last executing test programs:

269.08207ms ago: executing program 2 (id=4050):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3e9}}, 0x420}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20)
r3 = socket$inet(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001f80)=r4, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r7, 0x29, 0x46, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0)
preadv(r9, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000940)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x120, 0x418, 0x320, 0x1f0, 0x0, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, &(0x7f0000000140), {[{{@ipv6={@local, @loopback, [0xff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0x0, 0xffffffff, 0xffffffff], 'veth0_to_bridge\x00', 'vcan0\x00', {0xff}, {}, 0xc1, 0xe, 0x5, 0xa}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@hl={{0x28}, {0x1, 0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x2, 0x7}, {0x2, 0x4, 0x7}, {0xffffffffffffffff, 0x1, 0x6}, 0xe3f, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x5}, @empty, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xff, 0x0, 0xff], 'veth1_vlan\x00', 'dummy0\x00', {}, {}, 0x16, 0xfa, 0x1, 0x40}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@broadcast, 0x23, 0xa, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040))
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)={0x14, r11, 0x1, 0x80000000}, 0x14}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000840)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000225bda400fedbdf25010000000c000200faffffffffffffff0c000200b6390000000000000800d558000000000c00030008000000000000000c00030001000000000000000c0005000100000000000000f16fa298e6dc86f1e76bd0ecc9c4a1395d7454effaf6bbd6b0926c207b2bc655f21735ee29a9b3a5f892612057433bb0023b00c1604b14813d0e18310707fdd3e3279c809b73ca55753fcb72bccfb4aca6f7f5821497b4b57926731eda447bf10f1a1c7da78ce4bfa2a924b76a9398b9a222a308f704a32384d506b7d5663db9ace8f36e107d0dd4fead0b322b8dde68944375602c0c244374f55ebc284532c0cb4f1494ec6da2679a7fbb304163d1f8eab716c4c291c643918c3955353afdf74847474fb1d1ace71b7fe120c6a371dd47c6edb89bd0224b50dcba8465be4e6b3d04beb4f7581cf3b07ddfbe86a839a50db8fbcc8b00000000000000000000004b1ae50087f995319792fc147adae92130fc881252bd5f40ec370642b20a4ae26f783d6ebcb5314476bd93aa0dc70ca56f506b20264b964a87faa7f6c4569c7b0000d4261784b68569cd9e27ea03c918803e3c5b2626a394e26dc3d55f2147f86e7daf7f8d27e8eaa93364f2843cf4a92860899430692bbd6413e4fc7176d4b5376fafa502d75e663cf359e386f2a619cd3e04650b3bcdf072614b12cd1ac25548ed37fdd0802f4b46ad226b50cede0dc1407f87907ef357413c1bfe7a59e58b"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x4020004)

268.772621ms ago: executing program 0 (id=4051):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x8, 0x5}]}]}, {0x0, [0x0, 0xe, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x1}, 0x28)

230.539027ms ago: executing program 2 (id=4054):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x3, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xf4, 0x2], 0x1, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)

181.611604ms ago: executing program 0 (id=4055):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x1e1, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89, 0x9, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x30, {0x2, 0xa, 0x2, 0x400, [0x6, 0x8000000000000001, 0x8001, 0xfff, 0xb8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x45, 0x0, 0x9, 0x1, 0x0, 0x8, 0x64}, @dstopts={0x88, 0xf, '\x00', [@padn={0x1, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xe}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0xa, 0x2, [0x4000000000000, 0x2, 0x8162, 0x8, 0x100, 0x7, 0x3, 0x9]}}]}, @dstopts={0x0, 0x13, '\x00', [@generic={0x3, 0x49, "9f86ede23e4b5e46fd18f951f5293428bfc295cad0e6fdb5166386700881a5b42ba6584d508731faccfbfda607b975d139ac880ba0c02e3676a60122f381a290715f0be2b3edf289be"}, @jumbo, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x8}, @generic={0x67, 0x3e, "5b76d1f8828609f172173e9b6bdf401948dee242de0603816f355fda9a1321bbb3e89770928f478fdeceecb7523167c295b67126a259d8732fc4e90637c7"}]}], {0x4e24, 0x4e21, 0x51, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef40042f"}}}}}, 0x217)

181.193471ms ago: executing program 2 (id=4057):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x41000000}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

120.206151ms ago: executing program 2 (id=4060):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

119.995503ms ago: executing program 1 (id=4061):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0)

119.832847ms ago: executing program 2 (id=4062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1801, 0x931b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

119.545934ms ago: executing program 0 (id=4063):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

61.457713ms ago: executing program 1 (id=4064):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)

61.307969ms ago: executing program 0 (id=4065):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x104, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0xfffffffffffffffe}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0)

61.181956ms ago: executing program 1 (id=4066):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x51}, 0x0)

61.058282ms ago: executing program 0 (id=4067):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x11bb4584c1a7208d}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)

60.949451ms ago: executing program 1 (id=4068):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket(0x2b, 0x1, 0x1)
listen(r0, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, 0x0)

1.68923ms ago: executing program 0 (id=4069):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0)

1.545689ms ago: executing program 1 (id=4070):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

406.249µs ago: executing program 2 (id=4071):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x37}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)

0s ago: executing program 1 (id=4072):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

kernel console output (not intermixed with test programs):

