last executing test programs:

1.917869459s ago: executing program 0 (id=3470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xa8, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

1.831607229s ago: executing program 0 (id=3472):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
sendmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

993.841325ms ago: executing program 0 (id=3478):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

910.408473ms ago: executing program 0 (id=3482):
syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1)

839.247515ms ago: executing program 0 (id=3485):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000140)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xb, 0x0, 0x0, [0x5, 0x1]}]}}}], 0x20}, 0x804)

779.041458ms ago: executing program 0 (id=3488):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000012c0)}, 0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x10001}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1}}], 0x1, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="060004"], 0x10)

310.99423ms ago: executing program 1 (id=3509):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x9}, 0x1c)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r2, 0x204)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=<r4=>0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84, 0x0, r4}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0xc0)

249.551803ms ago: executing program 2 (id=3510):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x38, 0x301, 0x70bd27, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0)

247.835365ms ago: executing program 1 (id=3511):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18)

247.673748ms ago: executing program 2 (id=3512):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2a8}, {&(0x7f0000000bc0)="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", 0x177}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

247.386965ms ago: executing program 1 (id=3513):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)

151.615141ms ago: executing program 2 (id=3514):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)

151.408323ms ago: executing program 1 (id=3515):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYRES32=0x0], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

151.095649ms ago: executing program 2 (id=3516):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000500), &(0x7f00000006c0)=0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000800))
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0)

60.723406ms ago: executing program 2 (id=3517):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011504000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)

486.664µs ago: executing program 2 (id=3518):
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0xc804)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x74)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c005}, 0x2)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)

152.28µs ago: executing program 1 (id=3519):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1b, 0x4)

0s ago: executing program 1 (id=3520):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x8a6e1000)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000)

kernel console output (not intermixed with test programs):

