last executing test programs:

341.153742ms ago: executing program 1 (id=8687):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000011c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

279.165957ms ago: executing program 1 (id=8692):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0)

278.800572ms ago: executing program 1 (id=8694):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20)

217.999791ms ago: executing program 1 (id=8696):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0)

217.561177ms ago: executing program 2 (id=8698):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x38}}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0)

160.374009ms ago: executing program 1 (id=8699):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x2, 0xb}, {0xa, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008810)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

160.25423ms ago: executing program 0 (id=8700):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, &(0x7f0000000300))

160.063075ms ago: executing program 2 (id=8701):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0)

90.201247ms ago: executing program 2 (id=8702):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c0800034000000000080002400000000d080001400000000808000240000000090800014000000009080002400000001808000140000000a4"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

90.074317ms ago: executing program 0 (id=8703):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0)

89.97715ms ago: executing program 0 (id=8704):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000d00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e80)="66a42e", 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)='$`^', 0x3}], 0x1}}], 0x2, 0x4)

89.809229ms ago: executing program 2 (id=8705):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4)

67.051154ms ago: executing program 0 (id=8706):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x12}}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x40000000}}, 0xe8)
close(0x3)

56.317062ms ago: executing program 1 (id=8707):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="04002bbd7000fbdbdf2508000000540003800800010008000000080003000800000006000200ff0f0000080002000000400008000200ffffffff08000200030000000800010000000080080002000500000008000200020000000800020098a700002000028008000100050000000400040008000100040000000400040004000400180007800c00040005000000000000000800020005000000380007800c00040006000000000000000c000400ac140000000000000c000400060000000000000008000200400000000800020009000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000040}, 0xb854729de3f59379)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x0, 0x207, 0x0, 0x0, 0x9, 0x7}, 0x20)
sendto$inet6(r7, &(0x7f0000000000)="191435e1", 0x4, 0x2b5df04ed815cdf, &(0x7f000005ffe4)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2}, 0x1c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003"], 0x50}}, 0x0)

633.23µs ago: executing program 2 (id=8708):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x5}, 0x2)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)

474.886µs ago: executing program 0 (id=8709):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff)
shutdown(r1, 0x1)

365.92µs ago: executing program 0 (id=8710):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4)

0s ago: executing program 2 (id=8711):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
pipe(&(0x7f0000019480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc52b390", 0x4}, {&(0x7f0000000100)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="ca2d", 0x2}, {0x0}], 0x6, 0x3)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r4, 0x7, 0x10}, &(0x7f0000000140)=0xc)
close(r2)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r7, 0x0, 0x0, 0x0)
splice(r1, 0x0, r2, 0x0, 0x10500, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0xf, &(0x7f0000001200)=ANY=[@ANYBLOB="18080500000000000000880027555ae40000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e980000000000002608000001000000850000005b000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000000010010d042a"], 0x60}}, 0x8000)
readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107100000000000700000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)

kernel console output (not intermixed with test programs):