bridge_slave_0: entered allmulticast mode
[   51.159182][ T5886] bridge_slave_0: entered promiscuous mode
[   51.162341][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.164660][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.166959][ T5886] bridge_slave_1: entered allmulticast mode
[   51.169739][ T5886] bridge_slave_1: entered promiscuous mode
[   51.211935][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.224925][ T5890] chnl_net:caif_netlink_parms(): no params data found
[   51.233324][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.272785][ T5886] team0: Port device team_slave_0 added
[   51.276214][ T5886] team0: Port device team_slave_1 added
[   51.290335][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.292704][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.295062][ T5882] bridge_slave_0: entered allmulticast mode
[   51.297738][ T5882] bridge_slave_0: entered promiscuous mode
[   51.322848][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.325085][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.327303][ T5882] bridge_slave_1: entered allmulticast mode
[   51.330423][ T5882] bridge_slave_1: entered promiscuous mode
[   51.340166][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.342308][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.350442][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.376660][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.380174][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.382684][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.391492][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.406941][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.433967][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.436271][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.439265][ T5890] bridge_slave_0: entered allmulticast mode
[   51.441957][ T5890] bridge_slave_0: entered promiscuous mode
[   51.446524][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.449186][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.451515][ T5890] bridge_slave_1: entered allmulticast mode
[   51.454295][ T5890] bridge_slave_1: entered promiscuous mode
[   51.457369][ T5882] team0: Port device team_slave_0 added
[   51.462423][ T5882] team0: Port device team_slave_1 added
[   51.510430][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.512621][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.522020][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.528597][ T5886] hsr_slave_0: entered promiscuous mode
[   51.530783][ T5886] hsr_slave_1: entered promiscuous mode
[   51.532825][ T5886] debugfs: 'hsr0' already exists in 'hsr'
[   51.534620][ T5886] Cannot create hsr debugfs directory
[   51.538131][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.542179][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.544407][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.553228][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.559814][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.622930][ T5890] team0: Port device team_slave_0 added
[   51.631068][ T5882] hsr_slave_0: entered promiscuous mode
[   51.633257][ T5882] hsr_slave_1: entered promiscuous mode
[   51.635365][ T5882] debugfs: 'hsr0' already exists in 'hsr'
[   51.637190][ T5882] Cannot create hsr debugfs directory
[   51.642984][ T5890] team0: Port device team_slave_1 added
[   51.681464][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.683663][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.692153][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.709411][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.711647][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.719581][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.764451][ T5890] hsr_slave_0: entered promiscuous mode
[   51.766729][ T5890] hsr_slave_1: entered promiscuous mode
[   51.769552][ T5890] debugfs: 'hsr0' already exists in 'hsr'
[   51.771381][ T5890] Cannot create hsr debugfs directory
[   51.885968][ T5886] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   51.893415][ T5886] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   51.902176][ T5886] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   51.907291][ T5886] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   51.950172][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   51.954491][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   51.958781][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   51.966708][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   51.992387][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.994696][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.997175][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.999474][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.012501][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.032439][  T537] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.036150][  T537] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.050098][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[   52.057519][  T537] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.059913][  T537] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.065234][  T537] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.067473][  T537] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.096443][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.119802][ T5882] 8021q: adding VLAN 0 to HW filter on device team0
[   52.126140][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.128451][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.140970][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.143228][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.170705][ T5882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.190919][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.216879][ T5886] veth0_vlan: entered promiscuous mode
[   52.222754][ T5886] veth1_vlan: entered promiscuous mode
[   52.235464][ T5886] veth0_macvtap: entered promiscuous mode
[   52.242144][ T5886] veth1_macvtap: entered promiscuous mode
[   52.250535][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.262397][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.271438][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.274471][ T5910] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.283250][ T5910] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.289319][ T5910] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.298520][ T5910] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.325646][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.328105][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.330373][ T5882] veth0_vlan: entered promiscuous mode
[   52.341499][ T5882] veth1_vlan: entered promiscuous mode
[   52.352454][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.354921][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.364467][ T5882] veth0_macvtap: entered promiscuous mode
[   52.369415][ T5882] veth1_macvtap: entered promiscuous mode
[   52.380443][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.386618][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.400109][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.406029][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.414036][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.416854][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.434620][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.506628][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.511172][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.538014][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.540973][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.637943][ T5954] syz.2.24 uses old SIOCAX25GETINFO
[   52.696057][ T5959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'.
[   52.699791][ T5959] tc_dump_action: action bad kind
[   52.867992][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'.
[   52.899259][ T5888] Bluetooth: hci0: command tx timeout
[   52.899265][ T5885] Bluetooth: hci1: command tx timeout
[   52.904962][ T5978] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET)
[   52.921824][ T5980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   52.924329][ T5980] IPv6: NLM_F_CREATE should be set when creating new route
[   52.926636][ T5980] IPv6: NLM_F_CREATE should be set when creating new route
[   52.958914][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.962216][ T5982] batadv_slave_1: entered promiscuous mode
[   52.966100][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'.
[   52.975039][ T5982] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   52.978799][ T5885] Bluetooth: hci2: command tx timeout
[   53.043365][ T5986] netlink: 52 bytes leftover after parsing attributes in process `syz.0.39'.
[   53.151873][ T5940] hid-generic 0005:16C0:5507.0001: item fetching failed at offset 0/1
[   53.155645][ T5940] hid-generic 0005:16C0:5507.0001: probe with driver hid-generic failed with error -22
[   53.304562][ T6016] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   53.366443][ T6022] netlink: 'syz.0.56': attribute type 1 has an invalid length.
[   53.370769][ T6022] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.56'.
[   53.385007][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.57'.
[   53.398006][ T6024] netlink: 245 bytes leftover after parsing attributes in process `syz.2.57'.
[   53.736890][ T6054] team0: No ports can be present during mode change
[   53.784113][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'.
[   53.787200][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.74'.
[   53.915729][ T6066] Zero length message leads to an empty skb
[   53.919686][ T6066] netlink: 'syz.0.78': attribute type 10 has an invalid length.
[   53.922746][ T6066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.78'.
[   53.926409][ T6066] batadv0: entered promiscuous mode
[   53.929808][ T6066] batadv0: entered allmulticast mode
[   53.932444][ T6066] bridge0: port 3(batadv0) entered blocking state
[   53.935181][ T6066] bridge0: port 3(batadv0) entered disabled state
[   53.940243][ T6066] bridge0: port 3(batadv0) entered blocking state
[   53.943160][ T6066] bridge0: port 3(batadv0) entered forwarding state
[   54.156098][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.209677][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.218900][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   54.221964][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   54.273090][  T791] IPVS: starting estimator thread 0...
[   54.319664][   T13] bridge_slave_1: left allmulticast mode
[   54.323874][   T13] bridge_slave_1: left promiscuous mode
[   54.326299][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.335301][   T13] bridge_slave_0: left allmulticast mode
[   54.341493][   T13] bridge_slave_0: left promiscuous mode
[   54.343437][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.361007][ T6089] IPVS: using max 79 ests per chain, 189600 per kthread
[   54.628730][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   54.635852][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   54.646147][   T13] bond0 (unregistering): Released all slaves
[   54.762720][   T13] hsr_slave_0: left promiscuous mode
[   54.766249][   T13] hsr_slave_1: left promiscuous mode
[   54.769690][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.772061][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.781168][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.783621][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.801522][   T13] veth1_macvtap: left promiscuous mode
[   54.803413][   T13] veth0_macvtap: left promiscuous mode
[   54.805579][   T13] veth1_vlan: left promiscuous mode
[   54.807328][   T13] veth0_vlan: left promiscuous mode
[   54.980453][ T5885] Bluetooth: hci1: command tx timeout
[   54.980536][ T5888] Bluetooth: hci0: command tx timeout
[   55.046202][   T13] team0 (unregistering): Port device team_slave_1 removed
[   55.059688][ T5888] Bluetooth: hci2: command tx timeout
[   55.064876][   T13] team0 (unregistering): Port device team_slave_0 removed
[   55.410997][ T6145] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   55.528132][ T5890] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.539045][ T5890] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.544863][ T5890] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.576275][ T5890] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.670208][ T6164] syz.0.112 (6164) used greatest stack depth: 18200 bytes left
[   55.699265][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.735638][ T5890] 8021q: adding VLAN 0 to HW filter on device team0
[   55.753506][  T537] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.755944][  T537] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.767866][  T537] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.770309][  T537] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.951014][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.976687][ T5890] veth0_vlan: entered promiscuous mode
[   55.986032][ T5890] veth1_vlan: entered promiscuous mode
[   56.002991][ T5890] veth0_macvtap: entered promiscuous mode
[   56.007144][ T5890] veth1_macvtap: entered promiscuous mode
[   56.022961][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.034870][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.042621][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.048825][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.057140][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.066628][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.121232][ T3598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.127197][ T3598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.143334][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.145878][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.208157][ T6215] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.018037][ T6268] delete_channel: no stack
[   57.059290][ T5888] Bluetooth: hci1: command tx timeout
[   57.061096][ T5888] Bluetooth: hci0: command tx timeout
[   57.138847][ T5885] Bluetooth: hci2: command tx timeout
[   57.266690][ T6277] ip6tnl1: entered promiscuous mode
[   57.270517][ T6277] ip6tnl1: entered allmulticast mode
[   57.334157][ T6284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.738315][ T6319] __nla_validate_parse: 11 callbacks suppressed
[   57.738327][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'.
[   57.747556][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'.
[   57.951627][ T6348] netem: change failed
[   58.081176][ T6365] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.193852][ T6374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.363388][ T6390] netlink: 14 bytes leftover after parsing attributes in process `syz.2.203'.
[   58.415851][ T6390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.422180][ T6390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.426998][ T6390] bond0 (unregistering): Released all slaves
[   58.604992][ T6405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.208'.
[   58.634982][ T6407] netlink: 'syz.1.209': attribute type 1 has an invalid length.
[   58.703171][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'.
[   59.138561][ T5885] Bluetooth: hci0: command tx timeout
[   59.139020][ T5888] Bluetooth: hci1: command tx timeout
[   59.219445][ T5888] Bluetooth: hci2: command tx timeout
[   59.303323][ T6445] tun0: tun_chr_ioctl cmd 35111
[   59.544198][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.237'.
[   59.547047][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[   60.036274][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'.
[   60.085532][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'.
[   60.098535][ T6485] netlink: 'syz.2.245': attribute type 1 has an invalid length.
[   60.140042][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.245'.
[   60.143134][ T6485] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   60.354874][ T6514] tipc: Started in network mode
[   60.356722][ T6514] tipc: Node identity 5a24070758f3, cluster identity 4711
[   60.360874][ T6514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.363848][ T6514] syzkaller0: entered promiscuous mode
[   60.365785][ T6514] syzkaller0: entered allmulticast mode
[   60.378338][ T6514] tipc: Resetting bearer <eth:syzkaller0>
[   60.384080][ T6512] tipc: Resetting bearer <eth:syzkaller0>
[   60.393213][ T6512] tipc: Disabling bearer <eth:syzkaller0>
[   60.660783][ T6549] netlink: 'syz.0.270': attribute type 21 has an invalid length.