i1: unexpected cc 0x0c03 length: 249 > 1
[   64.488204][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.491523][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.496228][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.499831][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.505639][ T5001] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.510856][ T5001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.524001][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.530296][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.533528][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.108470][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.112183][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.115320][ T5621] bridge_slave_0: entered allmulticast mode
[   65.118785][ T5621] bridge_slave_0: entered promiscuous mode
[   65.136582][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.142620][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.151710][ T5621] bridge_slave_1: entered allmulticast mode
[   65.154650][ T5621] bridge_slave_1: entered promiscuous mode
[   65.235316][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.241337][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.309543][ T5621] team0: Port device team_slave_0 added
[   65.318508][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.321715][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.324893][ T5613] bridge_slave_0: entered allmulticast mode
[   65.328845][ T5613] bridge_slave_0: entered promiscuous mode
[   65.335227][ T5621] team0: Port device team_slave_1 added
[   65.354662][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.357845][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.360826][ T5613] bridge_slave_1: entered allmulticast mode
[   65.364514][ T5613] bridge_slave_1: entered promiscuous mode
[   65.414505][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.417391][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.426122][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.441961][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.445977][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.448539][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.456937][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.466316][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.469109][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.472037][ T5619] bridge_slave_0: entered allmulticast mode
[   65.474948][ T5619] bridge_slave_0: entered promiscuous mode
[   65.480769][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.501028][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.504586][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.507200][ T5619] bridge_slave_1: entered allmulticast mode
[   65.510403][ T5619] bridge_slave_1: entered promiscuous mode
[   65.518130][ T5613] team0: Port device team_slave_0 added
[   65.549039][ T5613] team0: Port device team_slave_1 added
[   65.553129][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.559755][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.600773][ T5621] hsr_slave_0: entered promiscuous mode
[   65.603802][ T5621] hsr_slave_1: entered promiscuous mode
[   65.606828][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.609403][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.617740][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.632319][ T5619] team0: Port device team_slave_0 added
[   65.634774][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.637050][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.645876][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.658854][ T5619] team0: Port device team_slave_1 added
[   65.717215][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.720130][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.730662][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.756764][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.759505][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.770411][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.788356][ T5613] hsr_slave_0: entered promiscuous mode
[   65.792158][ T5613] hsr_slave_1: entered promiscuous mode
[   65.794993][ T5613] debugfs: 'hsr0' already exists in 'hsr'
[   65.797308][ T5613] Cannot create hsr debugfs directory
[   65.861733][ T5619] hsr_slave_0: entered promiscuous mode
[   65.865016][ T5619] hsr_slave_1: entered promiscuous mode
[   65.867928][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   65.870293][ T5619] Cannot create hsr debugfs directory
[   66.130663][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.145656][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.151097][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.158475][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.165115][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.174486][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.187305][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.193290][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.243310][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.248739][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.252600][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.258090][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.266682][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.273731][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.280873][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.288777][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.360500][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.366922][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.370018][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.376620][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.379496][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.385017][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.393159][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.397764][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.489516][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.522704][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   66.532063][ T5624] Bluetooth: hci1: command tx timeout
[   66.532070][ T5615] Bluetooth: hci0: command tx timeout
[   66.539898][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.542655][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.561731][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.564439][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.570587][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.592886][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.611379][ T5624] Bluetooth: hci2: command tx timeout
[   66.633221][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   66.649838][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   66.663408][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.665789][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.678621][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.681079][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.695740][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.698570][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.709716][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.712474][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.079749][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.165685][ T5621] veth0_vlan: entered promiscuous mode
[   67.185557][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.196857][ T5621] veth1_vlan: entered promiscuous mode
[   67.234594][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.246638][ T5621] veth0_macvtap: entered promiscuous mode
[   67.256379][ T5621] veth1_macvtap: entered promiscuous mode