154.152681][T12524] tipc: Resetting bearer <eth:team0>
[  154.156331][T12524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.206048][T12522] infiniband syz0: set active
[  154.208948][    T9] lo speed is unknown, defaulting to 1000
[  154.211685][T12522] infiniband syz0: added lo
[  154.233853][T12522] RDS/IB: syz0: added
[  154.235593][T12522] smc: adding ib device syz0 with port count 1
[  154.237615][T12522] smc:    ib device syz0 port 1 has pnetid 
[  154.242272][    T9] lo speed is unknown, defaulting to 1000
[  154.245525][T12522] lo speed is unknown, defaulting to 1000
[  154.373317][T12522] lo speed is unknown, defaulting to 1000
[  154.495297][T12522] lo speed is unknown, defaulting to 1000
[  154.598453][T12535] lo speed is unknown, defaulting to 1000
[  155.153440][T12585] netlink: 'syz.2.2944': attribute type 5 has an invalid length.
[  155.418906][T12619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.423415][T12619] syzkaller0: entered promiscuous mode
[  155.425167][T12619] syzkaller0: entered allmulticast mode
[  155.432637][T12619] tipc: Resetting bearer <eth:syzkaller0>
[  155.435138][T12618] tipc: Resetting bearer <eth:syzkaller0>
[  155.446963][T12618] tipc: Disabling bearer <eth:syzkaller0>
[  155.472334][T12625] ip6gretap0: entered promiscuous mode
[  155.474389][T12625] macsec0: entered promiscuous mode
[  155.476043][T12625] macsec0: entered allmulticast mode
[  155.477709][T12625] ip6gretap0: entered allmulticast mode
[  155.652696][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2971'.
[  155.658404][T12641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.671862][T12641] syzkaller0: entered promiscuous mode
[  155.673631][T12641] syzkaller0: entered allmulticast mode
[  155.681821][T12639] tipc: Resetting bearer <eth:syzkaller0>
[  155.697878][T12639] tipc: Disabling bearer <eth:syzkaller0>
[  155.724285][T12655] syzkaller0: entered promiscuous mode
[  155.725976][T12655] syzkaller0: entered allmulticast mode
[  155.892674][T12669] netlink: 'syz.1.2984': attribute type 10 has an invalid length.
[  155.895212][T12669] tipc: Resetting bearer <eth:team0>
[  156.277569][T12702] netlink: 'syz.1.2995': attribute type 1 has an invalid length.
[  156.855262][T12715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.857951][T12715] syzkaller0: entered promiscuous mode
[  156.859842][T12715] syzkaller0: entered allmulticast mode
[  156.873173][T12715] tipc: Resetting bearer <eth:syzkaller0>
[  156.876024][T12714] tipc: Resetting bearer <eth:syzkaller0>
[  156.887899][T12714] tipc: Disabling bearer <eth:syzkaller0>
[  157.190113][T12752] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[  157.264543][T12763] netlink: 'syz.2.3025': attribute type 6 has an invalid length.
[  157.447945][T12784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.462025][T12784] syzkaller0: entered promiscuous mode
[  157.463731][T12784] syzkaller0: entered allmulticast mode
[  157.514500][T12784] tipc: Resetting bearer <eth:syzkaller0>
[  157.537908][T12783] tipc: Resetting bearer <eth:syzkaller0>
[  157.566547][T12783] tipc: Disabling bearer <eth:syzkaller0>
[  158.184139][T12804] netlink: 'syz.0.3041': attribute type 9 has an invalid length.
[  158.313230][T12810] __nla_validate_parse: 8 callbacks suppressed
[  158.313242][T12810] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3044'.
[  158.323100][T12810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3044'.
[  158.331497][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3044'.
[  158.342574][T12810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3044'.
[  158.567511][   T33] audit: type=1804 audit(1754814235.852:3): pid=12824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3049" name="/newroot/962/cgroup.controllers" dev="tmpfs" ino=4868 res=1 errno=0
[  158.577583][   T33] audit: type=1800 audit(1754814235.852:4): pid=12824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3049" name="cgroup.controllers" dev="tmpfs" ino=4868 res=0 errno=0
[  159.047701][T12868] tipc: Resetting bearer <ib:ip6gre0>
[  159.053734][T12868] team0: Mode changed to "activebackup"
[  159.056240][T12868] vlan0: entered promiscuous mode
[  159.058845][T12868] tipc: Enabled bearer <eth:team0>, priority 0
[  159.205877][T12874] lo speed is unknown, defaulting to 1000
[  159.364949][T12884] sctp: [Deprecated]: syz.2.3075 (pid 12884) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.364949][T12884] Use struct sctp_sack_info instead
[  159.515215][T12896] bond0: Device is already in use.
[  159.523858][T12893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3079'.
[  159.539267][T12893] openvswitch: netlink: Missing key (keys=40, expected=80)
[  159.562354][T12900] tipc: Resetting bearer <ib:ip6gre0>
[  159.564662][T12900] tipc: Resetting bearer <eth:team0>
[  159.569607][T12893] netlink: 'syz.2.3079': attribute type 10 has an invalid length.
[  159.572061][T12893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3079'.
[  159.614742][T12902] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  159.912186][T12926] siw: device registration error -23
[  159.919220][T12926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3092'.
[  160.124440][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3104'.
[  160.127236][T12948] netlink: 'syz.0.3104': attribute type 18 has an invalid length.
[  160.134536][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3104'.
[  160.137275][T12948] netlink: 'syz.0.3104': attribute type 18 has an invalid length.
[  160.224208][T12957] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3107'.
[  160.227066][T12957] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  160.229543][T12957] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  160.766672][T12982] raw_sendmsg: syz.0.3119 forgot to set AF_INET. Fix it!
[  160.945838][T12990] netlink: 'syz.0.3123': attribute type 1 has an invalid length.
[  161.197486][T13005] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  161.267885][T13013] netlink: 'syz.0.3133': attribute type 15 has an invalid length.
[  161.270770][T13013] netlink: 'syz.0.3133': attribute type 18 has an invalid length.
[  161.357838][T13022] netlink: 'syz.0.3138': attribute type 1 has an invalid length.
[  161.753517][T13075] IPVS: Scheduler module ip_vs_ not found
[  161.785561][T13080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.950569][T13105] syz.0.3174 uses old SIOCAX25GETINFO
[  163.140209][T13169] netlink: 'syz.2.3196': attribute type 4 has an invalid length.
[  163.542526][T13195] __nla_validate_parse: 6 callbacks suppressed
[  163.542537][T13195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3215'.
[  163.796371][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.798979][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.988432][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3230'.
[  164.011503][T13229] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  164.023196][T13229] batman_adv: batadv0: Removing interface: virt_wifi0
[  164.114411][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3231'.
[  164.164783][T13235] netlink: 'syz.2.3233': attribute type 10 has an invalid length.
[  164.167562][T13235] syz_tun: entered promiscuous mode
[  164.173885][T13235] netlink: 'syz.2.3233': attribute type 10 has an invalid length.
[  164.352925][T13249] netlink: 'syz.2.3240': attribute type 4 has an invalid length.
[  164.686910][T13276] netlink: 'syz.1.3252': attribute type 22 has an invalid length.
[  164.697209][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'.
[  164.707466][T13276] netlink: 'syz.1.3252': attribute type 22 has an invalid length.
[  164.707482][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.710662][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'.
[  164.717678][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.734069][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.745893][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.764095][T13280] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3254'.
[  164.926039][T13296] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  165.012454][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3264'.
[  165.175076][T13322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3271'.
[  165.640877][T13376] tipc: Resetting bearer <ib:ip6gre0>
[  165.646751][T13376] tipc: Resetting bearer <eth:team0>
[  165.655326][T13376] vlan0: left promiscuous mode
[  165.670792][T13376] macsec0: left promiscuous mode
[  165.672484][T13376] macsec0: left allmulticast mode
[  165.764354][T13381] lo speed is unknown, defaulting to 1000
[  166.177622][T13411] validate_nla: 2 callbacks suppressed
[  166.177633][T13411] netlink: 'syz.1.3311': attribute type 4 has an invalid length.
[  166.435488][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'.
[  166.513027][T13433] tipc: Disabling bearer <eth:team0>
[  166.516193][T13433] veth1_vlan: left allmulticast mode
[  166.520691][T13433] team0 (unregistering): Port device macvlan0 removed
[  166.635910][T13437] netlink: 'syz.1.3322': attribute type 32 has an invalid length.
[  166.638403][T13437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3322'.
[  166.941213][T13466] netlink: 'syz.1.3333': attribute type 2 has an invalid length.
[  167.693551][T13541] netlink: 'syz.2.3368': attribute type 83 has an invalid length.
[  167.831790][T13546] dummy0: left allmulticast mode
[  167.833544][T13546] bridge0: port 4(dummy0) entered disabled state
[  167.843375][T13546] bridge0: port 3(batadv0) entered disabled state
[  167.850399][T13546] bridge_slave_1: left allmulticast mode
[  167.852436][T13546] bridge_slave_1: left promiscuous mode
[  167.854276][T13546] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.862362][T13546] bridge_slave_0: left allmulticast mode
[  167.864140][T13546] bridge_slave_0: left promiscuous mode
[  167.865927][T13546] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.203670][T13587] netlink: 'syz.2.3389': attribute type 1 has an invalid length.
[  168.750967][T13609] netlink: 'syz.1.3398': attribute type 1 has an invalid length.
[  168.753593][T13609] __nla_validate_parse: 11 callbacks suppressed
[  168.753600][T13609] netlink: 600 bytes leftover after parsing attributes in process `syz.1.3398'.
[  168.861056][T13574] delete_channel: no stack
[  168.911894][T13624] lo speed is unknown, defaulting to 1000
[  169.232914][T13651] netlink: 'syz.1.3418': attribute type 1 has an invalid length.
[  169.237692][T13651] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3418'.
[  169.241381][T13651] NCSI netlink: No device for ifindex 0
[  169.375653][T13659] netlink: 'syz.2.3422': attribute type 1 has an invalid length.
[  169.415007][T13659] 8021q: adding VLAN 0 to HW filter on device bond3
[  169.437536][T13659] bond3: (slave veth13): Enslaving as an active interface with a down link
[  169.452548][T13659] vlan0: entered allmulticast mode
[  169.454407][T13659] veth1: entered allmulticast mode
[  169.456561][T13659] veth1: entered promiscuous mode
[  169.459089][T13659] veth1: left promiscuous mode
[  169.462332][T13659] bond3: (slave vlan0): making interface the new active one
[  169.466899][T13659] veth1: entered promiscuous mode
[  169.469340][T13659] vlan0: entered promiscuous mode
[  169.473523][T13659] bond3: (slave vlan0): Enslaving as an active interface with an up link
[  169.504879][T13658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.555146][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3423'.
[  170.108194][T13703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3444'.
[  170.406111][T13729] syzkaller0: entered promiscuous mode
[  170.407855][T13729] syzkaller0: entered allmulticast mode
[  171.655852][T13769] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3473'.
[  171.668177][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'.
[  171.764602][T13786] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3481'.
[  171.929953][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'.
[  171.932700][T13806] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3491'.
[  171.935493][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'.
[  171.947959][T13808] netlink: 'syz.1.3492': attribute type 1 has an invalid length.
[  172.036622][T13819] netlink: 'syz.0.3497': attribute type 5 has an invalid length.
[  172.570026][T13877] netlink: 'syz.2.3524': attribute type 12 has an invalid length.
[  173.105167][T13917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.108615][T13917] syzkaller0: entered promiscuous mode
[  173.111469][T13917] syzkaller0: entered allmulticast mode
[  173.140680][T13917] tipc: Resetting bearer <eth:syzkaller0>
[  173.145748][T13916] tipc: Resetting bearer <eth:syzkaller0>
[  173.156866][T13916] tipc: Disabling bearer <eth:syzkaller0>
[  173.666868][T13953] IPv6: NLM_F_REPLACE set, but no existing node found!
[  173.765933][T13967] __nla_validate_parse: 7 callbacks suppressed
[  173.765946][T13967] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3565'.
[  173.772746][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3565'.
[  173.775890][T13967] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  174.295856][T14034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3597'.
[  174.401389][T14049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3604'.
[  174.404236][T14049] netlink: 'syz.0.3604': attribute type 1 has an invalid length.
[  174.562379][T14068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3612'.
[  174.975910][T14101] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3627'.
[  174.978841][T14101] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3627'.
[  174.994954][T14101] rdma_rxe: rxe_newlink: failed to add lo
[  175.019102][T14101] tipc: Resetting bearer <ib:ip6gre0>
[  175.021241][T14101] tipc: Resetting bearer <ib:ip6gre0>
[  175.032877][T14101] 8021q: adding VLAN 0 to HW filter on device team0
[  175.035243][T14101] tipc: Resetting bearer <eth:team0>
[  175.037123][T14101] tipc: Resetting bearer <eth:team0>
[  175.045896][T14101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.066291][T14107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3630'.
[  175.069192][T14107] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3630'.
[  175.099567][T14107] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  175.103362][T14107] gretap2: entered promiscuous mode
[  175.104987][T14107] gretap2: entered allmulticast mode
[  175.357172][T14133] netlink: 'syz.2.3641': attribute type 5 has an invalid length.
[  175.388317][T14137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3642'.
[  175.527903][T14148] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  175.704475][T14166] geneve2: entered promiscuous mode
[  175.807542][T14173] macvtap0: entered promiscuous mode
[  175.809239][T14173] team0: entered promiscuous mode
[  175.812446][T14173] macvtap0: entered allmulticast mode
[  175.814250][T14173] team0: entered allmulticast mode
[  175.816528][T14173] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  175.898244][T14173] team0: left allmulticast mode
[  175.900979][T14173] team0: left promiscuous mode
[  176.358886][T14198] macsec0: entered promiscuous mode
[  176.362863][T14198] macsec0: entered allmulticast mode
[  177.044937][T14261] ip6gre1: entered allmulticast mode
[  177.317874][T14287] netlink: 'syz.1.3714': attribute type 1 has an invalid length.
[  177.461162][T14307] syzkaller0: entered promiscuous mode
[  177.462827][T14307] syzkaller0: entered allmulticast mode
[  177.617873][T14307] infiniband syz2: set active
[  177.619524][T14307] infiniband syz2: added syzkaller0
[  177.629378][T14320] netlink: 'syz.2.3729': attribute type 3 has an invalid length.
[  177.642263][T14307] RDS/IB: syz2: added
[  177.643600][T14307] smc: adding ib device syz2 with port count 1
[  177.645520][T14307] smc:    ib device syz2 port 1 has pnetid 
[  177.723857][T14326] syzkaller0: entered promiscuous mode
[  177.725777][T14326] syzkaller0: entered allmulticast mode
[  178.016471][   T35] smc: removing ib device syz2
[  178.022241][ T5875] syz2: Port: 1 Link DOWN
[  178.428278][T14366] netlink: 'syz.0.3752': attribute type 1 has an invalid length.
[  178.568426][T14386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.846956][T14417] pimreg: tun_chr_ioctl cmd 2147767506
[  179.028364][T14434] lo speed is unknown, defaulting to 1000
[  179.031769][T14434] lo speed is unknown, defaulting to 1000
[  179.033979][T14434] lo speed is unknown, defaulting to 1000
[  179.043454][T14434] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  179.059602][T14434] lo speed is unknown, defaulting to 1000
[  179.062577][T14434] lo speed is unknown, defaulting to 1000
[  179.065243][T14434] lo speed is unknown, defaulting to 1000
[  179.416827][T14439] netlink: 'syz.0.3785': attribute type 8 has an invalid length.
[  179.558671][T14449] __nla_validate_parse: 8 callbacks suppressed
[  179.558684][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'.
[  179.591278][T14451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.064371][T14475] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3802'.
[  180.192326][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3812'.
[  180.196033][T14495] tipc: Enabled bearer <eth:vlan0>, priority 18
[  180.244269][T14501] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3815'.
[  180.293584][T14505] syzkaller1: entered promiscuous mode
[  180.295522][T14505] syzkaller1: entered allmulticast mode
[  180.440155][T14519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3824'.
[  180.610861][   T12] vlan0: left promiscuous mode
[  180.619413][T14537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.310326][ T5938] tipc: Node number set to 3386376473
[  181.943622][T14571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3846'.
