last executing test programs:

2.380010402s ago: executing program 0 (id=2763):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r2=>0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
close(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

1.51747784s ago: executing program 0 (id=2778):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001740)=""/4079, 0xfef}], 0x1}, 0x5}], 0x1, 0x2000, 0x0)

1.435870706s ago: executing program 0 (id=2779):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000004580)=@ethtool_link_settings={0x26, 0x1, 0x1, 0x7f, 0x81, 0x8, 0x0, 0xf, 0xb, 0xe1, [0x674, 0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0x80, 0x3]}})

1.435559266s ago: executing program 0 (id=2780):
socket(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r1, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x137}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000033c0))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYBLOB], 0x24}}, 0x0)

1.200659674s ago: executing program 1 (id=2783):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})

1.140958208s ago: executing program 1 (id=2784):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86edabf0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509debbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.09029762s ago: executing program 1 (id=2785):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r4=>0x0})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)

1.030960551s ago: executing program 1 (id=2786):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

947.24478ms ago: executing program 1 (id=2787):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
epoll_create1(0x0)
epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket(0x40000000015, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

543.264875ms ago: executing program 0 (id=2798):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="fd994f73af63d2e927d2711d6c6a6e4bc858c0e0f7b52dc375ed8c14f0d97a275995633b5e0cec4cfd3095efd76d09eb29d4893a1b28a1ed43c11ea7f6c67b5812239412c617d426d7baa2e907ec005deeecd3dce7157e06aa2a9cb21c898ba0559962bcc18bc95c364002f1ab69b0772d4ca695e0077eadeb33cefd2b4127619e02017268438d13a13aec014a30d800fd76fe50936caf434fcbbf6715ad3a344b5c94b2e7f46da7b9e25639f5ebeb45560d0d687c340c72574fa0f97c06e3d8f9c677223037fa03f9ffa97c", @ANYRES16=r2, @ANYBLOB="010026bd7000fb"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000054)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x1}, 0x10)
close(r3)
unshare(0x22020600)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x4000004)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)

368.136422ms ago: executing program 0 (id=2800):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}]}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)

310.478966ms ago: executing program 2 (id=2801):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0)

310.004234ms ago: executing program 2 (id=2802):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x30, r1, 0x10ada85e65c25349, 0x3, 0x25dfdbfb, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x48984)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8080)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)

232.705763ms ago: executing program 2 (id=2803):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xa, 0x5}, {0x6, 0x2}, {0x9, 0x5}, {0x6, 0x1}, {0xc, 0x1}]}]}}, &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0)

69.484313ms ago: executing program 2 (id=2804):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xb)

69.053988ms ago: executing program 1 (id=2805):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x4)

68.796683ms ago: executing program 2 (id=2806):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c9d661e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311cc7b4fb0aee4581ccb941afd07c76517b7cee360ef44217cf70bfb7f34b8cef568000e6a94f0e3a2a35edbe8739bc4203acd8179229f375ff9c71210818738eabb1988fa217f608427624c073807576e4dfbc6cae39f311d1aacfd5a6ee473edeb0947459", 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="f6e15788a9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003240)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b888797600eaa4911052cee7c5f5f210392fdb3bec0d84d4102116ae7567153b5f9359b65a80f341ada2af53c028694e069e7ebd7ffbfdbdd1bd39ea410c1cb0440f72e5f580180284251b248b43d463d3aab9", 0x6b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="194129cc7d4d5a140f1f749697f9304a16fe9a812c1393a8b28af6b73d22a9348d4146e171e424b36a245bbbfe6910cc2011059d90799b56b4730c9147ebfb06f4e56fa79974240bebebe7fb1d9c42ec1017ea7838bf9b1656bb64c907a01a2567448645aa39d6d780bcbe890706b29f4d6565c89138726bda82f90a8043f1d9a1340bc47d8ef644637a62aaf393", 0x8e}, {&(0x7f00000001c0)="72f6cd754bdd0954a2c5c00394", 0xd}, {&(0x7f0000000500)="2ea0fbb5b5acfba63dc1af7dcab574d01320ecdadbbd3068ba5f714acf60a480725f07945c823b001d54900e4fbca493b951b3fdd19e86ca7d6d2c260d8f0ede9df30695a2f2c0d0eb28e359e9e975e2ee05d2fe33ce50ef15cdb58dc1f01b37e8b1b1c90431a6139519929291f8b3af2990826f4fe727d3ef5d79a14d8e9fa7ae19e6233817e6f694ea90dae5b93b0dd986adc63b6cc53319a20d5e73f73a5d10b1c0f765e84a1686c15df780de8eefc415776f8148040f00801c897076391b8d305e", 0xc3}, {&(0x7f0000000600)="e33268b53a6cefd73876b72a5ce8c491492442b968e256d21576d23f20d4c904a1255bdc9da62b51bcaaa2a0944f192955dc8a5ae453c6c57c88ab4bff57fbbd9f085a00196f7b332cff900be5428cfb220b331e8ab5333014ba6ee6742a54678e3c757676a306e8db8eb356b369d5cdb95f80b4b8c8f44aea7980229f2e52348b00c5ec09be6b6c55f6ec919bffd9a643f4a8685b9235f73f9ab2755b3f92a3af1ad9d152b71832aa0c2ee7ad27bcbbd76d6b56db0c4296f6edc5597a8a8fa93783662528fee10d225075fb0ff671a38d4ee061d40aba5f4d46354a77", 0xdd}], 0x4}}], 0x4, 0x44008090)
recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

