbdux
[  407.793119][T18582] comedi: valid board names for ni6501 driver are:
[  407.796234][T18582]  ni6501
[  407.797427][T18582] comedi: valid board names for dt9812 driver are:
[  407.799983][T18582]  dt9812
[  407.801198][T18582] comedi: valid board names for ni_labpc_cs driver are:
[  407.803760][T18582]  ni_labpc_cs
[  407.805357][T18582] comedi: valid board names for ni_daq_700 driver are:
[  407.807952][T18582]  ni_daq_700
[  407.809294][T18582] comedi: valid board names for labpc_pci driver are:
[  407.811913][T18582]  labpc_pci
[  407.813241][T18582] comedi: valid board names for adl_pci9118 driver are:
[  407.816028][T18582]  pci9118dg
[  407.817363][T18582]  pci9118hg
[  407.820446][T18582]  pci9118hr
[  407.821808][T18582] comedi: valid board names for 8255_pci driver are:
[  407.824599][T18582]  8255_pci
[  407.825876][T18582] comedi: valid board names for s526 driver are:
[  407.828230][T18582]  s526
[  407.829238][T18582] comedi: valid board names for multiq3 driver are:
[  407.831691][T18582]  multiq3
[  407.832940][T18582] comedi: valid board names for pcmuio driver are:
[  407.835736][T18582]  pcmuio48
[  407.837054][T18582]  pcmuio96
[  407.838352][T18582] comedi: valid board names for pcmmio driver are:
[  407.840768][T18582]  pcmmio
[  407.841990][T18582] comedi: valid board names for pcmda12 driver are:
[  407.844459][T18582]  pcmda12
[  407.845811][T18582] comedi: valid board names for pcmad driver are:
[  407.848265][T18582]  pcmad12
[  407.849538][T18582]  pcmad16
[  407.850892][T18582] comedi: valid board names for ni_labpc driver are:
[  407.853236][T18582]  lab-pc-1200
[  407.854682][T18582]  lab-pc-1200ai
[  407.856145][T18582]  lab-pc+
[  407.857474][T18582] comedi: valid board names for atmio16 driver are:
[  407.860180][T18582]  atmio16
[  407.862072][T18582]  atmio16d
[  407.863772][T18582] comedi: valid board names for ni_at_ao driver are:
[  407.868153][T18582]  at-ao-6
[  407.870098][T18582]  at-ao-10
[  407.871349][T18582] comedi: valid board names for ni_at_a2150 driver are:
[  407.875015][T18582]  ni_at_a2150
[  407.876351][T18582] comedi: valid board names for adq12b driver are:
[  407.878711][T18582]  adq12b
[  407.879857][T18582] comedi: valid board names for mpc624 driver are:
[  407.894531][T18582]  mpc624
[  407.898641][T18582] comedi: valid board names for c6xdigio driver are:
[  407.901372][T18582]  c6xdigio
[  407.902479][T18582] comedi: valid board names for aio_iiro_16 driver are:
[  407.904972][T18582]  aio_iiro_16
[  407.906261][T18582] comedi: valid board names for aio_aio12_8 driver are:
[  407.908806][T18582]  aio_aio12_8
[  407.910082][T18582]  aio_ai12_8
[  407.911340][T18582]  aio_ao12_4
[  407.912576][T18582] comedi: valid board names for fl512 driver are:
[  407.915541][T18582]  fl512
[  407.916656][T18582] comedi: valid board names for dmm32at driver are:
[  407.919002][T18582]  dmm32at
[  407.920108][T18582] comedi: valid board names for dt282x driver are:
[  407.922539][T18582]  dt2821
[  407.923657][T18582]  dt2821-f
[  407.924967][T18582]  dt2821-g
[  407.926135][T18582]  dt2823
[  407.927238][T18582]  dt2824-pgh
[  407.928532][T18582]  dt2824-pgl
[  407.928560][T18582]  dt2825
[  407.928566][T18582]  dt2827
[  407.928571][T18582]  dt2828
[  407.928576][T18582]  dt2829
[  407.928582][T18582]  dt21-ez
[  407.935446][T18582]  dt23-ez
[  407.936621][T18582]  dt24-ez
[  407.937778][T18582]  dt24-ez-pgl
[  407.939043][T18582] comedi: valid board names for dt2817 driver are:
[  407.941470][T18582]  dt2817
[  407.942588][T18582] comedi: valid board names for dt2815 driver are:
[  407.945419][T18582]  dt2815
[  407.946681][T18582] comedi: valid board names for dt2814 driver are:
[  407.948977][T18582]  dt2814
[  407.949891][T18582] comedi: valid board names for dt2811 driver are:
[  407.951872][T18582]  dt2811-pgh
[  407.953029][T18582]  dt2811-pgl
[  407.956316][T18582] comedi: valid board names for dt2801 driver are:
[  407.958874][T18582]  dt2801
[  407.959922][T18582] comedi: valid board names for das6402 driver are:
[  407.962323][T18582]  das6402-12
[  407.963556][T18582]  das6402-16
[  407.964962][T18582] comedi: valid board names for das1800 driver are:
[  407.967391][T18582]  das-1701st
[  407.968568][T18582]  das-1701st-da
[  407.969777][T18582]  das-1702st
[  407.970891][T18582]  das-1702st-da
[  407.972069][T18582]  das-1702hr
[  407.972447][T18586] netlink: 'syz.1.4046': attribute type 142 has an invalid length.