[  182.032633][T14581] nftables ruleset with unbound chain
[  182.064964][T14585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.092853][T14586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3853'.
[  182.228685][T14599] syz_tun: entered allmulticast mode
[  182.236342][T14599] dvmrp1: entered allmulticast mode
[  182.244374][T14598] syz_tun: left allmulticast mode
[  182.389579][T14611] lo speed is unknown, defaulting to 1000
[  182.513298][T14611] lo speed is unknown, defaulting to 1000
[  182.552799][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3872'.
[  182.669788][   T35] wlan0: Trigger new scan to find an IBSS to join
[  182.792487][T14637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3873'.
[  183.172992][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'.
[  183.198500][T14657] netlink: 'syz.0.3884': attribute type 1 has an invalid length.
[  183.235173][T14659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.238132][T14659] syzkaller0: entered promiscuous mode
[  183.242288][T14659] syzkaller0: entered allmulticast mode
[  183.255032][T14659] tipc: Resetting bearer <eth:syzkaller0>
[  183.258736][T14658] tipc: Resetting bearer <eth:syzkaller0>
[  183.267762][T14658] tipc: Disabling bearer <eth:syzkaller0>
[  183.433594][T14661] netlink: 'syz.1.3886': attribute type 1 has an invalid length.
[  183.481574][T14661] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  183.485930][T14661] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  183.553762][T14661] gretap3: entered promiscuous mode
[  183.558706][T14661] bond3: (slave gretap3): making interface the new active one
[  183.562576][T14661] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  183.666536][T14674] netlink: 'syz.2.3892': attribute type 10 has an invalid length.
[  183.674896][T14674] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  183.869458][T14689] netlink: 'syz.2.3897': attribute type 1 has an invalid length.
[  183.902203][T14689] bond4: (slave bridge7): making interface the new active one
[  183.905059][T14689] bond4: (slave bridge7): Enslaving as an active interface with an up link
[  183.943630][T14694] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  184.166057][T14716] tipc: Failed to remove unknown binding: 66,1,1/11578026:130827363/130827365
[  184.171091][T14716] tipc: Failed to remove unknown binding: 66,1,1/11578026:130827363/130827365
[  184.284695][T14722] netlink: 'syz.2.3912': attribute type 1 has an invalid length.
[  184.317209][T14722] 8021q: adding VLAN 0 to HW filter on device bond5
[  184.338724][T14722] bond5: (slave gretap1): making interface the new active one
[  184.344672][T14722] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  184.426649][T14737] netlink: 'syz.1.3918': attribute type 4 has an invalid length.
[  184.441971][ T5938] lo speed is unknown, defaulting to 1000
[  184.445289][ T5938] syz2: Port: 1 Link DOWN
[  184.787792][T14784] __nla_validate_parse: 2 callbacks suppressed
[  184.787803][T14784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3939'.
[  184.921047][T14796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3944'.
[  185.149993][ T5881] Bluetooth: hci2: command 0x0405 tx timeout
[  185.150066][ T5876] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  185.555576][T14807] tls_set_device_offload: netdev not found
[  185.709854][ T8413] wlan0: Trigger new scan to find an IBSS to join
[  185.949750][ T5876] Bluetooth: hci1: command 0x0406 tx timeout
[  186.361282][T14900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.482827][T14910] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3999'.
[  186.485624][T14910] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  186.651676][T14925] lo speed is unknown, defaulting to 1000
[  186.692052][T14930] netlink: 'syz.2.4006': attribute type 9 has an invalid length.
[  186.717505][T14930] netlink: 'syz.2.4006': attribute type 6 has an invalid length.
[  186.745999][T14932] 8021q: adding VLAN 0 to HW filter on device bond6
[  186.758512][T14932] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  186.762380][T14932] bond6: (slave macvlan3): Enslaving as a backup interface with a down link
[  186.773873][T14932] tipc: Resetting bearer <ib:ip6gre0>
[  186.776635][T14932] tipc: Resetting bearer <eth:team0>
[  186.790815][T14932] bond6: (slave macvlan3): Releasing backup interface
[  186.809426][T14925] lo speed is unknown, defaulting to 1000
[  186.983298][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4017'.
[  187.035746][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'.
[  187.116403][T14952] tipc: Resetting bearer <eth:vlan0>
[  187.177351][T14952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.292192][T14952] ip6gretap0: left allmulticast mode
[  187.331387][ T5888] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.333935][ T5888] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.336469][ T5888] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.339038][ T5888] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.609162][T14991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.612648][T14991] syzkaller0: entered promiscuous mode
[  187.614372][T14991] syzkaller0: entered allmulticast mode
[  187.634328][T14991] tipc: Resetting bearer <eth:syzkaller0>
[  187.639527][T14990] tipc: Resetting bearer <eth:syzkaller0>
[  187.656741][T14990] tipc: Disabling bearer <eth:syzkaller0>
[  187.702237][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4042'.
[  187.885803][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'.
[  187.898351][T15018] netlink: set zone limit has 4 unknown bytes
[  187.948081][T15032] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4056'.
[  188.154808][T15053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.735074][T15063] Set syz1 is full, maxelem 65536 reached
[  188.750420][ T8413] wlan0: Trigger new scan to find an IBSS to join
[  189.067814][T15081] 8021q: adding VLAN 0 to HW filter on device bond7
[  189.083148][T15081] bond0: (slave syz_tun): Releasing backup interface
[  189.102280][T15081] team0: Port device bond0 removed
[  189.108110][T15081] bond0: (slave bond_slave_0): Releasing backup interface
[  189.128086][T15081] bond0: (slave bond_slave_1): Releasing backup interface
[  189.145187][T15081] team0: Port device team_slave_0 removed
[  189.161630][T15081] team0: Port device team_slave_1 removed
[  189.164186][T15081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.179603][T15081] bond0: (slave wlan1): Releasing backup interface
[  189.185816][T15081] bond2: (slave ip6gretap1): Removing an active aggregator
[  189.188776][T15081] bond2: (slave ip6gretap1): Releasing backup interface
[  189.203727][T15081] ip6gretap1: left promiscuous mode
[  189.205759][T15081] ip6gretap1: left allmulticast mode
[  189.209184][T15081] bond3: (slave veth13): Releasing active interface
[  189.216298][T15081] bond3: (slave veth13): the permanent HWaddr of slave - 8a:c4:a5:44:20:ba - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  189.228398][T15081] vlan0: entered promiscuous mode
[  189.251982][T15081] bond3: (slave vlan0): Releasing active interface
[  189.256312][T15081] vlan0: left promiscuous mode
[  189.268896][T15081] tipc: Resetting bearer <eth:vlan0>
[  189.274484][T15081] bond4: (slave bridge7): Releasing active interface
[  189.287031][T15081] bond5: (slave gretap1): Releasing active interface
[  189.436156][T15090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.488222][T15090] syzkaller0: entered promiscuous mode
[  189.492271][T15090] syzkaller0: entered allmulticast mode
[  189.497053][T15090] tipc: Resetting bearer <eth:syzkaller0>
[  189.546299][T15088] tipc: Resetting bearer <eth:syzkaller0>
[  189.677953][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.622414][T15088] tipc: Disabling bearer <eth:syzkaller0>
[  190.761964][T15118] netlink: 'syz.1.4089': attribute type 3 has an invalid length.
[  190.887204][T15128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4093'.
[  191.126215][T15146] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  191.222901][T15149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4102'.
[  192.419108][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4130'.
[  192.723638][T15256] netlink: 'syz.2.4147': attribute type 10 has an invalid length.
[  192.738469][T15256] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  192.744071][T15258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4148'.
[  192.831331][T15266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.858985][T15266] syzkaller0: entered promiscuous mode
[  192.862996][T15266] syzkaller0: entered allmulticast mode
[  192.865124][T15266] tipc: Resetting bearer <eth:syzkaller0>
[  192.866954][T15270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4154'.
[  192.871193][T15265] tipc: Resetting bearer <eth:syzkaller0>
[  194.010499][T15265] tipc: Disabling bearer <eth:syzkaller0>
[  194.044786][T15285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4157'.
[  194.224568][T15301] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4165'.
[  194.330556][T15313] lo speed is unknown, defaulting to 1000
[  194.484460][T15313] lo speed is unknown, defaulting to 1000
[  194.749059][T15354] netlink: 'syz.2.4189': attribute type 1 has an invalid length.
[  194.751998][T15354] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4189'.
[  194.754862][T15354] netlink: 'syz.2.4189': attribute type 1 has an invalid length.
[  194.757155][T15354] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4189'.
[  195.194922][T15376] lo speed is unknown, defaulting to 1000
[  195.304147][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'.
[  195.314056][T15376] lo speed is unknown, defaulting to 1000
[  195.993986][T15437] veth0_to_bond: entered allmulticast mode
[  196.062014][T15447] __nla_validate_parse: 1 callbacks suppressed
[  196.062025][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'.
[  196.066742][T15447] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4232'.
[  196.076397][T15445] lo speed is unknown, defaulting to 1000
[  196.134742][T15450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.162709][T15456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4237'.
[  196.205319][T15445] lo speed is unknown, defaulting to 1000
[  196.279464][T15461] netlink: 'syz.0.4239': attribute type 9 has an invalid length.
[  196.282160][T15461] netlink: 'syz.0.4239': attribute type 9 has an invalid length.
[  196.637196][T15480] debugfs: 'netdev:nicvf0' already exists in 'phy7'
[  196.717765][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4248'.
[  196.887277][T15495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.798142][ T8413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.802169][ T8413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.817985][T15568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.997736][T15597] syzkaller0: entered promiscuous mode
[  197.999507][T15597] syzkaller0: entered allmulticast mode
[  198.041240][T15601] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  198.445295][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4307'.
[  198.600150][T15642] tipc: New replicast peer: 255.255.255.255
[  198.603715][T15642] tipc: Enabled bearer <udp:syz2>, priority 10
[  198.620003][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4310'.
[  199.414708][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4317'.
[  199.422099][T15648] tipc: Resetting bearer <ib:ip6gre0>
[  199.432304][T15648] tipc: Resetting bearer <eth:team0>
[  199.452950][T15648] macvtap0: left promiscuous mode
[  199.454526][T15648] macvtap0: left allmulticast mode
[  199.456530][T15648] ip6gre1: left allmulticast mode
[  199.572872][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4324'.
[  199.691756][T15674] syzkaller1: entered promiscuous mode
[  199.693431][T15674] syzkaller1: entered allmulticast mode
[  199.731544][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4330'.
[  199.766322][T15684] bond0: (slave wlan1): Releasing backup interface
[  199.786228][T15684] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  199.915894][T15694] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4335'.
[  200.163437][T15719] netlink: 'syz.1.4346': attribute type 1 has an invalid length.
[  200.572587][T15753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.943872][T15761] tun0: tun_chr_ioctl cmd 1074025681
[  201.367326][T15805] __nla_validate_parse: 1 callbacks suppressed
[  201.367336][T15805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4386'.
[  201.375275][T15805] bond0: option lacp_rate: unable to set because the bond device is up
[  201.415754][T15813] netlink: 'syz.2.4390': attribute type 15 has an invalid length.
[  201.418257][T15813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4390'.
[  201.636255][T15840] netlink: 'syz.0.4402': attribute type 14 has an invalid length.
[  201.665291][T15840] netlink: 'syz.0.4402': attribute type 14 has an invalid length.
[  202.007624][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4415'.
[  202.020812][T15871] macvlan0: left allmulticast mode
[  202.023459][T15871] netlink: 'syz.1.4415': attribute type 1 has an invalid length.
[  202.025912][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4415'.
[  202.042289][T15873] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4416'.
[  202.365439][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4432'.
[  202.544333][T15934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4443'.
[  202.613999][T15936] netlink: 'syz.0.4444': attribute type 11 has an invalid length.
[  202.626438][T15936] netlink: 308 bytes leftover after parsing attributes in process `syz.0.4444'.
[  202.629321][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4444'.
[  202.634957][T15936] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  202.687280][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4448'.
[  202.737331][T15956] bridge0: entered promiscuous mode
[  203.359133][T16028] netem: change failed
[  203.608478][T16064] sctp: [Deprecated]: syz.1.4505 (pid 16064) Use of struct sctp_assoc_value in delayed_ack socket option.
[  203.608478][T16064] Use struct sctp_sack_info instead
[  203.736846][T16080] 8021q: adding VLAN 0 to HW filter on device bond7
[  203.793277][T16090] netlink: 'syz.2.4517': attribute type 2 has an invalid length.
[  203.795756][T16090] netlink: 'syz.2.4517': attribute type 8 has an invalid length.
[  203.839814][T16093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.842469][T16093] syzkaller0: entered promiscuous mode
[  203.844203][T16093] syzkaller0: entered allmulticast mode
[  203.856302][T16093] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  203.879017][T16099] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  203.879211][T16093] tipc: Resetting bearer <eth:syzkaller0>
[  203.891501][T16092] tipc: Resetting bearer <eth:syzkaller0>
[  203.903052][T16092] tipc: Disabling bearer <eth:syzkaller0>
[  204.025856][T16115] netlink: 'syz.1.4529': attribute type 15 has an invalid length.
[  204.320738][T16135] netlink: 'syz.2.4536': attribute type 4 has an invalid length.
[  204.324032][T16135] netlink: 'syz.2.4536': attribute type 4 has an invalid length.
[  204.855347][T16156] netlink: 'syz.0.4546': attribute type 15 has an invalid length.
[  205.324635][T16210] team0: Mode changed to "broadcast"
[  205.326930][T16210] vlan0: entered promiscuous mode
[  205.331559][T16210] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  205.369219][T16216] bond0: option packets_per_slave: invalid value (18446744071562067968)
[  205.375197][T16216] bond0: option packets_per_slave: allowed values 0 - 65535
[  206.422018][T16321] __nla_validate_parse: 20 callbacks suppressed
[  206.422031][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4621'.
[  206.426061][T16317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4620'.
[  206.651060][T16346] netlink: 428 bytes leftover after parsing attributes in process `syz.0.4632'.
[  206.660191][T16346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4632'.
[  206.777077][T16354] rdma_rxe: rxe_newlink: failed to add veth1_to_bond
[  206.827111][T16368] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  206.930173][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4649'.
[  206.936093][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4646'.
[  207.083007][T16402] validate_nla: 4 callbacks suppressed
[  207.083018][T16402] netlink: 'syz.2.4659': attribute type 1 has an invalid length.
[  207.113876][T16402] bond8: entered promiscuous mode
[  207.115739][T16402] 8021q: adding VLAN 0 to HW filter on device bond8
[  207.147326][T16402] 8021q: adding VLAN 0 to HW filter on device bond8
[  207.153285][T16402] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address
[  207.157627][T16402] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  207.170090][T16402] bond8: (slave wireguard0): making interface the new active one
[  207.173573][T16402] wireguard0: entered promiscuous mode
[  207.177425][T16402] bond8: (slave wireguard0): Enslaving as an active interface with an up link
[  207.198045][T16402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  207.200417][T16402] IPv6: NLM_F_CREATE should be set when creating new route
[  207.202657][T16402] IPv6: NLM_F_CREATE should be set when creating new route
[  207.206691][T16402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  207.215085][T16402] bond8: (slave wireguard1): The slave device specified does not support setting the MAC address
[  207.221936][T16402] bond8: (slave wireguard1): Enslaving as a backup interface with an up link
[  207.288631][T16419] lo speed is unknown, defaulting to 1000
[  207.410979][T16419] lo speed is unknown, defaulting to 1000