[   60.672048][ T6549] netlink: 'syz.0.270': attribute type 1 has an invalid length.
[   61.453863][ T6629] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.539854][ T6629] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.609895][ T6629] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.621594][ T6648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.624343][ T6648] syzkaller0: entered promiscuous mode
[   61.626249][ T6648] syzkaller0: entered allmulticast mode
[   61.655359][ T6629] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.667947][ T6647] tipc: Resetting bearer <eth:syzkaller0>
[   61.677350][ T6647] tipc: Disabling bearer <eth:syzkaller0>
[   61.723890][ T5846] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.736107][ T5846] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.744963][ T5846] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.770104][ T5846] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.808300][ T6667] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   61.814686][ T6667] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   62.048962][ T6696] netlink: 'syz.0.328': attribute type 3 has an invalid length.
[   62.939754][ T6808] netlink: 'syz.2.351': attribute type 4 has an invalid length.
[   62.956033][ T6808] netlink: 'syz.2.351': attribute type 4 has an invalid length.
[   63.241232][ T6851] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   63.337072][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.341358][ T6851] batadv_slave_0: entered promiscuous mode
[   63.355078][ T6851] __nla_validate_parse: 11 callbacks suppressed
[   63.355088][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'.
[   63.364381][ T6851] netlink: 428 bytes leftover after parsing attributes in process `syz.1.360'.
[   63.368061][ T6851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.360'.
[   63.535292][ T5940] IPVS: starting estimator thread 0...
[   63.628470][ T6876] IPVS: using max 79 ests per chain, 189600 per kthread
[   64.559976][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'.
[   64.737351][ T6986] netlink: 312 bytes leftover after parsing attributes in process `syz.2.419'.
[   64.807945][ T6991] netlink: 'syz.1.420': attribute type 12 has an invalid length.
[   64.818732][ T6991] netlink: 'syz.1.420': attribute type 29 has an invalid length.
[   64.821618][ T6991] netlink: 148 bytes leftover after parsing attributes in process `syz.1.420'.
[   64.824667][ T6991] netlink: 'syz.1.420': attribute type 2 has an invalid length.
[   64.827804][ T6991] netlink: 43 bytes leftover after parsing attributes in process `syz.1.420'.
[   64.934791][ T7000] wg1 speed is unknown, defaulting to 1000
[   64.936880][ T7000] wg1 speed is unknown, defaulting to 1000
[   64.941411][ T7000] wg1 speed is unknown, defaulting to 1000
[   64.947560][ T7000] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   64.968781][ T7000] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   64.987504][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.423'.
[   65.016030][ T7000] wg1 speed is unknown, defaulting to 1000
[   65.023245][ T7000] wg1 speed is unknown, defaulting to 1000
[   65.031977][ T7000] wg1 speed is unknown, defaulting to 1000
[   65.127281][ T7011] sch_tbf: burst 19869 is lower than device lo mtu (11337746) !
[   65.376040][ T7029] warning: `syz.1.437' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.560729][ T7047] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.446'.
[   65.567574][ T7050] netlink: 'syz.0.447': attribute type 1 has an invalid length.
[   65.576136][ T7050] netlink: 'syz.0.447': attribute type 2 has an invalid length.
[   65.579608][ T7050] netlink: 'syz.0.447': attribute type 1 has an invalid length.
[   65.582163][ T7050] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.447'.
[   65.598200][ T7052] netlink: 'syz.2.448': attribute type 14 has an invalid length.
[   65.635739][ T7058] netlink: 'syz.0.451': attribute type 18 has an invalid length.
[   65.645606][ T7058] netlink: 'syz.0.451': attribute type 18 has an invalid length.
[   65.659910][ T5846] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.662752][ T5846] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.665337][ T5846] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.668903][ T5846] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.779271][ T7068] wg1 speed is unknown, defaulting to 1000
[   65.950615][ T7085] sctp: [Deprecated]: syz.0.463 (pid 7085) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.950615][ T7085] Use struct sctp_sack_info instead
[   66.314956][ T7114] bridge0: port 3(batadv0) entered disabled state
[   66.317704][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.320749][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.402319][ T7114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.408250][ T7114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.468688][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.473812][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.480775][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.486173][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.500682][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.508694][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.523518][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.537041][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.860356][ T7159] tipc: Started in network mode
[   66.865941][ T7159] tipc: Node identity , cluster identity 4711
[   66.870140][ T7159] tipc: Failed to obtain node identity
[   66.872019][ T7159] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   66.875441][ T7159] syzkaller0: entered promiscuous mode
[   66.877290][ T7159] syzkaller0: entered allmulticast mode
[   66.966199][ T7166] netlink: 'syz.2.497': attribute type 3 has an invalid length.
[   67.032466][ T7172] Bluetooth: MGMT ver 1.23
[   67.459917][  T537] wlan1: Trigger new scan to find an IBSS to join
[   68.044418][ T7213] syzkaller0: entered promiscuous mode
[   68.046362][ T7213] syzkaller0: entered allmulticast mode
[   68.331268][ T5270] udevd[5270]: worker [6112] terminated by signal 33 (Unknown signal 33)
[   68.335459][ T5270] udevd[5270]: worker [6112] failed while handling '/devices/virtual/block/loop1'
[   68.393340][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.396022][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.502694][ T7247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.642288][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.645259][ T7266] __nla_validate_parse: 17 callbacks suppressed
[   68.645266][ T7266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.543'.
[   68.650522][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.653496][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.659997][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.006285][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.561'.
[   69.123105][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'.
[   69.126222][ T7322] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[   69.130498][ T7322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.154717][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'.
[   69.285274][ T7342] tipc: Enabled bearer <udp:syz0>, priority 10
[   69.861289][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'.
[   69.886007][ T7355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.957460][ T7355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.981390][ T7364] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   70.035262][ T7355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.097225][ T7355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.178127][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.203508][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.223213][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.233104][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.363065][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[   70.409657][  T791] tipc: Node number set to 47646471
[   70.981833][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.984754][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.058516][ T5888] Bluetooth: hci2: command tx timeout
[   71.405353][ T7420] wg1 speed is unknown, defaulting to 1000
[   71.618765][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'.
[   71.789631][ T7455] netlink: 152 bytes leftover after parsing attributes in process `syz.0.632'.
[   71.935350][ T7471] validate_nla: 1 callbacks suppressed
[   71.935360][ T7471] netlink: 'syz.2.639': attribute type 41 has an invalid length.
[   72.053409][ T7481] netlink: 'syz.2.644': attribute type 24 has an invalid length.
[   72.321232][ T7489] netlink: 'syz.2.648': attribute type 1 has an invalid length.
[   72.418607][  T537] wlan1: Trigger new scan to find an IBSS to join
[   72.477261][ T7497] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   73.349314][ T3598] wlan1: Creating new IBSS network, BSSID 7e:bc:b6:4f:8f:15
[   73.790070][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'.
[   73.868078][ T7573] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   74.028368][ T7587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.683'.
[   74.033620][ T7587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.683'.
[   74.133290][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'.
[   74.136353][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'.
[   74.184878][ T7595] netlink: 'syz.2.686': attribute type 9 has an invalid length.
[   74.237206][ T7603] sctp: [Deprecated]: syz.1.690 (pid 7603) Use of int in maxseg socket option.
[   74.237206][ T7603] Use struct sctp_assoc_value instead
[   74.311928][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'.
[   74.315622][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'.
[   74.342129][ T7613] nbd: must specify at least one socket
[   74.498835][ T5888] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   74.610976][ T7640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.707'.
[   74.616419][ T7640] bridge0: port 3(batadv0) entered disabled state
[   74.621640][ T7640] bridge_slave_0: left allmulticast mode
[   74.623499][ T7640] bridge_slave_0: left promiscuous mode
[   74.625412][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.629556][ T7640] bridge_slave_1: left allmulticast mode
[   74.631641][ T7640] bridge_slave_1: left promiscuous mode
[   74.633500][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.647313][ T7640] bond0: (slave bond_slave_0): Releasing backup interface
[   74.655249][ T7640] bond0: (slave bond_slave_1): Releasing backup interface
[   74.663668][ T7640] team0: Port device team_slave_0 removed
[   74.667150][ T7640] team0: Port device team_slave_1 removed
[   74.669872][ T7640] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.672635][ T7640] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.675513][ T7645] team0: Mode changed to "broadcast"
[   75.333273][  T791] IPVS: starting estimator thread 0...
[   75.352853][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'.
[   75.370818][ T7691] batadv_slave_0: entered promiscuous mode
[   75.380188][ T7691] batadv_slave_0: left promiscuous mode
[   75.419004][ T7685] IPVS: using max 79 ests per chain, 189600 per kthread
[   75.560603][ T7702] sock: sock_timestamping_bind_phc: sock not bind to device
[   75.813501][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'.
[   76.312455][ T7756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.435972][ T7765] tipc: Started in network mode
[   76.437662][ T7765] tipc: Node identity 4e45095d5453, cluster identity 4711
[   76.440834][ T7765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.444594][ T7765] syzkaller0: entered promiscuous mode
[   76.446662][ T7765] syzkaller0: entered allmulticast mode
[   76.465915][ T7765] tipc: Resetting bearer <eth:syzkaller0>
[   76.499987][ T7764] tipc: Resetting bearer <eth:syzkaller0>
[   76.512900][ T7764] tipc: Disabling bearer <eth:syzkaller0>
[   76.572691][ T7781] netlink: 'syz.1.764': attribute type 1 has an invalid length.
[   76.691755][ T7797] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   76.694118][ T7797] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   76.826152][ T7809] syzkaller0: entered promiscuous mode
[   76.828308][ T7809] syzkaller0: entered allmulticast mode
[   76.846514][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv1
[   76.849868][ T7812] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   76.852991][ T7812] team0: Failed to send options change via netlink (err -105)
[   76.862945][ T7812] team0: Port device batadv1 added
[   77.705076][ T7841] netlink: 'syz.0.792': attribute type 8 has an invalid length.
[   77.726973][ T7838] wg1 speed is unknown, defaulting to 1000
[   77.803061][ T7851] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[   77.952220][ T7863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.959845][ T7863] syzkaller0: entered promiscuous mode
[   77.961698][ T7863] syzkaller0: entered allmulticast mode
[   77.981006][ T7863] tipc: Resetting bearer <eth:syzkaller0>
[   77.984427][ T7862] tipc: Resetting bearer <eth:syzkaller0>
[   77.992379][ T7862] tipc: Disabling bearer <eth:syzkaller0>
[   78.341662][ T7894] netlink: 'syz.2.816': attribute type 21 has an invalid length.
[   78.534965][ T7904] netlink: 'syz.2.821': attribute type 1 has an invalid length.
[   78.537496][ T7904] netlink: 'syz.2.821': attribute type 1 has an invalid length.
[   78.767147][ T7920] sctp: [Deprecated]: syz.2.829 (pid 7920) Use of int in maxseg socket option.
[   78.767147][ T7920] Use struct sctp_assoc_value instead
[   79.205916][ T7943] __nla_validate_parse: 6 callbacks suppressed
[   79.205929][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'.
[   79.483094][ T7950] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   79.508100][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'.
[   79.530696][ T7956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.535799][ T7956] syzkaller0: entered promiscuous mode
[   79.537660][ T7956] syzkaller0: entered allmulticast mode
[   79.556479][ T7956] tipc: Resetting bearer <eth:syzkaller0>
[   79.564871][ T7955] tipc: Resetting bearer <eth:syzkaller0>
[   79.575134][ T7955] tipc: Disabling bearer <eth:syzkaller0>
[   79.613460][ T7962] netlink: 248 bytes leftover after parsing attributes in process `syz.0.849'.
[   79.616457][ T7962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.849'.
[   79.629999][ T7962] rdma_rxe: rxe_newlink: failed to add lo
[   79.661280][ T7962] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.664600][ T7962] 8021q: adding VLAN 0 to HW filter on device team0
[   79.669598][ T7962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.804122][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'.
[   79.806999][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'.
[   79.867207][ T7988] syzkaller0: entered allmulticast mode
[   79.896063][ T7992] netlink: 2 bytes leftover after parsing attributes in process `syz.1.861'.
[   80.463097][ T8028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.876'.
[   81.221247][   T24] cfg80211: failed to load regulatory.db
[   81.409025][ T8057] netlink: 'syz.1.889': attribute type 2 has an invalid length.
[   81.411511][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.889'.
[   81.440018][ T8062] syzkaller1: entered promiscuous mode
[   81.445139][ T8062] syzkaller1: entered allmulticast mode
[   81.765801][ T8096] netlink: 'syz.0.907': attribute type 1 has an invalid length.
[   81.787340][ T8096] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.798979][ T8096] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.801441][ T8096] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   81.805875][ T8096] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   81.851982][ T8098] veth5: entered promiscuous mode
[   81.857398][ T8098] bond1: (slave veth5): Enslaving as an active interface with a down link
[   81.862576][ T8096] erspan0: entered allmulticast mode
[   81.891520][ T8096] netlink: 'syz.0.907': attribute type 11 has an invalid length.
[   82.217818][ T8116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.320044][ T8120] wg1 speed is unknown, defaulting to 1000
[   82.393940][ T8126] IPv6: Can't replace route, no match found
[   82.422688][ T8128] netlink: 'syz.0.918': attribute type 1 has an invalid length.
[   82.567129][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'.
[   82.670632][ T8150] nbd0: detected capacity change from 0 to 127
[   82.674814][   T56] block nbd0: Receive control failed (result -32)
[   82.675274][ T5834] block nbd0: Send control failed (result -32)