0s ago: executing program 2 (id=2807):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r6, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2032' (ED25519) to the list of known hosts.
syzkaller login: [   56.242859][ T5834] cgroup: Unknown subsys name 'net'
[   56.367358][ T5834] cgroup: Unknown subsys name 'cpuset'
[   56.371664][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.061744][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.506840][ T5866] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.839588][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.843245][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.846920][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.850720][ T5887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.857558][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.911746][ T5892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.919237][ T5892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.922487][ T5892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.926504][ T5892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.929887][ T5892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.930048][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.938643][ T5892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.944775][ T5892] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.954331][ T5892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.957984][ T5892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.278361][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.281231][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.364368][ T5889] chnl_net:caif_netlink_parms(): no params data found
[   71.411473][ T5886] chnl_net:caif_netlink_parms(): no params data found
[   71.456844][ T5893] chnl_net:caif_netlink_parms(): no params data found
[   71.502771][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.506479][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.509321][ T5889] bridge_slave_0: entered allmulticast mode
[   71.513176][ T5889] bridge_slave_0: entered promiscuous mode
[   71.561354][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.563905][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.566865][ T5889] bridge_slave_1: entered allmulticast mode
[   71.569772][ T5889] bridge_slave_1: entered promiscuous mode
[   71.630828][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.666845][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.669573][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.672364][ T5886] bridge_slave_0: entered allmulticast mode
[   71.676594][ T5886] bridge_slave_0: entered promiscuous mode
[   71.683456][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.698806][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.701610][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.705153][ T5886] bridge_slave_1: entered allmulticast mode
[   71.708344][ T5886] bridge_slave_1: entered promiscuous mode
[   71.772110][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.775372][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.777949][ T5893] bridge_slave_0: entered allmulticast mode
[   71.781496][ T5893] bridge_slave_0: entered promiscuous mode
[   71.787876][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.790830][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.793599][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.797380][ T5893] bridge_slave_1: entered allmulticast mode
[   71.801391][ T5893] bridge_slave_1: entered promiscuous mode
[   71.806705][ T5889] team0: Port device team_slave_0 added
[   71.822059][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.841050][ T5889] team0: Port device team_slave_1 added
[   71.846414][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.893360][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.915506][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.917558][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.926055][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.959402][ T5886] team0: Port device team_slave_0 added
[   71.962107][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.965730][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.974970][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.985409][ T5893] team0: Port device team_slave_0 added
[   71.988895][ T5886] team0: Port device team_slave_1 added
[   71.993395][ T5893] team0: Port device team_slave_1 added
[   72.061281][ T5889] hsr_slave_0: entered promiscuous mode
[   72.065789][ T5889] hsr_slave_1: entered promiscuous mode
[   72.085763][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.088332][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.097778][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.102929][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.106025][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.115998][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.121371][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.123574][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.132956][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.139056][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.141680][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.151168][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.249675][ T5893] hsr_slave_0: entered promiscuous mode
[   72.252657][ T5893] hsr_slave_1: entered promiscuous mode
[   72.256101][ T5893] debugfs: 'hsr0' already exists in 'hsr'
[   72.258273][ T5893] Cannot create hsr debugfs directory
[   72.280367][ T5886] hsr_slave_0: entered promiscuous mode
[   72.282874][ T5886] hsr_slave_1: entered promiscuous mode
[   72.285590][ T5886] debugfs: 'hsr0' already exists in 'hsr'
[   72.287464][ T5886] Cannot create hsr debugfs directory
[   72.621726][ T5889] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.630878][ T5889] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.639914][ T5889] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.652699][ T5889] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.713725][ T5893] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.719204][ T5893] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.728939][ T5893] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.736694][ T5893] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.791114][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.801676][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.815334][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.821548][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.936935][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.956084][ T5887] Bluetooth: hci2: command tx timeout
[   72.956237][ T5892] Bluetooth: hci0: command tx timeout
[   72.985720][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[   72.997837][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.011780][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.018180][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.021074][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.037049][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.039844][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.044313][ T5892] Bluetooth: hci1: command tx timeout
[   73.068650][ T5893] 8021q: adding VLAN 0 to HW filter on device team0
[   73.077937][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[   73.088942][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.091792][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.112285][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.115146][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.122920][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.125928][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.153163][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.155657][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.451190][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.456582][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.489141][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.536626][ T5889] veth0_vlan: entered promiscuous mode
[   73.550349][ T5886] veth0_vlan: entered promiscuous mode
[   73.558195][ T5889] veth1_vlan: entered promiscuous mode
[   73.569039][ T5886] veth1_vlan: entered promiscuous mode
[   73.598297][ T5893] veth0_vlan: entered promiscuous mode
[   73.617399][ T5893] veth1_vlan: entered promiscuous mode
[   73.633626][ T5889] veth0_macvtap: entered promiscuous mode
[   73.647102][ T5886] veth0_macvtap: entered promiscuous mode
[   73.653242][ T5886] veth1_macvtap: entered promiscuous mode
[   73.659710][ T5889] veth1_macvtap: entered promiscuous mode
[   73.681836][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.693324][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.710823][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.717962][ T5893] veth0_macvtap: entered promiscuous mode
[   73.723380][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.727844][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.732986][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.736908][ T5893] veth1_macvtap: entered promiscuous mode
[   73.742459][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.756260][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.792951][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.798767][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.820608][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.827580][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.845150][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.868926][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.892511][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.900513][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.919031][ T5678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.922931][ T5678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.946807][ T5678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.963647][ T5678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.977016][ T4006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.979868][ T4006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.020212][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.022758][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.051440][ T5886] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.065850][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.069297][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.107270][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.110215][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.163541][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.172208][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.035336][ T5892] Bluetooth: hci0: command tx timeout
[   75.045206][ T5892] Bluetooth: hci2: command tx timeout
[   75.120889][ T5892] Bluetooth: hci1: command tx timeout
[   75.217357][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32'.
[   75.433697][ T5980] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   75.440582][ T5979] IPVS: stopping backup sync thread 5980 ...
[   75.695111][ T5994] tipc: Started in network mode
[   75.697197][ T5994] tipc: Node identity ac1414aa, cluster identity 4711
[   75.700730][ T5994] tipc: Enabled bearer <udp:syz2>, priority 10
[   75.885538][ T6004] netlink: 'syz.1.49': attribute type 10 has an invalid length.
[   75.890712][ T6004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.49'.
[   75.929152][ T6004] team0: Port device geneve0 added
[   75.946372][ T6004] syz.1.49 (6004) used greatest stack depth: 19264 bytes left
[   76.152252][ T6014] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   76.177890][ T6014] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   76.525584][ T6040] netlink: 'syz.2.64': attribute type 7 has an invalid length.
[   76.529480][ T6040] netlink: 'syz.2.64': attribute type 8 has an invalid length.
[   76.820766][ T6059] tipc: Started in network mode
[   76.822977][ T6059] tipc: Node identity b241d1f5a3da, cluster identity 4711
[   76.827360][   T24] tipc: Node number set to 2886997162