[  207.531522][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4672'.
[  207.645088][T16449] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4678'.
[  207.755022][T16457] netlink: 'syz.1.4682': attribute type 39 has an invalid length.
[  207.844559][T16463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4685'.
[  208.063492][T16484] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4695'.
[  208.845616][T16554] netlink: 'syz.0.4726': attribute type 1 has an invalid length.
[  210.484462][T16644] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  210.487410][T16644] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  210.669508][T16654] syzkaller0: entered promiscuous mode
[  210.671549][T16654] syzkaller0: entered allmulticast mode
[  211.719380][T16672] sctp: [Deprecated]: syz.2.4777 (pid 16672) Use of int in max_burst socket option.
[  211.719380][T16672] Use struct sctp_assoc_value instead
[  212.769953][T16706] netlink: 'syz.1.4791': attribute type 4 has an invalid length.
[  212.773328][T16706] __nla_validate_parse: 3 callbacks suppressed
[  212.773342][T16706] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4791'.
[  212.863663][T16715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.898492][T16720] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4796'.
[  212.957429][T16726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4798'.
[  214.043564][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4815'.
[  214.331074][T16789] netlink: 'syz.1.4823': attribute type 32 has an invalid length.
[  214.383407][T16797] netlink: 'syz.1.4827': attribute type 1 has an invalid length.
[  214.387952][T16797] netlink: 'syz.1.4827': attribute type 2 has an invalid length.
[  214.435415][T16803] netlink: 'syz.1.4830': attribute type 1 has an invalid length.
[  214.456875][T16804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4828'.
[  214.557539][T16814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4835'.
[  214.593144][T16814] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4835'.
[  214.616439][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4833'.
[  215.477368][ T5879] Bluetooth: hci2: link tx timeout
[  215.479468][ T5879] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  215.684126][T16853] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4852'.
[  215.686973][T16853] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4852'.
[  215.864338][T16870] netlink: 'syz.1.4859': attribute type 21 has an invalid length.
[  215.924040][T16875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.926903][T16875] syzkaller0: entered promiscuous mode
[  215.928761][T16875] syzkaller0: entered allmulticast mode
[  215.934014][T16875] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  215.946140][T16875] tipc: Resetting bearer <eth:syzkaller0>
[  215.949549][T16874] tipc: Resetting bearer <eth:syzkaller0>
[  215.961389][T16874] tipc: Disabling bearer <eth:syzkaller0>
[  216.086098][T16883] syzkaller1: entered promiscuous mode
[  216.087971][T16883] syzkaller1: entered allmulticast mode
[  216.520883][T16910] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  216.524993][T16910] macsec1: entered promiscuous mode
[  216.526782][T16910] macsec1: entered allmulticast mode
[  216.528421][T16910] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  217.032810][T16943] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  217.041923][ T5937] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.052320][ T5937] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.055097][ T5937] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.057853][ T5937] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.236612][T16965] syzkaller0: entered promiscuous mode
[  217.238424][T16965] syzkaller0: entered allmulticast mode
[  217.246769][T16967] syzkaller1: entered promiscuous mode
[  217.248509][T16967] syzkaller1: entered allmulticast mode
[  217.549837][ T5876] Bluetooth: hci2: command 0x0405 tx timeout
[  218.450541][T16988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  218.452932][T16988] IPv6: NLM_F_CREATE should be set when creating new route
[  218.455135][T16988] IPv6: NLM_F_CREATE should be set when creating new route
[  218.736688][T17008] netlink: 'syz.2.4922': attribute type 1 has an invalid length.
[  219.069158][T17032] netlink: 'syz.2.4934': attribute type 15 has an invalid length.
[  219.218889][T17038] __nla_validate_parse: 4 callbacks suppressed
[  219.218904][T17038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4937'.
[  219.224877][T17038] netlink: 'syz.2.4937': attribute type 4 has an invalid length.
[  219.488399][T17051] tipc: Can't bind to reserved service type 2
[  219.520265][T17053] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4942'.
[  219.739098][T17073] netlink: 'syz.2.4952': attribute type 2 has an invalid length.
[  219.746793][T17073] netlink: 'syz.2.4952': attribute type 1 has an invalid length.
[  219.749315][T17073] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4952'.
[  219.878089][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4958'.
[  219.889750][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4958'.
[  219.892674][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4958'.
[  219.895545][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4958'.
[  220.087668][T17099] lo speed is unknown, defaulting to 1000
[  220.093955][T17101] sock: sock_timestamping_bind_phc: sock not bind to device
[  220.314400][T17112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4969'.
[  220.316738][T17099] lo speed is unknown, defaulting to 1000
[  221.122573][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4984'.
[  221.126020][T17143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4982'.
[  221.517701][T17184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.520757][T17184] syzkaller0: entered promiscuous mode
[  221.522541][T17184] syzkaller0: entered allmulticast mode
[  221.538420][T17184] tipc: Resetting bearer <eth:syzkaller0>
[  221.542347][T17182] tipc: Resetting bearer <eth:syzkaller0>
[  221.560475][T17182] tipc: Disabling bearer <eth:syzkaller0>
[  221.957164][T17233] bond0: entered promiscuous mode
[  221.959425][T17233] bond0: left promiscuous mode
[  222.162397][T17257] lo speed is unknown, defaulting to 1000
[  222.192426][T17265] bridge0: port 1(erspan0) entered blocking state
[  222.195420][T17265] bridge0: port 1(erspan0) entered disabled state
[  222.197536][T17265] erspan0: entered allmulticast mode
[  222.209156][T17265] erspan0: entered promiscuous mode
[  222.215711][T17265] erspan0: left allmulticast mode
[  222.217446][T17265] erspan0: left promiscuous mode
[  222.219836][T17265] bridge0: port 1(erspan0) entered disabled state
[  222.280814][T17257] lo speed is unknown, defaulting to 1000
[  222.396831][T17279] netlink: 'syz.0.5045': attribute type 1 has an invalid length.
[  222.422643][T17279] 8021q: adding VLAN 0 to HW filter on device bond8
[  222.448599][T17279] vlan3: entered promiscuous mode
[  222.451670][T17279] bond8: entered promiscuous mode
[  222.453570][T17279] vlan3: entered allmulticast mode
[  222.455329][T17279] bond8: entered allmulticast mode
[  222.827358][T17323] netlink: 'syz.0.5063': attribute type 9 has an invalid length.
[  222.830498][T17323] netlink: 'syz.0.5063': attribute type 6 has an invalid length.
[  223.283704][T17334] bridge0: failed insert local address into bridge forwarding table
[  223.309584][T17336] openvswitch: netlink: EtherType 0 is less than min 600
[  223.335798][T17338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.247725][T17395] __nla_validate_parse: 6 callbacks suppressed
[  224.247738][T17395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5097'.
[  224.252895][T17395] netlink: 'syz.1.5097': attribute type 7 has an invalid length.
[  224.255594][T17395] netlink: 'syz.1.5097': attribute type 8 has an invalid length.
[  224.259969][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5097'.
[  225.445455][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5115'.
[  225.666200][T17472] xt_policy: neither incoming nor outgoing policy selected
[  225.667482][T17470] syzkaller1: entered promiscuous mode
[  225.677449][T17470] syzkaller1: entered allmulticast mode
[  225.809442][T17485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5137'.
[  225.824305][T17485] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  226.011970][T17506] netlink: 'syz.2.5147': attribute type 58 has an invalid length.
[  226.014497][T17506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5147'.
[  226.064646][T17511] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  226.141333][T17519] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5153'.
[  226.147788][T17519] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  226.154375][T17519] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  226.386801][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5166'.
[  226.496202][T17564] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5172'.
[  226.547897][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5174'.
[  226.551386][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5174'.
[  226.974995][T17598] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  227.499429][T17653] netlink: 'syz.0.5213': attribute type 21 has an invalid length.
[  228.788695][T17804] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.802009][T17804] syzkaller0: entered promiscuous mode
[  228.803732][T17804] syzkaller0: entered allmulticast mode
[  228.807046][T17804] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  228.820951][T17804] tipc: Resetting bearer <eth:syzkaller0>
[  228.824495][T17803] tipc: Resetting bearer <eth:syzkaller0>
[  228.845674][T17803] tipc: Disabling bearer <eth:syzkaller0>
[  229.028703][T17832] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  229.123921][T17843] netlink: 'syz.2.5302': attribute type 22 has an invalid length.
[  229.151982][T17839] ip6gre2: entered allmulticast mode
[  229.303240][T17851] syzkaller0: entered promiscuous mode
[  229.305017][T17851] syzkaller0: entered allmulticast mode
[  229.405893][T17854] __nla_validate_parse: 15 callbacks suppressed
[  229.405906][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5306'.
[  229.415457][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5306'.
[  229.495724][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5309'.
[  229.498521][T17860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5309'.
[  229.501740][T17860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5309'.
[  229.878497][T17892] netlink: 'syz.1.5325': attribute type 4 has an invalid length.
[  229.882886][T17892] netlink: 'syz.1.5325': attribute type 4 has an invalid length.
[  229.887360][   T47] lo speed is unknown, defaulting to 1000
[  229.889307][   T47] syz2: Port: 1 Link ACTIVE
[  229.941694][T17892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5325'.
[  229.948951][ T5875] lo speed is unknown, defaulting to 1000
[  229.951303][ T5875] syz2: Port: 1 Link DOWN
[  230.042000][T17900] lo speed is unknown, defaulting to 1000
[  230.240578][T17900] lo speed is unknown, defaulting to 1000
[  230.436787][T17931] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5333'.
[  231.435265][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5373'.
[  231.455323][T18020] vxcan1 (unregistering): left allmulticast mode
[  231.545976][T18030] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5376'.
[  231.646423][T18040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5381'.
[  231.963100][   T33] audit: type=1107 audit(1754814309.242:5): pid=18073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB'
[  232.379388][T18098] bond0 (unregistering): Released all slaves
[  233.004732][T18136] lo speed is unknown, defaulting to 1000
[  233.102431][T18136] lo speed is unknown, defaulting to 1000
[  234.261638][T18260] netlink: 'syz.0.5477': attribute type 2 has an invalid length.
[  234.269312][T18262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.357404][T18270] netlink: 'syz.1.5483': attribute type 10 has an invalid length.
[  234.556088][T18289] netlink: 'syz.0.5491': attribute type 23 has an invalid length.
[  234.634070][T18298] __nla_validate_parse: 13 callbacks suppressed
[  234.634082][T18298] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5496'.
[  234.726905][T18307] syz.1.5497: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  234.732696][T18307] CPU: 1 UID: 0 PID: 18307 Comm: syz.1.5497 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  234.732710][T18307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.732717][T18307] Call Trace:
[  234.732721][T18307]  <TASK>
[  234.732726][T18307]  dump_stack_lvl+0x189/0x250
[  234.732746][T18307]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.732756][T18307]  ? __pfx__printk+0x10/0x10
[  234.732770][T18307]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  234.732783][T18307]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  234.732795][T18307]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  234.732806][T18307]  warn_alloc+0x214/0x310
[  234.732820][T18307]  ? stack_depot_save_flags+0x40/0x860
[  234.732832][T18307]  ? __pfx_warn_alloc+0x10/0x10
[  234.732846][T18307]  ? kasan_save_track+0x4f/0x80
[  234.732857][T18307]  ? xskq_create+0x56/0x170
[  234.732866][T18307]  ? xsk_init_queue+0xb0/0x110
[  234.732874][T18307]  ? xsk_setsockopt+0x4dc/0x8d0
[  234.732882][T18307]  ? do_sock_setsockopt+0x17c/0x1b0
[  234.732895][T18307]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  234.732906][T18307]  ? do_syscall_64+0xfa/0x3b0
[  234.732917][T18307]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.732930][T18307]  __vmalloc_node_range_noprof+0x125/0x12f0
[  234.732957][T18307]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  234.732970][T18307]  ? xskq_create+0x56/0x170
[  234.732980][T18307]  ? __kasan_kmalloc+0x93/0xb0
[  234.732993][T18307]  vmalloc_user_noprof+0xad/0xf0
[  234.733006][T18307]  ? xskq_create+0xbf/0x170
[  234.733015][T18307]  xskq_create+0xbf/0x170
[  234.733026][T18307]  xsk_init_queue+0xb0/0x110
[  234.733037][T18307]  xsk_setsockopt+0x4dc/0x8d0
[  234.733047][T18307]  ? __pfx_xsk_setsockopt+0x10/0x10
[  234.733057][T18307]  ? __pfx_aa_sk_perm+0x10/0x10
[  234.733069][T18307]  ? aa_sock_opt_perm+0xff/0x1b0
[  234.733082][T18307]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  234.733091][T18307]  ? __pfx_xsk_setsockopt+0x10/0x10
[  234.733101][T18307]  do_sock_setsockopt+0x17c/0x1b0
[  234.733115][T18307]  __x64_sys_setsockopt+0x13f/0x1b0
[  234.733129][T18307]  do_syscall_64+0xfa/0x3b0
[  234.733139][T18307]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.733149][T18307]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.733158][T18307]  ? exc_page_fault+0x9f/0xf0
[  234.733169][T18307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.733178][T18307] RIP: 0033:0x7f12f958ebe9
[  234.733197][T18307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.733213][T18307] RSP: 002b:00007f12fa488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  234.733224][T18307] RAX: ffffffffffffffda RBX: 00007f12f97b6090 RCX: 00007f12f958ebe9
[  234.733230][T18307] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  234.733235][T18307] RBP: 00007f12f9611e19 R08: 0000000000000004 R09: 0000000000000000
[  234.733240][T18307] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.733246][T18307] R13: 00007f12f97b6128 R14: 00007f12f97b6090 R15: 00007ffd53ac0be8
[  234.733260][T18307]  </TASK>
[  234.733264][T18307] Mem-Info:
[  234.842596][T18307] active_anon:12602 inactive_anon:0 isolated_anon:0
[  234.842596][T18307]  active_file:1085 inactive_file:38291 isolated_file:0
[  234.842596][T18307]  unevictable:1768 dirty:309 writeback:0
[  234.842596][T18307]  slab_reclaimable:10161 slab_unreclaimable:89224
[  234.842596][T18307]  mapped:19121 shmem:2434 pagetables:1021
[  234.842596][T18307]  sec_pagetables:0 bounce:0
[  234.842596][T18307]  kernel_misc_reclaimable:0
[  234.842596][T18307]  free:251587 free_pcp:18009 free_cma:0
[  234.861153][T18307] Node 0 active_anon:29624kB inactive_anon:0kB active_file:1672kB inactive_file:22744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44564kB dirty:272kB writeback:0kB shmem:4844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8252kB pagetables:1952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  234.870920][T18307] Node 1 active_anon:20784kB inactive_anon:0kB active_file:2668kB inactive_file:130420kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31920kB dirty:964kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4176kB pagetables:1928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  234.896389][T18307] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  234.907036][T18307] lowmem_reserve[]: 0 811 811 811 811
[  234.908852][T18307] Node 0 DMA32 free:301848kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29624kB inactive_anon:0kB active_file:1672kB inactive_file:22744kB unevictable:3536kB writepending:272kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:29412kB local_pcp:12692kB free_cma:0kB
[  234.922918][T18307] lowmem_reserve[]: 0 0 0 0 0
[  234.924522][T18307] Node 1 DMA32 free:450240kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:8376kB local_pcp:320kB free_cma:0kB
[  234.935144][T18307] lowmem_reserve[]: 0 0 854 854 854
[  234.936885][T18307] Node 1 Normal free:238900kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20716kB inactive_anon:0kB active_file:2668kB inactive_file:130420kB unevictable:3536kB writepending:964kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33880kB local_pcp:18028kB free_cma:0kB
[  234.950208][T18307] lowmem_reserve[]: 0 0 0 0 0