[   67.275569][ T5613] veth0_vlan: entered promiscuous mode
[   67.295460][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.308261][ T5613] veth1_vlan: entered promiscuous mode
[   67.313281][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.336604][ T5486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.340281][ T5486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.346632][ T5619] veth0_vlan: entered promiscuous mode
[   67.350995][ T5486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.356385][ T5486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.394701][ T5619] veth1_vlan: entered promiscuous mode
[   67.408755][ T5613] veth0_macvtap: entered promiscuous mode
[   67.430144][ T5613] veth1_macvtap: entered promiscuous mode
[   67.479949][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.507679][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.512583][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.519954][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.537540][ T5619] veth0_macvtap: entered promiscuous mode
[   67.544038][ T5486] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.547335][ T5486] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.550353][ T5486] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.563271][ T5619] veth1_macvtap: entered promiscuous mode
[   67.566810][ T5486] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.591225][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.596621][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.626451][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.639414][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.698361][ T5671] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.699914][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.702198][ T5671] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.711982][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.713692][ T5671] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.719705][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.728077][ T5671] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.779317][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.786474][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.873955][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.880579][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.943580][ T3314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.947121][ T3314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.128760][ T5731] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5'.
[   68.138969][ T5731] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5'.
[   68.145048][ T5731] netlink: 'syz.1.5': attribute type 3 has an invalid length.
[   68.149091][ T5731] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5'.
[   68.174584][ T5734] netlink: 'syz.0.1': attribute type 2 has an invalid length.
[   68.611608][ T5624] Bluetooth: hci0: command tx timeout
[   68.618410][ T5757] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET)
[   68.623305][ T5624] Bluetooth: hci1: command tx timeout
[   68.701965][ T5624] Bluetooth: hci2: command tx timeout
[   68.981004][ T5773] dvmrp0: entered allmulticast mode
[   69.100197][ T5782] netlink: zone id is out of range
[   69.106965][ T5782] netlink: zone id is out of range
[   69.111900][ T5782] netlink: zone id is out of range
[   69.117297][ T5782] netlink: set zone limit has 4 unknown bytes
[   69.354379][ T5795] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.33'.
[   69.798378][ T5825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'.
[   69.996953][ T5842] netlink: 60 bytes leftover after parsing attributes in process `syz.0.55'.
[   70.368578][ T5873] netlink: 52 bytes leftover after parsing attributes in process `syz.2.60'.
[   70.377474][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'.
[   70.399482][ T5873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.60'.
[   70.490591][ T5880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.64'.
[   70.618717][ T5880] netlink: 'syz.1.64': attribute type 2 has an invalid length.
[   70.622214][ T5880] netlink: 'syz.1.64': attribute type 2 has an invalid length.
[   70.691595][ T5624] Bluetooth: hci1: command tx timeout
[   70.691645][ T5615] Bluetooth: hci0: command tx timeout
[   70.771702][ T5615] Bluetooth: hci2: command tx timeout
[   71.668822][ T5924] syzkaller0: entered promiscuous mode
[   71.670668][ T5924] syzkaller0: entered allmulticast mode
[   72.772691][ T5615] Bluetooth: hci1: command tx timeout
[   72.772877][ T5624] Bluetooth: hci0: command tx timeout
[   72.778727][ T5934] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   72.862211][ T5624] Bluetooth: hci2: command tx timeout
[   73.745328][ T5950] __nla_validate_parse: 1 callbacks suppressed
[   73.745348][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'.
[   73.753605][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.94'.
[   73.911684][ T5963] warning: `syz.0.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.088947][ T5974] syzkaller0: entered promiscuous mode
[   74.091254][ T5974] syzkaller0: entered allmulticast mode
[   74.205209][ T5977] syzkaller0: entered promiscuous mode
[   74.207166][ T5977] syzkaller0: entered allmulticast mode
[   74.231096][ T5977] tipc: Started in network mode
[   74.233744][ T5977] tipc: Node identity 56a56ab6d9fd, cluster identity 4711
[   74.236580][ T5977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.243411][ T5976] tipc: Resetting bearer <eth:syzkaller0>
[   74.258209][ T5976] tipc: Disabling bearer <eth:syzkaller0>
[   75.024625][ T6003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.144205][ T6003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.353865][ T6003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.438336][ T6003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.506020][ T6030] IPVS: set_ctl: invalid protocol: 136 172.30.0.3:20005
[   75.591522][ T5486] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.614584][ T5486] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.638433][ T5486] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.654532][ T5486] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.037754][ T6045] netlink: 'syz.2.134': attribute type 1 has an invalid length.
[   76.095471][ T6045] gretap1: entered allmulticast mode
[   76.105795][ T6045] bond1: (slave gretap1): making interface the new active one
[   76.112367][ T6045] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   76.344942][ T6061] netlink: 'syz.0.140': attribute type 27 has an invalid length.
[   76.461671][ T6068] netlink: 72 bytes leftover after parsing attributes in process `syz.0.144'.
[   76.520846][ T6071] syzkaller0: entered promiscuous mode
[   76.522838][ T6071] syzkaller0: entered allmulticast mode
[   77.015643][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[   77.019543][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[   77.268509][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'.
[   77.610748][ T6126] syzkaller0: entered promiscuous mode
[   77.614290][ T6126] syzkaller0: entered allmulticast mode
[   77.941584][ T6144] netlink: 'syz.2.181': attribute type 3 has an invalid length.
[   78.060058][ T6150] netlink: 'syz.0.184': attribute type 9 has an invalid length.
[   78.066939][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'.
[   78.087496][ T6150] gretap0: entered promiscuous mode
[   78.093368][ T6150] macvlan2: entered promiscuous mode
[   78.095596][ T6150] macvlan2: entered allmulticast mode
[   78.097594][ T6150] gretap0: entered allmulticast mode
[   78.104397][ T6150] netlink: 'syz.0.184': attribute type 9 has an invalid length.
[   78.107588][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'.