[   76.861789][ T6059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.867533][ T6059] syzkaller0: entered promiscuous mode
[   76.869719][ T6059] syzkaller0: entered allmulticast mode
[   76.907144][ T6059] tipc: Resetting bearer <eth:syzkaller0>
[   76.949850][ T6058] tipc: Resetting bearer <eth:syzkaller0>
[   76.973213][ T6058] tipc: Disabling bearer <eth:syzkaller0>
[   77.114654][ T5892] Bluetooth: hci2: command tx timeout
[   77.117351][ T5892] Bluetooth: hci0: command tx timeout
[   77.194221][ T5887] Bluetooth: hci1: command tx timeout
[   78.008473][ T6113] syz.0.98 uses obsolete (PF_INET,SOCK_PACKET)
[   78.205516][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'.
[   78.765947][ T6150] netlink: 'syz.0.113': attribute type 10 has an invalid length.
[   78.777491][ T6150] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   79.037760][ T6163] netlink: 72 bytes leftover after parsing attributes in process `syz.2.118'.
[   79.041406][ T6163] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   79.166216][ T6167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.196211][ T5887] Bluetooth: hci0: command tx timeout
[   79.198511][ T5887] Bluetooth: hci2: command tx timeout
[   79.245285][ T6167] syzkaller0: entered promiscuous mode
[   79.247582][ T6167] syzkaller0: entered allmulticast mode
[   79.250565][ T6167] tipc: Resetting bearer <eth:syzkaller0>
[   79.276175][ T5892] Bluetooth: hci1: command tx timeout
[   79.296973][ T1089] tipc: Resetting bearer <eth:syzkaller0>
[   79.301091][ T6165] tipc: Resetting bearer <eth:syzkaller0>
[   80.579987][ T6165] tipc: Disabling bearer <eth:syzkaller0>
[   80.711901][ T6189] netlink: 'syz.2.128': attribute type 1 has an invalid length.
[   80.720927][ T6189] netlink: 228 bytes leftover after parsing attributes in process `syz.2.128'.
[   80.736669][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'.
[   80.951789][ T6201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.988308][ T6203] tipc: Started in network mode
[   81.000673][ T6203] tipc: Node identity 3696d1d298d, cluster identity 4711
[   81.013859][ T6203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.032033][ T6203] syzkaller0: entered promiscuous mode
[   81.041147][ T6203] syzkaller0: entered allmulticast mode
[   81.101923][ T6203] tipc: Resetting bearer <eth:syzkaller0>
[   81.138613][ T6202] tipc: Resetting bearer <eth:syzkaller0>
[   81.180204][ T6202] tipc: Disabling bearer <eth:syzkaller0>
[   82.035634][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.160'.
[   82.059503][ T6261] Illegal XDP return value 4294967274 on prog  (id 17) dev syz_tun, expect packet loss!
[   82.401801][ T6283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.172'.
[   82.437065][ T6286] netlink: 232 bytes leftover after parsing attributes in process `syz.2.173'.
[   82.459902][ T6286] netlink: 232 bytes leftover after parsing attributes in process `syz.2.173'.
[   82.463704][ T6286] netlink: 44 bytes leftover after parsing attributes in process `syz.2.173'.
[   82.500733][ T6288] netlink: 'syz.1.174': attribute type 11 has an invalid length.
[   82.503743][ T6288] netlink: 'syz.1.174': attribute type 4 has an invalid length.
[   82.508468][ T6288] netlink: 224 bytes leftover after parsing attributes in process `syz.1.174'.
[   82.569206][ T6290] netlink: 96 bytes leftover after parsing attributes in process `syz.2.175'.
[   82.970035][ T6310] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.184'.
[   83.711241][ T6323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.918005][ T6333] netlink: 'syz.2.194': attribute type 10 has an invalid length.
[   83.945126][ T6333] team0: Port device geneve0 added
[   84.262192][ T6351] syzkaller1: entered promiscuous mode
[   84.264668][ T6351] syzkaller1: entered allmulticast mode
[   84.319751][ T6353] sock: sock_timestamping_bind_phc: sock not bind to device
[   84.692415][ T6380] bridge_slave_1: left allmulticast mode
[   84.700955][ T6380] bridge_slave_1: left promiscuous mode
[   84.712968][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.727917][ T6380] bridge_slave_0: left allmulticast mode
[   84.730160][ T6380] bridge_slave_0: left promiscuous mode
[   84.732612][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.818154][ T6383] warning: `syz.0.218' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.219040][ T6413] netlink: 'syz.0.230': attribute type 1 has an invalid length.
[   85.812053][ T6440] __nla_validate_parse: 7 callbacks suppressed
[   85.812072][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'.
[   86.596989][ T6481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.261'.
[   86.642132][  T792] cfg80211: failed to load regulatory.db
[   87.182592][ T6502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.799618][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'.
[   87.831252][ T6521] bridge_slave_1: left allmulticast mode
[   87.833834][ T6521] bridge_slave_1: left promiscuous mode
[   87.838818][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.846528][ T6521] bridge_slave_0: left allmulticast mode
[   87.848223][ T6521] bridge_slave_0: left promiscuous mode
[   87.851315][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.758060][ T6557] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   88.907959][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'.
[   88.913725][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'.
[   88.925974][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'.
[   88.930678][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'.
[   88.939356][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'.
[   88.947728][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'.
[   88.960192][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'.
[   89.061317][ T6569] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   89.382990][ T6574] ieee802154 phy0 wpan0: encryption failed: -22
[   91.046970][ T6673] Bluetooth: MGMT ver 1.23
[   91.573756][ T6701] __nla_validate_parse: 49 callbacks suppressed
[   91.573772][ T6701] netlink: 516 bytes leftover after parsing attributes in process `syz.1.356'.
[   92.113814][ T6730] pim6reg1: entered promiscuous mode
[   92.115949][ T6730] pim6reg1: entered allmulticast mode
[   92.876359][ T6740] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.372'.
[   92.930481][ T6742] netlink: 52 bytes leftover after parsing attributes in process `syz.2.375'.
[   92.941219][ T6742] netlink: 52 bytes leftover after parsing attributes in process `syz.2.375'.
[   92.945007][ T6742] netlink: 52 bytes leftover after parsing attributes in process `syz.2.375'.
[   92.971778][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.375'.
[   93.102936][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[   93.239123][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'.
[   93.269523][ T6762] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   93.274621][ T5678] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   93.284149][ T5678] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   93.287454][ T5678] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   93.290231][ T5678] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   93.446270][ T6775] openvswitch: netlink: Message has 4 unknown bytes.
[   93.458206][ T6775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.510058][ T6781] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.391'.
[   93.656371][ T5950] IPVS: starting estimator thread 0...
[   93.744434][ T6789] IPVS: using max 61 ests per chain, 146400 per kthread
[   93.768176][ T6794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.395'.
[   93.977994][ T6803] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   94.001206][ T6803] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   94.011406][ T6805] netlink: 'syz.2.401': attribute type 3 has an invalid length.
[   94.041985][ T6807] netlink: zone id is out of range
[   94.044212][ T6807] netlink: zone id is out of range
[   94.048609][ T6807] netlink: zone id is out of range
[   94.052457][ T6807] netlink: zone id is out of range
[   94.060343][ T6807] netlink: zone id is out of range
[   94.063519][ T6807] netlink: zone id is out of range
[   94.067536][ T6807] netlink: zone id is out of range
[   94.069555][ T6807] netlink: zone id is out of range
[   94.098321][ T6807] netlink: zone id is out of range
[   94.100867][ T6807] netlink: zone id is out of range
[   94.102736][ T6807] netlink: zone id is out of range
[   94.105337][ T6807] netlink: zone id is out of range
[   94.106938][ T6807] netlink: zone id is out of range
[   94.109866][ T6807] netlink: zone id is out of range
[   94.111616][ T6807] netlink: zone id is out of range
[   94.113183][ T6807] netlink: zone id is out of range
[   95.927964][ T6886] netlink: 'syz.0.437': attribute type 8 has an invalid length.
[   96.469274][ T6921] netlink: 'syz.0.452': attribute type 4 has an invalid length.
[   96.931949][ T6944] netlink: 'syz.0.463': attribute type 15 has an invalid length.
[   97.122047][ T6954] Zero length message leads to an empty skb
[   97.533103][ T6980] netlink: 'syz.2.481': attribute type 22 has an invalid length.
[   97.710780][ T6988] bridge0: entered promiscuous mode
[   97.865304][ T6998] netlink: 'syz.2.490': attribute type 1 has an invalid length.
[   97.884877][ T6998] __nla_validate_parse: 11 callbacks suppressed
[   97.884895][ T6998] netlink: 224 bytes leftover after parsing attributes in process `syz.2.490'.
[   98.307843][ T7016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.497'.
[   98.786405][ T7051] netlink: 'syz.1.515': attribute type 2 has an invalid length.
[   98.802167][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'.
[   98.807223][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'.
[   98.881989][ T7057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.889936][ T7057] syzkaller0: entered promiscuous mode
[   98.892194][ T7057] syzkaller0: entered allmulticast mode
[   98.914558][ T7057] tipc: Resetting bearer <eth:syzkaller0>
[   98.919927][ T7056] tipc: Resetting bearer <eth:syzkaller0>
[   98.933505][ T7056] tipc: Disabling bearer <eth:syzkaller0>
[   99.195267][ T7075] netlink: 'syz.0.524': attribute type 21 has an invalid length.
[   99.198816][ T7075] netlink: 132 bytes leftover after parsing attributes in process `syz.0.524'.
[   99.571906][ T7094] net_ratelimit: 23 callbacks suppressed
[   99.571940][ T7094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.927925][ T7117] netlink: 'syz.0.538': attribute type 16 has an invalid length.
[   99.931260][ T7117] netlink: 'syz.0.538': attribute type 3 has an invalid length.
[   99.936795][ T7117] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.538'.
[  100.126438][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'.
[  100.129799][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'.
[  100.473010][ T7159] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.551'.
[  100.497689][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'.
[  100.597048][ T7170] netlink: 'syz.1.556': attribute type 10 has an invalid length.
[  100.600267][ T7170] bond0: option arp_all_targets: invalid value (196616)
[  100.749205][ T7181] netlink: 'syz.2.560': attribute type 15 has an invalid length.
[  101.257252][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.269690][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.369482][ T7199] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  101.420803][ T5899] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.426475][ T5899] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.430038][ T5899] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.433647][ T5899] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.650633][ T7237] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  102.208647][ T7280] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.213067][ T7280] batadv_slave_0: entered promiscuous mode
[  102.215913][ T7280] batadv_slave_0: entered allmulticast mode
[  103.144759][ T7315] __nla_validate_parse: 5 callbacks suppressed
[  103.144770][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'.