[  234.953056][T18307] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  234.957205][T18307] Node 0 DMA32: 380*4kB (UME) 297*8kB (UME) 376*16kB (UME) 407*32kB (UME) 157*64kB (UME) 88*128kB (UM) 48*256kB (UM) 19*512kB (UM) 8*1024kB (UME) 5*2048kB (UM) 53*4096kB (UM) = 301784kB
[  234.964591][T18307] Node 1 DMA32: 2*4kB (M) 3*8kB (M) 6*16kB (UM) 8*32kB (UM) 5*64kB (UM) 4*128kB (UM) 6*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 106*4096kB (UM) = 450240kB
[  234.970700][T18307] Node 1 Normal: 398*4kB (UME) 550*8kB (UME) 629*16kB (UM) 44*32kB (UME) 312*64kB (UME) 145*128kB (UM) 48*256kB (UME) 39*512kB (UM) 28*1024kB (UME) 9*2048kB (U) 25*4096kB (UM) = 237752kB
[  234.986313][T18307] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.996470][T18307] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.999408][T18307] 41810 total pagecache pages
[  235.001821][T18307] 0 pages in swap cache
[  235.006041][T18307] Free swap  = 124996kB
[  235.007458][T18307] Total swap = 124996kB
[  235.008826][T18307] 786301 pages RAM
[  235.010492][T18307] 0 pages HighMem/MovableOnly
[  235.012085][T18307] 241320 pages reserved
[  235.013467][T18307] 0 pages cma reserved
[  236.391487][T18368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.394657][T18369] syzkaller0: entered promiscuous mode
[  236.396688][T18369] syzkaller0: entered allmulticast mode
[  236.402543][T18377] tipc: Resetting bearer <eth:syzkaller0>
[  236.405914][T18365] tipc: Resetting bearer <eth:syzkaller0>
[  236.416069][T18365] tipc: Disabling bearer <eth:syzkaller0>
[  236.450103][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5523'.
[  236.759979][T18408] syzkaller1: entered promiscuous mode
[  236.761821][T18408] syzkaller1: entered allmulticast mode
[  236.793350][T18412] netlink: 'syz.1.5535': attribute type 10 has an invalid length.
[  236.802229][T18412] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.5535'.
[  236.886759][T18416] lo speed is unknown, defaulting to 1000
[  236.931976][T18419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5537'.
[  236.985695][T18416] lo speed is unknown, defaulting to 1000
[  238.972366][T18470] netlink: 'syz.0.5559': attribute type 1 has an invalid length.
[  239.196726][T18502] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  239.263386][T18511] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.5576'.
[  239.333043][T18516] netlink: 'syz.1.5579': attribute type 1 has an invalid length.
[  239.406096][T18521] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5581'.
[  239.581706][T18531] nbd1: detected capacity change from 0 to 63
[  239.585859][T18537] nbd: couldn't find device at index 0
[  239.590784][T18534] block nbd1: Receive control failed (result -32)
[  239.730797][T18541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5588'.
[  239.733891][T18541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5588'.
[  239.788733][T18545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5591'.
[  239.872236][T18543] lo speed is unknown, defaulting to 1000
[  240.059300][T18543] lo speed is unknown, defaulting to 1000
[  240.463848][T18585] lo speed is unknown, defaulting to 1000
[  240.646070][T18585] lo speed is unknown, defaulting to 1000
[  240.706913][T18600] netlink: 'syz.1.5615': attribute type 8 has an invalid length.
[  240.768634][T18604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5613'.
[  240.829088][T18598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5613'.
[  240.893509][T18610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.897076][T18610] syzkaller0: entered promiscuous mode
[  240.899019][T18610] syzkaller0: entered allmulticast mode
[  240.917095][T18610] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  240.928842][T18614] netlink: 'syz.2.5621': attribute type 1 has an invalid length.
[  240.933432][T18614] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5621'.
[  240.938352][T18610] tipc: Resetting bearer <eth:syzkaller0>
[  240.964788][T18609] tipc: Resetting bearer <eth:syzkaller0>
[  240.994020][T18609] tipc: Disabling bearer <eth:syzkaller0>
[  241.092172][T18628] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5627'.
[  241.373998][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5639'.
[  241.384511][T18653] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5640'.
[  241.455740][T18659] netlink: 'syz.2.5643': attribute type 1 has an invalid length.
[  241.462522][T18659] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5643'.
[  241.560279][T18671] : entered promiscuous mode
[  241.710044][   T33] audit: type=1800 audit(1754814319.002:6): pid=18692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5658" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=9708 res=0 errno=0
[  241.793232][T18701] bond0: entered promiscuous mode
[  241.795127][T18701] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.408941][T18764] IPVS: stopping backup sync thread 7290 ...
[  242.500669][T18774] netlink: 'syz.0.5697': attribute type 1 has an invalid length.
[  243.214715][T18863] vlan3: entered promiscuous mode
[  243.347397][T18876] lo speed is unknown, defaulting to 1000
[  243.511965][T18876] lo speed is unknown, defaulting to 1000
[  243.654528][T18908] netlink: 'syz.2.5757': attribute type 29 has an invalid length.
[  243.955621][T18939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.110434][T18953] sch_fq: defrate 4294967295 ignored.
[  244.472430][T18977] syzkaller1: entered promiscuous mode
[  244.474290][T18977] syzkaller1: entered allmulticast mode
[  244.762043][T18996] netlink: 'syz.2.5793': attribute type 9 has an invalid length.
[  244.764464][T18996] netlink: 'syz.2.5793': attribute type 6 has an invalid length.
[  245.026222][T19007] __nla_validate_parse: 14 callbacks suppressed
[  245.026234][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5799'.
[  245.035232][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5799'.
[  245.138804][T19016] netlink: 'syz.1.5803': attribute type 1 has an invalid length.
[  245.221446][T19020] netlink: 'syz.1.5805': attribute type 13 has an invalid length.
[  245.228824][T19020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5805'.
[  245.238597][T19020] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  245.258355][T19022] syzkaller1: entered promiscuous mode
[  245.260609][T19022] syzkaller1: entered allmulticast mode
[  245.702428][T19053] dummy0: entered allmulticast mode
[  245.706097][T19050] dummy0: left allmulticast mode
[  245.868972][T19068] lo speed is unknown, defaulting to 1000
[  245.993600][T19068] lo speed is unknown, defaulting to 1000
[  246.015657][T19081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.021790][T19081] syzkaller0: entered promiscuous mode
[  246.023593][T19081] syzkaller0: entered allmulticast mode
[  246.047984][T19081] tipc: Resetting bearer <eth:syzkaller0>
[  246.825762][T19169] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5877'.
[  246.882999][T19173] netlink: 'syz.2.5879': attribute type 1 has an invalid length.
[  246.900014][T19173] 8021q: adding VLAN 0 to HW filter on device bond10
[  246.919273][T19173] 8021q: adding VLAN 0 to HW filter on device bond10
[  246.921760][T19173] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  246.926130][T19173] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  246.968104][T19175] veth21: entered promiscuous mode
[  246.972700][T19175] bond10: (slave veth21): Enslaving as an active interface with a down link
[  246.994598][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.997101][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.943033][T19230] netlink: 404 bytes leftover after parsing attributes in process `syz.1.5903'.
[  247.946023][T19230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5903'.
[  247.948857][T19230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5903'.
[  247.952964][T19230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5903'.
[  248.062930][   T33] audit: type=1800 audit(1754814325.352:7): pid=19223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5900" name="cgroup.controllers" dev="tmpfs" ino=9658 res=0 errno=0
[  248.229877][T19253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5914'.
[  248.245591][T19255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5915'.
[  249.789330][T19309] tipc: Resetting bearer <ib:ip6gre0>
[  249.792098][T19309] tipc: Resetting bearer <ib:ip6gre0>
[  249.796415][T19309] 8021q: adding VLAN 0 to HW filter on device team0
[  249.801849][T19309] tipc: Resetting bearer <eth:team0>
[  249.803601][T19309] tipc: Resetting bearer <eth:team0>
[  249.816831][T19309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.858951][T19318] netlink: 'syz.0.5946': attribute type 1 has an invalid length.
[  250.059590][T19347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.065780][T19347] syzkaller0: entered promiscuous mode
[  250.067530][T19347] syzkaller0: entered allmulticast mode
[  250.103615][T19347] tipc: Resetting bearer <eth:syzkaller0>
[  250.111739][T19345] tipc: Resetting bearer <eth:syzkaller0>
[  250.127404][T19345] tipc: Disabling bearer <eth:syzkaller0>
[  250.256575][T19371] netlink: 'syz.1.5970': attribute type 1 has an invalid length.
[  250.259012][T19371] __nla_validate_parse: 3 callbacks suppressed
[  250.259020][T19371] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5970'.
[  250.295675][T19374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5972'.
[  250.397337][T19388] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5979'.
[  250.408911][T19390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5980'.
[  250.454538][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5982'.
[  250.513121][T19399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5984'.
[  250.746570][T19419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.877111][T19435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6002'.
[  251.783127][ T8415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.788288][ T8415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.826099][T19480] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6020'.
[  252.183279][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6031'.
[  252.185947][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6031'.
[  252.337392][T19512] netlink: 'syz.0.6035': attribute type 1 has an invalid length.
[  252.340704][T19512] netlink: 'syz.0.6035': attribute type 1 has an invalid length.
[  252.343209][T19512] netlink: 'syz.0.6035': attribute type 2 has an invalid length.
[  252.393484][T19516] netlink: 'syz.0.6037': attribute type 1 has an invalid length.
[  252.810548][T19544] openvswitch: netlink: IP tunnel dst address not specified
[  252.924343][T19558] smc: net device bond0 applied user defined pnetid SYZ2
[  252.946705][T19560] netlink: 'syz.2.6058': attribute type 1 has an invalid length.
[  252.990969][T19567] batman_adv: batadv0: Adding interface: gretap2
[  252.993019][T19567] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  252.999465][T19567] batman_adv: batadv0: Interface activated: gretap2
[  253.701067][T19632] smc: removing ib device syz0
[  254.658887][T19728] netlink: 'syz.2.6130': attribute type 4 has an invalid length.
[  254.790979][T19734] lo speed is unknown, defaulting to 1000
[  254.989754][ T5879] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  255.030815][T19751] lo speed is unknown, defaulting to 1000
[  255.430803][T19768] __nla_validate_parse: 10 callbacks suppressed
[  255.430820][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6144'.
[  256.053811][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6165'.
[  256.094151][T19811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6165'.
[  256.181962][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6169'.
[  256.860614][T19870] netlink: 'syz.0.6189': attribute type 20 has an invalid length.
[  256.949172][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6189'.
[  257.052743][T19891] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  257.055583][T19891] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.401967][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6214'.
[  257.508440][T19936] netlink: 'syz.1.6220': attribute type 9 has an invalid length.
[  257.512003][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6221'.
[  257.512486][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6220'.
[  257.517894][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6221'.
[  257.523259][T19936] macvlan5: entered promiscuous mode
[  257.524975][T19936] hsr0: entered promiscuous mode
[  257.526771][T19936] macvlan5: entered allmulticast mode
[  257.528437][T19936] hsr0: entered allmulticast mode
[  257.530830][T19936] hsr_slave_0: entered allmulticast mode
[  257.532687][T19936] hsr_slave_1: entered allmulticast mode
[  257.621146][T19945] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6225'.
[  257.689439][T19952] netlink: 'syz.2.6228': attribute type 16 has an invalid length.
[  257.691962][T19952] netlink: 'syz.2.6228': attribute type 17 has an invalid length.
[  257.733137][T19952] tipc: Resetting bearer <eth:syzkaller0>
[  257.738883][T19952] batman_adv: batadv0: Interface deactivated: gretap2
[  258.062905][T19995] netlink: 'syz.0.6249': attribute type 10 has an invalid length.
[  259.905483][T20134] netlink: 'syz.1.6313': attribute type 3 has an invalid length.
[  260.093695][T20149] netlink: 'syz.1.6320': attribute type 3 has an invalid length.
[  260.096133][T20149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  260.253809][T20164] netlink: 'syz.1.6324': attribute type 16 has an invalid length.
[  260.256911][T20164] netlink: 'syz.1.6324': attribute type 17 has an invalid length.
[  260.284948][T20164] hsr0: left allmulticast mode
[  260.286700][T20164] hsr_slave_0: left allmulticast mode
[  260.288294][T20164] hsr_slave_1: left allmulticast mode
[  260.292536][T20164] hsr0: left promiscuous mode
[  261.199453][T20204] __nla_validate_parse: 8 callbacks suppressed
[  261.199468][T20204] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6346'.
[  261.677297][T20197] vlan2: entered allmulticast mode
[  261.679188][T20197] bridge_slave_0: entered allmulticast mode
[  261.873245][T20222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.923173][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6354'.
[  261.926078][T20225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6354'.
[  261.936231][T20225] netlink: 'syz.0.6354': attribute type 18 has an invalid length.
[  261.939818][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6354'.
[  261.942874][T20225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6354'.
[  261.945563][T20225] netlink: 'syz.0.6354': attribute type 18 has an invalid length.
[  262.334630][T20266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.337264][T20266] syzkaller0: entered promiscuous mode
[  262.339001][T20266] syzkaller0: entered allmulticast mode
[  262.352312][T20266] tipc: Resetting bearer <eth:syzkaller0>
[  262.355972][T20265] tipc: Resetting bearer <eth:syzkaller0>
[  262.368704][T20265] tipc: Disabling bearer <eth:syzkaller0>
[  262.467439][T20277] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6378'.
[  262.471356][T20277] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6378'.
[  262.521224][T20283] IPVS: stopping backup sync thread 20284 ...
[  262.521338][T20284] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  262.762063][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6394'.
[  262.970259][T20324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6399'.
[  263.201765][T20340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6407'.
[  263.516781][T20376] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  264.155145][T20415] macvlan6: entered allmulticast mode
[  264.157027][T20415] veth1_vlan: entered allmulticast mode
[  264.391477][T20415] veth1_vlan: left allmulticast mode
[  264.519477][T20428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.712968][T20450] netlink: 'syz.0.6459': attribute type 5 has an invalid length.
[  264.932486][T20461] pim6reg1: entered promiscuous mode
[  264.934882][T20461] pim6reg1: entered allmulticast mode
[  265.347125][T20485] netlink: 'syz.2.6476': attribute type 1 has an invalid length.
[  266.515172][T20552] syzkaller1: entered promiscuous mode
[  266.516918][T20552] syzkaller1: entered allmulticast mode
[  266.672477][T20572] __nla_validate_parse: 8 callbacks suppressed
[  266.672491][T20572] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6518'.
[  266.688600][T20576] gretap3: entered promiscuous mode
[  266.691246][T20576] gretap3: entered allmulticast mode
[  266.867317][T20598] netlink: 676 bytes leftover after parsing attributes in process `syz.1.6530'.
[  266.874719][T20598] netlink: 676 bytes leftover after parsing attributes in process `syz.1.6530'.
[  266.875557][T20601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6531'.
[  266.987655][T20616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.999589][T20616] syzkaller0: entered promiscuous mode
[  267.003231][T20616] syzkaller0: entered allmulticast mode
[  267.017227][T20616] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  267.028565][T20616] tipc: Resetting bearer <eth:syzkaller0>
[  267.037566][T20615] tipc: Resetting bearer <eth:syzkaller0>
[  267.048310][T20615] tipc: Disabling bearer <eth:syzkaller0>
[  267.055447][T20626] netlink: 'syz.0.6544': attribute type 1 has an invalid length.
[  267.567307][T20693] tipc: Resetting bearer <eth:team0>
[  267.568055][T20694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6577'.
[  267.573471][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6576'.
[  267.663720][T20705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6582'.