[  407.973174][T18582]  das-1702hr-da
[  407.973180][T18582]  das-1701ao
[  407.973185][T18582]  das-1702ao
[  407.973189][T18582]  das-1801st
[  407.973193][T18582]  das-1801st-da
[  407.973197][T18582]  das-1802st
[  407.973203][T18582]  das-1802st-da
[  407.973207][T18582]  das-1802hr
[  407.973212][T18582]  das-1802hr-da
[  407.973216][T18582]  das-1801hc
[  407.989165][T18582]  das-1802hc
[  407.990397][T18582]  das-1801ao
[  407.991661][T18582]  das-1802ao
[  407.992907][T18582] comedi: valid board names for das800 driver are:
[  407.995562][T18582]  das-800
[  407.996703][T18582]  cio-das800
[  407.997986][T18586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.001207][T18582]  das-801
[  408.002395][T18582]  cio-das801
[  408.003656][T18582]  das-802
[  408.005826][T18582]  cio-das802
[  408.007220][T18582]  cio-das802/16
[  408.008711][T18582] comedi: valid board names for isa-das08 driver are:
[  408.011194][T18582]  isa-das08
[  408.012416][T18582]  das08-pgm
[  408.013575][T18582]  das08-pgh
[  408.014934][T18582]  das08-pgl
[  408.016155][T18582]  das08-aoh
[  408.017797][T18582]  das08-aol
[  408.019115][T18582]  das08-aom
[  408.020394][T18582]  das08/jr-ao
[  408.021676][T18582]  das08jr-16-ao
[  408.022985][T18582]  pc104-das08
[  408.024232][T18582]  das08jr/16
[  408.025703][T18582] comedi: valid board names for das16m1 driver are:
[  408.028116][T18582]  das16m1
[  408.029173][T18582] comedi: valid board names for dac02 driver are:
[  408.031024][T18582]  dac02
[  408.031919][T18582] comedi: valid board names for rti802 driver are:
[  408.034612][T18582]  rti802
[  408.035569][T18582] comedi: valid board names for rti800 driver are:
[  408.037664][T18582]  rti800
[  408.038756][T18582]  rti815
[  408.039881][T18582] comedi: valid board names for pcm3724 driver are:
[  408.042004][T18582]  pcm3724
[  408.043206][T18582] comedi: valid board names for pcl818 driver are:
[  408.049642][T18582]  pcl818l
[  408.050883][T18582]  pcl818h
[  408.051804][T18582]  pcl818hd
[  408.052803][T18582]  pcl818hg
[  408.053989][T18582]  pcl818
[  408.055589][T18582]  pcl718
[  408.056876][T18582]  pcm3718
[  408.058259][T18588] syzkaller1: entered promiscuous mode
[  408.060303][T18588] syzkaller1: entered allmulticast mode
[  408.062261][T18582] comedi: valid board names for pcl816 driver are:
[  408.064258][T18582]  pcl816
[  408.065685][T18582]  pcl814b
[  408.066793][T18582] comedi: valid board names for pcl812 driver are:
[  408.072270][T18582]  pcl812
[  408.073172][T18582]  pcl812pg
[  408.074120][T18582]  acl8112pg
[  408.075522][T18588] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  408.078042][T18582]  acl8112dg
[  408.079087][T18582]  acl8112hg
[  408.080127][T18588] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  408.082540][T18582]  a821pgl
[  408.083594][T18582]  a821pglnda
[  408.084736][T18582]  a821pgh
[  408.085627][T18582]  a822pgl
[  408.086549][T18582]  a822pgh
[  408.087488][T18582]  a823pgl
[  408.088471][T18582]  a823pgh
[  408.089531][T18582]  pcl813
[  408.090635][T18582]  pcl813b
[  408.091742][T18582]  acl8113
[  408.092839][T18582]  iso813
[  408.093914][T18582]  acl8216
[  408.095667][T18582]  a826pg
[  408.097658][   T24] hid (null): invalid report_size 38632
[  408.099749][   T24] hid (null): unknown global tag 0xc
[  408.102054][T18590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.103682][   T24] hid-generic 0003:000F:FFFFFFFF.0009: collection stack underflow
[  408.107866][   T24] hid-generic 0003:000F:FFFFFFFF.0009: item 0 1 0 12 parsing failed
[  408.111356][   T24] hid-generic 0003:000F:FFFFFFFF.0009: probe with driver hid-generic failed with error -22
[  408.115314][T18582] comedi: valid board names for pcl730 driver are:
[  408.117963][T18582]  pcl730
[  408.119092][T18582]  iso730
[  408.120210][T18582]  acl7130
[  408.121375][T18582]  pcm3730
[  408.122921][T18582]  pcl725
[  408.124060][T18582]  p8r8dio
[  408.125556][T18582]  acl7225b
[  408.126763][T18582]  p16r16dio
[  408.127983][T18582]  pcl733
[  408.129086][T18582]  pcl734
[  408.130196][T18582]  opmm-1616-xt
[  408.131739][T18582]  pearl-mm-p
[  408.133084][T18582]  ir104-pbf
[  408.134620][T18582] comedi: valid board names for pcl726 driver are:
[  408.137035][T18582]  pcl726
[  408.138164][T18582]  pcl727
[  408.138186][T18590] syzkaller0: entered promiscuous mode
[  408.139220][T18582]  pcl728
[  408.141210][T18590] syzkaller0: entered allmulticast mode
[  408.142350][T18582]  acl6126
[  408.142360][T18582]  acl6128
[  408.146930][T18582] comedi: valid board names for pcl724 driver are:
[  408.149302][T18582]  pcl724
[  408.150411][T18582]  pcl722
[  408.151489][T18582]  pcl731
[  408.152544][T18582]  acl7122
[  408.153725][T18582]  acl7124
[  408.155341][T18582]  pet48dio
[  408.156547][T18582]  pcmio48
[  408.157723][T18582]  onyx-mm-dio
[  408.158991][T18582] comedi: valid board names for pcl711 driver are:
[  408.161309][T18582]  pcl711
[  408.162480][T18582]  pcl711b
[  408.163596][T18582]  acl8112hg
[  408.164947][T18582]  acl8112dg
[  408.166129][T18582] comedi: valid board names for amplc_pc263 driver are:
[  408.168580][T18582]  pc263
[  408.169624][T18582] comedi: valid board names for amplc_pc236 driver are:
[  408.171792][T18590] tipc: Resetting bearer <eth:syzkaller0>
[  408.172127][T18582]  pc36at
[  408.175434][T18582] comedi: valid board names for amplc_dio200 driver are:
[  408.177956][T18582]  pc212e
[  408.179071][T18582]  pc214e
[  408.180174][T18582]  pc215e
[  408.181308][T18582]  pc218e
[  408.182424][T18582]  pc272e
[  408.183501][T18582] comedi: valid board names for comedi_parport driver are:
[  408.186631][T18582]  comedi_parport
[  408.194572][T18582] comedi: valid board names for comedi_test driver are:
[  408.204256][T18582]  comedi_test
[  408.205850][T18582] comedi: valid board names for comedi_bond driver are:
[  408.208515][T18582]  comedi_bond
[  408.231024][T18592] netlink: 'syz.2.4049': attribute type 1 has an invalid length.
[  408.235441][T18594] netlink: 'syz.1.4050': attribute type 1 has an invalid length.
[  408.261317][T18592] 8021q: adding VLAN 0 to HW filter on device bond20
[  408.339095][T18592] 8021q: adding VLAN 0 to HW filter on device bond20
[  408.343667][T18592] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address
[  408.348595][T18592] bond20: (slave vxcan1): Error -95 calling set_mac_address
[  408.381195][T18600] bond26: (slave bridge21): making interface the new active one
[  408.383944][T18600] bond26: (slave bridge21): Enslaving as an active interface with an up link
[  408.420425][T18601] veth21: entered promiscuous mode
[  408.432813][ T7415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.436751][ T7415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.520715][T18616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4055'.
[  408.554502][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  408.629928][T18616] vlan0: entered promiscuous mode
[  408.632295][T18616] bond12: entered promiscuous mode
[  408.741884][T18634] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  408.913371][T18642] random: crng reseeded on system resumption
[  409.051430][T18646] tap0: tun_chr_ioctl cmd 2147767521
[  409.165570][    T9] tipc: Node number set to 694633573
[  409.494963][T18658] ALSA: mixer_oss: invalid OSS volume ''
[  409.594464][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  409.734113][T18672] macvlan4: entered promiscuous mode
[  409.736000][T18672] macvlan4: entered allmulticast mode
[  409.738317][T18672] bond26: (slave macvlan4): Opening slave failed
[  409.914215][T18687] geneve5: entered promiscuous mode
[  409.917538][T18687] __nla_validate_parse: 10 callbacks suppressed
[  409.917548][T18687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4083'.
[  409.924874][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.927990][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.932133][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.941427][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.038377][T18696] netlink: 'syz.2.4085': attribute type 142 has an invalid length.
[  410.347717][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4088'.
[  410.350441][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4088'.
[  410.392974][T18717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4092'.
[  410.634660][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  410.643843][T18731] openvswitch: netlink: IP tunnel dst address not specified
[  410.722256][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4100'.