[  103.577929][ T7324] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.935495][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'.
[  103.939018][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'.
[  103.942555][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'.
[  103.952711][ T7339] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  104.205503][ T7347] netem: incorrect ge model size
[  104.207371][ T7347] netem: change failed
[  104.250233][ T7358] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  104.361213][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  104.531742][ T7381] netlink: 96 bytes leftover after parsing attributes in process `syz.2.638'.
[  104.740200][ T7393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.641'.
[  105.072015][ T7409] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[  105.114632][ T7409] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.168952][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'.
[  105.364160][ T5315] tipc: Node number set to 295424501
[  105.648944][   T33] audit: type=1800 audit(1755293740.893:2): pid=7442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.667" name="@" dev="tmpfs" ino=1145 res=0 errno=0
[  106.231806][ T7484] vlan2: entered promiscuous mode
[  106.237679][ T7484] geneve0: entered promiscuous mode
[  106.714253][ T5887] Bluetooth: hci2: command 0x0405 tx timeout
[  107.573223][ T7558] IPVS: stopping backup sync thread 7559 ...
[  107.577748][ T7558] netlink: 260 bytes leftover after parsing attributes in process `syz.1.710'.
[  107.583082][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.710'.
[  108.105482][ T7595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.362646][ T7607] __nla_validate_parse: 1 callbacks suppressed
[  108.362662][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'.
[  108.427149][ T7609] netlink: 11382 bytes leftover after parsing attributes in process `syz.0.729'.
[  108.461377][ T7615] delete_channel: no stack
[  108.658075][ T7629] netlink: 5 bytes leftover after parsing attributes in process `syz.0.741'.
[  108.743612][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'.
[  109.615584][ T7677] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  109.791982][ T7682] netlink: 6 bytes leftover after parsing attributes in process `syz.2.765'.
[  109.810021][ T7682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.473593][ T7723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.478732][ T7723] syzkaller0: entered promiscuous mode
[  110.484520][ T7723] syzkaller0: entered allmulticast mode
[  110.509887][ T7723] tipc: Resetting bearer <eth:syzkaller0>
[  110.515387][ T7722] tipc: Resetting bearer <eth:syzkaller0>
[  110.535668][ T7722] tipc: Disabling bearer <eth:syzkaller0>
[  110.646964][ T7731] netlink: 224 bytes leftover after parsing attributes in process `syz.2.788'.
[  110.664592][ T7731] netlink: 'syz.2.788': attribute type 1 has an invalid length.
[  110.690706][ T7731] 8021q: adding VLAN 0 to HW filter on device bond2
[  110.712888][ T7731] bond2: (slave gretap1): making interface the new active one
[  110.719734][ T7731] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  110.750170][ T7731] syz.2.788 (7731) used greatest stack depth: 18160 bytes left
[  111.141953][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'.
[  112.281872][ T7797] gtp0: entered promiscuous mode
[  112.283596][ T7797] gtp0: entered allmulticast mode
[  112.288171][ T7798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.816'.
[  112.351555][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'.
[  113.732274][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'.
[  113.741175][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'.
[  113.750263][ T7837] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  113.759980][ T7837] netlink: 10 bytes leftover after parsing attributes in process `syz.2.833'.
[  113.767638][ T5951] IPVS: starting estimator thread 0...
[  113.805027][ T7837] nbd: socks must be embedded in a SOCK_ITEM attr
[  113.811323][ T7837] block nbd0: shutting down sockets
[  113.854169][ T7841] IPVS: using max 61 ests per chain, 146400 per kthread
[  114.130628][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'.
[  114.140188][ T7855] team0: entered promiscuous mode
[  114.142334][ T7855] team_slave_0: entered promiscuous mode
[  114.147152][ T7855] team_slave_1: entered promiscuous mode
[  114.149803][ T7855] geneve0: entered promiscuous mode
[  114.154452][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'.
[  114.244504][ T7855] team0 (unregistering): left promiscuous mode
[  114.247154][ T7855] team_slave_0: left promiscuous mode
[  114.249577][ T7855] team_slave_1: left promiscuous mode
[  114.252178][ T7855] geneve0: left promiscuous mode
[  114.260798][ T7855] team0 (unregistering): Port device team_slave_0 removed
[  114.266838][ T7855] team0 (unregistering): Port device team_slave_1 removed
[  114.271340][ T7855] team0 (unregistering): Port device geneve0 removed
[  114.286093][ T7857] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.841'.
[  114.785839][ T7888] sock: sock_set_timeout: `syz.0.853' (pid 7888) tries to set negative timeout
[  115.162455][ T7902] netlink: 348 bytes leftover after parsing attributes in process `syz.1.860'.
[  115.755724][ T5892] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  115.756864][ T5887] Bluetooth: hci0: command 0x0c1a tx timeout
[  116.295758][ T7959] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.887'.
[  116.458832][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'.
[  116.481186][ T7967] team0: entered promiscuous mode
[  116.482965][ T7967] team0: entered allmulticast mode
[  116.817033][ T7991] netlink: 'syz.1.903': attribute type 4 has an invalid length.
[  116.820203][ T7991] netlink: 17 bytes leftover after parsing attributes in process `syz.1.903'.
[  116.968864][ T8002] netlink: 'syz.1.907': attribute type 30 has an invalid length.
[  117.427365][ T8042] bond0: (slave bond_slave_0): Releasing backup interface
[  117.431087][ T8042] bond0: (slave bond_slave_1): Releasing backup interface
[  117.437447][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.440594][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.467064][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.471069][ T8042] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  117.697523][ T8061] netlink: 'syz.2.926': attribute type 1 has an invalid length.
[  117.851990][ T8070] netlink: 'syz.1.929': attribute type 4 has an invalid length.
[  119.680699][ T8137] __nla_validate_parse: 7 callbacks suppressed
[  119.680709][ T8137] netlink: 156 bytes leftover after parsing attributes in process `syz.0.958'.
[  119.690501][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'.
[  119.758610][ T8138] bond0 (unregistering): Released all slaves
[  119.862757][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'.
[  119.978858][ T8154] : entered promiscuous mode
[  120.150163][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'.
[  120.292486][ T8182] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  120.431223][ T8189] vti0: entered promiscuous mode
[  120.462955][ T8191] netlink: 'syz.1.978': attribute type 1 has an invalid length.
[  120.466225][ T8191] netlink: 228 bytes leftover after parsing attributes in process `syz.1.978'.
[  120.471723][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'.
[  121.057764][ T8204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.984'.
[  121.061444][ T8204] netlink: 'syz.2.984': attribute type 7 has an invalid length.
[  121.065963][ T8204] netlink: 'syz.2.984': attribute type 8 has an invalid length.
[  121.068885][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'.
[  121.076470][ T8204] gretap0: entered promiscuous mode
[  121.079222][ T8204] batadv_slave_1: entered promiscuous mode
[  121.082038][ T8204] erspan0: entered promiscuous mode
[  121.121992][ T8206] netlink: 'syz.2.985': attribute type 4 has an invalid length.
[  121.160790][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'.
[  121.195102][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.617741][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.633039][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.748457][ T8218] tipc: Resetting bearer <eth:macvtap0>
[  121.791265][ T8218] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  121.869963][ T8218] bridge0: left promiscuous mode
[  121.922843][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.930340][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  121.933944][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.939683][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  121.943518][ T8231] bridge0: port 3(netdevsim2) entered blocking state
[  121.947689][ T8231] bridge0: port 3(netdevsim2) entered disabled state
[  121.950534][ T8231] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  121.955877][ T8231] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  121.959567][ T8231] bridge0: port 3(netdevsim2) entered blocking state
[  121.962399][ T8231] bridge0: port 3(netdevsim2) entered forwarding state
[  121.966277][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.973835][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  121.980676][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.988216][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  122.453103][ T8252] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1004'.
[  122.816420][ T8266] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526
[  124.013899][ T8352] nbd: couldn't find device at index 536870912
[  124.988634][ T8405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.172827][ T8412] __nla_validate_parse: 4 callbacks suppressed
[  125.172839][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'.
[  125.178807][ T8412] netdevsim netdevsim0 netdevsim2: left allmulticast mode
[  125.181139][ T8412] netdevsim netdevsim0 netdevsim2: left promiscuous mode
[  125.183892][ T8412] bridge0: port 3(netdevsim2) entered disabled state
[  125.188364][ T8412] bridge_slave_1: left allmulticast mode
[  125.190201][ T8412] bridge_slave_1: left promiscuous mode
[  125.192146][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.197901][ T8412] bridge_slave_0: left allmulticast mode
[  125.199807][ T8412] bridge_slave_0: left promiscuous mode
[  125.201837][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.434355][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'.
[  125.485299][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'.
[  125.489886][ T8421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1074'.
[  125.873110][ T5899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  125.886135][ T5899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  125.889620][ T5899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  125.914176][ T5899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  126.199513][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'.
[  126.287097][ T5899] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  126.462915][ T8480] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1097'.
[  126.706204][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'.
[  126.823463][ T8494] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1103'.
[  126.947031][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'.
[  127.626133][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'.
[  127.690808][ T8546] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  129.543339][ T5887] Bluetooth: hci2: link tx timeout
[  129.549121][ T5887] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.553193][ T5887] Bluetooth: hci2: link tx timeout
[  129.555391][ T5887] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.403786][ T8738] __nla_validate_parse: 4 callbacks suppressed
[  130.403798][ T8738] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1213'.
[  130.598107][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'.
[  130.815973][ T8758] netlink: 'syz.2.1223': attribute type 142 has an invalid length.
[  131.002028][ T8771] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1229'.