[  267.746007][T20713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.748825][T20713] syzkaller0: entered promiscuous mode
[  267.752129][T20713] syzkaller0: entered allmulticast mode
[  267.769163][T20713] tipc: Resetting bearer <eth:syzkaller0>
[  267.775121][T20712] tipc: Resetting bearer <eth:syzkaller0>
[  267.791392][T20712] tipc: Disabling bearer <eth:syzkaller0>
[  267.816677][T20709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6584'.
[  267.844754][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6584'.
[  267.901190][T20717] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  268.036445][T20732] netlink: 'syz.0.6594': attribute type 21 has an invalid length.
[  268.039033][T20732] netlink: 'syz.0.6594': attribute type 1 has an invalid length.
[  268.134023][T20744] netlink: 'syz.0.6600': attribute type 1 has an invalid length.
[  268.138389][T20746] vlan2: entered promiscuous mode
[  268.142415][T20746] gretap0: entered promiscuous mode
[  268.163275][T20744] 8021q: adding VLAN 0 to HW filter on device bond9
[  268.166910][T20751] netlink: 'syz.1.6603': attribute type 1 has an invalid length.
[  268.177141][T20744] veth11: entered promiscuous mode
[  268.183383][T20744] bond9: (slave veth11): Enslaving as an active interface with a down link
[  268.197892][T20751] bond7: entered promiscuous mode
[  268.199520][T20751] bond7: entered allmulticast mode
[  268.206500][T20744] erspan0: entered allmulticast mode
[  268.213195][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6603'.
[  268.222960][T20751] bridge4: the hash_elasticity option has been deprecated and is always 16
[  268.463507][T20788] netlink: 'syz.0.6621': attribute type 11 has an invalid length.
[  268.684986][T20813] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  268.693480][T20813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  268.708451][T20815] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  269.199865][T20872] block nbd2: server does not support multiple connections per device.
[  269.205361][T20872] block nbd2: shutting down sockets
[  271.373924][T20969] bridge5: port 1(veth9) entered blocking state
[  271.375957][T20969] bridge5: port 1(veth9) entered disabled state
[  271.377940][T20969] veth9: entered allmulticast mode
[  271.382046][T20969] veth9: entered promiscuous mode
[  271.395866][T20969] bridge5: port 2(veth0_to_bond) entered blocking state
[  271.398748][T20969] bridge5: port 2(veth0_to_bond) entered disabled state
[  271.411688][T20969] veth0_to_bond: entered allmulticast mode
[  271.414570][T20969] veth0_to_bond: entered promiscuous mode
[  271.427706][T20969] vlan3: entered allmulticast mode
[  271.429379][T20969] veth1: entered allmulticast mode
[  271.431493][T20969] bridge5: port 3(vlan3) entered blocking state
[  271.434272][T20969] bridge5: port 3(vlan3) entered disabled state
[  271.437714][T20969] vlan3: entered promiscuous mode
[  271.439325][T20969] veth1: entered promiscuous mode
[  271.806790][T21014] __nla_validate_parse: 12 callbacks suppressed
[  271.806802][T21014] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6725'.
[  272.153398][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6731'.
[  272.287536][T21046] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6739'.
[  272.339211][T21050] lo speed is unknown, defaulting to 1000
[  272.462106][T21066] netlink: 'syz.2.6749': attribute type 13 has an invalid length.
[  272.541580][T21068] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6750'.
[  272.656506][T21075] netlink: 'syz.2.6752': attribute type 8 has an invalid length.
[  273.046018][T21111] netlink: 'syz.2.6768': attribute type 4 has an invalid length.
[  273.245363][T21123] netlink: 'syz.2.6774': attribute type 1 has an invalid length.
[  273.264463][T21123] 8021q: adding VLAN 0 to HW filter on device bond11
[  273.301845][T21123] 8021q: adding VLAN 0 to HW filter on device bond11
[  273.305070][T21123] bond11: (slave vcan1): The slave device specified does not support setting the MAC address
[  273.309231][T21123] bond11: (slave vcan1): Error -95 calling set_mac_address
[  273.341942][T21129] gretap4: entered promiscuous mode
[  273.349352][T21129] bond11: (slave gretap4): making interface the new active one
[  273.354161][T21129] bond11: (slave gretap4): Enslaving as an active interface with an up link
[  273.375213][T21123] macvlan2: entered promiscuous mode
[  273.377014][T21123] macvlan2: entered allmulticast mode
[  273.379175][T21123] bond11: entered promiscuous mode
[  273.384048][T21123] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  273.390056][T21123] bond11: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap4
[  273.403270][T21123] bond11: left promiscuous mode
[  273.705397][T21158] netlink: 'syz.0.6789': attribute type 4 has an invalid length.
[  273.783977][T21166] netlink: 'syz.2.6793': attribute type 1 has an invalid length.
[  273.902556][T21180] delete_channel: no stack
[  273.991175][T21196] netlink: 'syz.1.6808': attribute type 7 has an invalid length.
[  273.993639][T21196] netlink: 'syz.1.6808': attribute type 8 has an invalid length.
[  273.998601][T21196] netlink: 'syz.1.6808': attribute type 15 has an invalid length.
[  274.011491][T21199] netlink: 'syz.0.6807': attribute type 1 has an invalid length.
[  274.039513][T21204] tipc: MTU too low for tipc bearer
[  274.222395][   T33] audit: type=1800 audit(1754814351.512:8): pid=21218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6813" name="memory.events" dev="tmpfs" ino=11722 res=0 errno=0
[  274.433441][T21229] wireguard2: entered promiscuous mode
[  274.435389][T21229] wireguard2: entered allmulticast mode
[  274.463809][T21231] syzkaller0: entered promiscuous mode
[  274.465719][T21231] syzkaller0: entered allmulticast mode
[  275.212004][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6826'.
[  275.358321][T21260] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6831'.
[  275.495058][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6835'.
[  275.498966][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6835'.
[  275.973375][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6857'.
[  275.993631][T21321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.132141][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6866'.
[  276.888769][T21420] __nla_validate_parse: 2 callbacks suppressed
[  276.888780][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6905'.
[  276.905739][T21420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6905'.
[  277.006774][T21434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6912'.
[  277.617989][T21514] openvswitch: netlink: Message has 1 unknown bytes.
[  277.622053][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.814145][T21539] validate_nla: 5 callbacks suppressed
[  277.814158][T21539] netlink: 'syz.2.6963': attribute type 1 has an invalid length.
[  277.818229][T21539] netlink: 'syz.2.6963': attribute type 1 has an invalid length.
[  277.856978][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6966'.
[  277.893648][T21548] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6965'.
[  277.898043][T21543] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6965'.
[  277.934756][T21552] netlink: 'syz.2.6969': attribute type 5 has an invalid length.
[  277.937253][T21552] netlink: 'syz.2.6969': attribute type 7 has an invalid length.
[  277.947060][T21552] : entered promiscuous mode
[  278.277472][T21582] netlink: 'syz.0.6983': attribute type 11 has an invalid length.
[  278.306168][T21584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.379317][T21590] netlink: 'syz.0.6987': attribute type 31 has an invalid length.
[  278.385487][T21590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6987'.
[  278.692350][T21617] netlink: 'syz.0.6999': attribute type 21 has an invalid length.
[  278.697060][T21617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6999'.
[  278.807454][T21557] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  278.888457][T21643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7011'.
[  278.918698][T21645] openvswitch: netlink: Flow key attribute not present in set flow.
[  279.043163][T21660] lo speed is unknown, defaulting to 1000
[  279.277592][T21679] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  279.425439][T21685] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  279.548777][T21699] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7032'.
[  280.321634][T21776] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  280.339379][T21779] netlink: 'syz.0.7069': attribute type 6 has an invalid length.
[  280.346201][T21779] netlink: 'syz.0.7069': attribute type 6 has an invalid length.
[  280.867401][T21840] gtp0: entered promiscuous mode
[  280.880546][T21840] gtp0: entered allmulticast mode
[  280.918311][T21849] netlink: 'syz.1.7103': attribute type 3 has an invalid length.
[  281.337746][   T33] audit: type=1804 audit(1754814358.622:9): pid=21883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7117" name="/newroot/2363/cgroup.controllers" dev="tmpfs" ino=11923 res=1 errno=0
[  281.354511][   T33] audit: type=1800 audit(1754814358.622:10): pid=21883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7117" name="cgroup.controllers" dev="tmpfs" ino=11923 res=0 errno=0
[  281.367682][   T33] audit: type=1800 audit(1754814358.632:11): pid=21883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7117" name="cgroup.controllers" dev="tmpfs" ino=11923 res=0 errno=0
[  281.822617][T21911] netlink: 'syz.2.7129': attribute type 11 has an invalid length.
[  281.905559][T21919] __nla_validate_parse: 13 callbacks suppressed
[  281.905573][T21919] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7133'.
[  281.911277][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7133'.
[  282.231315][T21943] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  282.293602][T21945] lo speed is unknown, defaulting to 1000
[  282.702532][T21971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7156'.
[  282.705407][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7156'.
[  282.794546][T21977] lo speed is unknown, defaulting to 1000
[  283.083609][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.086313][ T5872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.088875][T21990] vxcan1: entered allmulticast mode
[  283.102285][ T5872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.104963][ T5872] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.108734][T21990] vxcan1: left allmulticast mode
[  283.286634][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7170'.
[  283.289395][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7170'.
[  283.299181][T22008] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) !
[  283.336543][T22010] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  283.339537][T22010] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  283.595271][T22034] validate_nla: 4 callbacks suppressed
[  283.595282][T22034] netlink: 'syz.2.7183': attribute type 1 has an invalid length.
[  283.599511][T22034] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7183'.
[  283.991885][T22086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.007607][T22089] netlink: 'syz.0.7209': attribute type 3 has an invalid length.
[  284.033900][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7210'.
[  284.043340][T22091] dummy0: entered promiscuous mode
[  284.048299][T22091] dummy0: left promiscuous mode
[  284.290902][T22115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7222'.
[  284.295218][T22115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7222'.
[  284.494897][ T5888] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  284.721381][T22151] gtp0: entered promiscuous mode
[  284.895346][T22174] netlink: 'syz.2.7245': attribute type 27 has an invalid length.
[  284.945549][T22179] netlink: 'syz.2.7247': attribute type 14 has an invalid length.
[  285.987486][T22228] syz.2.7270: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  285.994814][T22228] CPU: 1 UID: 0 PID: 22228 Comm: syz.2.7270 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  285.994833][T22228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  285.994839][T22228] Call Trace:
[  285.994844][T22228]  <TASK>
[  285.994848][T22228]  dump_stack_lvl+0x189/0x250
[  285.994868][T22228]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.994880][T22228]  ? __pfx__printk+0x10/0x10
[  285.994893][T22228]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  285.994905][T22228]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  285.994916][T22228]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  285.994928][T22228]  warn_alloc+0x214/0x310
[  285.994960][T22228]  ? stack_depot_save_flags+0x40/0x860
[  285.994973][T22228]  ? __pfx_warn_alloc+0x10/0x10
[  285.994988][T22228]  ? kasan_save_track+0x4f/0x80
[  285.994999][T22228]  ? xskq_create+0x56/0x170
[  285.995009][T22228]  ? xsk_init_queue+0xb0/0x110
[  285.995017][T22228]  ? xsk_setsockopt+0x4dc/0x8d0
[  285.995026][T22228]  ? do_sock_setsockopt+0x17c/0x1b0
[  285.995038][T22228]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  285.995049][T22228]  ? do_syscall_64+0xfa/0x3b0
[  285.995060][T22228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.995073][T22228]  __vmalloc_node_range_noprof+0x125/0x12f0
[  285.995100][T22228]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  285.995115][T22228]  ? __kasan_kmalloc+0x93/0xb0
[  285.995128][T22228]  vmalloc_user_noprof+0xad/0xf0
[  285.995140][T22228]  ? xskq_create+0xbf/0x170
[  285.995149][T22228]  xskq_create+0xbf/0x170
[  285.995160][T22228]  xsk_init_queue+0xb0/0x110
[  285.995170][T22228]  xsk_setsockopt+0x4dc/0x8d0
[  285.995181][T22228]  ? __pfx_xsk_setsockopt+0x10/0x10
[  285.995190][T22228]  ? __pfx_aa_sk_perm+0x10/0x10
[  285.995202][T22228]  ? aa_sock_opt_perm+0xff/0x1b0
[  285.995215][T22228]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  285.995225][T22228]  ? __pfx_xsk_setsockopt+0x10/0x10
[  285.995234][T22228]  do_sock_setsockopt+0x17c/0x1b0
[  285.995248][T22228]  __x64_sys_setsockopt+0x13f/0x1b0
[  285.995263][T22228]  do_syscall_64+0xfa/0x3b0
[  285.995272][T22228]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.995283][T22228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.995291][T22228]  ? exc_page_fault+0x9f/0xf0
[  285.995302][T22228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.995311][T22228] RIP: 0033:0x7f8db578ebe9
[  285.995321][T22228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.995329][T22228] RSP: 002b:00007f8db6545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  285.995339][T22228] RAX: ffffffffffffffda RBX: 00007f8db59b5fa0 RCX: 00007f8db578ebe9
[  285.995345][T22228] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  285.995351][T22228] RBP: 00007f8db5811e19 R08: 0000000000000004 R09: 0000000000000000
[  285.995356][T22228] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  285.995361][T22228] R13: 00007f8db59b6038 R14: 00007f8db59b5fa0 R15: 00007fffc16e5bb8
[  285.995382][T22228]  </TASK>
[  285.995676][T22228] Mem-Info:
[  286.102546][T22228] active_anon:12546 inactive_anon:0 isolated_anon:0
[  286.102546][T22228]  active_file:1148 inactive_file:38311 isolated_file:0
[  286.102546][T22228]  unevictable:1768 dirty:311 writeback:0
[  286.102546][T22228]  slab_reclaimable:10380 slab_unreclaimable:106414
[  286.102546][T22228]  mapped:18025 shmem:2448 pagetables:1235
[  286.102546][T22228]  sec_pagetables:0 bounce:0
[  286.102546][T22228]  kernel_misc_reclaimable:0
[  286.102546][T22228]  free:221641 free_pcp:30142 free_cma:0
[  286.118057][T22228] Node 0 active_anon:29628kB inactive_anon:0kB active_file:1804kB inactive_file:22776kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40344kB dirty:260kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8360kB pagetables:2972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  286.132399][T22228] Node 1 active_anon:20352kB inactive_anon:0kB active_file:2788kB inactive_file:130468kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31824kB dirty:984kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4056kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  286.145847][T22228] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  286.164616][T22228] lowmem_reserve[]: 0 811 811 811 811
[  286.166751][T22228] Node 0 DMA32 free:223212kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29492kB inactive_anon:0kB active_file:1804kB inactive_file:22776kB unevictable:3536kB writepending:260kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:47588kB local_pcp:14932kB free_cma:0kB
[  286.177611][T22228] lowmem_reserve[]: 0 0 0 0 0
[  286.182229][T22228] Node 1 DMA32 free:450240kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:8376kB local_pcp:8056kB free_cma:0kB
[  286.194097][T22228] lowmem_reserve[]: 0 0 854 854 854
[  286.196310][T22228] Node 1 Normal free:197480kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20352kB inactive_anon:0kB active_file:2788kB inactive_file:130468kB unevictable:3536kB writepending:984kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:65468kB local_pcp:43308kB free_cma:0kB
[  286.209301][T22228] lowmem_reserve[]: 0 0 0 0 0
[  286.211503][T22228] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  286.218222][T22228] Node 0 DMA32: 976*4kB (UM) 289*8kB (UME) 164*16kB (UM) 605*32kB (UM) 141*64kB (UME) 89*128kB (UME) 82*256kB (UME) 38*512kB (UME) 21*1024kB (UM) 11*2048kB (UM) 22*4096kB (M) = 223208kB
[  286.228938][T22228] Node 1 DMA32: 2*4kB (M) 3*8kB (M) 6*16kB (UM) 8*32kB (UM) 5*64kB (UM) 4*128kB (UM) 6*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 106*4096kB (UM) = 450240kB
[  286.235245][T22228] Node 1 Normal: 56*4kB (UME) 231*8kB (UE) 231*16kB (UE) 505*32kB (UME) 405*64kB (UME) 171*128kB (UM) 53*256kB (UM) 17*512kB (UME) 21*1024kB (UM) 13*2048kB (U) 14*4096kB (UM) = 197480kB