[   82.681303][ T8156] tipc: Invalid UDP bearer configuration
[   82.681327][ T8156] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   82.681532][ T5834] block nbd0: Request send failed, requeueing
[   82.694492][   T60] block nbd0: Dead connection, failed to find a fallback
[   82.697191][   T60] block nbd0: shutting down sockets
[   82.699433][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.702982][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[   82.706054][ T5834] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.712172][ T5834] Buffer I/O error on dev nbd0, logical block 1, async page read
[   82.714965][ T5834] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.717904][ T5834] Buffer I/O error on dev nbd0, logical block 2, async page read
[   82.742707][ T5834] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.745976][ T5834] Buffer I/O error on dev nbd0, logical block 3, async page read
[   82.749055][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.758584][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read
[   82.761323][ T5834] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.765489][ T5834] Buffer I/O error on dev nbd0, logical block 1, async page read
[   82.769067][ T5834] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.771958][ T5834] Buffer I/O error on dev nbd0, logical block 2, async page read
[   82.774846][ T5834] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.777927][ T5834] Buffer I/O error on dev nbd0, logical block 3, async page read
[   82.787225][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.790271][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read
[   82.793589][ T5834] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.796490][ T5834] Buffer I/O error on dev nbd0, logical block 1, async page read
[   82.810120][ T5834] ldm_validate_partition_table(): Disk read failed.
[   82.813253][ T5834] Dev nbd0: unable to read RDB block 0
[   82.816025][ T5834]  nbd0: unable to read partition table
[   82.824126][ T5834] ldm_validate_partition_table(): Disk read failed.
[   82.827415][ T5834] Dev nbd0: unable to read RDB block 0
[   82.833238][ T5834]  nbd0: unable to read partition table
[   82.855388][ T8176] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   82.971385][ T8193] veth0_to_team: entered promiscuous mode
[   82.975550][ T8193] veth0_to_team: entered allmulticast mode
[   83.885691][ T8246] vcan0: tx drop: invalid da for name 0x0000000000000004
[   83.941763][ T8253] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[   83.941905][ T8255] tun0: tun_chr_ioctl cmd 21731
[   84.156045][ T8277] trusted_key: syz.0.989 sent an empty control message without MSG_MORE.
[   84.176101][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.331944][ T8308] __nla_validate_parse: 7 callbacks suppressed
[   84.331953][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'.
[   84.675024][ T8345] wg1 speed is unknown, defaulting to 1000
[   85.257096][ T8386] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   85.369703][ T8390] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   85.373646][ T8390] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   85.622752][ T8417] netlink: 'syz.0.1054': attribute type 1 has an invalid length.
[   85.625354][ T8417] netlink: 'syz.0.1054': attribute type 10 has an invalid length.
[   85.631681][ T8417] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1054'.
[   85.673978][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.676889][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.681119][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.688971][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.670533][ T8464] netlink: 'syz.2.1075': attribute type 10 has an invalid length.
[   87.100521][ T8482] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1083'.
[   87.103479][ T8482] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1083'.
[   87.250186][ T8494] wg1 speed is unknown, defaulting to 1000
[   87.376329][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1096'.
[   87.396547][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.414387][ T8514] bond0: (slave rose0): Enslaving as an active interface with an up link
[   87.502699][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'.
[   87.634456][ T8542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1103'.
[   87.731446][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[   87.763241][ T8572] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1116'.
[   87.766461][ T8572] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1116'.
[   87.806709][ T8578] netlink: 'syz.1.1119': attribute type 21 has an invalid length.
[   87.812718][ T8578] netlink: 'syz.1.1119': attribute type 4 has an invalid length.
[   87.815558][ T8578] netlink: 'syz.1.1119': attribute type 5 has an invalid length.
[   87.942745][ T8592] bridge_slave_1: left allmulticast mode
[   87.944702][ T8592] bridge_slave_1: left promiscuous mode
[   87.946962][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.951990][ T8592] bridge_slave_0: left allmulticast mode
[   87.953857][ T8592] bridge_slave_0: left promiscuous mode
[   87.955837][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.394119][ T8620] pimreg3: entered allmulticast mode
[   88.430971][ T8624] dummy0: entered promiscuous mode
[   88.432909][ T8624] macsec1: entered promiscuous mode
[   88.434663][ T8624] macsec1: entered allmulticast mode
[   88.436361][ T8624] dummy0: entered allmulticast mode
[   88.439844][ T8624] dummy0: left allmulticast mode
[   88.441616][ T8624] dummy0: left promiscuous mode
[   88.715563][ T8643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.941619][ T8666] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   88.944519][ T8666] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   88.948574][ T8666] netlink: 'syz.1.1159': attribute type 19 has an invalid length.
[   89.165297][ T8682] wg1 speed is unknown, defaulting to 1000
[   89.205439][ T8682] netlink: 'syz.1.1167': attribute type 13 has an invalid length.
[   89.207980][ T8682] netlink: 'syz.1.1167': attribute type 17 has an invalid length.
[   89.214627][ T8682] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   89.485526][ T8698] wg1 speed is unknown, defaulting to 1000
[   89.611276][ T8713] __nla_validate_parse: 9 callbacks suppressed
[   89.611286][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1179'.
[   89.931001][ T8744] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1189'.
[   90.176270][ T8760] vxcan2: entered promiscuous mode
[   90.576330][ T8793] syzkaller0: entered promiscuous mode
[   90.578178][ T8793] syzkaller0: entered allmulticast mode
[   90.704264][ T8802] wg1 speed is unknown, defaulting to 1000
[   90.842037][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'.
[   91.100548][ T8826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.105466][ T8826] syzkaller0: entered promiscuous mode
[   91.110164][ T8826] syzkaller0: entered allmulticast mode
[   91.134265][ T8826] tipc: Resetting bearer <eth:syzkaller0>
[   91.152828][ T8825] tipc: Resetting bearer <eth:syzkaller0>
[   91.171441][ T8825] tipc: Disabling bearer <eth:syzkaller0>
[   91.306264][ T8848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1235'.
[   91.335898][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'.
[   91.339070][ T8850] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   91.344061][ T8850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.373565][ T8852] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1237'.
[   91.470930][ T8858] netlink: 'syz.2.1240': attribute type 1 has an invalid length.
[   91.485164][ T8858] bond1: entered promiscuous mode
[   91.488126][ T8858] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.506783][ T8858] bond1: (slave bridge0): making interface the new active one
[   91.516240][ T8858] bridge0: entered promiscuous mode
[   91.521434][ T8858] bond1: (slave bridge0): Enslaving as an active interface with an up link
[   91.633193][ T8863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1242'.
[   91.762656][ T8874] dummy0: entered allmulticast mode
[   91.765266][ T8873] dummy0: left allmulticast mode
[   91.810964][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'.
[   91.813890][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'.
[   91.816778][ T8878] netlink: 'syz.2.1249': attribute type 1 has an invalid length.
[   91.820818][ T8878] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1249'.
[   91.859045][ T8878] nbd: socks must be embedded in a SOCK_ITEM attr
[   91.861316][ T8878] block nbd1: shutting down sockets
[   92.570013][ T8933] netlink: 'syz.2.1275': attribute type 3 has an invalid length.
[   92.572551][ T8933] netlink: 'syz.2.1275': attribute type 3 has an invalid length.
[   92.686477][ T8941] IPVS: Scheduler module ip_vs_sip not found
[   92.689420][ T8941] IPVS: length: 8 != 446622349272
[   93.305564][ T8987] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   93.366828][ T8994] veth1_to_bond: entered allmulticast mode
[   93.384109][ T8994] bond0: (slave bond_slave_1): Releasing backup interface
[   93.397520][ T8994] veth1_to_bond (unregistering): left allmulticast mode
[   93.853914][ T9036] netlink: 'syz.2.1315': attribute type 4 has an invalid length.
[   94.410609][ T9059] tipc: Started in network mode
[   94.414250][ T9059] tipc: Node identity 2e04d527929b, cluster identity 4711
[   94.416947][ T9059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.421842][ T9059] syzkaller0: entered promiscuous mode
[   94.423683][ T9059] syzkaller0: entered allmulticast mode
[   94.440274][ T9059] tipc: Resetting bearer <eth:syzkaller0>
[   94.443230][ T9058] tipc: Resetting bearer <eth:syzkaller0>
[   94.453220][ T9058] tipc: Disabling bearer <eth:syzkaller0>
[   94.627283][ T9082] __nla_validate_parse: 9 callbacks suppressed
[   94.627295][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'.
[   94.656729][ T9082] bridge_slave_1: left allmulticast mode
[   94.659259][ T9082] bridge_slave_1: left promiscuous mode
[   94.661339][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.665038][ T9082] bridge_slave_0: left allmulticast mode
[   94.666879][ T9082] bridge_slave_0: left promiscuous mode
[   94.669360][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.787989][ T9084] netlink: 'syz.2.1343': attribute type 2 has an invalid length.
[   95.018579][ T9111] bridge_slave_1: default FDB implementation only supports local addresses
[   95.101851][ T9118] netlink: 'syz.0.1357': attribute type 1 has an invalid length.
[   95.126800][ T9120] netlink: 'syz.0.1358': attribute type 1 has an invalid length.
[   95.174741][ T9124] team0: Device gtp0 is of different type
[   95.320194][ T9132] netlink: 'syz.0.1364': attribute type 25 has an invalid length.
[   95.907507][ T9139] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1366'.
[   96.898012][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'.
[   96.940661][ T9169] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1379'.
[   97.189316][ T9186] netlink: 'syz.0.1387': attribute type 39 has an invalid length.
[   97.624577][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[   97.637427][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'.
[   97.642012][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[   97.645140][ T9212] netlink: 'syz.1.1398': attribute type 5 has an invalid length.
[   97.647822][ T9212] netlink: 'syz.1.1398': attribute type 6 has an invalid length.
[   98.119751][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'.
[   98.225946][ T9273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1422'.
[   98.230205][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'.
[   98.408576][ T9283] nbd1: detected capacity change from 0 to 127
[   98.412432][   T56] block nbd1: Receive control failed (result -104)
[   98.412433][ T8906] block nbd1: Send control failed (result -32)
[   98.415232][ T8906] block nbd1: Request send failed, requeueing
[   98.416776][   T60] block nbd1: Dead connection, failed to find a fallback
[   98.423907][   T60] block nbd1: shutting down sockets
[   98.426118][   T60] blk_print_req_error: 138 callbacks suppressed
[   98.426129][   T60] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.437041][   T60] buffer_io_error: 138 callbacks suppressed
[   98.437051][   T60] Buffer I/O error on dev nbd1, logical block 3, async page read
[   98.467565][ T9292] syzkaller0: entered allmulticast mode
[   99.549603][ T9358] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   99.943409][ T9401] __nla_validate_parse: 3 callbacks suppressed
[   99.943421][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1480'.
[   99.948657][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1480'.
[   99.951839][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1480'.
[   99.954730][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1480'.
[  100.047097][ T9405] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.051420][ T9405] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.091339][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'.
[  100.929993][ T9430] netlink: 'syz.0.1491': attribute type 1 has an invalid length.
[  100.957146][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1492'.
[  101.072369][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'.
[  101.251158][ T9455] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  101.261057][ T9455] netlink: 'syz.0.1503': attribute type 4 has an invalid length.
[  101.306925][ T5846] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.318769][ T5846] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.322346][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'.
[  101.343566][ T5846] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.347007][ T5846] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.421585][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'.
[  101.439087][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'.
[  101.926528][ T9505] bond1: (slave bridge0): Releasing backup interface
[  101.937378][ T9505] bridge0 (unregistering): left promiscuous mode
[  102.044073][ T9508] team_slave_0: entered promiscuous mode
[  102.046252][ T9508] team_slave_1: entered promiscuous mode
[  102.049850][ T9508] team_slave_0: left promiscuous mode
[  102.051666][ T9508] team_slave_1: left promiscuous mode
[  102.575006][ T9562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.409140][  T537] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  105.156478][ T9665] __nla_validate_parse: 3 callbacks suppressed
[  105.156489][ T9665] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1593'.
[  105.332960][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1596'.
[  105.336364][ T9671] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  105.407972][ T9673] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  105.561229][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'.
[  105.794402][ T9695] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  107.153048][ T9760] syzkaller0: entered promiscuous mode
[  107.154844][ T9760] syzkaller0: entered allmulticast mode
[  107.161641][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'.
[  108.023186][ T9785] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  108.026790][ T9785] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  108.049760][ T9794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1649'.
[  108.150574][ T9804] ipvlan2: entered promiscuous mode
[  108.227751][ T9818] netlink: 'syz.0.1659': attribute type 1 has an invalid length.
[  108.262239][ T9818] 8021q: adding VLAN 0 to HW filter on device bond3
[  108.310881][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'.
[  108.490011][ T9847] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1670'.
[  108.494008][ T9847] nbd: illegal input index 65508
[  108.522387][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'.
[  108.649759][ T9859] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1673'.
[  108.656029][ T9859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.711237][ T9861] netlink: 'syz.2.1671': attribute type 1 has an invalid length.
[  108.713753][ T9861] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1671'.
[  108.822125][ T9864] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  109.138618][ T5885] Bluetooth: hci2: command 0x0405 tx timeout
[  109.469524][ T9907] vxcan1 speed is unknown, defaulting to 1000
[  109.472508][ T9907] vxcan1 speed is unknown, defaulting to 1000
[  109.474933][ T9907] vxcan1 speed is unknown, defaulting to 1000
[  109.619226][ T9907] infiniband syz2: set active
[  109.621147][ T9907] infiniband syz2: added vxcan1