[  131.594415][ T5887] Bluetooth: hci2: command 0x0405 tx timeout
[  131.897424][ T8851] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1264'.
[  132.370081][ T8878] netlink: 'syz.0.1276': attribute type 1 has an invalid length.
[  132.412619][ T8878] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  132.422860][ T5899] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  132.423625][ T8878] 8021q: adding VLAN 0 to HW filter on device bond2
[  132.446391][ T8878] veth3: entered promiscuous mode
[  132.450635][ T8878] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  132.465567][ T8878] bond0: (slave bond_slave_0): Releasing backup interface
[  132.471813][ T8878] bond0: (slave bond_slave_1): Releasing backup interface
[  132.481691][ T8878] team0: Port device team_slave_0 removed
[  132.493070][ T8878] team0: Port device team_slave_1 removed
[  132.496517][ T8878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.500679][ T8878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.503677][ T8878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.514814][ T8878] bond0: (slave wlan1): Releasing backup interface
[  132.533283][ T8878] bond2: (slave ip6gretap1): Removing an active aggregator
[  132.537770][ T5899] bond2: Warning: Found an uninitialized port
[  132.542847][ T8878] bond2: (slave ip6gretap1): Releasing backup interface
[  132.547939][ T8878] bond2: (slave ip6gretap1): the permanent HWaddr of slave - c6:1b:42:fa:be:ea - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  132.559329][ T8878] bond2: (slave veth3): Releasing backup interface
[  132.678872][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1278'.
[  132.719225][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.721639][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.362270][ T8919] vlan2: entered promiscuous mode
[  133.369030][ T8919] bridge0: entered promiscuous mode
[  133.410587][ T8921] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1295'.
[  133.514689][ T8905] netlink: 'syz.2.1287': attribute type 13 has an invalid length.
[  133.528576][ T8905] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  134.171934][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1303'.
[  134.272855][ T5882] block nbd64: NBD_DISCONNECT
[  134.463922][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1308'.
[  134.600991][ T8963] pimreg: entered allmulticast mode
[  134.607473][ T8963] pimreg: left allmulticast mode
[  135.100536][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1327'.
[  135.328572][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  135.517741][ T9032] netlink: 'syz.0.1345': attribute type 2 has an invalid length.
[  135.520973][ T9032] netlink: 'syz.0.1345': attribute type 1 has an invalid length.
[  135.701615][ T9044] netlink: 'syz.0.1350': attribute type 1 has an invalid length.
[  136.056364][   T33] audit: type=1107 audit(1755293771.303:3): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  136.165163][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'.
[  136.168697][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'.
[  136.369508][ T9072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.372025][ T9072] IPv6: NLM_F_CREATE should be set when creating new route
[  136.947051][ T9084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1367'.
[  137.442050][ T9110] netlink: 'syz.2.1376': attribute type 1 has an invalid length.
[  137.508870][ T9116] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.511302][ T9116] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  137.522322][ T9116] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  137.689684][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'.
[  138.418843][ T9171] netlink: 'syz.1.1398': attribute type 8 has an invalid length.
[  139.051628][ T9219] netlink: 'syz.2.1421': attribute type 1 has an invalid length.
[  139.055148][ T9220] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1422'.
[  139.055933][ T9219] netlink: 'syz.2.1421': attribute type 4 has an invalid length.
[  139.397603][ T9254] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1439'.
[  139.401660][ T9254] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1439'.
[  139.588228][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'.
[  139.650927][ T9275] delete_channel: no stack
[  140.141374][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'.
[  140.219292][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'.
[  140.490308][ T9333] netlink: 'syz.0.1474': attribute type 4 has an invalid length.
[  140.896246][   T33] audit: type=1800 audit(1755293776.133:4): pid=9373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1494" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2460 res=0 errno=0
[  140.905400][   T33] audit: type=1804 audit(1755293776.133:5): pid=9373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1494" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2460 res=1 errno=0
[  141.011283][ T9381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  141.333142][ T9398] __nla_validate_parse: 5 callbacks suppressed
[  141.333156][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'.
[  141.340995][ T9398] netlink: 'syz.1.1504': attribute type 30 has an invalid length.
[  141.360217][ T5899] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.363898][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'.
[  141.370003][ T5899] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.373548][ T9398] netlink: 'syz.1.1504': attribute type 30 has an invalid length.
[  141.375492][ T5899] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.380526][ T5899] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.447438][ T9401] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1505'.
[  141.456538][ T9401] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1505'.
[  141.508656][ T9403] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  141.511753][ T9403] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  141.979865][ T9432] netlink: 'syz.0.1516': attribute type 1 has an invalid length.
[  141.983847][ T9432] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1516'.
[  142.833062][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1526'.
[  143.392540][ T9477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1539'.
[  143.438778][ T9480] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  143.730538][ T9500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1550'.
[  144.191329][ T5315] IPVS: starting estimator thread 0...
[  144.294071][ T9507] IPVS: using max 61 ests per chain, 146400 per kthread
[  144.590367][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'.
[  144.683368][ T9532] netlink: 'syz.2.1565': attribute type 13 has an invalid length.
[  144.695952][ T9532] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.1565'.
[  145.138405][ T9556] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.199484][ T9556] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  145.287008][ T9563] netlink: 'syz.2.1576': attribute type 1 has an invalid length.
[  145.577173][ T9569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.582518][ T9569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.145720][ T9590] netlink: 'syz.1.1587': attribute type 1 has an invalid length.
[  146.557317][ T9615] __nla_validate_parse: 2 callbacks suppressed
[  146.557339][ T9615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1597'.
[  148.935396][ T9762] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  148.940705][ T9764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.158659][ T9774] !: renamed from dummy0 (while UP)
[  149.227118][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'.
[  150.305293][ T9838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.314547][ T9838] syzkaller0: entered promiscuous mode
[  150.316770][ T9838] syzkaller0: entered allmulticast mode
[  150.419119][ T9857] tipc: Resetting bearer <eth:syzkaller0>
[  150.482009][ T9837] tipc: Resetting bearer <eth:syzkaller0>
[  150.523108][ T9837] tipc: Disabling bearer <eth:syzkaller0>
[  150.664184][ T9863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  150.667134][ T9863] IPv6: NLM_F_CREATE should be set when creating new route
[  150.670056][ T9863] IPv6: NLM_F_CREATE should be set when creating new route
[  151.794939][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'.
[  152.066702][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'.
[  152.220207][ T9941] tipc: Failed to remove unknown binding: 66,1,1/2886997162:584486175/584486177
[  152.225343][ T9941] tipc: Failed to remove unknown binding: 66,1,1/2886997162:584486175/584486177
[  152.397362][ T9948] geneve2: entered promiscuous mode
[  152.422822][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1716'.
[  152.456797][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1715'.
[  152.493168][ T9953] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  152.617932][ T9958] bond0: (slave rose0): Error: Device can not be enslaved while up
[  152.620903][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1719'.
[  152.749065][ T9964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1722'.
[  152.831323][ T9971] netlink: 'syz.2.1725': attribute type 2 has an invalid length.
[  152.837679][ T9970] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1724'.
[  152.950766][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1729'.
[  152.956658][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1729'.
[  153.387018][T10001] pim6reg: entered allmulticast mode
[  153.391985][T10001] pim6reg: left allmulticast mode
[  154.029237][T10032] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1753'.
[  154.084880][T10036] netlink: 'syz.1.1755': attribute type 1 has an invalid length.
[  154.344076][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  154.353041][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  154.363228][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  154.554465][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  154.605141][T10085] netlink: 'syz.0.1776': attribute type 10 has an invalid length.
[  154.609614][T10085] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  155.100660][T10125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.105330][T10125] syzkaller0: entered promiscuous mode
[  155.107606][T10125] syzkaller0: entered allmulticast mode
[  155.112759][T10125] tipc: Resetting bearer <eth:syzkaller0>
[  155.116649][T10124] tipc: Resetting bearer <eth:syzkaller0>
[  155.126271][T10124] tipc: Disabling bearer <eth:syzkaller0>
[  155.471480][T10152] : left promiscuous mode
[  155.753931][T10166] vlan0: entered promiscuous mode
[  156.079942][T10181] netlink: zone id is out of range
[  156.082004][T10181] netlink: get zone limit has 8 unknown bytes
[  156.666185][T10209] netlink: 'syz.2.1833': attribute type 16 has an invalid length.
[  156.669503][T10209] netlink: 'syz.2.1833': attribute type 17 has an invalid length.
[  156.848325][T10217] __nla_validate_parse: 7 callbacks suppressed
[  156.848339][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'.
[  157.047181][T10229] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1843'.
[  157.275846][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1849'.
[  157.362911][T10246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1851'.
[  157.611189][T10256] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1855'.
[  157.845440][T10275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1861'.
[  158.180557][T10294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'.
[  158.608888][T10329] ip6gre1: entered allmulticast mode
[  158.661240][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1890'.
[  158.669702][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'.
[  158.687235][T10334] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1890'.
[  158.988625][T10359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.992027][T10359] syzkaller0: entered promiscuous mode
[  158.998934][T10359] syzkaller0: entered allmulticast mode
[  159.020146][T10359] tipc: Resetting bearer <eth:syzkaller0>
[  159.025882][T10358] tipc: Resetting bearer <eth:syzkaller0>