[  410.940652][T18748]  speed is unknown, defaulting to 1000
[  411.140614][T18748] wg1 speed is unknown, defaulting to 1000
[  411.205395][T18755] validate_nla: 2 callbacks suppressed
[  411.205406][T18755] netlink: 'syz.2.4104': attribute type 142 has an invalid length.
[  411.530857][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'.
[  411.663871][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4112'.
[  411.674460][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  411.978966][T18793] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.4116'.
[  412.489383][T18822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  412.714744][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  412.761880][T18830] delete_channel: no stack
[  412.795429][T18834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4128'.
[  412.818441][T18834] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4128'.
[  413.005549][T18850] macsec0: entered promiscuous mode
[  413.008043][T18850] macsec0: entered allmulticast mode
[  413.182763][   T33] audit: type=1804 audit(1761786229.111:8): pid=18860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4137" name="/newroot/1408/cgroup.controllers" dev="tmpfs" ino=7262 res=1 errno=0
[  413.190621][   T33] audit: type=1800 audit(1761786229.121:9): pid=18860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4137" name="cgroup.controllers" dev="tmpfs" ino=7262 res=0 errno=0
[  413.351964][T18883] netlink: 'syz.0.4144': attribute type 21 has an invalid length.
[  413.680796][T18905] veth23: entered promiscuous mode
[  413.754386][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  414.350630][T18924] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.358109][T18928] syzkaller0: entered promiscuous mode
[  414.359664][T18928] syzkaller0: entered allmulticast mode
[  414.395676][T18930] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  414.459401][T18937] syzkaller1: entered promiscuous mode
[  414.461569][T18937] syzkaller1: entered allmulticast mode
[  414.553027][T18948] openvswitch: netlink: nsh attr 60 is out of range max 3
[  414.555298][T18948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.615751][T18934] syz.1.4160: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  414.620938][T18934] CPU: 1 UID: 0 PID: 18934 Comm: syz.1.4160 Not tainted syzkaller #0 PREEMPT(full) 
[  414.620952][T18934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  414.620958][T18934] Call Trace:
[  414.620963][T18934]  <TASK>
[  414.620967][T18934]  dump_stack_lvl+0x189/0x250
[  414.620985][T18934]  ? __pfx_dump_stack_lvl+0x10/0x10
[  414.620997][T18934]  ? __pfx__printk+0x10/0x10
[  414.621006][T18934]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  414.621017][T18934]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  414.621032][T18934]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  414.621044][T18934]  warn_alloc+0x214/0x310
[  414.621057][T18934]  ? stack_depot_save_flags+0x40/0x860
[  414.621072][T18934]  ? __pfx_warn_alloc+0x10/0x10
[  414.621084][T18934]  ? kasan_save_track+0x3e/0x80
[  414.621095][T18934]  ? __kasan_kmalloc+0x93/0xb0
[  414.621107][T18934]  ? xsk_setsockopt+0x4dc/0x8d0
[  414.621115][T18934]  ? do_sock_setsockopt+0x17c/0x1b0
[  414.621122][T18934]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  414.621128][T18934]  ? do_syscall_64+0xfa/0xfa0
[  414.621138][T18934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.621151][T18934]  __vmalloc_node_range_noprof+0x125/0x12d0
[  414.621176][T18934]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  414.621189][T18934]  ? __kasan_kmalloc+0x93/0xb0
[  414.621203][T18934]  vmalloc_user_noprof+0xad/0xf0
[  414.621214][T18934]  ? xskq_create+0xbf/0x170
[  414.621224][T18934]  xskq_create+0xbf/0x170
[  414.621241][T18934]  xsk_init_queue+0xb0/0x110
[  414.621258][T18934]  xsk_setsockopt+0x4dc/0x8d0
[  414.621284][T18934]  ? __pfx_xsk_setsockopt+0x10/0x10
[  414.621301][T18934]  ? __pfx_aa_sk_perm+0x10/0x10
[  414.621323][T18934]  ? aa_sock_opt_perm+0xff/0x1b0
[  414.621348][T18934]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  414.621361][T18934]  ? __pfx_xsk_setsockopt+0x10/0x10
[  414.621372][T18934]  do_sock_setsockopt+0x17c/0x1b0
[  414.621382][T18934]  __x64_sys_setsockopt+0x13f/0x1b0
[  414.621393][T18934]  do_syscall_64+0xfa/0xfa0
[  414.621403][T18934]  ? lockdep_hardirqs_on+0x9c/0x150
[  414.621413][T18934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.621421][T18934]  ? exc_page_fault+0xab/0x100
[  414.621431][T18934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.621439][T18934] RIP: 0033:0x7f1ae658efc9
[  414.621448][T18934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  414.621455][T18934] RSP: 002b:00007f1ae7397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  414.621465][T18934] RAX: ffffffffffffffda RBX: 00007f1ae67e5fa0 RCX: 00007f1ae658efc9
[  414.621471][T18934] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  414.621476][T18934] RBP: 00007f1ae6611f91 R08: 0000000000000004 R09: 0000000000000000
[  414.621481][T18934] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  414.621486][T18934] R13: 00007f1ae67e6038 R14: 00007f1ae67e5fa0 R15: 00007fffc7328878
[  414.621502][T18934]  </TASK>
[  414.621506][T18934] Mem-Info:
[  414.713465][T18934] active_anon:6048 inactive_anon:0 isolated_anon:0
[  414.713465][T18934]  active_file:2690 inactive_file:38391 isolated_file:0
[  414.713465][T18934]  unevictable:1768 dirty:182 writeback:0
[  414.713465][T18934]  slab_reclaimable:12054 slab_unreclaimable:155419
[  414.713465][T18934]  mapped:19307 shmem:2443 pagetables:930
[  414.713465][T18934]  sec_pagetables:0 bounce:0
[  414.713465][T18934]  kernel_misc_reclaimable:0
[  414.713465][T18934]  free:1059780 free_pcp:23234 free_cma:0
[  414.729658][T18934] Node 0 active_anon:10572kB inactive_anon:0kB active_file:3476kB inactive_file:143232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38744kB dirty:304kB writeback:0kB shmem:4652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7208kB pagetables:2120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  414.739450][T18934] Node 1 active_anon:13620kB inactive_anon:0kB active_file:7284kB inactive_file:10332kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38484kB dirty:424kB writeback:0kB shmem:5120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7628kB pagetables:1600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  414.749178][T18934] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  414.758134][T18934] lowmem_reserve[]: 0 1597 2129 2129 2129
[  414.759925][T18934] Node 0 DMA32 free:1332976kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:180kB inactive_anon:0kB active_file:1152kB inactive_file:84kB unevictable:0kB writepending:44kB zspages:0kB present:2080636kB managed:1635840kB mlocked:0kB bounce:0kB free_pcp:31312kB local_pcp:14076kB free_cma:0kB
[  414.769769][T18934] lowmem_reserve[]: 0 0 531 531 531
[  414.771481][T18934] Node 0 Normal free:18212kB boost:6144kB min:14660kB low:16788kB high:18916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10392kB inactive_anon:0kB active_file:2324kB inactive_file:143148kB unevictable:3536kB writepending:260kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:1592kB local_pcp:736kB free_cma:0kB
[  414.781202][T18934] lowmem_reserve[]: 0 0 0 0 0
[  414.782728][T18934] Node 1 Normal free:2872476kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13620kB inactive_anon:0kB active_file:7284kB inactive_file:10332kB unevictable:3536kB writepending:424kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:60288kB local_pcp:29404kB free_cma:0kB
[  414.792815][T18934] lowmem_reserve[]: 0 0 0 0 0
[  414.794428][T18934] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  414.794721][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  414.798240][T18934] Node 0 DMA32: 246*4kB (UME) 294*8kB (UM) 171*16kB (UM) 240*32kB (UM) 181*64kB (UME) 64*128kB (UM) 96*256kB (UM) 42*512kB (UM) 30*1024kB (UME) 17*2048kB (UME) 290*4096kB (UM) = 1332984kB
[  414.805885][T18934] Node 0 Normal: 167*4kB (UME) 148*8kB (M) 157*16kB (UME) 92*32kB (UM) 100*64kB (UM) 27*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18188kB
[  414.810732][T18934] Node 1 Normal: 899*4kB (UM) 106*8kB (ME) 236*16kB (UM) 501*32kB (UME) 634*64kB (UM) 210*128kB (UME) 80*256kB (UM) 27*512kB (UME) 8*1024kB (UM) 9*2048kB (UM) 664*4096kB (M) = 2872380kB
[  414.817269][T18934] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  414.819905][T18934] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  414.822644][T18934] 43524 total pagecache pages
[  414.824008][T18934] 0 pages in swap cache
[  414.825437][T18934] Free swap  = 124996kB
[  414.826690][T18934] Total swap = 124996kB
[  414.827945][T18934] 1834877 pages RAM
[  414.829092][T18934] 0 pages HighMem/MovableOnly
[  414.830520][T18934] 387243 pages reserved
[  414.831752][T18934] 0 pages cma reserved
[  414.895322][T18966] sctp: [Deprecated]: syz.2.4168 (pid 18966) Use of int in maxseg socket option.