[  109.641635][ T9907] RDS/IB: syz2: added
[  109.643337][ T9907] smc: adding ib device syz2 with port count 1
[  109.645539][ T9907] smc:    ib device syz2 port 1 has pnetid 
[  110.356980][   T51] vxcan1 speed is unknown, defaulting to 1000
[  110.360362][ T9907] vxcan1 speed is unknown, defaulting to 1000
[  110.367423][ T5940] vxcan1 speed is unknown, defaulting to 1000
[  110.434492][ T9929] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  110.461892][ T9907] vxcan1 speed is unknown, defaulting to 1000
[  110.549157][ T9907] vxcan1 speed is unknown, defaulting to 1000
[  110.720818][ T9942] __nla_validate_parse: 2 callbacks suppressed
[  110.720829][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'.
[  110.726376][ T9942] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  110.730615][ T9942] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.627246][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'.
[  111.877848][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1728'.
[  111.882608][ T9985] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  112.291688][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'.
[  112.376363][T10019] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  112.411573][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'.
[  112.716480][T10047] netlink: 'syz.1.1755': attribute type 1 has an invalid length.
[  112.720797][T10047] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1755'.
[  113.395065][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'.
[  113.698592][ T5888] Bluetooth: hci2: command 0x0405 tx timeout
[  113.731358][T10133] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1783'.
[  113.756844][T10135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1784'.
[  113.816390][T10143] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1788'.
[  114.756004][T10165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.766634][T10165] syzkaller0: entered promiscuous mode
[  114.769803][T10165] syzkaller0: entered allmulticast mode
[  114.778139][T10165] tipc: Resetting bearer <eth:syzkaller0>
[  114.782662][T10165] syzkaller0: tun_net_xmit 90
[  114.787205][T10164] tipc: Resetting bearer <eth:syzkaller0>
[  114.797944][T10164] tipc: Disabling bearer <eth:syzkaller0>
[  115.111933][T10205] netlink: zone id is out of range
[  115.118741][T10205] netlink: zone id is out of range
[  115.122836][T10205] netlink: zone id is out of range
[  115.144157][T10205] netlink: zone id is out of range
[  115.146738][T10205] netlink: zone id is out of range
[  115.152625][T10205] netlink: zone id is out of range
[  115.154938][T10205] netlink: zone id is out of range
[  115.157407][T10205] netlink: zone id is out of range
[  115.160345][T10205] netlink: zone id is out of range
[  115.241884][T10209] delete_channel: no stack
[  115.336401][T10215] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.167702][T10281] __nla_validate_parse: 4 callbacks suppressed
[  116.167713][T10281] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1848'.
[  116.339717][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'.
[  116.579147][ T5885] Bluetooth: hci2: command 0x0405 tx timeout
[  116.613069][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'.
[  116.721567][T10321] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1867'.
[  117.111626][T10371] ip6tnl2: entered promiscuous mode
[  117.458582][  T537] wlan1: Trigger new scan to find an IBSS to join
[  117.663756][T10442] netlink: 'syz.1.1923': attribute type 1 has an invalid length.
[  117.696388][T10442] bond1: (slave geneve2): making interface the new active one
[  117.701651][T10442] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  117.704608][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  117.707961][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  117.712128][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  117.715041][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  117.717852][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1923'.
[  117.724659][T10442] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.784216][T10454] tun0: tun_chr_ioctl cmd 2147767520
[  117.940140][T10464] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.943635][T10464] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  117.972811][T10464] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.976113][T10464] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  118.012607][T10464] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.015855][T10464] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  118.062007][T10464] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.065242][T10464] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  118.138188][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  118.141073][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  118.147761][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  118.150843][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  118.159987][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  118.162799][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  118.170854][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  118.173691][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  118.250839][T10471] vxcan1 speed is unknown, defaulting to 1000
[  118.526734][T10484] netlink: 'syz.1.1939': attribute type 7 has an invalid length.
[  118.529515][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1939'.
[  118.825707][T10504] IPv6: Can't replace route, no match found
[  118.833295][T10504] geneve2: entered promiscuous mode
[  118.877834][T10523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1957'.
[  118.982350][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1961'.
[  119.030279][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1964'.
[  119.189702][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.192533][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.218609][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.320515][T10587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1988'.
[  119.348614][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.938599][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.291708][T10678] netlink: 'syz.0.2028': attribute type 178 has an invalid length.
[  121.301511][T10771] netlink: 'syz.0.2074': attribute type 1 has an invalid length.
[  121.318089][T10771] 8021q: adding VLAN 0 to HW filter on device bond4
[  121.333116][T10771] ipvlan2: entered allmulticast mode
[  121.334939][T10771] bond4: entered allmulticast mode
[  121.346049][T10771] bond4: (slave gretap1): making interface the new active one
[  121.348524][T10771] gretap1: entered allmulticast mode
[  121.351000][T10771] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  121.402685][T10776] __nla_validate_parse: 7 callbacks suppressed
[  121.402696][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2076'.
[  121.655161][T10801] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2087'.
[  121.732462][T10804] netlink: 'syz.2.2088': attribute type 1 has an invalid length.
[  121.756848][T10804] bond2: (slave bridge3): making interface the new active one
[  121.766128][T10804] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  121.830516][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'.
[  121.866667][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2096'.
[  121.872003][T10822] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  121.905387][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2099'.
[  122.143784][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2109'.
[  122.303346][T10861] vxcan1 speed is unknown, defaulting to 1000
[  122.455511][T10875] net_ratelimit: 8 callbacks suppressed
[  122.455523][T10875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.761415][T10902] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2134'.
[  122.763431][T10900] vxcan1 speed is unknown, defaulting to 1000
[  122.869757][T10912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2133'.
[  122.872625][T10912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2133'.
[  122.875425][T10912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2133'.
[  123.413321][T10952] netlink: 'syz.0.2155': attribute type 7 has an invalid length.
[  123.415990][T10952] netlink: 'syz.0.2155': attribute type 8 has an invalid length.
[  123.422811][T10952] ip6gretap0: entered promiscuous mode
[  123.425171][T10952] syz_tun: entered promiscuous mode
[  123.428002][T10952] ip6gretap0: left promiscuous mode
[  123.431127][T10952] syz_tun: left promiscuous mode
[  123.618530][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  123.665882][T10972] veth0_to_team: left promiscuous mode
[  123.668188][T10972] batadv_slave_1: left promiscuous mode
[  123.672786][T10972] bond1: left promiscuous mode
[  123.689102][T10972] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  124.323288][T11031] vxcan1 speed is unknown, defaulting to 1000
[  124.372402][T11033] bridge1: entered promiscuous mode
[  124.374147][T11033] bridge1: entered allmulticast mode
[  124.517928][T11040] openvswitch: netlink: Missing valid actions attribute.
[  124.525436][T11040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.542040][T11042] macvtap0: refused to change device tx_queue_len
[  124.545644][T11042] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  124.585315][T11048] netlink: 'syz.1.2198': attribute type 1 has an invalid length.
[  124.625362][T11050] netlink: 'syz.1.2199': attribute type 3 has an invalid length.
[  124.636378][T11050] netlink: 'syz.1.2199': attribute type 3 has an invalid length.
[  124.648231][T11050] Bluetooth: MGMT ver 1.23
[  124.850578][T11082] tap0: tun_chr_ioctl cmd 1074025680
[  124.854083][T11082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.857554][T11082] D: renamed from syzkaller0
[  124.860745][T11082] tipc: Disabling bearer <eth:syzkaller0>
[  124.906631][T11087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.058778][T11098] nbd: nbd1 already in use
[  125.060593][T11098] block nbd1: NBD_DISCONNECT
[  125.062152][T11098] block nbd1: Send disconnect failed -32
[  125.067869][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  125.070759][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  125.073273][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  125.076159][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  125.078757][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  125.081631][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  125.084754][ T8906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  125.087707][ T8906] Buffer I/O error on dev nbd1, logical block 0, async page read
[  125.096660][ T8906] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  125.104823][ T8906] Buffer I/O error on dev nbd1, logical block 1, async page read
[  125.123590][ T8906] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  125.127057][ T8906] Buffer I/O error on dev nbd1, logical block 2, async page read
[  125.130845][ T8906] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  125.133909][ T8906] Buffer I/O error on dev nbd1, logical block 3, async page read
[  125.137498][ T8906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  125.176900][ T8906] Buffer I/O error on dev nbd1, logical block 0, async page read
[  125.185378][ T8906] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  125.189710][ T8906] Buffer I/O error on dev nbd1, logical block 1, async page read
[  125.193328][ T8906] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  125.196590][ T8906] Buffer I/O error on dev nbd1, logical block 2, async page read
[  125.213237][ T8906] ldm_validate_partition_table(): Disk read failed.
[  125.217218][ T8906] Dev nbd1: unable to read RDB block 0
[  125.221756][ T8906]  nbd1: unable to read partition table
[  125.237563][ T8906] ldm_validate_partition_table(): Disk read failed.
[  125.244470][ T8906] Dev nbd1: unable to read RDB block 0
[  125.248341][ T8906]  nbd1: unable to read partition table
[  125.402290][T11120] netlink: 'syz.1.2229': attribute type 29 has an invalid length.
[  125.438210][T11122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.444524][T11124] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  125.444624][T11122] syzkaller0: entered promiscuous mode
[  125.451654][T11122] syzkaller0: entered allmulticast mode
[  125.470574][T11122] tipc: Resetting bearer <eth:syzkaller0>
[  125.476825][T11121] tipc: Resetting bearer <eth:syzkaller0>
[  125.484391][T11121] tipc: Disabling bearer <eth:syzkaller0>
[  125.569589][T11129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.963403][T11180] bridge0: entered allmulticast mode
[  126.055743][T11190] netlink: 'syz.0.2263': attribute type 10 has an invalid length.
[  126.058484][T11190] team0: Device ipvlan1 failed to enter team mode
[  126.060575][T11190] team0: Device ipvlan1 failed to enter team mode
[  126.157248][T11202] nbd: couldn't find device at index 536870912
[  126.245600][T11214] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  126.874516][T11257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.881690][T11257] syzkaller0: entered promiscuous mode
[  126.883997][T11257] syzkaller0: entered allmulticast mode
[  126.901038][T11257] tipc: Resetting bearer <eth:syzkaller0>
[  126.905802][T11256] tipc: Resetting bearer <eth:syzkaller0>
[  126.916649][T11256] tipc: Disabling bearer <eth:syzkaller0>
[  128.053696][T11345] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  128.463478][T11379] netlink: 'syz.2.2347': attribute type 3 has an invalid length.
[  128.466023][T11379] netlink: 'syz.2.2347': attribute type 1 has an invalid length.
[  128.469488][T11379] __nla_validate_parse: 18 callbacks suppressed
[  128.469495][T11379] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2347'.
[  128.474644][T11379] NCSI netlink: No device for ifindex 0
[  128.533159][T11381] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.2348'.
[  128.551152][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2349'.
[  128.767000][T11363] vxcan1 speed is unknown, defaulting to 1000
[  128.769803][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'.
[  129.232304][T11442] netlink: 'syz.1.2377': attribute type 1 has an invalid length.
[  129.287339][T11450] netlink: 'syz.1.2381': attribute type 1 has an invalid length.
[  129.709804][T11486] netlink: 'syz.1.2397': attribute type 1 has an invalid length.
[  129.713914][T11486] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2397'.
[  129.716809][T11486] netlink: 'syz.1.2397': attribute type 1 has an invalid length.
[  129.723805][T11486] netlink: 'syz.1.2397': attribute type 2 has an invalid length.
[  129.878280][T11510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2409'.
[  129.906751][T11517] netem: incorrect gi model size
[  129.910556][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'.
[  129.912242][T11517] netem: change failed
[  129.913494][T11518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.055414][T11536] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  130.059128][T11536] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  130.068254][T11540] IPv6: sit2: Disabled Multicast RS
[  130.091952][T11536] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  130.098016][T11536] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  130.126735][T11546] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  130.154307][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'.
[  130.158188][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'.
[  130.165194][T11536] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  130.171982][T11536] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  130.221627][T11536] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  130.224891][T11536] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  130.278085][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  130.283349][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  130.300735][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  130.303439][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  130.331494][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  130.334214][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  130.336897][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  130.343076][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  130.480917][T11581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.492257][T11581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.554481][T11585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2445'.
[  130.672427][T11604] openvswitch: netlink: Message has 4 unknown bytes.