[  159.040117][T10358] tipc: Disabling bearer <eth:syzkaller0>
[  159.350918][T10380] netlink: 'syz.0.1912': attribute type 1 has an invalid length.
[  159.354993][T10380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.550683][T10418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.562262][T10418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  160.569394][T10418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  160.633276][T10418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.637241][T10418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  160.641134][T10418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  160.718933][T10418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.723019][T10418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  160.727775][T10418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  160.839687][T10418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.843608][T10418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  160.848228][T10418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  160.963146][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.966417][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.969448][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  160.982726][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.988003][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.993334][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  161.017482][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.020243][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.031142][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  161.035415][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  161.038165][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.041348][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  161.467755][T10461] netlink: 'syz.1.1942': attribute type 21 has an invalid length.
[  161.997050][T10500] __nla_validate_parse: 4 callbacks suppressed
[  161.997062][T10500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1961'.
[  162.001941][T10500] netlink: 'syz.2.1961': attribute type 7 has an invalid length.
[  162.008394][T10500] netlink: 'syz.2.1961': attribute type 8 has an invalid length.
[  162.010869][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'.
[  162.018696][T10500] ip6gretap0: entered promiscuous mode
[  162.020961][T10500] syz_tun: entered promiscuous mode
[  162.023307][T10500] ip6gretap0: left promiscuous mode
[  162.027558][T10500] syz_tun: left promiscuous mode
[  162.108939][T10512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.111606][T10512] syzkaller0: entered promiscuous mode
[  162.113341][T10512] syzkaller0: entered allmulticast mode
[  162.129396][T10512] tipc: Resetting bearer <eth:syzkaller0>
[  162.132570][T10511] tipc: Resetting bearer <eth:syzkaller0>
[  162.152761][T10511] tipc: Disabling bearer <eth:syzkaller0>
[  162.428204][T10531] syzkaller0: entered promiscuous mode
[  162.430490][T10531] syzkaller0: entered allmulticast mode
[  162.542479][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'.
[  163.813770][T10539] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  164.076850][T10574] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  164.246268][T10589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.308910][T10595] netlink: 'syz.0.2006': attribute type 5 has an invalid length.
[  164.312138][T10595] netlink: 'syz.0.2006': attribute type 7 has an invalid length.
[  164.326155][T10595] : entered promiscuous mode
[  164.563470][ T5892] Bluetooth: hci2: command 0x0405 tx timeout
[  164.572645][T10615] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2010'.
[  165.299355][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2021'.
[  165.327603][T10631] netlink: 'syz.1.2021': attribute type 2 has an invalid length.
[  165.568661][T10659] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  165.748664][T10670] Bluetooth: hci0: Opcode 0x080f failed: -22
[  165.952446][T10682] netlink: 'syz.0.2046': attribute type 21 has an invalid length.
[  165.956973][T10682] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2046'.
[  166.062341][T10684] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.142911][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'.
[  166.151304][T10684] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.221512][T10684] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.249192][T10693] pim6reg0: tun_chr_ioctl cmd 1074025677
[  166.251315][T10693] pim6reg0: linktype set to 774
[  166.283320][T10684] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.351043][ T5915] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.364353][ T5915] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.379306][ T5915] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.389398][ T5915] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.542282][T10706] batadv_slave_1: entered promiscuous mode
[  166.545134][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'.
[  166.548605][T10707] netlink: 'syz.0.2057': attribute type 4 has an invalid length.
[  166.740894][T10721] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  166.828413][T10721] netlink: 'syz.0.2064': attribute type 10 has an invalid length.
[  166.831532][T10721] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  166.847678][T10721] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.856148][T10721] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  166.891183][T10731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2069'.
[  166.931422][T10734] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  166.968378][T10727] netlink: 'syz.1.2067': attribute type 1 has an invalid length.
[  166.973104][T10727] nbd: error processing sock list
[  166.976633][T10727] block nbd0: shutting down sockets
[  167.462583][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'.
[  167.685218][T10788] netlink: 'syz.2.2095': attribute type 4 has an invalid length.
[  167.757111][ T5892] Bluetooth: hci0: command tx timeout
[  167.806064][T10796] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2100'.
[  168.104642][T10826] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2114'.
[  168.471692][T10851] netlink: 'syz.2.2127': attribute type 10 has an invalid length.
[  168.487042][T10851] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  169.481056][T10875] vlan2: entered promiscuous mode
[  169.483109][T10875] bond0: entered promiscuous mode
[  169.485485][T10875] vlan2: entered allmulticast mode
[  169.487098][T10875] bond0: entered allmulticast mode
[  169.784587][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2141'.
[  169.823675][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'.
[  170.085101][T10916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2150'.
[  170.263027][T10929] netlink: 'syz.0.2154': attribute type 5 has an invalid length.
[  170.327657][T10933] netlink: 'syz.1.2155': attribute type 1 has an invalid length.
[  170.330752][T10933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2155'.
[  170.672170][T10958] netlink: 'syz.1.2164': attribute type 30 has an invalid length.
[  170.689994][T10958] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  170.693525][T10958] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  170.723566][T10962] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  170.797396][T10962] nbd0: detected capacity change from 0 to 127
[  170.802083][   T56] block nbd0: Receive control failed (result -32)
[  170.807745][T10930] block nbd0: Send control failed (result -32)
[  170.810096][T10930] block nbd0: Request send failed, requeueing
[  170.825509][   T60] block nbd0: Dead connection, failed to find a fallback
[  170.828471][   T60] block nbd0: shutting down sockets
[  170.830846][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.840710][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.844803][T10930] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.848451][T10930] Buffer I/O error on dev nbd0, logical block 1, async page read
[  170.851787][T10930] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.859030][T10930] Buffer I/O error on dev nbd0, logical block 2, async page read
[  170.863569][T10930] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.867614][T10930] Buffer I/O error on dev nbd0, logical block 3, async page read
[  170.870995][T10930] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.876764][T10966] netlink: 'syz.0.2167': attribute type 1 has an invalid length.
[  170.879827][T10966] netlink: 'syz.0.2167': attribute type 1 has an invalid length.
[  170.884266][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'.
[  170.888181][T10930] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.891100][T10930] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.898060][T10966] block nbd1: shutting down sockets
[  170.903181][T10930] Buffer I/O error on dev nbd0, logical block 1, async page read
[  170.913156][T10930] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.931381][T10930] Buffer I/O error on dev nbd0, logical block 2, async page read
[  170.947015][T10930] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.950619][T10930] Buffer I/O error on dev nbd0, logical block 3, async page read
[  170.953659][T10930] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.962907][T10930] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.974295][T10930] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.977748][T10930] Buffer I/O error on dev nbd0, logical block 1, async page read
[  170.986152][T10930] ldm_validate_partition_table(): Disk read failed.
[  171.011892][T10930] Dev nbd0: unable to read RDB block 0
[  171.020207][T10930]  nbd0: unable to read partition table
[  171.041389][T10930] ldm_validate_partition_table(): Disk read failed.
[  171.045671][T10930] Dev nbd0: unable to read RDB block 0
[  171.061516][T10930]  nbd0: unable to read partition table
[  171.086027][T10981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.090412][T10981] syzkaller0: entered promiscuous mode
[  171.112742][T10981] syzkaller0: entered allmulticast mode
[  171.167592][T10981] tipc: Resetting bearer <eth:syzkaller0>
[  171.171852][T10980] tipc: Resetting bearer <eth:syzkaller0>
[  171.189244][T10980] tipc: Disabling bearer <eth:syzkaller0>
[  171.593400][T11017] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2187'.
[  172.830665][T11055] netlink: 'syz.0.2201': attribute type 13 has an invalid length.
[  172.833727][T11055] netlink: 'syz.0.2201': attribute type 17 has an invalid length.
[  172.899616][T11055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.390429][T11075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2212'.
[  173.463297][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2215'.
[  173.762574][T11099] netlink: 'syz.2.2224': attribute type 3 has an invalid length.
[  173.800442][T11103] batman_adv: batadv0: Adding interface: ip6gretap2
[  173.803133][T11103] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.821276][T11103] batman_adv: batadv0: Interface activated: ip6gretap2
[  173.920541][T11109] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2228'.
[  174.485136][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'.
[  174.489926][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'.
[  174.532481][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2237'.
[  174.540523][T11127] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  174.648496][T11136] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2239'.
[  174.777771][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'.
[  174.966638][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'.
[  175.002360][T11171] geneve3: entered promiscuous mode
[  175.055334][T11177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.058220][T11177] syzkaller0: entered promiscuous mode
[  175.060041][T11177] syzkaller0: entered allmulticast mode
[  175.101245][T11177] tipc: Resetting bearer <eth:syzkaller0>
[  175.106600][T11176] tipc: Resetting bearer <eth:syzkaller0>
[  175.127419][T11176] tipc: Disabling bearer <eth:syzkaller0>