[  414.895322][T18966] Use struct sctp_assoc_value instead
[  414.967732][T18975] __nla_validate_parse: 6 callbacks suppressed
[  414.967748][T18975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4171'.
[  415.023670][T18980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4173'.
[  415.052615][T18982] netlink: 'syz.0.4174': attribute type 6 has an invalid length.
[  415.148959][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4177'.
[  415.206675][T18994] netlink: 71 bytes leftover after parsing attributes in process `syz.0.4178'.
[  415.286036][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4179'.
[  415.290301][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4179'.
[  415.376234][T19015] netlink: 'syz.1.4183': attribute type 58 has an invalid length.
[  415.385857][T19015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4183'.
[  415.462423][T19022] netlink: 'syz.2.4187': attribute type 5 has an invalid length.
[  415.500251][T19027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4189'.
[  415.585226][T19027] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  415.704921][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4192'.
[  415.717821][T19040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4191'.
[  415.722685][T19040] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  415.834476][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  416.591898][T19051] vivid-007: =================  START STATUS  =================
[  416.594977][T19051] vivid-007: Enable Output Cropping: true
[  416.597512][T19051] vivid-007: Enable Output Composing: true
[  416.599733][T19051] vivid-007: Enable Output Scaler: true
[  416.602844][T19051] vivid-007: Tx RGB Quantization Range: Automatic
[  416.606009][T19051] vivid-007: Transmit Mode: HDMI
[  416.607912][T19051] vivid-007: Hotplug Present: 0x00000000
[  416.609992][T19051] vivid-007: RxSense Present: 0x00000000
[  416.612071][T19051] vivid-007: EDID Present: 0x00000000
[  416.615627][T19051] vivid-007: ==================  END STATUS  ==================
[  416.629521][T19057] sr 2:0:0:0: [sr0] tag#29 unaligned transfer
[  416.631841][T19057] I/O error, dev sr0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  416.638281][T19057] sr 2:0:0:0: [sr0] tag#30 unaligned transfer
[  416.644845][T19057] I/O error, dev sr0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  416.648488][T19057] sctp: [Deprecated]: syz.2.4197 (pid 19057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  416.648488][T19057] Use struct sctp_sack_info instead
[  416.664780][T19061] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  416.829892][T19071] netlink: 'syz.0.4201': attribute type 8 has an invalid length.
[  416.874397][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  416.887877][T19082] xt_CT: No such helper "netbios-ns"
[  416.947381][T19092] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  416.957264][T19092] can0: slcan on ttynull.
[  416.995282][T19091] can0 (unregistered): slcan off ttynull.
[  417.062719][T19103] netlink: 'syz.2.4212': attribute type 13 has an invalid length.
[  417.069490][T19103] netlink: 'syz.2.4212': attribute type 17 has an invalid length.
[  417.080408][T19103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.106975][T19103]  speed is unknown, defaulting to 1000
[  417.333518][T19103] wg1 speed is unknown, defaulting to 1000
[  417.365852][T19054] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  417.369895][T19054] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  417.528735][T19127] gtp0: entered promiscuous mode
[  417.924429][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  418.576763][T19206] xt_CT: You must specify a L4 protocol and not use inversions on it
[  418.637330][ T5199] Bluetooth: hci1: command 0x0406 tx timeout
[  418.817033][T19224] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  418.903529][T19224] netlink: 'syz.2.4238': attribute type 3 has an invalid length.
[  418.906793][T19224] netlink: 'syz.2.4238': attribute type 1 has an invalid length.
[  418.954478][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  419.413766][T19273] random: crng reseeded on system resumption
[  419.428493][T19273] Unrecognized hibernate image header format!
[  419.430596][T19273] PM: hibernation: Image mismatch: architecture specific data
[  419.436805][ T5199] Bluetooth: hci2: command 0x0405 tx timeout
[  419.645086][T19296] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  419.994477][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  420.212674][ T5877] hid (null): report_id 986752308 is invalid
[  420.215256][ T5877] hid (null): unknown global tag 0x68
[  420.217680][ T5877] hid (null): report_id 1513713204 is invalid
[  420.221809][ T5877] hid_parser_main: 127 callbacks suppressed
[  420.221822][ T5877] hid-generic 00D4:0000:FFFFFFFB.000A: unknown main item tag 0x2
[  420.226204][ T5877] hid-generic 00D4:0000:FFFFFFFB.000A: report_id 986752308 is invalid
[  420.228577][ T5877] hid-generic 00D4:0000:FFFFFFFB.000A: item 0 4 1 8 parsing failed
[  420.231422][ T5877] hid-generic 00D4:0000:FFFFFFFB.000A: probe with driver hid-generic failed with error -22
[  420.271843][T19325] __nla_validate_parse: 22 callbacks suppressed
[  420.271853][T19325] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4272'.
[  420.469146][T19356] netlink: 'syz.2.4277': attribute type 6 has an invalid length.
[  420.489769][T19352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4280'.
[  420.634231][T19374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4287'.
[  420.645843][T19374] netlink: 'syz.0.4287': attribute type 5 has an invalid length.
[  420.688245][T19380] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4289'.
[  420.767642][T19388] netlink: 'syz.2.4290': attribute type 2 has an invalid length.
[  420.770459][T19388] netlink: 'syz.2.4290': attribute type 9 has an invalid length.
[  420.772820][T19388] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4290'.
[  420.781393][T19387] ALSA: mixer_oss: invalid OSS volume ''
[  420.787843][T19381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4289'.