[  130.725844][T11612] Bluetooth: MGMT ver 1.23
[  130.995334][T11650] syzkaller0: entered promiscuous mode
[  130.997245][T11650] syzkaller0: entered allmulticast mode
[  131.006763][T11650] netlink: 'syz.0.2476': attribute type 2 has an invalid length.
[  131.012568][T11650] netlink: 'syz.0.2476': attribute type 1 has an invalid length.
[  131.108906][T11665] netlink: 'syz.0.2483': attribute type 2 has an invalid length.
[  132.399439][T11743] syzkaller0: entered promiscuous mode
[  132.401258][T11743] syzkaller0: entered allmulticast mode
[  132.419962][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  132.740721][ T5888] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  132.743300][ T5888] Bluetooth: hci2: command 0x0405 tx timeout
[  133.247429][T11755] tipc: New replicast peer: 255.255.255.255
[  133.250127][T11755] tipc: Enabled bearer <udp:syz2>, priority 10
[  133.549555][T11808] __nla_validate_parse: 14 callbacks suppressed
[  133.549567][T11808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2550'.
[  133.764530][T11831] validate_nla: 3 callbacks suppressed
[  133.764541][T11831] netlink: 'syz.0.2562': attribute type 10 has an invalid length.
[  133.772441][T11831] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  133.806229][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2566'.
[  133.806551][T11840] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2567'.
[  133.855448][T11845] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2569'.
[  133.864217][T11845] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  134.024132][T11867] pim6reg1: entered promiscuous mode
[  134.025940][T11867] pim6reg1: entered allmulticast mode
[  134.368465][  T791] tipc: Node number set to 437651805
[  134.962685][T11899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  134.965197][T11899] IPv6: NLM_F_CREATE should be set when creating new route
[  134.967629][T11899] IPv6: NLM_F_CREATE should be set when creating new route
[  135.030661][T11907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.035480][T11907] syzkaller0: entered promiscuous mode
[  135.037373][T11907] syzkaller0: entered allmulticast mode
[  135.053664][T11907] tipc: Resetting bearer <eth:syzkaller0>
[  135.056902][T11906] tipc: Resetting bearer <eth:syzkaller0>
[  135.067631][T11906] tipc: Disabling bearer <eth:syzkaller0>
[  135.160206][   T24] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  135.216911][T11931] veth0_to_team: left allmulticast mode
[  135.362478][T11949] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  135.366189][T11948] IPVS: stopping backup sync thread 11949 ...
[  135.371392][T11948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2616'.
[  135.374270][T11948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2616'.
[  135.433479][T11956] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2616'.
[  135.504494][T11962] IPVS: Scheduler module ip_vs_ not found
[  135.615431][T11969] bridge4: entered allmulticast mode
[  136.256440][T11989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2634'.
[  136.637120][T12005] netlink: 'syz.2.2641': attribute type 9 has an invalid length.
[  136.717556][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2644'.
[  136.901167][T12026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.907110][T12026] syzkaller0: entered promiscuous mode
[  136.909450][T12026] syzkaller0: entered allmulticast mode
[  136.927281][T12026] tipc: Resetting bearer <eth:syzkaller0>
[  136.935587][T12025] tipc: Resetting bearer <eth:syzkaller0>
[  136.982028][T12034] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2656'.
[  137.093167][T12025] tipc: Disabling bearer <eth:syzkaller0>
[  137.107986][T12040] netlink: 'syz.2.2659': attribute type 1 has an invalid length.
[  137.145630][T12040] 8021q: adding VLAN 0 to HW filter on device bond4
[  137.164066][T12040] bond4: (slave bridge5): making interface the new active one
[  137.167329][T12040] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  137.180882][T12045] netlink: 'syz.1.2661': attribute type 21 has an invalid length.
[  137.181561][T12040] gretap1: entered promiscuous mode
[  137.186766][T12040] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  137.192976][T12045] netlink: 'syz.1.2661': attribute type 5 has an invalid length.
[  137.205428][T12040] macvlan2: entered promiscuous mode
[  137.207232][T12040] macvlan2: entered allmulticast mode
[  137.218841][T12040] bond4: entered promiscuous mode
[  137.220565][T12040] bridge5: entered promiscuous mode
[  137.223503][T12040] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  137.226242][T12040] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  137.244084][T12040] bond4: left promiscuous mode
[  137.253195][T12040] bridge5: left promiscuous mode
[  137.336359][T12063] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  137.360126][T12065] siw: device registration error -23
[  137.697969][T12108] raw_sendmsg: syz.0.2690 forgot to set AF_INET. Fix it!
[  139.120163][T12150] __nla_validate_parse: 5 callbacks suppressed
[  139.120175][T12150] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2709'.
[  139.125203][T12150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2709'.
[  139.136508][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2709'.
[  139.195822][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2715'.
[  139.202513][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2715'.
[  139.241622][T12167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2717'.
[  139.250773][T12167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2717'.
[  139.324033][ T5940] vxcan1 speed is unknown, defaulting to 1000
[  139.341711][ T5940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  139.619925][T12188] macvlan0: entered allmulticast mode
[  139.620313][T12192] netlink: 'syz.1.2728': attribute type 1 has an invalid length.
[  139.622328][T12188] veth1_vlan: entered allmulticast mode
[  139.627493][T12188] team0: Port device macvlan0 added
[  139.651168][T12194] IPVS: length: 148 != 24
[  139.700777][T12198] netlink: 'syz.1.2731': attribute type 12 has an invalid length.
[  139.703450][T12198] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2731'.
[  139.775691][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'.
[  139.808615][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  140.003540][T12209] netlink: 'syz.2.2735': attribute type 10 has an invalid length.
[  140.009567][T12209] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  140.196489][T12217] netlink: 'syz.0.2739': attribute type 10 has an invalid length.
[  140.199560][T12217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2739'.
[  140.203984][T12217] dummy0: entered promiscuous mode
[  140.205706][T12217] dummy0: entered allmulticast mode
[  140.210597][T12217] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  140.751559][T12287] batadv0: entered promiscuous mode
[  140.754334][T12287] macvtap1: entered promiscuous mode
[  140.762212][T12287] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  140.773227][T12287] batadv0: left promiscuous mode
[  140.810443][T12295] pim6reg1: entered promiscuous mode
[  140.812684][T12295] pim6reg1: entered allmulticast mode
[  141.063398][T12327] netlink: 'syz.0.2794': attribute type 7 has an invalid length.
[  141.066043][T12327] netlink: 'syz.0.2794': attribute type 8 has an invalid length.
[  141.861282][T12331] veth1_vlan: left allmulticast mode
[  141.872415][T12331] team0: Port device macvlan0 removed
[  141.876515][T12331] bond0: (slave wlan1): Releasing backup interface
[  141.903928][T12331] team0: Port device batadv1 removed
[  141.907108][T12331] bond1: (slave veth5): Releasing active interface
[  141.914912][T12331] bond4: (slave gretap1): Releasing active interface
[  141.917794][T12331] gretap1: left allmulticast mode
[  141.923556][T12336] netlink: 'syz.0.2795': attribute type 10 has an invalid length.
[  141.933750][T12336] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  141.961302][T12331] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  141.964460][T12331] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  142.073613][T12345] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  142.090826][T12345] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  142.937001][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  143.186041][T12392] netlink: 'syz.1.2821': attribute type 1 has an invalid length.
[  143.201545][T12392] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.217398][T12392] bond2: (slave veth7): Enslaving as an active interface with a down link
[  143.229797][T12392] 8021q: adding VLAN 0 to HW filter on device batadv1
[  143.232374][T12392] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  143.400685][T12417] syzkaller1: entered promiscuous mode
[  143.402664][T12417] syzkaller1: entered allmulticast mode
[  143.487686][T12421] vxcan1 speed is unknown, defaulting to 1000
[  143.578259][T12424] vxcan1 speed is unknown, defaulting to 1000
[  143.747104][T12426] vxcan1 speed is unknown, defaulting to 1000
[  144.926227][T12481] netlink: 'syz.0.2859': attribute type 1 has an invalid length.
[  145.027935][T12492] __nla_validate_parse: 10 callbacks suppressed
[  145.027948][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2865'.
[  145.049310][   T33] audit: type=1800 audit(1754307918.794:2): pid=12493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2866" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5338 res=0 errno=0
[  145.055375][T12492] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  145.056573][   T33] audit: type=1800 audit(1754307918.804:3): pid=12493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2866" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5338 res=0 errno=0
[  145.060920][T12492] bond3: (slave vcan1): Error -95 calling set_mac_address
[  145.226818][T12505] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2871'.
[  145.506908][T12545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2890'.
[  145.512202][T12545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2890'.
[  145.515002][T12547] IPv6: NLM_F_REPLACE set, but no existing node found!
[  145.515278][T12545] netlink: 'syz.2.2890': attribute type 4 has an invalid length.
[  145.571534][T12553] IPVS: Error connecting to the multicast addr
[  145.575296][T12553] netlink: 'syz.0.2894': attribute type 16 has an invalid length.
[  145.577779][T12553] netlink: 'syz.0.2894': attribute type 17 has an invalid length.
[  145.601584][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'.
[  145.605080][T12553] IPv6: NLM_F_REPLACE set, but no existing node found!
[  145.695142][   T33] audit: type=1804 audit(1754307919.444:4): pid=12563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2899" name="/newroot/942/cgroup.controllers" dev="tmpfs" ino=4769 res=1 errno=0
[  145.711200][   T33] audit: type=1800 audit(1754307919.444:5): pid=12563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2899" name="cgroup.controllers" dev="tmpfs" ino=4769 res=0 errno=0
[  145.718191][   T33] audit: type=1800 audit(1754307919.454:6): pid=12563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2899" name="cgroup.controllers" dev="tmpfs" ino=4769 res=0 errno=0
[  145.877713][T12582] openvswitch: netlink: IP tunnel dst address not specified
[  145.983716][T12593] netlink: 'syz.2.2913': attribute type 2 has an invalid length.
[  145.986376][T12593] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2913'.
[  146.030530][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2915'.
[  146.325808][T12608] GUP no longer grows the stack in syz.1.2920 (12608): 200000002000-20000000a000 (200000001000)
[  146.329680][T12608] CPU: 1 UID: 0 PID: 12608 Comm: syz.1.2920 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  146.329691][T12608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.329696][T12608] Call Trace:
[  146.329700][T12608]  <TASK>
[  146.329704][T12608]  dump_stack_lvl+0x189/0x250
[  146.329720][T12608]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.329728][T12608]  ? __pfx__printk+0x10/0x10
[  146.329737][T12608]  ? find_vma+0xe7/0x160
[  146.329754][T12608]  __get_user_pages+0x2a60/0x30b0
[  146.329778][T12608]  ? __pfx___get_user_pages+0x10/0x10
[  146.329792][T12608]  __gup_longterm_locked+0xd66/0x15b0
[  146.329803][T12608]  ? try_grab_folio_fast+0x35b/0x4f0
[  146.329816][T12608]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[  146.329829][T12608]  gup_fast_fallback+0x1cd4/0x2260
[  146.329839][T12608]  ? is_bpf_text_address+0x26/0x2b0
[  146.329865][T12608]  ? __pfx_gup_fast_fallback+0x10/0x10
[  146.329873][T12608]  ? stack_trace_save+0x9c/0xe0
[  146.329883][T12608]  ? stack_depot_save_flags+0x40/0x900
[  146.329893][T12608]  ? pin_user_pages_fast+0x4d/0xb0
[  146.329904][T12608]  iov_iter_extract_pages+0x35a/0x5e0
[  146.329918][T12608]  extract_iter_to_sg+0xe46/0x24e0
[  146.329933][T12608]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  146.329948][T12608]  ? __asan_memset+0x22/0x50
[  146.329959][T12608]  af_alg_get_rsgl+0x436/0x810
[  146.329977][T12608]  aead_recvmsg+0x4cc/0x13f0
[  146.329989][T12608]  ? trace_sched_exit_tp+0x38/0x120
[  146.330002][T12608]  ? __pfx_aead_recvmsg+0x10/0x10
[  146.330011][T12608]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  146.330020][T12608]  ? __pfx_aead_recvmsg+0x10/0x10
[  146.330028][T12608]  sock_recvmsg_nosec+0x186/0x1c0
[  146.330041][T12608]  ____sys_recvmsg+0x3aa/0x460
[  146.330052][T12608]  ? __pfx_____sys_recvmsg+0x10/0x10
[  146.330066][T12608]  ? import_iovec+0x74/0xa0
[  146.330078][T12608]  ___sys_recvmsg+0x1b5/0x510
[  146.330088][T12608]  ? __pfx____sys_recvmsg+0x10/0x10
[  146.330108][T12608]  ? __might_fault+0xb0/0x130
[  146.330120][T12608]  do_recvmmsg+0x307/0x770
[  146.330131][T12608]  ? __pfx_do_recvmmsg+0x10/0x10
[  146.330138][T12608]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  146.330154][T12608]  ? __pfx_do_futex+0x10/0x10
[  146.330170][T12608]  __x64_sys_recvmmsg+0x190/0x240
[  146.330180][T12608]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  146.330187][T12608]  ? __task_pid_nr_ns+0x28/0x470
[  146.330198][T12608]  ? do_syscall_64+0xbe/0x3b0
[  146.330212][T12608]  do_syscall_64+0xfa/0x3b0
[  146.330222][T12608]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.330232][T12608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.330239][T12608]  ? exc_page_fault+0x9f/0xf0
[  146.330250][T12608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.330257][T12608] RIP: 0033:0x7f043058eb69
[  146.330264][T12608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.330270][T12608] RSP: 002b:00007f04314e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  146.330279][T12608] RAX: ffffffffffffffda RBX: 00007f04307b5fa0 RCX: 00007f043058eb69
[  146.330286][T12608] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b
[  146.330292][T12608] RBP: 00007f0430611df1 R08: 0000000000000000 R09: 0000000000000000
[  146.330297][T12608] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  146.330302][T12608] R13: 0000000000000000 R14: 00007f04307b5fa0 R15: 00007fff66a16428
[  146.330315][T12608]  </TASK>
[  146.451851][   T33] audit: type=1804 audit(1754307920.204:7): pid=12608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2920" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=4403 res=1 errno=0
[  146.459356][   T33] audit: type=1800 audit(1754307920.204:8): pid=12608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2920" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=4403 res=0 errno=0
[  146.575410][T12619] netlink: 'syz.1.2925': attribute type 1 has an invalid length.
[  146.578770][T12619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2925'.
[  146.707686][T12627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2929'.
[  146.717878][T12627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2929'.
[  146.749685][T12632] syzkaller1: entered promiscuous mode
[  146.751423][T12632] syzkaller1: entered allmulticast mode
[  147.165383][T12687] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  147.168174][T12687] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  147.207883][T12690] vxcan1 speed is unknown, defaulting to 1000
[  147.271972][T12696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.311378][T12699] IPv6: Can't replace route, no match found
[  147.615816][T12730] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  147.627359][T12730] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  147.808511][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.811114][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.706141][T12824] netlink: 'syz.2.3017': attribute type 5 has an invalid length.