[  175.826065][T11227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.829821][T11227] syzkaller0: entered promiscuous mode
[  175.831693][T11227] syzkaller0: entered allmulticast mode
[  175.848966][T11227] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  175.853918][T11227] tipc: Resetting bearer <eth:syzkaller0>
[  175.863168][T11226] tipc: Resetting bearer <eth:syzkaller0>
[  175.874692][T11226] tipc: Disabling bearer <eth:syzkaller0>
[  176.305190][T11261] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  176.310915][T11261] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  176.479513][T11274] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  176.533050][T11279] netlink: 'syz.0.2306': attribute type 1 has an invalid length.
[  177.128837][T11307] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2318'.
[  178.285826][T11341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.289199][T11341] syzkaller0: entered promiscuous mode
[  178.291360][T11341] syzkaller0: entered allmulticast mode
[  178.311599][T11341] tipc: Resetting bearer <eth:syzkaller0>
[  178.373241][T11340] tipc: Resetting bearer <eth:syzkaller0>
[  178.388883][T11340] tipc: Disabling bearer <eth:syzkaller0>
[  178.513865][T11352] __nla_validate_parse: 3 callbacks suppressed
[  178.513882][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2333'.
[  178.865185][T11382] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2349'.
[  178.885400][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'.
[  179.203804][T11419] netlink: 'syz.2.2366': attribute type 13 has an invalid length.
[  179.210663][T11419] netlink: 'syz.2.2366': attribute type 17 has an invalid length.
[  179.338703][T11419] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.342635][T11419] 8021q: adding VLAN 0 to HW filter on device team0
[  179.347976][T11419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.401952][T11419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.408003][T11419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.605261][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'.
[  180.208390][T11453] syzkaller0: entered promiscuous mode
[  180.210767][T11453] syzkaller0: entered allmulticast mode
[  181.747627][T11484] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2395'.
[  182.015696][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2402'.
[  182.212359][T11515] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  182.722744][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2410'.
[  182.903649][T11547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2416'.
[  183.063902][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'.
[  183.298254][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'.
[  183.399959][T11586] netlink: 'syz.2.2432': attribute type 4 has an invalid length.
[  183.519391][T11599] netlink: 'syz.1.2439': attribute type 10 has an invalid length.
[  184.410974][T11594] bond0: (slave wlan1): Releasing backup interface
[  184.442977][T11594] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  184.452541][T11594] batman_adv: batadv0: Removing interface: ip6gretap2
[  184.503569][T11594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2437'.
[  184.600249][T11619] netlink: 'syz.0.2447': attribute type 1 has an invalid length.
[  184.603134][T11619] netlink: 'syz.0.2447': attribute type 2 has an invalid length.
[  184.912593][T11630] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  185.743361][T11661] netlink: 'syz.1.2462': attribute type 1 has an invalid length.
[  185.746666][T11661] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2462'.
[  185.915220][T11671] netem: change failed
[  186.143905][T11684] netlink: 'syz.0.2472': attribute type 3 has an invalid length.
[  186.210318][T11690] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2474'.
[  186.312025][T11695] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2476'.
[  186.317906][T11695] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  186.321220][T11695] openvswitch: netlink: Message has 8454 unknown bytes.
[  186.497756][T11711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2485'.
[  186.747044][T11732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.754899][T11732] syzkaller0: entered promiscuous mode
[  186.757046][T11732] syzkaller0: entered allmulticast mode
[  186.769998][T11734] netlink: 'syz.1.2496': attribute type 1 has an invalid length.
[  186.773156][T11734] netlink: 'syz.1.2496': attribute type 10 has an invalid length.
[  186.776394][T11734] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2496'.
[  186.783148][T11732] tipc: Resetting bearer <eth:syzkaller0>
[  186.789201][T11731] tipc: Resetting bearer <eth:syzkaller0>
[  186.805616][T11731] tipc: Disabling bearer <eth:syzkaller0>
[  186.827129][T11738] bond0: option ad_select: unable to set because the bond device is up
[  187.065862][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2506'.
[  187.111941][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'.
[  187.637138][T11787] syzkaller0: entered promiscuous mode
[  187.639344][T11787] syzkaller0: entered allmulticast mode
[  188.360931][T11783] delete_channel: no stack
[  188.399402][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'.
[  188.402937][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'.
[  188.421079][T11817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.448971][ T5678] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  188.453092][ T5678] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.456702][ T5678] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.460071][ T5678] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  188.900422][T11828] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  189.334701][T11846] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  189.368617][T11848] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  189.446737][T11854] lo speed is unknown, defaulting to 1000
[  189.451286][T11854] lo speed is unknown, defaulting to 1000
[  189.494681][T11854] lo speed is unknown, defaulting to 1000
[  189.519004][T11857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.668836][T11866] trusted_key: syz.0.2554 sent an empty control message without MSG_MORE.
[  189.732136][T11854] infiniband syz0: set active
[  189.736507][   T51] lo speed is unknown, defaulting to 1000
[  189.738544][T11854] infiniband syz0: added lo
[  189.825612][T11854] RDS/IB: syz0: added
[  189.828022][T11854] smc: adding ib device syz0 with port count 1
[  189.830460][T11854] smc:    ib device syz0 port 1 has pnetid 
[  189.838729][   T51] lo speed is unknown, defaulting to 1000
[  189.844991][T11854] lo speed is unknown, defaulting to 1000
[  190.111863][T11854] lo speed is unknown, defaulting to 1000
[  190.317826][T11854] lo speed is unknown, defaulting to 1000
[  191.064696][T11933] __nla_validate_parse: 2 callbacks suppressed
[  191.064715][T11933] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2580'.
[  191.085177][T11933] hsr_slave_0: left promiscuous mode
[  191.103550][T11933] hsr_slave_1: left promiscuous mode
[  191.159180][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2584'.
[  191.162916][T11939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2585'.
[  191.164087][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2584'.
[  191.169980][T11937] netlink: 'syz.1.2584': attribute type 4 has an invalid length.
[  191.436678][ T5892] Bluetooth: hci0: command tx timeout
[  191.560486][T11970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2599'.
[  191.686166][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2605'.
[  191.887139][T11995] openvswitch: netlink: IP tunnel dst address not specified
[  191.923749][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2612'.
[  191.935943][T11997] batman_adv: batadv0: Adding interface: ipvlan2
[  191.938923][T11997] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.950176][T11997] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  192.346829][T12023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.350399][T12023] syzkaller0: entered promiscuous mode
[  192.352733][T12023] syzkaller0: entered allmulticast mode
[  192.368005][T12023] tipc: Resetting bearer <eth:syzkaller0>
[  192.371801][T12021] tipc: Resetting bearer <eth:syzkaller0>
[  192.389047][T12021] tipc: Disabling bearer <eth:syzkaller0>
[  192.502759][T12031] netlink: 'syz.1.2629': attribute type 14 has an invalid length.
[  192.520672][T12031] netlink: 'syz.1.2629': attribute type 14 has an invalid length.
[  192.875472][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'.
[  192.878849][T12068] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2639'.
[  192.896542][T12068] vlan2: entered allmulticast mode
[  192.898430][T12068] veth1: entered allmulticast mode
[  193.489636][T12088] netlink: 'syz.2.2647': attribute type 12 has an invalid length.
[  193.492827][T12088] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.2647'.
[  193.750288][T12103] lo speed is unknown, defaulting to 1000
[  194.119524][T12119] ip_vti0: Master is either lo or non-ether device
[  195.471504][T12168] netlink: 'syz.0.2682': attribute type 1 has an invalid length.
[  195.579647][T12171] batadv_slave_0: entered promiscuous mode
[  195.583574][T12170] batadv_slave_0: left promiscuous mode
[  196.164831][T12207] openvswitch: netlink: Key type 30 is not supported
[  196.238400][ T5892] Bluetooth: hci1: command 0x0406 tx timeout
[  196.417338][T12223] team0: Mode changed to "activebackup"
[  196.422722][T12223] tipc: Enabled bearer <eth:team0>, priority 0
[  196.585390][T12237] __nla_validate_parse: 5 callbacks suppressed
[  196.585406][T12237] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2714'.
[  196.591375][T12237] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  196.666826][T12237] batman_adv: batadv0: Removing interface: ipvlan2
[  196.999436][T12266] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  197.208012][T12276] !: renamed from dummy0
[  197.301256][T12285] C: renamed from team_slave_0
[  197.317422][T12285] netlink: 'syz.2.2735': attribute type 3 has an invalid length.
[  197.329813][T12285] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2735'.
[  197.340224][T12285] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  197.520480][T12297] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2738'.
[  198.346922][T12368] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  198.400294][T12374] netlink: 'syz.0.2754': attribute type 12 has an invalid length.
[  198.403458][T12374] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.2754'.
[  198.407696][ T5887] Bluetooth: hci2: command 0x0405 tx timeout
[  198.559653][T12387] netlink: 'syz.1.2761': attribute type 1 has an invalid length.
[  198.561439][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'.
[  198.564757][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'.
[  198.569573][T12387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2761'.
[  198.585703][T12387] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  198.589411][T12387] gretap1: entered promiscuous mode
[  198.742614][T12403] tipc: Enabled bearer <eth:team0>, priority 10
[  199.563530][T12432] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  199.567514][T12432] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  199.791547][T12442] netlink: 'syz.1.2784': attribute type 29 has an invalid length.
[  200.443464][T12472] GUP no longer grows the stack in syz.0.2798 (12472): 200000006000-20000000a000 (200000005000)
[  200.448375][T12472] CPU: 0 UID: 0 PID: 12472 Comm: syz.0.2798 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  200.448395][T12472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.448404][T12472] Call Trace:
[  200.448411][T12472]  <TASK>
[  200.448418][T12472]  dump_stack_lvl+0x189/0x250
[  200.448444][T12472]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.448461][T12472]  ? __pfx__printk+0x10/0x10
[  200.448479][T12472]  ? find_vma+0xe7/0x160
[  200.448499][T12472]  ? mas_next_slot+0xc27/0xcf0
[  200.448525][T12472]  __get_user_pages+0x24d0/0x2ce0
[  200.448541][T12472]  ? __lock_acquire+0xab9/0xd20
[  200.448578][T12472]  ? __gup_longterm_locked+0xc68/0x1660