[  420.793524][T19380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4289'.
[  420.916906][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4294'.
[  421.034529][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  421.283386][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4303'.
[  421.362668][T19433] netlink: 'syz.2.4304': attribute type 2 has an invalid length.
[  421.488075][T19437] pim6reg1: entered promiscuous mode
[  421.489781][T19437] pim6reg1: entered allmulticast mode
[  421.547581][T19436] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  421.551065][T19436] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  421.989745][T19466] syzkaller1: entered promiscuous mode
[  421.991925][T19466] syzkaller1: entered allmulticast mode
[  422.074632][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  422.258563][T19473] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  422.264036][T19473] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  422.402094][T19484] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  422.443544][T19487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4317'.
[  422.506751][T19491] validate_nla: 1 callbacks suppressed
[  422.506766][T19491] netlink: 'syz.2.4317': attribute type 3 has an invalid length.
[  423.114389][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  423.551081][T19523] bond27: ARP target 9.0.0.0 is already present
[  423.553486][T19523] bond27: option arp_ip_target: invalid value (9)
[  423.557474][T19523] bond27 (unregistering): Released all slaves
[  423.602622][T19522] bond27: ARP target 9.0.0.0 is already present
[  423.604825][T19522] bond27: option arp_ip_target: invalid value (9)
[  423.616402][T19522] bond27 (unregistering): Released all slaves
[  423.772901][T19531]  speed is unknown, defaulting to 1000
[  423.985638][T19531] wg1 speed is unknown, defaulting to 1000
[  424.154582][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  424.820603][T19552] netlink: 'syz.1.4332': attribute type 29 has an invalid length.
[  424.825117][T19552] netlink: 'syz.1.4332': attribute type 29 has an invalid length.
[  424.828661][T19552] netlink: 'syz.1.4332': attribute type 29 has an invalid length.
[  424.832187][T19552] netlink: 'syz.1.4332': attribute type 29 has an invalid length.
[  424.837663][T19552] netlink: 'syz.1.4332': attribute type 29 has an invalid length.
[  424.841998][T19552] netlink: 'syz.1.4332': attribute type 29 has an invalid length.
[  424.844907][T19552] netlink: 'syz.1.4332': attribute type 29 has an invalid length.
[  424.847297][T19552] netlink: 'syz.1.4332': attribute type 29 has an invalid length.
[  424.849604][T19552] netlink: 'syz.1.4332': attribute type 29 has an invalid length.
[  424.967896][T19557] syzkaller1: entered promiscuous mode
[  424.969773][T19557] syzkaller1: entered allmulticast mode
[  425.160111][T19564] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  425.178129][T19564] kernel profiling enabled (shift: 0)
[  425.194539][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  425.347457][T19567] bond22: (slave veth15): Releasing active interface
[  425.386617][T19567] bond25: (slave gretap3): Releasing active interface
[  426.234425][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  426.463666][T19590] __nla_validate_parse: 6 callbacks suppressed
[  426.463680][T19590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4344'.
[  426.526840][T19590] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4344'.
[  426.686571][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'.
[  426.689158][T19604] veth0_to_bond: entered allmulticast mode
[  426.691188][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'.
[  426.693984][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'.
[  426.785689][T19611] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  426.958990][T19633] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  427.274453][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  427.410166][T19659] syzkaller0: entered promiscuous mode
[  427.412255][T19659] syzkaller0: entered allmulticast mode
[  427.448497][T19667] bond21: entered promiscuous mode
[  427.450589][T19667] bond21: entered allmulticast mode
[  427.453022][T19667] 8021q: adding VLAN 0 to HW filter on device bond21
[  427.478992][T19665] 8021q: adding VLAN 0 to HW filter on device bond22
[  427.483069][T19665] bond22: entered promiscuous mode
[  427.485737][T19665] bond22: entered allmulticast mode
[  427.488361][T19665] bond21: (slave bond22): Enslaving as a backup interface with a down link
[  428.314505][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  428.946508][T19694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4379'.
[  429.299061][T19698] gretap4: entered allmulticast mode
[  429.354550][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  429.381512][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4381'.
[  429.381805][T19704] validate_nla: 68 callbacks suppressed
[  429.381815][T19704] netlink: 'syz.2.4382': attribute type 12 has an invalid length.
[  429.389779][T19703] netlink: 'syz.0.4381': attribute type 2 has an invalid length.
[  429.390952][T19704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4382'.
[  429.416504][   T33] audit: type=1400 audit(1761786245.351:10): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="/dev/video1" pid=19705 comm="syz.1.4383"
[  429.867745][T19747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4398'.
[  429.879628][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4399'.
[  430.187841][   T33] audit: type=1400 audit(1761786246.121:11): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=19774 comm="syz.1.4407"
[  430.271599][T19782] bridge0: port 1(batadv2) entered blocking state
[  430.273774][T19782] bridge0: port 1(batadv2) entered disabled state
[  430.284750][T19782] batadv2: entered allmulticast mode
[  430.288324][T19782] batadv2: entered promiscuous mode
[  430.361081][T19790] netlink: 'syz.1.4412': attribute type 29 has an invalid length.
[  430.365217][T19790] netlink: 'syz.1.4412': attribute type 29 has an invalid length.
[  430.394394][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  430.470017][T19795] IPVS: Unknown mcast interface: hsr0
[  430.774565][ T5878] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  430.777235][ T5878] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  431.189420][T19826] netlink: 'syz.2.4423': attribute type 4 has an invalid length.
[  431.210001][T19826] netlink: 'syz.2.4423': attribute type 4 has an invalid length.
[  431.235830][T19826] netlink: 'syz.2.4423': attribute type 11 has an invalid length.
[  431.258020][T19832] netlink: ct family unspecified
[  431.259473][T19832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.434511][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  431.439948][T19842] batadv2: left allmulticast mode
[  431.441543][T19842] batadv2: left promiscuous mode
[  431.445197][T19842] bridge0: port 1(batadv2) entered disabled state
[  431.722874][T19861] bond27: option xmit_hash_policy: invalid value (6)
[  431.728457][T19861] bond27 (unregistering): Released all slaves
[  431.882407][T19873] bond0: (slave gre0): Error: Device type is different from other slaves
[  431.897967][T19873] netlink: 'syz.0.4438': attribute type 39 has an invalid length.
[  432.067500][T19885] __nla_validate_parse: 7 callbacks suppressed
[  432.067515][T19885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4437'.
[  432.474622][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  432.517935][T19898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4445'.
[  433.145615][T19907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  433.361605][T19926] netlink: 'syz.0.4451': attribute type 1 has an invalid length.
[  433.514530][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  433.579519][T19941] bond27: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  433.591492][T19941] bond27 (unregistering): Released all slaves
[  433.692474][T19950] xt_l2tp: missing protocol rule (udp|l2tpip)
[  433.692901][T19951] ALSA: mixer_oss: invalid OSS volume ''
[  433.785044][T19959]  speed is unknown, defaulting to 1000
[  434.028191][T19959] wg1 speed is unknown, defaulting to 1000
[  434.219121][T19971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4464'.
[  434.509888][T19977] netlink: 'syz.1.4466': attribute type 7 has an invalid length.
[  434.554582][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  434.723705][T19985] syzkaller1: entered promiscuous mode
[  434.729217][T19985] syzkaller1: entered allmulticast mode
[  434.952034][T19987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4471'.