[  149.058524][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  149.076135][T12842] netlink: 'syz.1.3025': attribute type 9 has an invalid length.
[  149.079213][T12842] netlink: 'syz.1.3025': attribute type 7 has an invalid length.
[  149.081733][T12842] netlink: 'syz.1.3025': attribute type 8 has an invalid length.
[  149.105758][T12844] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  149.903794][T12900] veth1_to_team: entered allmulticast mode
[  150.008044][T12910] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  150.015262][T12910] team0: Port device team_slave_0 removed
[  150.022941][T12910] team0: Port device team_slave_1 removed
[  150.025250][T12910] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.029842][T12910] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.033531][T12910] bond2: (slave bridge3): Releasing active interface
[  150.037871][T12910] bond4: (slave bridge5): Releasing active interface
[  150.040851][T12910] bond4: (slave bridge5): the permanent HWaddr of slave - b2:b9:99:28:f8:e2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  150.047378][T12910] bond4: (slave gretap1): making interface the new active one
[  150.054217][T12910] bond4: (slave gretap1): Releasing active interface
[  150.073762][T12910] netlink: 'syz.2.3057': attribute type 10 has an invalid length.
[  150.077058][T12910] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  150.084361][T12910] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.088162][T12910] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  150.659308][T12924] netlink: 'syz.0.3069': attribute type 1 has an invalid length.
[  150.661864][T12924] netlink: 'syz.0.3069': attribute type 3 has an invalid length.
[  150.664347][T12924] __nla_validate_parse: 14 callbacks suppressed
[  150.664352][T12924] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3069'.
[  150.713480][T12928] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  150.720255][T12927] netlink: 'syz.1.3063': attribute type 16 has an invalid length.
[  150.722844][T12927] netlink: 'syz.1.3063': attribute type 17 has an invalid length.
[  150.826937][T12934] IPv6: NLM_F_REPLACE set, but no existing node found!
[  150.855448][T12927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.967095][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3063'.
[  150.975014][  T791] vxcan1 speed is unknown, defaulting to 1000
[  150.976848][ T5846] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  150.980744][  T791] syz2: Port: 1 Link DOWN
[  150.986008][ T5846] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  150.990710][ T5846] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  150.993862][ T5846] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  150.996583][ T5846] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  151.001889][ T5846] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  151.004737][ T5846] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  151.007541][ T5846] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  151.010293][  T791] vxcan1 speed is unknown, defaulting to 1000
[  151.018039][T12930] vxcan1 speed is unknown, defaulting to 1000
[  151.179157][T12953] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3074'.
[  151.441181][T12979] syzkaller1: entered promiscuous mode
[  151.443070][T12979] syzkaller1: entered allmulticast mode
[  153.529953][T13031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.532622][T13031] syzkaller0: entered promiscuous mode
[  153.534423][T13031] syzkaller0: entered allmulticast mode
[  153.546794][T13031] tipc: Resetting bearer <eth:syzkaller0>
[  153.551011][T13030] tipc: Resetting bearer <eth:syzkaller0>
[  153.558328][T13030] tipc: Disabling bearer <eth:syzkaller0>
[  153.745005][T13037] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3113'.
[  153.748320][T13037] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  154.131950][T13093] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3137'.
[  154.737999][T13151] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  155.009212][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'.
[  155.230937][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'.
[  156.266712][T13255] netlink: 'syz.2.3215': attribute type 13 has an invalid length.
[  156.273917][T13255] netlink: 'syz.2.3215': attribute type 17 has an invalid length.
[  156.307278][T13255] 8021q: adding VLAN 0 to HW filter on device team0
[  156.312173][T13255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.347746][T13273] netlink: 'syz.0.3220': attribute type 1 has an invalid length.
[  156.350878][T13273] netlink: 'syz.0.3220': attribute type 4 has an invalid length.
[  156.353501][T13273] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3220'.
[  156.376054][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3221'.
[  156.380362][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3221'.
[  156.542382][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3228'.
[  156.580136][ T5846] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  156.960186][T13315] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'.
[  157.251557][T13352] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3258'.
[  157.360702][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'.
[  157.401148][T13365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.407002][T13365] syzkaller0: entered promiscuous mode
[  157.410129][T13365] syzkaller0: entered allmulticast mode
[  157.438250][T13365] tipc: Resetting bearer <eth:syzkaller0>
[  157.444885][T13364] tipc: Resetting bearer <eth:syzkaller0>
[  157.460633][T13364] tipc: Disabling bearer <eth:syzkaller0>
[  157.734126][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'.
[  157.740208][T13386] ip6gre1: entered allmulticast mode
[  157.772880][T13391] sctp: [Deprecated]: syz.0.3276 (pid 13391) Use of int in maxseg socket option.
[  157.772880][T13391] Use struct sctp_assoc_value instead
[  157.843820][ T5910] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.846570][ T5910] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.859081][ T5910] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.861905][ T5910] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.928823][T13403] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  158.264202][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'.
[  158.421826][T13437] macsec1: entered allmulticast mode
[  158.428421][T13437] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  158.431383][T13437] batman_adv: batadv0: Adding interface: macsec1
[  158.445948][T13437] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.455218][T13437] batman_adv: batadv0: Interface activated: macsec1
[  158.483082][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'.
[  159.156395][T13470] sch_fq: defrate 0 ignored.
[  159.310921][T13499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.393129][T13500] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  159.396419][T13500] bond0 (unregistering): Released all slaves
[  159.624271][T13522] netlink: 'syz.0.3336': attribute type 1 has an invalid length.
[  159.692243][T13529] vxcan1 speed is unknown, defaulting to 1000
[  160.055788][T13572] lo: entered allmulticast mode
[  160.058958][T13572] tunl0: entered allmulticast mode
[  160.062718][T13572] gre0: entered allmulticast mode
[  160.068095][T13572] gretap0: entered allmulticast mode
[  160.078207][T13572] erspan0: entered allmulticast mode
[  160.084372][T13572] ip_vti0: entered allmulticast mode
[  160.088883][T13572] ip6_vti0: entered allmulticast mode
[  160.094910][T13572] sit0: entered allmulticast mode
[  160.102525][T13572] ip6tnl0: entered allmulticast mode
[  160.110685][T13572] ip6gre0: entered allmulticast mode
[  160.117276][T13572] syz_tun: entered allmulticast mode
[  160.121554][T13572] ip6gretap0: entered allmulticast mode
[  160.127030][T13572] dummy0: entered allmulticast mode
[  160.133290][T13572] nlmon0: entered allmulticast mode
[  160.137028][T13572] caif0: entered allmulticast mode
[  160.140845][T13572] batadv0: entered allmulticast mode
[  160.142828][T13572] vxcan0: entered allmulticast mode
[  160.144745][T13572] vxcan1: entered allmulticast mode
[  160.146614][T13572] veth0: entered allmulticast mode
[  160.148778][T13572] veth1: entered allmulticast mode
[  160.150812][T13572] wg0: entered allmulticast mode
[  160.152660][T13572] wg1: entered allmulticast mode
[  160.154476][T13572] wg2: entered allmulticast mode
[  160.156319][T13572] veth0_to_bridge: entered allmulticast mode
[  160.158761][T13572] bridge_slave_0: entered allmulticast mode
[  160.160955][T13572] veth1_to_bridge: entered allmulticast mode
[  160.163083][T13572] bridge_slave_1: entered allmulticast mode
[  160.165219][T13572] veth0_to_bond: entered allmulticast mode
[  160.167347][T13572] bond_slave_0: entered allmulticast mode
[  160.169630][T13572] veth1_to_bond: entered allmulticast mode
[  160.171737][T13572] bond_slave_1: entered allmulticast mode
[  160.173791][T13572] veth0_to_team: entered allmulticast mode
[  160.175906][T13572] team_slave_0: entered allmulticast mode
[  160.178065][T13572] team_slave_1: entered allmulticast mode
[  160.180758][T13572] veth0_to_batadv: entered allmulticast mode
[  160.182949][T13572] batadv_slave_0: entered allmulticast mode
[  160.185100][T13572] veth1_to_batadv: entered allmulticast mode
[  160.187161][T13572] batadv_slave_1: entered allmulticast mode
[  160.189438][T13572] xfrm0: entered allmulticast mode
[  160.191326][T13572] veth0_to_hsr: entered allmulticast mode
[  160.193425][T13572] hsr_slave_0: entered allmulticast mode
[  160.195469][T13572] veth1_to_hsr: entered allmulticast mode
[  160.197533][T13572] hsr_slave_1: entered allmulticast mode
[  160.199741][T13572] hsr0: entered allmulticast mode
[  160.201620][T13572] veth1_virt_wifi: entered allmulticast mode
[  160.203776][T13572] veth0_virt_wifi: entered allmulticast mode
[  160.205940][T13572] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  160.208561][T13572] veth1_vlan: entered allmulticast mode
[  160.210582][T13572] veth0_vlan: entered allmulticast mode
[  160.212613][T13572] vlan0: entered allmulticast mode
[  160.214532][T13572] vlan1: entered allmulticast mode
[  160.216394][T13572] macvlan0: entered allmulticast mode
[  160.218346][T13572] macvlan1: entered allmulticast mode
[  160.220530][T13572] ipvlan0: entered allmulticast mode
[  160.222461][T13572] ipvlan1: entered allmulticast mode
[  160.224319][T13572] veth1_macvtap: entered allmulticast mode
[  160.226463][T13572] veth0_macvtap: entered allmulticast mode
[  160.228669][T13572] macvtap0: entered allmulticast mode
[  160.230590][T13572] macsec0: entered allmulticast mode
[  160.232347][T13572] geneve0: entered allmulticast mode
[  160.234132][T13572] geneve1: entered allmulticast mode
[  160.235987][T13572] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  160.238767][T13572] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  160.241294][T13572] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  160.243805][T13572] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  160.249330][T13572] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  160.251538][T13572] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  160.254832][T13572] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  160.257149][T13572] bridge1: entered allmulticast mode
[  160.260705][T13572] gre1: entered allmulticast mode
[  160.262473][T13572] ip6tnl1: entered allmulticast mode
[  160.264307][T13572] bridge2: entered allmulticast mode
[  160.266134][T13572] gre2: entered allmulticast mode
[  160.267932][T13572] ieee802154 phy1 wpan1: entered allmulticast mode
[  160.270347][T13572] bond0: entered allmulticast mode
[  160.272208][T13572] bond1: entered allmulticast mode
[  160.273964][T13572] sit1: entered allmulticast mode
[  160.275734][T13572] vcan0: entered allmulticast mode
[  160.277458][T13572] erspan1: entered allmulticast mode
[  160.281447][T13572] bridge0: entered allmulticast mode
[  160.283321][T13572] bond2: entered allmulticast mode
[  160.285117][T13572] bridge3: entered allmulticast mode
[  160.286959][T13572] veth2: entered allmulticast mode
[  160.289015][T13572] veth3: entered allmulticast mode
[  160.290788][T13572] pim6reg: entered allmulticast mode
[  160.292534][T13572] bond3: entered allmulticast mode
[  160.297904][T13572] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode
[  160.305816][T13572] bond4: entered allmulticast mode
[  160.311143][T13572] bridge5: entered allmulticast mode
[  160.313166][T13572] gretap1: left promiscuous mode
[  160.314926][T13572] gretap1: entered allmulticast mode
[  160.316956][T13572] vti0: entered allmulticast mode
[  160.319894][T13572] sit2: entered allmulticast mode
[  160.323104][T13572] syztnl0: entered allmulticast mode
[  160.325239][T13572] bond5: entered allmulticast mode
[  160.327192][T13572] sit3: entered allmulticast mode
[  160.329632][T13572] bridge6: entered allmulticast mode
[  161.012961][T13588] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  161.252961][T13604] netlink: 'syz.2.3367': attribute type 4 has an invalid length.
[  161.591070][T13649] __nla_validate_parse: 6 callbacks suppressed
[  161.591081][T13649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3388'.
[  161.596032][T13649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3388'.
[  161.600396][T13649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3388'.
[  161.603717][T13647] vxcan1 speed is unknown, defaulting to 1000
[  161.882663][T13677] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  161.884940][T13677] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  161.951858][T13677] vxcan1 speed is unknown, defaulting to 1000
[  162.652574][T13711] IPVS: Error connecting to the multicast addr
[  162.655636][T13711] netlink: 'syz.2.3413': attribute type 16 has an invalid length.
[  162.659759][T13711] netlink: 'syz.2.3413': attribute type 17 has an invalid length.
[  162.667893][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3414'.
[  162.675735][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3413'.
[  162.681641][T13711] IPv6: NLM_F_REPLACE set, but no existing node found!
[  162.732353][T13717] sctp: [Deprecated]: syz.2.3417 (pid 13717) Use of int in max_burst socket option deprecated.
[  162.732353][T13717] Use struct sctp_assoc_value instead
[  162.826649][T13731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3424'.
[  162.850960][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3425'.
[  163.746621][T13774] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3444'.
[  163.976097][T13809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3462'.
[  163.983252][T13809] vlan0: entered promiscuous mode
[  163.984864][T13809] bridge0: entered promiscuous mode
[  164.003978][T13813] bridge7: the hash_elasticity option has been deprecated and is always 16
[  164.006693][T13813] bridge7: entered allmulticast mode
[  164.142811][T13835] netlink: 'syz.1.3471': attribute type 1 has an invalid length.
[  164.145952][T13837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3472'.
[  164.185709][T13835] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  164.206872][T13835] veth9: entered promiscuous mode
[  164.213393][T13835] bond4: (slave veth9): Enslaving as a backup interface with a down link
[  164.226873][T13847] netlink: 'syz.0.3474': attribute type 1 has an invalid length.
[  164.244579][T13847] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.247585][ T5846] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  164.253601][T13835] 8021q: adding VLAN 0 to HW filter on device bond4
[  164.292294][T13847] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.295293][T13847] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  164.299292][T13847] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  164.328265][T13857] gretap2: entered promiscuous mode
[  164.333057][T13857] bond0: (slave gretap2): making interface the new active one
[  164.335780][T13857] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  164.347887][T13857] macvlan0: entered promiscuous mode
[  164.351506][T13857] macvlan0: entered allmulticast mode
[  164.353984][T13857] bond0: entered promiscuous mode
[  164.359549][   T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  164.363379][T13857] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  164.370410][T13857] bond0: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  164.393631][T13857] bond0: left promiscuous mode
[  165.377280][T13905] syzkaller1: entered promiscuous mode
[  165.382299][T13905] syzkaller1: entered allmulticast mode