[  286.241814][T22228] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  286.244790][T22228] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  286.248015][T22228] 41907 total pagecache pages
[  286.250308][T22228] 0 pages in swap cache
[  286.251973][T22228] Free swap  = 124996kB
[  286.253494][T22228] Total swap = 124996kB
[  286.255019][T22228] 786301 pages RAM
[  286.257333][T22228] 0 pages HighMem/MovableOnly
[  286.259082][T22228] 241320 pages reserved
[  286.261118][T22228] 0 pages cma reserved
[  286.355332][T22265] netlink: 'syz.2.7287': attribute type 1 has an invalid length.
[  286.366141][T22259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.683470][T22280] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  287.023068][T22309] __nla_validate_parse: 1 callbacks suppressed
[  287.023083][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7308'.
[  287.082081][T22317] tipc: Enabled bearer <eth:gre0>, priority 10
[  287.085765][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7310'.
[  287.221305][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7320'.
[  287.224036][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7320'.
[  287.377748][T22358] netlink: 'syz.1.7328': attribute type 1 has an invalid length.
[  287.387960][T22358] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7328'.
[  287.418571][T22356] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  287.558231][T22380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7339'.
[  287.579094][T22384] syzkaller1: tun_chr_ioctl cmd 1074025677
[  287.581867][T22384] syzkaller1: linktype set to 778
[  289.009449][T22442] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7367'.
[  289.025840][T22442] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7367'.
[  289.193830][T22464] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7376'.
[  289.295237][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7386'.
[  289.387331][T22490] netlink: 'syz.2.7390': attribute type 29 has an invalid length.
[  289.392109][T22490] netlink: 'syz.2.7390': attribute type 29 has an invalid length.
[  289.564565][T22502] syz_tun: left promiscuous mode
[  289.566284][T22502] dummy0: left promiscuous mode
[  289.567907][T22502] batadv0: left promiscuous mode
[  289.569809][T22502] erspan1: left promiscuous mode
[  289.571558][T22502] veth5: left promiscuous mode
[  289.573158][T22502] bond2: left promiscuous mode
[  289.574724][T22502] macsec0: left promiscuous mode
[  289.576357][T22502] bond8: left promiscuous mode
[  289.577794][T22502] wireguard0: left promiscuous mode
[  289.579827][T22502] tipc: Resetting bearer <eth:syzkaller0>
[  289.581975][T22502] syzkaller0: left promiscuous mode
[  289.584392][T22502] veth21: left promiscuous mode
[  289.586033][T22502] vlan2: left promiscuous mode
[  289.587512][T22502] gretap0: left promiscuous mode
[  289.590074][T22502] gretap4: left promiscuous mode
[  289.862635][T22514] lo speed is unknown, defaulting to 1000
[  290.449289][T22558] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  291.164961][T22605] netlink: 'syz.2.7439': attribute type 2 has an invalid length.
[  292.404959][T22670] __nla_validate_parse: 5 callbacks suppressed
[  292.404971][T22670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7465'.
[  292.528900][T22682] openvswitch: netlink: Actions may not be safe on all matching packets
[  292.568990][T22689] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7474'.
[  292.640192][T22695] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7477'.
[  292.646168][T22697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7478'.
[  292.940960][T22734] ip6gre3: entered promiscuous mode
[  293.068044][T22748] netlink: 'syz.0.7502': attribute type 11 has an invalid length.
[  293.462393][T22775] netlink: 'syz.0.7512': attribute type 3 has an invalid length.
[  293.486732][T22777] netlink: 364 bytes leftover after parsing attributes in process `syz.0.7513'.
[  293.489530][T22777] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  293.538648][T22779] ip6tnl2: entered promiscuous mode
[  293.540498][T22779] ip6tnl2: entered allmulticast mode
[  293.687521][T22785] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  293.691304][T22785] netlink: 'syz.0.7517': attribute type 4 has an invalid length.
[  293.709900][T22785] tipc: Resetting bearer <ib:ip6gre0>
[  293.808632][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7518'.
[  294.117498][T22816] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.121843][T22816] syzkaller0: entered promiscuous mode
[  294.622452][T22863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7553'.
[  294.804328][T22881] lo speed is unknown, defaulting to 1000
[  295.004630][T22899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7569'.
[  295.031857][T22824] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  295.122928][T22903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7571'.
[  295.125789][T22903] netlink: 'syz.2.7571': attribute type 30 has an invalid length.
[  295.148543][T22903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7571'.
[  295.148592][T11629] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.151873][T22903] netlink: 'syz.2.7571': attribute type 30 has an invalid length.
[  295.163793][T11629] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.168886][T11629] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.175851][T11629] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.334211][T22923] IPVS: length: 8 != 446622349272
[  295.367544][T22930] netlink: 'syz.0.7584': attribute type 39 has an invalid length.
[  297.024562][T22981] veth0_to_bond: left allmulticast mode
[  297.026441][T22981] veth0_to_bond: left promiscuous mode
[  297.028353][T22981] bridge5: port 2(veth0_to_bond) entered disabled state
[  297.034419][T22981] bond3: (slave gretap3): Releasing active interface
[  297.037868][T22981] veth9: left allmulticast mode
[  297.039447][T22981] veth9: left promiscuous mode
[  297.041844][T22981] bridge5: port 1(veth9) entered disabled state
[  297.047217][T22981] vlan3: left promiscuous mode
[  297.048747][T22981] veth1: left promiscuous mode
[  297.053346][T22981] bridge5: port 3(vlan3) entered disabled state
[  297.062252][T22990] netlink: 'syz.2.7610': attribute type 10 has an invalid length.
[  297.066424][T22990] 8021q: adding VLAN 0 to HW filter on device team0
[  297.111770][T22994] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  297.115308][T22994] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  297.175582][T23004] macvlan0: entered allmulticast mode
[  297.177381][T23004] veth1_vlan: entered allmulticast mode
[  297.303098][T23017] netlink: 'syz.2.7623': attribute type 1 has an invalid length.
[  297.325156][T23017] 8021q: adding VLAN 0 to HW filter on device bond12
[  297.336599][T23017] bond12: (slave geneve3): making interface the new active one
[  297.341175][T23017] bond12: (slave geneve3): Enslaving as an active interface with an up link
[  297.344045][ T5872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.350027][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.352496][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.365542][ T5872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.417211][T23024] lo speed is unknown, defaulting to 1000
[  297.524194][T23024] __nla_validate_parse: 5 callbacks suppressed
[  297.524207][T23024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7626'.
[  297.530919][T23024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7626'.
[  297.601000][T23041] netlink: 'syz.0.7632': attribute type 10 has an invalid length.
[  297.604095][T23041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7632'.
[  297.627059][T23041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7632'.
[  297.630786][T23041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7632'.
[  297.646948][T23041] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  297.715325][T23047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7635'.
[  297.816696][T23063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7642'.
[  297.819464][T23063] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  297.824025][T23063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.832961][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7644'.
[  297.907319][T23076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.911315][T23076] syzkaller0: entered promiscuous mode
[  297.913182][T23076] syzkaller0: entered allmulticast mode
[  297.928565][T23076] tipc: Resetting bearer <eth:syzkaller0>
[  297.932946][T23075] tipc: Resetting bearer <eth:syzkaller0>
[  297.946497][T23075] tipc: Disabling bearer <eth:syzkaller0>
[  298.738413][T23120] netlink: 'syz.0.7663': attribute type 2 has an invalid length.
[  298.755720][T23121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7662'.
[  298.774553][T23123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7664'.
[  299.060868][T23144] batadv_slave_1: entered promiscuous mode
[  299.072519][T23143] batadv_slave_1: left promiscuous mode
[  299.268385][T23152] !: renamed from dummy0
[  299.364578][T23156] lo speed is unknown, defaulting to 1000
[  300.063299][T23216] netlink: 'syz.2.7697': attribute type 29 has an invalid length.
[  300.067691][T23216] netlink: 'syz.2.7697': attribute type 29 has an invalid length.
[  300.434024][T23260] atomic_op ffff888107dfc998 conn xmit_atomic 0000000000000000
[  301.745085][T23312] IPVS: stopping backup sync thread 23313 ...
[  301.745797][T23313] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  302.112629][ T5872] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  303.064206][T23368] openvswitch: netlink: IPv4 tun info is not correct
[  303.077363][T23363] __nla_validate_parse: 8 callbacks suppressed
[  303.077378][T23363] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7762'.
[  303.142065][T23373] lo speed is unknown, defaulting to 1000
[  303.236400][T23382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7767'.
[  303.285663][T23379] lo speed is unknown, defaulting to 1000
[  303.358389][T23388] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  303.537451][T23401] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  303.839607][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7791'.
[  303.886984][T23440] netlink: 'syz.2.7793': attribute type 10 has an invalid length.
[  303.911148][T23440] syzkaller0: left promiscuous mode
[  303.912744][T23440] syzkaller0: left allmulticast mode
[  304.346455][T23492] netlink: 'syz.0.7818': attribute type 4 has an invalid length.
[  304.353031][T23492] netlink: 'syz.0.7818': attribute type 17 has an invalid length.
[  304.420523][T23500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7823'.
[  304.452199][T23507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7825'.
[  304.476251][T23509] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7823'.
[  304.506425][T23513] sctp: [Deprecated]: syz.2.7827 (pid 23513) Use of struct sctp_assoc_value in delayed_ack socket option.
[  304.506425][T23513] Use struct sctp_sack_info instead
[  304.514631][T23513] sctp: [Deprecated]: syz.2.7827 (pid 23513) Use of struct sctp_assoc_value in delayed_ack socket option.
[  304.514631][T23513] Use struct sctp_sack_info instead
[  304.585792][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7830'.
[  304.601894][T23528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7829'.
[  306.061675][T23605] tipc: Disabling bearer <eth:team0>
[  306.193764][T23640] netlink: 'syz.0.7878': attribute type 1 has an invalid length.
[  306.196100][T23640] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7878'.
[  306.198812][T23640] netlink: 'syz.0.7878': attribute type 2 has an invalid length.
[  306.204925][T23640] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7878'.
[  306.453197][T23665] netlink: 'syz.0.7889': attribute type 1 has an invalid length.
[  306.967281][T23691] netlink: 'syz.2.7902': attribute type 2 has an invalid length.
[  307.423438][T23732] syzkaller0: entered promiscuous mode
[  307.425164][T23732] syzkaller0: entered allmulticast mode
[  307.691456][T23743] netlink: 'syz.1.7925': attribute type 11 has an invalid length.
[  308.663907][T23758] netlink: 'syz.0.7933': attribute type 1 has an invalid length.
[  308.666264][T23758] __nla_validate_parse: 6 callbacks suppressed
[  308.666272][T23758] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7933'.
[  308.735241][T23763] veth15: entered promiscuous mode
[  309.075652][T23815] netlink: 'syz.0.7957': attribute type 2 has an invalid length.
[  309.284569][T23832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7965'.
[  309.437553][T23839] erspan0: left allmulticast mode
[  309.444194][T23839] vlan0: left promiscuous mode
[  309.454551][T23839] vlan3: left promiscuous mode
[  309.456147][T23839] bond8: left promiscuous mode
[  309.457726][T23839] vlan3: left allmulticast mode
[  309.459337][T23839] bond8: left allmulticast mode
[  309.461591][T23839] bond0: left promiscuous mode
[  309.463321][T23839] gretap3: left promiscuous mode
[  309.464857][T23839] gretap3: left allmulticast mode
[  309.466587][T23839] veth11: left promiscuous mode
[  309.468422][T23839] gtp0: left promiscuous mode
[  309.471182][T23839] ip6tnl2: left promiscuous mode
[  309.472866][T23839] ip6tnl2: left allmulticast mode
[  309.477090][T23839] veth15: left promiscuous mode
[  309.932647][T23869] netlink: 'syz.2.7982': attribute type 1 has an invalid length.
[  309.935090][T23869] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7982'.
[  310.044965][T23884] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  310.112356][T23892] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7992'.
[  310.115286][T23890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7991'.
[  310.315032][T23911] netlink: 'syz.2.7999': attribute type 1 has an invalid length.
[  310.317477][T23911] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7999'.
[  310.778539][T23926] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  310.849814][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8010'.
[  310.880372][T23932] netlink: 452 bytes leftover after parsing attributes in process `syz.0.8010'.
[  311.899803][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8035'.
[  312.109977][ T5879] Bluetooth: hci0: command tx timeout
[  312.211266][T24024] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8048'.
[  313.314539][T24065] netlink: 'syz.1.8067': attribute type 6 has an invalid length.
[  313.387986][T24060] lo speed is unknown, defaulting to 1000
[  313.802947][T24116] pimreg3: entered allmulticast mode
[  314.011744][T24137] syzkaller0: entered promiscuous mode
[  314.013758][T24137] syzkaller0: entered allmulticast mode
[  314.120303][T24152] __nla_validate_parse: 3 callbacks suppressed
[  314.120314][T24152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8104'.
[  314.267048][T24168] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8110'.
[  314.274923][T24168] vlan4: entered allmulticast mode
[  314.276501][T24168] gretap0: entered allmulticast mode
[  314.354536][T24177] TCP: TCP_TX_DELAY enabled
[  314.508405][T24195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  314.965291][T24202] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  315.076717][T24214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8132'.
[  315.147503][T24222] macsec2: entered promiscuous mode
[  315.149288][T24222] macsec2: entered allmulticast mode
[  315.155466][T24222] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  315.240729][T24234] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[  315.243875][T24234] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  315.414190][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8153'.
[  315.417002][T24260] veth1: entered promiscuous mode
[  315.418689][T24260] netlink: 'syz.1.8153': attribute type 1 has an invalid length.
[  315.427038][T24260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8153'.
[  315.433420][T24260] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  315.455792][T24264] netlink: 'syz.2.8155': attribute type 1 has an invalid length.
[  315.478762][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8156'.
[  315.532944][T24275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8160'.
[  315.563209][T24277] nbd: must specify a size in bytes for the device
[  315.580440][T24280] netlink: 'syz.1.8162': attribute type 10 has an invalid length.
[  315.591285][T24280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8162'.
[  315.642775][T24286] netlink: 'syz.1.8165': attribute type 1 has an invalid length.
[  315.782378][T24304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8173'.
[  315.785067][T24304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8173'.
[  315.994251][T24327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  316.022956][T24330] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  316.544587][T24369] netlink: 'syz.2.8204': attribute type 2 has an invalid length.
[  317.022414][T24427] netlink: 'syz.0.8229': attribute type 1 has an invalid length.
[  317.116351][T24437] tap0: tun_chr_ioctl cmd 1074025677
[  317.119207][T24437] tap0: linktype set to 820
[  317.176790][T24441] netlink: del zone limit has 4 unknown bytes
[  317.361341][T24456] bond10: (slave geneve0): Opening slave failed
[  317.477219][T24461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.486536][T24461] syzkaller0: entered promiscuous mode
[  317.488256][T24461] syzkaller0: entered allmulticast mode
[  317.507507][T24461] tipc: Resetting bearer <eth:syzkaller0>
[  317.509578][T24461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.513902][T24460] tipc: Resetting bearer <eth:syzkaller0>