[  434.956746][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'.
[  434.960006][T19987] netlink: 'syz.1.4471': attribute type 1 has an invalid length.
[  435.052606][T19996] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  435.062334][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4475'.
[  435.068564][T19996] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4475'.
[  435.086880][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4475'.
[  435.181716][T20004]  speed is unknown, defaulting to 1000
[  435.442683][T20008]  speed is unknown, defaulting to 1000
[  435.587909][T20004] wg1 speed is unknown, defaulting to 1000
[  435.594444][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  435.649422][T20014] sctp: [Deprecated]: syz.0.4478 (pid 20014) Use of int in max_burst socket option.
[  435.649422][T20014] Use struct sctp_assoc_value instead
[  435.795516][T20008] wg1 speed is unknown, defaulting to 1000
[  436.058900][T20029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4483'.
[  436.069318][T20029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4483'.
[  436.566117][    T9] hid-generic 0003:000F:0007.000B: unknown main item tag 0x0
[  436.568491][    T9] hid-generic 0003:000F:0007.000B: unknown main item tag 0x0
[  436.573213][    T9] hid-generic 0003:000F:0007.000B: unknown main item tag 0x0
[  436.578585][    T9] hid-generic 0003:000F:0007.000B: unknown main item tag 0x0
[  436.582839][    T9] hid-generic 0003:000F:0007.000B: unknown main item tag 0x0
[  436.588705][    T9] hid-generic 0003:000F:0007.000B: unknown main item tag 0x0
[  436.593288][    T9] hid-generic 0003:000F:0007.000B: unknown main item tag 0x0
[  436.598093][    T9] hid-generic 0003:000F:0007.000B: unknown main item tag 0x0
[  436.603676][    T9] hid-generic 0003:000F:0007.000B: unknown main item tag 0x0
[  436.611832][    T9] hid-generic 0003:000F:0007.000B: unknown main item tag 0x0
[  436.617708][    T9] hid-generic 0003:000F:0007.000B: item fetching failed at offset 17/18
[  436.623912][    T9] hid-generic 0003:000F:0007.000B: probe with driver hid-generic failed with error -22
[  436.634395][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  437.081690][T20066] __nla_validate_parse: 1 callbacks suppressed
[  437.081706][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4497'.
[  437.113208][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4498'.
[  437.117541][T20068] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4498'.
[  437.121555][T20068] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4498'.
[  437.265987][T20076] netlink: 'syz.0.4502': attribute type 12 has an invalid length.
[  437.289937][T20078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4503'.
[  437.569449][T20088] netlink: 'syz.2.4506': attribute type 2 has an invalid length.
[  437.674511][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  437.869385][T20100] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  437.884130][T20100] can0: slcan on ttynull.
[  437.934714][T20099] can0 (unregistered): slcan off ttynull.
[  438.083590][T20113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.089279][T20112] tipc: Disabling bearer <eth:syzkaller0>
[  438.148731][T20111] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  438.232747][T20120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.237193][T20120] syzkaller0: entered promiscuous mode
[  438.242275][T20120] syzkaller0: entered allmulticast mode
[  438.280839][T20120] tipc: Resetting bearer <eth:syzkaller0>
[  438.297623][T20119] tipc: Resetting bearer <eth:syzkaller0>
[  438.349353][T20119] tipc: Disabling bearer <eth:syzkaller0>
[  438.371374][T20125]  speed is unknown, defaulting to 1000
[  438.472026][T20129]  speed is unknown, defaulting to 1000
[  438.617981][T20146] netlink: 'syz.2.4530': attribute type 58 has an invalid length.
[  438.620271][T20146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4530'.
[  438.714529][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  438.741306][T20125] wg1 speed is unknown, defaulting to 1000
[  438.846906][T20129] wg1 speed is unknown, defaulting to 1000
[  439.623049][T20177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4536'.
[  439.640676][ T5843] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  439.754429][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  439.881890][T20182] xt_socket: unknown flags 0x50
[  439.953491][T20185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4538'.
[  440.566004][T20192]  speed is unknown, defaulting to 1000
[  440.794392][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  440.880901][T20192] wg1 speed is unknown, defaulting to 1000
[  440.913113][T20207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4547'.
[  440.916739][T20207] tipc: Invalid UDP bearer configuration
[  440.916766][T20207] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  441.016624][T20215] netlink: 'syz.1.4549': attribute type 39 has an invalid length.
[  441.020524][T20215] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4549'.
[  441.023686][T20215] netlink: 'syz.1.4549': attribute type 5 has an invalid length.
[  441.050090][T20215] vlan6: entered allmulticast mode
[  441.051738][T20215] bridge_slave_0: entered allmulticast mode
[  441.287155][T20229] netlink: 'syz.2.4553': attribute type 1 has an invalid length.
[  441.496007][T20246] netlink: 'syz.1.4560': attribute type 13 has an invalid length.
[  441.498259][T20246] netlink: 'syz.1.4560': attribute type 17 has an invalid length.
[  441.501138][T20246] erspan0: left allmulticast mode
[  441.513877][T20246] veth13: left promiscuous mode
[  441.516964][T20246] geneve0: left promiscuous mode
[  441.518612][T20246] geneve0: left allmulticast mode
[  441.520247][T20246] bond11: left promiscuous mode
[  441.521774][T20246] gre4: left promiscuous mode
[  441.536873][T20246] vlan3: left promiscuous mode
[  441.538619][T20246] bond13: left promiscuous mode
[  441.540379][T20246] vlan3: left allmulticast mode
[  441.542082][T20246] bond13: left allmulticast mode
[  441.544177][T20246] macvtap2: left promiscuous mode
[  441.545962][T20246] macvtap2: left allmulticast mode
[  441.547816][T20246] macvtap3: left promiscuous mode
[  441.549628][T20246] macvtap3: left allmulticast mode
[  441.552163][T20246] veth21: left promiscuous mode
[  441.557249][T20246] bridge15: left allmulticast mode
[  441.559736][T20246] bond20: left promiscuous mode
[  441.561758][T20246] veth25: left promiscuous mode
[  441.564190][T20246] xfrm1: left allmulticast mode
[  441.566250][T20246] geneve4: left promiscuous mode
[  441.568089][T20246] geneve4: left allmulticast mode
[  441.569958][T20246] ip6tnl2: left allmulticast mode
[  441.605700][T20251]  speed is unknown, defaulting to 1000
[  441.774605][T20255]  speed is unknown, defaulting to 1000
[  441.834533][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  441.960993][T20251] wg1 speed is unknown, defaulting to 1000
[  442.101570][T20255] wg1 speed is unknown, defaulting to 1000
[  442.540510][T20291] __nla_validate_parse: 197 callbacks suppressed
[  442.540526][T20291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4571'.
[  442.580440][T20293] netlink: 'syz.0.4572': attribute type 1 has an invalid length.
[  442.582713][T20293] netlink: 'syz.0.4572': attribute type 2 has an invalid length.