[  165.748335][T13939] netlink: 'syz.1.3511': attribute type 18 has an invalid length.
[  165.813334][T13944] erspan0: left allmulticast mode
[  165.815542][T13944] dummy0: left promiscuous mode
[  165.817203][T13944] dummy0: left allmulticast mode
[  165.819097][T13944] batadv0: left promiscuous mode
[  165.821088][T13944] batadv0: left allmulticast mode
[  165.829819][T13944] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  165.837457][T13944] ip6tnl1: left promiscuous mode
[  165.840008][T13944] ip6tnl1: left allmulticast mode
[  165.843082][T13944] veth5: left promiscuous mode
[  165.845442][T13944] ipvlan2: left allmulticast mode
[  165.847187][T13944] bond4: left allmulticast mode
[  165.849241][T13944] bridge1: left promiscuous mode
[  165.851252][T13944] bridge1: left allmulticast mode
[  165.856263][T13944] ip6gre1: left allmulticast mode
[  165.864697][T13944] gretap2: left promiscuous mode
[  165.874151][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.876926][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.884198][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.888530][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.892954][T13952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.898819][T13952] syzkaller0: entered promiscuous mode
[  165.900696][T13952] syzkaller0: entered allmulticast mode
[  165.912142][T13952] tipc: Resetting bearer <eth:syzkaller0>
[  165.914784][T13951] tipc: Resetting bearer <eth:syzkaller0>
[  165.923889][T13951] tipc: Disabling bearer <eth:syzkaller0>
[  165.948882][T13954] sock: sock_set_timeout: `syz.0.3518' (pid 13954) tries to set negative timeout
[  165.994502][T13959] netlink: 'syz.1.3520': attribute type 4 has an invalid length.
[  165.996935][T13959] netlink: 'syz.1.3520': attribute type 17 has an invalid length.
[  166.015341][T13962] netlink: 'syz.0.3522': attribute type 3 has an invalid length.
[  166.330964][T14011] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  166.442523][T14023] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  166.844280][T14056] netlink: 'syz.2.3567': attribute type 2 has an invalid length.
[  166.846774][T14056] __nla_validate_parse: 6 callbacks suppressed
[  166.846781][T14056] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3567'.
[  167.067372][T14070] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3574'.
[  167.387943][T14086] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3582'.
[  167.524586][T14098] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  167.553293][T14103] sch_tbf: burst 240 is lower than device lo mtu (327700) !
[  167.597737][T14108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.600454][T14108] syzkaller0: entered promiscuous mode
[  167.602289][T14108] syzkaller0: entered allmulticast mode
[  167.623672][T14108] tipc: Resetting bearer <eth:syzkaller0>
[  167.628995][T14107] tipc: Resetting bearer <eth:syzkaller0>
[  167.640079][T14107] tipc: Disabling bearer <eth:syzkaller0>
[  167.811180][T14139] netlink: 4208 bytes leftover after parsing attributes in process `syz.2.3608'.
[  167.842117][T14143] gtp0: entered promiscuous mode
[  167.874492][T14146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3612'.
[  167.985169][T14157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3617'.
[  168.118957][T14170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3623'.
[  168.150320][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3624'.
[  168.710476][T14211] netlink: 'syz.0.3642': attribute type 29 has an invalid length.
[  168.713899][T14211] netlink: 'syz.0.3642': attribute type 29 has an invalid length.
[  168.785815][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3647'.
[  168.930305][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3657'.
[  168.935714][T14242] netlink: 'syz.2.3657': attribute type 7 has an invalid length.
[  168.939899][T14242] netlink: 'syz.2.3657': attribute type 8 has an invalid length.
[  168.953765][T14242] gretap0: entered promiscuous mode
[  168.956117][T14242] batadv_slave_1: entered promiscuous mode
[  168.961843][T14242] erspan0: entered promiscuous mode
[  168.969956][T14242] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  168.973317][T14242] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.976682][T14242] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  169.181769][T14278] netlink: 'syz.1.3673': attribute type 31 has an invalid length.
[  169.430154][T14303] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  169.705792][T14321] netlink: 'syz.2.3692': attribute type 4 has an invalid length.
[  169.831278][T14330] veth5: entered promiscuous mode
[  170.298325][T14388] netlink: 'syz.1.3723': attribute type 11 has an invalid length.
[  172.129959][T14475] __nla_validate_parse: 15 callbacks suppressed
[  172.129971][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3759'.
[  172.300360][T14500] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3771'.
[  172.425966][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'.
[  172.670236][T14552] netlink: 'syz.2.3797': attribute type 1 has an invalid length.
[  172.685730][T14555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.689184][T14555] syzkaller0: entered promiscuous mode
[  172.691099][T14555] syzkaller0: entered allmulticast mode
[  172.694672][T14552] bond6: entered promiscuous mode
[  172.696276][T14552] bond6: entered allmulticast mode
[  172.698085][T14552] 8021q: adding VLAN 0 to HW filter on device bond6
[  172.709922][T14552] bridge8: entered promiscuous mode
[  172.711669][T14552] bridge8: entered allmulticast mode
[  172.713685][T14552] bond6: (slave bridge8): Enslaving as a backup interface with an up link
[  172.726041][T14555] tipc: Resetting bearer <eth:syzkaller0>
[  172.749410][T14553] tipc: Resetting bearer <eth:syzkaller0>
[  172.760463][T14553] tipc: Disabling bearer <eth:syzkaller0>
[  172.785214][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3802'.
[  172.829199][T14573] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3806'.
[  172.851765][T14575] netlink: 'syz.0.3807': attribute type 12 has an invalid length.
[  172.876120][T14577] netlink: 'syz.2.3808': attribute type 1 has an invalid length.
[  172.940134][T14583] vxcan1 speed is unknown, defaulting to 1000
[  173.049530][T14598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3817'.
[  173.107860][T14607] openvswitch: netlink: IP tunnel TTL not specified.
[  173.394642][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3835'.
[  173.396820][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3836'.
[  173.401352][T14642] macsec1: entered promiscuous mode
[  173.403220][T14642] dummy0: entered promiscuous mode
[  173.405079][T14642] macsec1: entered allmulticast mode
[  173.527472][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3841'.
[  174.421655][T14705] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  175.466526][ T5885] Bluetooth: hci1: command 0x0406 tx timeout
[  175.927640][T14764] validate_nla: 1 callbacks suppressed
[  175.927651][T14764] netlink: 'syz.1.3894': attribute type 1 has an invalid length.
[  175.993374][T14766] netlink: zone id is out of range
[  175.995011][T14766] netlink: zone id is out of range
[  175.996629][T14766] netlink: set zone limit has 4 unknown bytes
[  176.074092][T14719] Set syz1 is full, maxelem 65536 reached
[  176.076194][T14748] netlink: 'syz.0.3886': attribute type 1 has an invalid length.
[  176.104377][T14775] geneve3: entered promiscuous mode
[  176.106591][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.113238][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.116268][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.120730][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.151343][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3902'.
[  176.157093][T14783] xfrm1: entered promiscuous mode
[  176.167010][T14783] xfrm1: entered allmulticast mode
[  176.207863][T14788] vxcan1 speed is unknown, defaulting to 1000
[  176.682056][T14824] netlink: 'syz.1.3920': attribute type 1 has an invalid length.
[  176.684974][T14824] netlink: 'syz.1.3920': attribute type 2 has an invalid length.
[  176.688145][T14824] netlink: 'syz.1.3920': attribute type 1 has an invalid length.
[  176.696112][T14824] netlink: 'syz.1.3920': attribute type 2 has an invalid length.
[  176.741708][T14833] netlink: 'syz.0.3923': attribute type 5 has an invalid length.
[  176.764178][T14835] pimreg: entered allmulticast mode
[  177.061636][T14861] netlink: 'syz.0.3937': attribute type 7 has an invalid length.
[  177.064148][T14861] netlink: 'syz.0.3937': attribute type 8 has an invalid length.
[  177.066725][T14861] netlink: 'syz.0.3937': attribute type 4 has an invalid length.
[  177.221366][T14870] __nla_validate_parse: 3 callbacks suppressed
[  177.221378][T14870] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3941'.
[  177.811612][   T33] audit: type=1800 audit(1754307951.564:9): pid=14914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3956" name="memory.events" dev="tmpfs" ino=7225 res=0 errno=0
[  177.856771][T14921] vxcan1 speed is unknown, defaulting to 1000
[  178.158429][ T5888] Bluetooth: hci2: link tx timeout
[  178.160420][ T5888] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  178.163877][ T5888] Bluetooth: hci2: link tx timeout
[  178.165511][ T5888] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.172320][T14956] team0: Cannot enslave team device to itself
[  178.197900][T14959] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  178.309352][T14974] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.3987'.
[  178.351130][T14981] tipc: Failed to remove unknown binding: 66,1,1/47646471:1211260133/1211260135
[  178.354138][T14981] tipc: Failed to remove unknown binding: 66,1,1/47646471:1211260133/1211260135
[  178.522718][T15004] vxcan1 speed is unknown, defaulting to 1000
[  178.541127][T15012] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4003'.
[  178.794483][T15034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4012'.
[  178.798469][T15034] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4012'.
[  178.870763][ T6827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.873355][ T6827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.503622][T15059] lo: entered allmulticast mode
[  179.507563][T15058] lo: left allmulticast mode
[  179.579624][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4029'.
[  179.641770][T15075] 8021q: adding VLAN 0 to HW filter on device bond7
[  179.652120][T15078] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4033'.
[  179.655630][T15078] unsupported nlmsg_type 40
[  179.657440][T15075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4032'.
[  179.826330][T15093] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4032'.
[  179.832749][T15095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4040'.
[  179.981398][T15116] nbd: must specify at least one socket
[  180.245289][ T5885] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  180.249250][ T5885] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  180.252440][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/u11:3 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  180.256694][ T5885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.259969][ T5885] Workqueue: hci2 hci_cmd_sync_work
[  180.261690][ T5885] RIP: 0010:klist_remove+0x14a/0x340
[  180.263445][ T5885] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 09 db bc f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ea da bc f6 49 8b 44 24 58 48 89 44 24 08
[  180.269711][ T5885] RSP: 0018:ffffc900032ff6e0 EFLAGS: 00010202
[  180.271718][ T5885] RAX: 000000000000000b RBX: ffff888105d8d640 RCX: 0000000000000000
[  180.274325][ T5885] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  180.276927][ T5885] RBP: ffffc900032ff7c8 R08: ffffffff8f870443 R09: 1ffffffff1f0e088
[  180.279545][ T5885] R10: dffffc0000000000 R11: fffffbfff1f0e089 R12: 0000000000000000
[  180.282143][ T5885] R13: 1ffff11021fa620c R14: ffff88810fd31060 R15: dffffc0000000000
[  180.284707][ T5885] FS:  0000000000000000(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  180.287515][ T5885] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.289671][ T5885] CR2: 00007f0888f25d70 CR3: 000000010c102000 CR4: 00000000000006f0
[  180.292278][ T5885] Call Trace:
[  180.293406][ T5885]  <TASK>
[  180.294393][ T5885]  ? __pfx_klist_remove+0x10/0x10
[  180.296054][ T5885]  ? __pfx_kobject_move+0x10/0x10
[  180.297723][ T5885]  ? get_device_parent+0x366/0x3a0
[  180.299464][ T5885]  device_move+0x193/0x700
[  180.300927][ T5885]  hci_conn_del_sysfs+0xb8/0x170
[  180.302535][ T5885]  hci_conn_del+0x949/0xcf0
[  180.304017][ T5885]  ? hci_abort_conn_sync+0x24e/0xe30
[  180.305766][ T5885]  hci_abort_conn_sync+0x658/0xe30
[  180.307470][ T5885]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  180.309257][ T5885]  ? hci_conn_valid+0x21/0x230
[  180.310757][ T5885]  ? hci_conn_valid+0x21/0x230
[  180.312338][ T5885]  ? hci_conn_valid+0x21/0x230
[  180.313880][ T5885]  ? hci_conn_valid+0x211/0x230
[  180.315467][ T5885]  ? __pfx_abort_conn_sync+0x10/0x10
[  180.317158][ T5885]  hci_cmd_sync_work+0x213/0x3a0
[  180.318779][ T5885]  ? process_scheduled_works+0x9ef/0x17b0
[  180.320661][ T5885]  process_scheduled_works+0xae1/0x17b0
[  180.322498][ T5885]  ? __pfx_process_scheduled_works+0x10/0x10
[  180.324474][ T5885]  worker_thread+0x8a0/0xda0
[  180.326006][ T5885]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  180.328102][ T5885]  ? __kthread_parkme+0x7b/0x200
[  180.329756][ T5885]  kthread+0x711/0x8a0
[  180.331104][ T5885]  ? __pfx_worker_thread+0x10/0x10
[  180.332808][ T5885]  ? __pfx_kthread+0x10/0x10
[  180.334349][ T5885]  ? _raw_spin_unlock_irq+0x23/0x50
[  180.336061][ T5885]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.337743][ T5885]  ? __pfx_kthread+0x10/0x10
[  180.339225][ T5885]  ret_from_fork+0x3fc/0x770
[  180.340777][ T5885]  ? __pfx_ret_from_fork+0x10/0x10
[  180.342444][ T5885]  ? __switch_to_asm+0x39/0x70
[  180.344018][ T5885]  ? __switch_to_asm+0x33/0x70
[  180.345595][ T5885]  ? __pfx_kthread+0x10/0x10
[  180.347137][ T5885]  ret_from_fork_asm+0x1a/0x30
[  180.348712][ T5885]  </TASK>
[  180.349748][ T5885] Modules linked in:
[  180.351375][ T5885] ---[ end trace 0000000000000000 ]---
[  180.353553][ T5888] Bluetooth: hci2: command 0x0405 tx timeout
[  180.357162][ T5885] RIP: 0010:klist_remove+0x14a/0x340
[  180.359032][ T5885] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 09 db bc f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ea da bc f6 49 8b 44 24 58 48 89 44 24 08
[  180.365779][ T5885] RSP: 0018:ffffc900032ff6e0 EFLAGS: 00010202
[  180.367876][ T5885] RAX: 000000000000000b RBX: ffff888105d8d640 RCX: 0000000000000000
[  180.372209][ T5885] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  180.374784][ T5885] RBP: ffffc900032ff7c8 R08: ffffffff8f870443 R09: 1ffffffff1f0e088
[  180.377432][ T5885] R10: dffffc0000000000 R11: fffffbfff1f0e089 R12: 0000000000000000
[  180.380256][ T5885] R13: 1ffff11021fa620c R14: ffff88810fd31060 R15: dffffc0000000000
[  180.382865][ T5885] FS:  0000000000000000(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  180.385739][ T5885] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.387897][ T5885] CR2: 00007ffc4f8d9ce8 CR3: 000000011fac6000 CR4: 00000000000006f0
[  180.390686][ T5885] Kernel panic - not syncing: Fatal exception
[  180.393362][ T5885] Kernel Offset: disabled
[  180.394796][ T5885] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:45:54  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900032fef10
R8 =ffff888106f90237 R9 =1ffff11020df2046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9593d R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0888f25d70 CR3=000000010c102000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000051 000000006500302d
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00ff0000 XMM09=78722f7365756575 712f3070656e622f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffd40008e64e3 RBX=ffffea0004732718 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea0004732700 RSP=ffffc9000336f368
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff940008e64e1
R12=ffffea0004732708 R13=ffff88810d6ba7a0 R14=1ffffd40008e64e1 R15=0000000000000001
RIP=ffffffff822dfcc6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555926e2500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f04312e56c0 CR3=0000000027fe8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0430612e17
XMM06=0000000000000000 00007f0430612e11 XMM07=0000000000000000 00007f0430612e25
XMM08=0000000000000000 00007f0430612eab XMM09=0000000000000000 00007f0430612f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