[  200.448602][T12472]  __gup_longterm_locked+0xde9/0x1660
[  200.448627][T12472]  ? try_grab_folio_fast+0x1be/0x4f0
[  200.448652][T12472]  ? gup_fast_fallback+0x195f/0x2010
[  200.448671][T12472]  gup_fast_fallback+0x1e6a/0x2010
[  200.448712][T12472]  ? __pfx_gup_fast_fallback+0x10/0x10
[  200.448729][T12472]  ? __mutex_lock+0x335/0x1360
[  200.448753][T12472]  ? is_valid_gup_args+0x11f/0x200
[  200.448772][T12472]  ? get_user_pages_fast+0x4d/0xb0
[  200.448792][T12472]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  200.448819][T12472]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  200.448840][T12472]  ? wait_for_space+0x24d/0x2d0
[  200.448872][T12472]  iov_iter_get_pages2+0x5e/0xa0
[  200.448896][T12472]  __se_sys_vmsplice+0x548/0x10d0
[  200.448958][T12472]  ? futex_private_hash_put+0x4b/0x280
[  200.448981][T12472]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  200.449005][T12472]  ? __pfx_futex_wake+0x10/0x10
[  200.449031][T12472]  ? __lock_acquire+0xab9/0xd20
[  200.449079][T12472]  ? do_pipe2+0xf7/0x170
[  200.449102][T12472]  ? rcu_is_watching+0x15/0xb0
[  200.449120][T12472]  ? do_syscall_64+0xbe/0x3b0
[  200.449142][T12472]  do_syscall_64+0xfa/0x3b0
[  200.449160][T12472]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.449177][T12472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.449192][T12472]  ? exc_page_fault+0x9f/0xf0
[  200.449210][T12472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.449225][T12472] RIP: 0033:0x7f6bc7f8ebe9
[  200.449250][T12472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.449263][T12472] RSP: 002b:00007f6bc8def038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  200.449279][T12472] RAX: ffffffffffffffda RBX: 00007f6bc81b5fa0 RCX: 00007f6bc7f8ebe9
[  200.449290][T12472] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  200.449297][T12472] RBP: 00007f6bc8011e19 R08: 0000000000000000 R09: 0000000000000000
[  200.449305][T12472] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  200.449314][T12472] R13: 00007f6bc81b6038 R14: 00007f6bc81b5fa0 R15: 00007fff205e9f58
[  200.449337][T12472]  </TASK>
[  200.949396][T12492] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  200.962531][T12492] ------------[ cut here ]------------
[  200.964819][T12492] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  200.968506][T12492] WARNING: CPU: 0 PID: 12492 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  200.972486][T12492] Modules linked in:
[  200.974593][T12492] CPU: 0 UID: 0 PID: 12492 Comm: syz.2.2807 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  200.980460][T12492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.984542][T12492] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  200.986666][T12492] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 c0 15 b0 8c e8 76 55 9c f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 e7 b6 d8 f6 90 0f 0b 90 42 80 7c 3d
[  200.994815][T12492] RSP: 0018:ffffc90003807910 EFLAGS: 00010246
[  200.997162][T12492] RAX: b723d1ae4f94b700 RBX: 0000000000000000 RCX: 0000000000080000
[  201.000140][T12492] RDX: ffffc90020d09000 RSI: 0000000000004494 RDI: 0000000000004495
[  201.003264][T12492] RBP: ffff888120371728 R08: ffff88804b024253 R09: 1ffff1100960484a
[  201.006710][T12492] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff8881203729d0
[  201.009489][T12492] R13: ffff888120370d80 R14: 1ffff1102406e2e5 R15: dffffc0000000000
[  201.012233][T12492] FS:  00007fef847636c0(0000) GS:ffff8880b8621000(0000) knlGS:0000000000000000
[  201.015676][T12492] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.018299][T12492] CR2: 0000001b34f1aff8 CR3: 000000010e8ca000 CR4: 00000000000006f0
[  201.021208][T12492] Call Trace:
[  201.022307][T12492]  <TASK>
[  201.023437][T12492]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  201.025804][T12492]  __ieee80211_link_release_channel+0x33b/0x4a0
[  201.027859][T12492]  ieee80211_if_change_type+0x14c/0x990
[  201.029740][T12492]  ieee80211_change_iface+0xd5/0x510
[  201.031342][T12492]  cfg80211_change_iface+0x795/0xef0
[  201.033376][T12492]  cfg80211_wext_siwmode+0x1db/0x2b0
[  201.036667][T12492]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  201.038488][T12492]  ? full_name_hash+0x92/0xe0
[  201.040008][T12492]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  201.041970][T12492]  ioctl_standard_call+0xcb/0x1b0
[  201.043832][T12492]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  201.046352][T12492]  wext_ioctl_dispatch+0xee/0x410
[  201.048373][T12492]  ? __pfx_ioctl_standard_call+0x10/0x10
[  201.050652][T12492]  wext_handle_ioctl+0x100/0x1c0
[  201.052665][T12492]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  201.054767][T12492]  ? __lock_acquire+0xab9/0xd20
[  201.056371][T12492]  sock_ioctl+0x15f/0x790
[  201.058024][T12492]  ? __pfx_sock_ioctl+0x10/0x10
[  201.059987][T12492]  ? __fget_files+0x2a/0x420
[  201.061896][T12492]  ? __fget_files+0x3a0/0x420
[  201.063660][T12492]  ? __fget_files+0x2a/0x420
[  201.066021][T12492]  ? bpf_lsm_file_ioctl+0x9/0x20
[  201.068157][T12492]  ? __pfx_sock_ioctl+0x10/0x10
[  201.070029][T12492]  __se_sys_ioctl+0xfc/0x170
[  201.071759][T12492]  do_syscall_64+0xfa/0x3b0
[  201.073496][T12492]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.075590][T12492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.078031][T12492]  ? exc_page_fault+0x9f/0xf0
[  201.079891][T12492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.082163][T12492] RIP: 0033:0x7fef8398ebe9
[  201.083849][T12492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.090773][T12492] RSP: 002b:00007fef84763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.093598][T12492] RAX: ffffffffffffffda RBX: 00007fef83bb5fa0 RCX: 00007fef8398ebe9
[  201.096837][T12492] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000006
[  201.099344][T12492] RBP: 00007fef83a11e19 R08: 0000000000000000 R09: 0000000000000000
[  201.102000][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.105302][T12492] R13: 00007fef83bb6038 R14: 00007fef83bb5fa0 R15: 00007fffb128bda8
[  201.108333][T12492]  </TASK>
[  201.109584][T12492] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  201.112506][T12492] CPU: 0 UID: 0 PID: 12492 Comm: syz.2.2807 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  201.117156][T12492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.121041][T12492] Call Trace:
[  201.122322][T12492]  <TASK>
[  201.123448][T12492]  dump_stack_lvl+0x99/0x250
[  201.125213][T12492]  ? __asan_memcpy+0x40/0x70
[  201.127036][T12492]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.129087][T12492]  ? __pfx__printk+0x10/0x10
[  201.130764][T12492]  vpanic+0x281/0x750
[  201.132162][T12492]  ? __pfx__printk+0x10/0x10
[  201.133820][T12492]  ? __pfx_vpanic+0x10/0x10
[  201.135419][T12492]  ? is_bpf_text_address+0x292/0x2b0
[  201.137421][T12492]  panic+0xb9/0xc0
[  201.138682][T12492]  ? __pfx_panic+0x10/0x10
[  201.140503][T12492]  __warn+0x31b/0x4b0
[  201.142103][T12492]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  201.144238][T12492]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  201.145941][T12492]  report_bug+0x2be/0x4f0
[  201.147317][T12492]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  201.149188][T12492]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  201.151084][T12492]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  201.153092][T12492]  handle_bug+0x84/0x160
[  201.154485][T12492]  exc_invalid_op+0x1a/0x50
[  201.155968][T12492]  asm_exc_invalid_op+0x1a/0x20
[  201.157589][T12492] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  201.159692][T12492] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 c0 15 b0 8c e8 76 55 9c f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 e7 b6 d8 f6 90 0f 0b 90 42 80 7c 3d
[  201.166688][T12492] RSP: 0018:ffffc90003807910 EFLAGS: 00010246
[  201.168766][T12492] RAX: b723d1ae4f94b700 RBX: 0000000000000000 RCX: 0000000000080000
[  201.171420][T12492] RDX: ffffc90020d09000 RSI: 0000000000004494 RDI: 0000000000004495
[  201.173970][T12492] RBP: ffff888120371728 R08: ffff88804b024253 R09: 1ffff1100960484a
[  201.176561][T12492] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff8881203729d0
[  201.179603][T12492] R13: ffff888120370d80 R14: 1ffff1102406e2e5 R15: dffffc0000000000
[  201.182249][T12492]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  201.184231][T12492]  __ieee80211_link_release_channel+0x33b/0x4a0
[  201.186315][T12492]  ieee80211_if_change_type+0x14c/0x990
[  201.188150][T12492]  ieee80211_change_iface+0xd5/0x510
[  201.189909][T12492]  cfg80211_change_iface+0x795/0xef0
[  201.191618][T12492]  cfg80211_wext_siwmode+0x1db/0x2b0
[  201.193409][T12492]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  201.195447][T12492]  ? full_name_hash+0x92/0xe0
[  201.197066][T12492]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  201.198911][T12492]  ioctl_standard_call+0xcb/0x1b0
[  201.200762][T12492]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  201.202586][T12492]  wext_ioctl_dispatch+0xee/0x410
[  201.204128][T12492]  ? __pfx_ioctl_standard_call+0x10/0x10
[  201.206023][T12492]  wext_handle_ioctl+0x100/0x1c0
[  201.207994][T12492]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  201.210090][T12492]  ? __lock_acquire+0xab9/0xd20
[  201.212108][T12492]  sock_ioctl+0x15f/0x790
[  201.213784][T12492]  ? __pfx_sock_ioctl+0x10/0x10
[  201.215342][T12492]  ? __fget_files+0x2a/0x420
[  201.216808][T12492]  ? __fget_files+0x3a0/0x420
[  201.218301][T12492]  ? __fget_files+0x2a/0x420
[  201.219767][T12492]  ? bpf_lsm_file_ioctl+0x9/0x20
[  201.221366][T12492]  ? __pfx_sock_ioctl+0x10/0x10
[  201.222921][T12492]  __se_sys_ioctl+0xfc/0x170
[  201.224389][T12492]  do_syscall_64+0xfa/0x3b0
[  201.225880][T12492]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.227546][T12492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.229448][T12492]  ? exc_page_fault+0x9f/0xf0
[  201.230942][T12492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.232790][T12492] RIP: 0033:0x7fef8398ebe9
[  201.234227][T12492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.240462][T12492] RSP: 002b:00007fef84763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.243419][T12492] RAX: ffffffffffffffda RBX: 00007fef83bb5fa0 RCX: 00007fef8398ebe9
[  201.246519][T12492] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000006
[  201.249039][T12492] RBP: 00007fef83a11e19 R08: 0000000000000000 R09: 0000000000000000
[  201.251481][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.254065][T12492] R13: 00007fef83bb6038 R14: 00007fef83bb5fa0 R15: 00007fffb128bda8
[  201.256828][T12492]  </TASK>
[  201.258542][T12492] Kernel Offset: disabled
[  201.260167][T12492] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:37:16  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bd260 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000014132 RDI=0000000000014133 RBP=ffffffff99de9770 RSP=ffffc90003807050
R8 =ffff888021630237 R9 =1ffff110042c6046 R10=dffffc0000000000 R11=ffffffff854e7100
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e7177 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fef847636c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34f1aff8 CR3=000000010e8ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f6bc8012e53
XMM06=0000000000000000 00007f6bc8012e4d XMM07=0000000000000000 00007f6bc8012e61
XMM08=0000000000000000 00007f6bc8012ee7 XMM09=0000000000000000 00007f6bc8012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff84cc4304 RBX=0000000000000012 RCX=ffff888020cf3980 RDX=0000000000000002
RSI=0000000000000000 RDI=0000000000080000 RBP=ffffc90002a4f6e0 RSP=ffffc90002a4f4f8
R8 =e31c4d8bc34318fd R9 =df6dcb87fb054e83 R10=58d7462721ced2ce R11=0000000000000010
R12=3278eadcebac9b35 R13=0000000000000010 R14=0000000000000000 R15=4502b033a6293565
RIP=ffffffff81bfabec RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9a7b7f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34e1cff8 CR3=0000000031130000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00007f6bc8012ee7 XMM09=0000000000000000 00007f6bc8012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