[  442.640831][T20299] IPVS: ip_vs_edit_dest(): server weight less than zero
[  442.728844][T20302] syzkaller0: entered promiscuous mode
[  442.728859][T20302] syzkaller0: entered allmulticast mode
[  442.874899][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  442.936668][T20306]  speed is unknown, defaulting to 1000
[  442.981645][T20309] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode
[  442.988496][T20309] macvtap0: entered allmulticast mode
[  442.990582][T20309] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode
[  442.997875][T20309] mac80211_hwsim hwsim22 wlan0: left allmulticast mode
[  443.000589][T20309] mac80211_hwsim hwsim22 wlan0: left promiscuous mode
[  443.146423][T20306] wg1 speed is unknown, defaulting to 1000
[  443.919592][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  444.957165][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  445.152903][T20348] netlink: 'syz.1.4587': attribute type 21 has an invalid length.
[  445.213741][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4589'.
[  445.356627][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4593'.
[  445.398355][T20362]  speed is unknown, defaulting to 1000
[  445.501267][T20370] tap0: tun_chr_ioctl cmd 2148553947
[  445.533529][T20370] bond23 (unregistering): Released all slaves
[  445.600451][T20361]  speed is unknown, defaulting to 1000
[  445.807183][T20389] binder: 20388:20389 ioctl c018620c 200000000000 returned -14
[  445.901345][T20397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4603'.
[  445.905020][T20362] wg1 speed is unknown, defaulting to 1000
[  445.987850][T20402] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  445.994597][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  446.164231][T20361] wg1 speed is unknown, defaulting to 1000
[  446.169707][T20408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4607'.
[  446.252423][ T5277]  speed is unknown, defaulting to 1000
[  446.259016][ T5277] syz2: Port: 1 Link DOWN
[  446.265181][ T5277]  speed is unknown, defaulting to 1000
[  446.432674][T20423] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  446.802149][T20440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4616'.
[  446.908915][    T9]  speed is unknown, defaulting to 1000
[  446.910994][    T9] syz2: Port: 1 Link ACTIVE
[  446.912780][    T9]  speed is unknown, defaulting to 1000
[  446.939199][T20454] syzkaller0: left promiscuous mode
[  446.940834][T20454] syzkaller0: left allmulticast mode
[  447.034399][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  447.087341][T20470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4628'.
[  447.140507][T20470] syzkaller0: entered promiscuous mode
[  447.142577][T20470] syzkaller0: entered allmulticast mode
[  447.175219][T20473] veth25: entered promiscuous mode
[  447.182787][T11557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.186634][T11557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.211099][T20481] syzkaller0: entered promiscuous mode
[  447.212929][T20481] syzkaller0: entered allmulticast mode
[  447.265902][T20484] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  447.542672][T20498] netlink: 'syz.2.4637': attribute type 1 has an invalid length.
[  447.546352][T20498] netlink: 'syz.2.4637': attribute type 2 has an invalid length.
[  447.557062][T20498] netlink: 'syz.2.4637': attribute type 1 has an invalid length.
[  447.560035][T20498] netlink: 'syz.2.4637': attribute type 2 has an invalid length.
[  447.605845][T20501] rtc_cmos 00:04: Alarms can be up to one day in the future
[  448.074577][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  448.729625][T20505] netlink: 'syz.2.4639': attribute type 16 has an invalid length.
[  448.731991][T20505] netlink: 'syz.2.4639': attribute type 17 has an invalid length.
[  448.771644][T20508] random: crng reseeded on system resumption
[  448.835443][T20512] IPv6: NLM_F_REPLACE set, but no existing node found!
[  448.935336][T20505] tipc: Resetting bearer <eth:syzkaller0>
[  449.002371][T20509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4639'.
[  449.008718][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.011139][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.013722][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.016447][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.114467][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  449.270110][T20531] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  449.274744][T20529] syzkaller0: entered promiscuous mode
[  449.277587][T20529] syzkaller0: entered allmulticast mode
[  449.562329][T20534] netlink: 'syz.2.4649': attribute type 1 has an invalid length.
[  449.658082][T20537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4650'.
[  450.153575][T20541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4651'.
[  450.156824][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  450.160623][T20542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4651'.
[  451.198159][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  451.299106][T20552] syzkaller0: entered promiscuous mode
[  451.301153][T20552] syzkaller0: entered allmulticast mode
[  451.306312][T20552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  451.336741][T20550] tipc: Resetting bearer <eth:syzkaller0>
[  451.365620][T20550] tipc: Disabling bearer <eth:syzkaller0>
[  451.372326][T20558] binder: 20557:20558 ioctl c0306201 2000000002c0 returned -14
[  451.408363][T20555] bond24: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  451.418016][T20555] bond24 (unregistering): Released all slaves
[  451.547971][T20569] 
[  451.548726][T20569] ======================================================
[  451.550711][T20569] WARNING: possible circular locking dependency detected
[  451.552763][T20569] syzkaller #0 Not tainted
[  451.554555][T20569] ------------------------------------------------------
[  451.557944][T20569] syz.1.4660/20569 is trying to acquire lock:
[  451.560171][T20569] ffffffff8f4252f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  451.563614][T20569] 
[  451.563614][T20569] but task is already holding lock:
[  451.566306][T20569] ffffffff8f425298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  451.569786][T20569] 
[  451.569786][T20569] which lock already depends on the new lock.
[  451.569786][T20569] 
[  451.573564][T20569] 
[  451.573564][T20569] the existing dependency chain (in reverse order) is:
[  451.576828][T20569] 
[  451.576828][T20569] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  451.579700][T20569]        lock_acquire+0x120/0x360
[  451.581568][T20569]        _raw_spin_lock_bh+0x36/0x50
[  451.583519][T20569]        nr_rt_ioctl+0x390/0xd50
[  451.585405][T20569]        sock_do_ioctl+0xdc/0x300
[  451.587314][T20569]        sock_ioctl+0x576/0x790
[  451.589119][T20569]        __se_sys_ioctl+0xfc/0x170
[  451.590935][T20569]        do_syscall_64+0xfa/0xfa0
[  451.592516][T20569]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.594483][T20569] 
[  451.594483][T20569] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  451.597386][T20569]        lock_acquire+0x120/0x360
[  451.599241][T20571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4659'.
[  451.599248][T20569]        _raw_spin_lock_bh+0x36/0x50
[  451.603945][T20569]        nr_rt_ioctl+0x193/0xd50
[  451.605814][T20569]        sock_do_ioctl+0xdc/0x300
[  451.607604][T20569]        sock_ioctl+0x576/0x790
[  451.609377][T20569]        __se_sys_ioctl+0xfc/0x170
[  451.611224][T20569]        do_syscall_64+0xfa/0xfa0
[  451.613050][T20569]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.615421][T20569] 
[  451.615421][T20569] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  451.618315][T20569]        validate_chain+0xb9b/0x2140
[  451.620296][T20569]        __lock_acquire+0xab9/0xd20
[  451.622226][T20569]        lock_acquire+0x120/0x360
[  451.624055][T20569]        _raw_spin_lock_bh+0x36/0x50
[  451.626040][T20569]        nr_rt_device_down+0xa9/0x720
[  451.628001][T20569]        nr_device_event+0x137/0x150
[  451.629963][T20569]        notifier_call_chain+0x1b6/0x3e0
[  451.632046][T20569]        __dev_notify_flags+0x18d/0x2e0
[  451.634159][T20569]        netif_change_flags+0xe8/0x1a0
[  451.636177][T20569]        dev_change_flags+0x130/0x260
[  451.638175][T20569]        dev_ioctl+0x7b4/0x1150
[  451.639974][T20569]        sock_do_ioctl+0x22c/0x300
[  451.641808][T20569]        sock_ioctl+0x576/0x790
[  451.643611][T20569]        __se_sys_ioctl+0xfc/0x170
[  451.645531][T20569]        do_syscall_64+0xfa/0xfa0
[  451.647371][T20569]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.649753][T20569] 
[  451.649753][T20569] other info that might help us debug this:
[  451.649753][T20569] 
[  451.650436][T20572] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4659'.