[  317.525748][T24460] tipc: Disabling bearer <eth:syzkaller0>
[  318.519006][T24503] syzkaller0: entered promiscuous mode
[  318.521636][T24503] syzkaller0: entered allmulticast mode
[  318.663003][T24509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.666002][T24509] syzkaller0: entered promiscuous mode
[  318.668166][T24509] syzkaller0: entered allmulticast mode
[  318.688922][T24509] tipc: Resetting bearer <eth:syzkaller0>
[  318.709423][T24508] tipc: Resetting bearer <eth:syzkaller0>
[  318.730043][T24508] tipc: Disabling bearer <eth:syzkaller0>
[  318.858138][T24529] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  319.196701][T24574] netlink: 'syz.1.8297': attribute type 1 has an invalid length.
[  319.199101][T24574] netlink: 'syz.1.8297': attribute type 3 has an invalid length.
[  319.201848][T24574] netlink: 'syz.1.8297': attribute type 1 has an invalid length.
[  319.205358][T24574] __nla_validate_parse: 3 callbacks suppressed
[  319.205367][T24574] netlink: 204 bytes leftover after parsing attributes in process `syz.1.8297'.
[  319.212575][T24574] NCSI netlink: No device for ifindex 0
[  319.278159][T24581] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  319.330421][T24588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8303'.
[  319.567099][T24607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  319.570027][T24607] syzkaller0: entered promiscuous mode
[  319.571922][T24607] syzkaller0: entered allmulticast mode
[  319.590956][T24607] tipc: Resetting bearer <eth:syzkaller0>
[  319.594445][T24606] tipc: Resetting bearer <eth:syzkaller0>
[  319.604643][T24606] tipc: Disabling bearer <eth:syzkaller0>
[  319.825703][T24619] netlink: 'syz.0.8317': attribute type 1 has an invalid length.
[  319.832853][T24619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8317'.
[  319.925104][T24628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8322'.
[  319.928080][T24628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8322'.
[  320.001497][T24635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8325'.
[  320.176128][T24646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8329'.
[  320.444744][T24663] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.8336'.
[  320.492363][T24667] netlink: 208 bytes leftover after parsing attributes in process `syz.1.8338'.
[  320.498735][T24667] netlink: 'syz.1.8338': attribute type 1 has an invalid length.
[  320.716478][T24687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8348'.
[  320.745286][T24689] netlink: 'syz.1.8349': attribute type 2 has an invalid length.
[  320.747703][T24689] netlink: 'syz.1.8349': attribute type 1 has an invalid length.
[  320.946262][T24700] netlink: 'syz.1.8354': attribute type 2 has an invalid length.
[  321.804591][T24754] netlink: 'syz.1.8379': attribute type 33 has an invalid length.
[  322.007886][T24784] syzkaller1: entered promiscuous mode
[  322.011219][T24784] syzkaller1: entered allmulticast mode
[  323.465497][T24888] sctp: [Deprecated]: syz.1.8438 (pid 24888) Use of struct sctp_assoc_value in delayed_ack socket option.
[  323.465497][T24888] Use struct sctp_sack_info instead
[  323.496962][T24890] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  323.775481][T24912] netlink: 'syz.1.8450': attribute type 16 has an invalid length.
[  323.778071][T24912] netlink: 'syz.1.8450': attribute type 17 has an invalid length.
[  323.798700][T24912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.804322][   T47] lo speed is unknown, defaulting to 1000
[  323.806326][   T47] syz2: Port: 1 Link ACTIVE
[  323.865452][T24917] bridge0: failed insert local address into bridge forwarding table
[  324.044874][T24927] syzkaller0: entered promiscuous mode
[  324.046569][T24927] syzkaller0: entered allmulticast mode
[  324.276185][T24946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.282153][T24946] syzkaller0: entered promiscuous mode
[  324.284378][T24946] syzkaller0: entered allmulticast mode
[  324.310543][T24946] tipc: Resetting bearer <eth:syzkaller0>
[  324.316900][T24945] tipc: Resetting bearer <eth:syzkaller0>
[  324.327708][T24955] __nla_validate_parse: 6 callbacks suppressed
[  324.327720][T24955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8467'.
[  324.335131][T24945] tipc: Disabling bearer <eth:syzkaller0>
[  324.679975][T24981] netlink: 'syz.1.8480': attribute type 32 has an invalid length.
[  324.733984][T24985] 8021q: adding VLAN 0 to HW filter on device bond9
[  325.147308][T25016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8497'.
[  326.072957][T25024] C: renamed from lo
[  326.082244][T25024] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  326.208104][T25034] sctp: [Deprecated]: syz.1.8506 (pid 25034) Use of struct sctp_assoc_value in delayed_ack socket option.
[  326.208104][T25034] Use struct sctp_sack_info instead
[  326.304110][T25042] bridge0: failed insert local address into bridge forwarding table
[  326.320204][T25042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8509'.
[  326.592954][T25055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8515'.
[  327.837485][T25151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8558'.
[  327.840814][T25151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8558'.
[  327.997015][T25165] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8566'.
[  328.002367][T25167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8565'.
[  328.071811][T25175] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8570'.
[  328.096575][T25177] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  328.162796][T25183] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8573'.
[  329.190789][T25250] openvswitch: netlink: Multiple metadata blocks provided
[  329.396176][T25270] netlink: 'syz.1.8598': attribute type 3 has an invalid length.
[  329.526297][T25285] sctp: [Deprecated]: syz.0.8604 (pid 25285) Use of int in maxseg socket option.
[  329.526297][T25285] Use struct sctp_assoc_value instead
[  329.658109][T25300] lo speed is unknown, defaulting to 1000
[  329.689287][T25304] __nla_validate_parse: 1 callbacks suppressed
[  329.689302][T25304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8612'.
[  329.695378][T25304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8612'.
[  329.698292][T25304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8612'.
[  329.701569][T25304] netlink: 540 bytes leftover after parsing attributes in process `syz.1.8612'.
[  329.730477][T25308] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8613'.
[  330.377107][T25359] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  330.440402][T25365] netlink: 'syz.2.8638': attribute type 29 has an invalid length.
[  330.443781][T25365] netlink: 'syz.2.8638': attribute type 29 has an invalid length.
[  330.446429][T25365] netlink: 'syz.2.8638': attribute type 29 has an invalid length.
[  330.448960][T25365] netlink: 'syz.2.8638': attribute type 29 has an invalid length.
[  330.451859][T25365] netlink: 'syz.2.8638': attribute type 29 has an invalid length.
[  330.454420][T25365] netlink: 'syz.2.8638': attribute type 29 has an invalid length.
[  330.457048][T25365] netlink: 'syz.2.8638': attribute type 29 has an invalid length.
[  330.459599][T25365] netlink: 'syz.2.8638': attribute type 29 has an invalid length.
[  330.462731][T25365] netlink: 'syz.2.8638': attribute type 29 has an invalid length.
[  331.172854][T25395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.177552][T25395] syzkaller0: entered promiscuous mode
[  331.181746][T25395] syzkaller0: entered allmulticast mode
[  331.196003][T25395] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  331.208300][T25395] tipc: Resetting bearer <eth:syzkaller0>
[  331.217445][T25394] tipc: Resetting bearer <eth:syzkaller0>
[  331.229346][T25394] tipc: Disabling bearer <eth:syzkaller0>
[  331.310736][T25398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8653'.
[  331.313622][T25398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8653'.
[  331.316464][T25398] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8653'.
[  331.319354][T25398] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8653'.
[  331.388442][T25403] bond0: Error: Cannot enslave bond to itself.
[  331.440080][T25406] syzkaller0: entered promiscuous mode
[  331.441836][T25406] syzkaller0: entered allmulticast mode
[  331.454070][T25406] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  331.468009][T25389] Set syz1 is full, maxelem 65536 reached
[  331.579324][T25416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8661'.
[  331.959607][T25457] gretap0: entered promiscuous mode
[  331.965110][T25457] gretap0: left promiscuous mode
[  332.056476][T25459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  332.381374][T25499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.384009][T25499] syzkaller0: entered promiscuous mode
[  332.391614][T25499] syzkaller0: entered allmulticast mode
[  332.440755][T25499] tipc: Resetting bearer <eth:syzkaller0>
[  332.446174][T25497] tipc: Resetting bearer <eth:syzkaller0>
[  332.462252][T25497] tipc: Disabling bearer <eth:syzkaller0>
[  332.618291][T25515] 
[  332.619084][T25515] ======================================================
[  332.621217][T25515] WARNING: possible circular locking dependency detected
[  332.623353][T25515] 6.16.0-syzkaller-12063-g37816488247d-dirty #0 Not tainted
[  332.625609][T25515] ------------------------------------------------------
[  332.628554][T25515] syz.1.8707/25515 is trying to acquire lock:
[  332.630401][T25515] ffffffff8f689fb8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  332.633280][T25515] 
[  332.633280][T25515] but task is already holding lock:
[  332.635535][T25515] ffffffff8f689f58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  332.638474][T25515] 
[  332.638474][T25515] which lock already depends on the new lock.
[  332.638474][T25515] 
[  332.641599][T25515] 
[  332.641599][T25515] the existing dependency chain (in reverse order) is:
[  332.644278][T25515] 
[  332.644278][T25515] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  332.646666][T25515]        lock_acquire+0x120/0x360
[  332.648252][T25515]        _raw_spin_lock_bh+0x36/0x50
[  332.649879][T25515]        nr_rt_ioctl+0x390/0xd50
[  332.651418][T25515]        sock_do_ioctl+0xdc/0x300
[  332.652973][T25515]        sock_ioctl+0x576/0x790
[  332.654479][T25515]        __se_sys_ioctl+0xfc/0x170
[  332.656015][T25515]        do_syscall_64+0xfa/0x3b0
[  332.657552][T25515]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.659459][T25515] 
[  332.659459][T25515] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  332.661885][T25515]        lock_acquire+0x120/0x360
[  332.663450][T25515]        _raw_spin_lock_bh+0x36/0x50
[  332.665084][T25515]        nr_rt_ioctl+0x193/0xd50
[  332.666641][T25515]        sock_do_ioctl+0xdc/0x300
[  332.668227][T25515]        sock_ioctl+0x576/0x790
[  332.669738][T25515]        __se_sys_ioctl+0xfc/0x170
[  332.671433][T25515]        do_syscall_64+0xfa/0x3b0
[  332.673009][T25515]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.674968][T25515] 
[  332.674968][T25515] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  332.677210][T25515]        validate_chain+0xb9b/0x2140
[  332.678788][T25515]        __lock_acquire+0xab9/0xd20
[  332.680421][T25515]        lock_acquire+0x120/0x360
[  332.681903][T25515]        _raw_spin_lock_bh+0x36/0x50
[  332.683471][T25515]        nr_rt_device_down+0xa9/0x720
[  332.685044][T25515]        nr_device_event+0x137/0x150
[  332.686608][T25515]        notifier_call_chain+0x1b6/0x3e0
[  332.688257][T25515]        __dev_notify_flags+0x18d/0x2e0
[  332.689881][T25515]        netif_change_flags+0xe8/0x1a0
[  332.691477][T25515]        dev_change_flags+0x130/0x260
[  332.693027][T25515]        dev_ioctl+0x7b4/0x1150
[  332.694468][T25515]        sock_do_ioctl+0x22c/0x300
[  332.695950][T25515]        sock_ioctl+0x576/0x790
[  332.697368][T25515]        __se_sys_ioctl+0xfc/0x170
[  332.698874][T25515]        do_syscall_64+0xfa/0x3b0
[  332.700344][T25515]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.702213][T25515] 
[  332.702213][T25515] other info that might help us debug this:
[  332.702213][T25515] 
[  332.705113][T25515] Chain exists of:
[  332.705113][T25515]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  332.705113][T25515] 
[  332.709051][T25515]  Possible unsafe locking scenario:
[  332.709051][T25515] 
[  332.711185][T25515]        CPU0                    CPU1
[  332.712762][T25515]        ----                    ----
[  332.714346][T25515]   lock(nr_neigh_list_lock);
[  332.715732][T25515]                                lock(&nr_node->node_lock);
[  332.717862][T25515]                                lock(nr_neigh_list_lock);
[  332.719956][T25515]   lock(nr_node_list_lock);
[  332.721306][T25515] 
[  332.721306][T25515]  *** DEADLOCK ***
[  332.721306][T25515] 
[  332.723680][T25515] 2 locks held by syz.1.8707/25515:
[  332.725176][T25515]  #0: ffffffff8f534988 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  332.727720][T25515]  #1: ffffffff8f689f58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  332.730617][T25515] 
[  332.730617][T25515] stack backtrace:
[  332.732332][T25515] CPU: 0 UID: 0 PID: 25515 Comm: syz.1.8707 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  332.732346][T25515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  332.732353][T25515] Call Trace:
[  332.732360][T25515]  <TASK>
[  332.732386][T25515]  dump_stack_lvl+0x189/0x250
[  332.732403][T25515]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.732414][T25515]  ? __pfx__printk+0x10/0x10
[  332.732428][T25515]  ? print_lock_name+0xde/0x100
[  332.732442][T25515]  print_circular_bug+0x2ee/0x310
[  332.732454][T25515]  check_noncircular+0x134/0x160
[  332.732465][T25515]  validate_chain+0xb9b/0x2140
[  332.732475][T25515]  ? rt6_disable_ip+0x6b3/0x720
[  332.732486][T25515]  ? __lock_acquire+0xab9/0xd20
[  332.732500][T25515]  __lock_acquire+0xab9/0xd20
[  332.732515][T25515]  ? nr_rt_device_down+0xa9/0x720
[  332.732523][T25515]  lock_acquire+0x120/0x360
[  332.732534][T25515]  ? nr_rt_device_down+0xa9/0x720
[  332.732544][T25515]  ? nr_rt_device_down+0xa9/0x720
[  332.732552][T25515]  _raw_spin_lock_bh+0x36/0x50
[  332.732562][T25515]  ? nr_rt_device_down+0xa9/0x720
[  332.732570][T25515]  nr_rt_device_down+0xa9/0x720
[  332.732578][T25515]  ? do_raw_spin_unlock+0x4d/0x240
[  332.732589][T25515]  nr_device_event+0x137/0x150
[  332.732603][T25515]  notifier_call_chain+0x1b6/0x3e0
[  332.732616][T25515]  __dev_notify_flags+0x18d/0x2e0
[  332.732629][T25515]  ? __pfx___dev_notify_flags+0x10/0x10
[  332.732640][T25515]  ? __dev_change_flags+0x4cc/0x6d0
[  332.732652][T25515]  ? __pfx___dev_change_flags+0x10/0x10
[  332.732664][T25515]  ? full_name_hash+0x92/0xe0
[  332.732675][T25515]  netif_change_flags+0xe8/0x1a0
[  332.732687][T25515]  dev_change_flags+0x130/0x260
[  332.732699][T25515]  dev_ioctl+0x7b4/0x1150
[  332.732711][T25515]  sock_do_ioctl+0x22c/0x300
[  332.732722][T25515]  ? __pfx_sock_do_ioctl+0x10/0x10
[  332.732730][T25515]  ? __lock_acquire+0xab9/0xd20
[  332.732744][T25515]  sock_ioctl+0x576/0x790
[  332.732752][T25515]  ? __pfx_sock_ioctl+0x10/0x10
[  332.732760][T25515]  ? __fget_files+0x2a/0x420
[  332.732772][T25515]  ? __fget_files+0x3a0/0x420
[  332.732783][T25515]  ? __fget_files+0x2a/0x420
[  332.732795][T25515]  ? bpf_lsm_file_ioctl+0x9/0x20
[  332.732806][T25515]  ? __pfx_sock_ioctl+0x10/0x10
[  332.732813][T25515]  __se_sys_ioctl+0xfc/0x170
[  332.732824][T25515]  do_syscall_64+0xfa/0x3b0
[  332.732835][T25515]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.732844][T25515]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.732855][T25515]  ? exc_page_fault+0x9f/0xf0
[  332.732865][T25515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.732875][T25515] RIP: 0033:0x7f12f958ebe9
[  332.732886][T25515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.732895][T25515] RSP: 002b:00007f12fa4a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  332.732904][T25515] RAX: ffffffffffffffda RBX: 00007f12f97b5fa0 RCX: 00007f12f958ebe9
[  332.732910][T25515] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004
[  332.732916][T25515] RBP: 00007f12f9611e19 R08: 0000000000000000 R09: 0000000000000000
[  332.732921][T25515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.732926][T25515] R13: 00007f12f97b6038 R14: 00007f12f97b5fa0 R15: 00007ffd53ac0be8
[  332.732936][T25515]  </TASK>

VM DIAGNOSIS:
08:26:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003000 RDI=0000000000003001 RBP=00000000000003f8 RSP=ffffc90008437030
R8 =ffff888021860237 R9 =1ffff1100430c046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48d4 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f12fa4a96c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000240 CR3=00000000396ee000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=00007f8db5987478 00007f8db59874c0
XMM06=00007f8db59874b8 00007f8db59874b0 XMM07=00007f8db59874a8 00007f8db59874a0
XMM08=0000000000000000 00007f8db5812ee7 XMM09=0000000000000000 00007f8db5812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d6b RBX=1ffff11009608341 RCX=ffff888108950000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900212177e0 RSP=ffffc90021217660
R8 =ffffffff8fa34737 R9 =1ffffffff1f468e6 R10=dffffc0000000000 R11=fffffbfff1f468e7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3abfae56c0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000a34b72e 000000000000000f XMM01=0000000030717062 000055b377d7a078
XMM02=00000000ffffffff 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffffffff00000000 XMM05=00000000342efc93 0000000000000134
XMM06=0200000000000000 00000000000080fe XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