[  451.653439][T20569] Chain exists of:
[  451.653439][T20569]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  451.653439][T20569] 
[  451.660961][T20569]  Possible unsafe locking scenario:
[  451.660961][T20569] 
[  451.663696][T20569]        CPU0                    CPU1
[  451.665699][T20569]        ----                    ----
[  451.667672][T20569]   lock(nr_neigh_list_lock);
[  451.669421][T20569]                                lock(&nr_node->node_lock);
[  451.672069][T20569]                                lock(nr_neigh_list_lock);
[  451.674724][T20569]   lock(nr_node_list_lock);
[  451.676461][T20569] 
[  451.676461][T20569]  *** DEADLOCK ***
[  451.676461][T20569] 
[  451.679417][T20569] 2 locks held by syz.1.4660/20569:
[  451.681331][T20569]  #0: ffffffff8f2cb208 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  451.684594][T20569]  #1: ffffffff8f425298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  451.688256][T20569] 
[  451.688256][T20569] stack backtrace:
[  451.690421][T20569] CPU: 1 UID: 0 PID: 20569 Comm: syz.1.4660 Not tainted syzkaller #0 PREEMPT(full) 
[  451.690443][T20569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  451.690454][T20569] Call Trace:
[  451.690464][T20569]  <TASK>
[  451.690472][T20569]  dump_stack_lvl+0x189/0x250
[  451.690497][T20569]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.690515][T20569]  ? __pfx__printk+0x10/0x10
[  451.690539][T20569]  ? print_lock_name+0xde/0x100
[  451.690553][T20569]  print_circular_bug+0x2ee/0x310
[  451.690572][T20569]  check_noncircular+0x134/0x160
[  451.690591][T20569]  validate_chain+0xb9b/0x2140
[  451.690610][T20569]  ? rt6_disable_ip+0x6b3/0x720
[  451.690632][T20569]  ? __lock_acquire+0xab9/0xd20
[  451.690644][T20569]  __lock_acquire+0xab9/0xd20
[  451.690659][T20569]  ? nr_rt_device_down+0xa9/0x720
[  451.690672][T20569]  lock_acquire+0x120/0x360
[  451.690684][T20569]  ? nr_rt_device_down+0xa9/0x720
[  451.690703][T20569]  ? nr_rt_device_down+0xa9/0x720
[  451.690717][T20569]  _raw_spin_lock_bh+0x36/0x50
[  451.690733][T20569]  ? nr_rt_device_down+0xa9/0x720
[  451.690747][T20569]  nr_rt_device_down+0xa9/0x720
[  451.690761][T20569]  ? do_raw_spin_unlock+0x4d/0x240
[  451.690783][T20569]  nr_device_event+0x137/0x150
[  451.690797][T20569]  notifier_call_chain+0x1b6/0x3e0
[  451.690817][T20569]  __dev_notify_flags+0x18d/0x2e0
[  451.690831][T20569]  ? __pfx___dev_notify_flags+0x10/0x10
[  451.690843][T20569]  ? __dev_change_flags+0x4cc/0x6d0
[  451.690859][T20569]  ? __pfx___dev_change_flags+0x10/0x10
[  451.690872][T20569]  ? full_name_hash+0x92/0xe0
[  451.690889][T20569]  netif_change_flags+0xe8/0x1a0
[  451.690903][T20569]  dev_change_flags+0x130/0x260
[  451.690925][T20569]  dev_ioctl+0x7b4/0x1150
[  451.690946][T20569]  sock_do_ioctl+0x22c/0x300
[  451.690963][T20569]  ? __pfx_sock_do_ioctl+0x10/0x10
[  451.690982][T20569]  sock_ioctl+0x576/0x790
[  451.690997][T20569]  ? __pfx_sock_ioctl+0x10/0x10
[  451.691016][T20569]  ? bpf_lsm_file_ioctl+0x9/0x20
[  451.691030][T20569]  ? __pfx_sock_ioctl+0x10/0x10
[  451.691044][T20569]  __se_sys_ioctl+0xfc/0x170
[  451.691063][T20569]  do_syscall_64+0xfa/0xfa0
[  451.691079][T20569]  ? lockdep_hardirqs_on+0x9c/0x150
[  451.691130][T20569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.691145][T20569]  ? exc_page_fault+0xab/0x100
[  451.691160][T20569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.691175][T20569] RIP: 0033:0x7f1ae658efc9
[  451.691189][T20569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.691202][T20569] RSP: 002b:00007f1ae7397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  451.691218][T20569] RAX: ffffffffffffffda RBX: 00007f1ae67e5fa0 RCX: 00007f1ae658efc9
[  451.691228][T20569] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008
[  451.691237][T20569] RBP: 00007f1ae6611f91 R08: 0000000000000000 R09: 0000000000000000
[  451.691246][T20569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.691254][T20569] R13: 00007f1ae67e6038 R14: 00007f1ae67e5fa0 R15: 00007fffc7328878
[  451.691269][T20569]  </TASK>
[  451.787286][T20572] sch_tbf: burst 0 is lower than device bridge16 mtu (1514) !
[  452.234595][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  453.274423][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  454.314451][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  455.354423][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  456.394462][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  457.434391][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  458.474805][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  459.514403][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  460.554527][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available

VM DIAGNOSIS:
01:04:27  Registers:
info registers vcpu 0

CPU#0
RAX=17a7a1bc41b01200 RBX=ffffffff81967b87 RCX=17a7a1bc41b01200 RDX=0000000000000001
RSI=ffffffff8bbf0440 RDI=ffffffff81967b87 RBP=ffffffff8dc07ea8 RSP=ffffffff8dc07d80
R8 =ffff888121232fdb R9 =1ffff110242465fb R10=dffffc0000000000 R11=ffffed10242465fc
R12=ffffffff8f7ccb70 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1b92a40
RIP=ffffffff8b45edd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000100 CR3=000000017299c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f062c21315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002c63 RDI=0000000000002c64 RBP=00000000000003f8 RSP=ffffc90003d77010
R8 =ffff888169768237 R9 =1ffff1102d2ed046 R10=dffffc0000000000 R11=ffffffff8514bbe0
R12=dffffc0000000000 R13=ffffffff997d4905 R14=ffffffff99ae7f00 R15=0000000000000000
RIP=ffffffff8514bc5c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1ae73976c0 ffffffff 00c00000
GS =0000 ffff8882a9f40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=00000001a3e3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f062c3b7498 00007f062c3b7470 XMM03=00007f062c3b74a8 00007f062c3b74a0
XMM04=00007f062cf1d100 00007f062c3b7460 XMM05=00007f062c3b7478 00007f062c3b74c0
XMM06=00007f062c3b74b8 00007f062c3b74b0 XMM07=00007f062c3b74a8 00007f062c3b74a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f062c21315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