[   78.109124][ T6152] netlink: 48 bytes leftover after parsing attributes in process `syz.2.185'.
[   78.116242][ T6150] macvlan3: entered promiscuous mode
[   78.119282][ T6150] macvlan3: entered allmulticast mode
[   78.121721][ T6150] Zero length message leads to an empty skb
[   78.208002][ T6156] netlink: 'syz.2.187': attribute type 11 has an invalid length.
[   78.212407][ T6156] netlink: 'syz.2.187': attribute type 4 has an invalid length.
[   78.215604][ T6156] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.187'.
[   78.752227][ T6185] netlink: 27 bytes leftover after parsing attributes in process `syz.1.200'.
[   79.232928][ T6200] netlink: 224 bytes leftover after parsing attributes in process `syz.0.207'.
[   79.315346][ T6204] netlink: 'syz.1.209': attribute type 1 has an invalid length.
[   79.319012][ T6204] netlink: 224 bytes leftover after parsing attributes in process `syz.1.209'.
[   79.496267][ T5624] Bluetooth: hci2: command tx timeout
[   79.704625][ T6221] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   79.704862][ T6224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.713803][ T6221] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   79.714236][ T6224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.803355][ T6231] netlink: 'syz.1.222': attribute type 1 has an invalid length.
[   79.847671][ T6234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.223'.
[   79.879091][ T6237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.225'.
[   80.185467][ T6252] openvswitch: netlink: IP tunnel dst address not specified
[   80.349216][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'.
[   80.402913][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'.
[   80.467667][ T6264] ip6gre1: entered promiscuous mode
[   80.469743][ T6264] ip6gre1: entered allmulticast mode
[   80.701914][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.245'.
[   81.080359][ T6302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.255'.
[   81.105281][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.109590][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.149290][ T6305] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[   81.154512][ T6305] team0 (unregistering): Port device team_slave_0 removed
[   81.160342][ T6305] team0 (unregistering): Failed to send options change via netlink (err -105)
[   81.168740][ T6305] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[   81.174144][ T6305] team0 (unregistering): Port device team_slave_1 removed
[   81.412714][ T6332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.642955][ T6340] netlink: zone id is out of range
[   81.644666][ T6340] netlink: zone id is out of range
[   81.646333][ T6340] netlink: zone id is out of range
[   81.647965][ T6340] netlink: zone id is out of range
[   81.649590][ T6340] netlink: zone id is out of range
[   81.651619][ T6340] netlink: zone id is out of range
[   81.653356][ T6340] netlink: zone id is out of range
[   81.958378][ T6363] bond1: option ad_user_port_key: invalid value (65535)
[   81.964121][ T6363] bond1: option ad_user_port_key: allowed values 0 - 1023
[   81.975735][ T6363] bond1 (unregistering): Released all slaves
[   82.463515][ T6410] netlink: 'syz.1.286': attribute type 33 has an invalid length.
[   82.527191][ T6413] syzkaller0: entered promiscuous mode
[   82.534054][ T6413] syzkaller0: entered allmulticast mode
[   82.614129][ T6424] pim6reg: entered allmulticast mode
[   82.626298][ T6424] pim6reg: left allmulticast mode
[   82.982249][ T6458] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   82.987613][ T6458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.306'.
[   82.997759][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.000937][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.208259][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.212353][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.754867][ T6507] netlink: 'syz.1.327': attribute type 1 has an invalid length.
[   83.874564][ T6513] netlink: 'syz.1.330': attribute type 8 has an invalid length.
[   84.230881][ T6533] __nla_validate_parse: 3 callbacks suppressed
[   84.230893][ T6533] netlink: 5000 bytes leftover after parsing attributes in process `syz.1.339'.
[   84.604739][ T6540] netlink: 'syz.2.341': attribute type 2 has an invalid length.
[   84.611458][ T6540] netlink: 'syz.2.341': attribute type 2 has an invalid length.
[   84.629577][ T6540] macsec1: entered promiscuous mode
[   85.283488][ T6576] netlink: 64 bytes leftover after parsing attributes in process `syz.1.357'.
[   85.338568][ T6576] syzkaller1: entered promiscuous mode
[   85.340873][ T6576] syzkaller1: entered allmulticast mode
[   85.508398][ T6590] tipc: Failed to remove unknown binding: 66,1,1/0:1287367975/1287367977
[   85.512387][ T6590] tipc: Failed to remove unknown binding: 66,1,1/0:1287367975/1287367977
[   87.014442][ T6632] netlink: 'syz.2.383': attribute type 4 has an invalid length.
[   87.099521][ T6642] netlink: 'syz.2.387': attribute type 1 has an invalid length.
[   87.111835][   T24] IPVS: starting estimator thread 0...
[   87.135896][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'.
[   87.214566][ T6643] IPVS: using max 62 ests per chain, 148800 per kthread
[   87.250397][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'.
[   87.259110][ T6649] netlink: 104 bytes leftover after parsing attributes in process `syz.2.387'.
[   87.268860][ T6642] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.280152][ T6642] bond2: (slave bond3): making interface the new active one
[   87.291933][ T6642] bond2: (slave bond3): Enslaving as an active interface with an up link
[   87.573764][ T6675] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[   87.678655][ T6685] netlink: 'syz.0.406': attribute type 1 has an invalid length.
[   87.682450][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.406'.
[   87.762414][ T6694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.410'.
[   88.205970][ T6724] netlink: 76 bytes leftover after parsing attributes in process `syz.1.423'.
[   88.299677][ T6727] netlink: 'syz.1.424': attribute type 13 has an invalid length.
[   88.303487][ T6727] netlink: 'syz.1.424': attribute type 17 has an invalid length.
[   88.327178][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.336195][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.505533][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.516126][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'.
[   88.519946][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.561409][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.564333][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.600488][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.610119][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.636173][ T6727] net_ratelimit: 350 callbacks suppressed
[   88.636191][ T6727] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   88.647334][ T5486] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.656085][ T5486] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.704936][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.707870][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.716486][ T5486] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.728405][ T5486] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.995314][ T6742] netlink: 'syz.0.430': attribute type 4 has an invalid length.
[   89.054434][ T6744] netlink: 712 bytes leftover after parsing attributes in process `syz.0.431'.
[   89.085506][ T6746] netlink: 'syz.2.432': attribute type 8 has an invalid length.
[   89.612420][ T6788] syzkaller1: entered promiscuous mode
[   89.614322][ T6788] syzkaller1: entered allmulticast mode
[   89.742762][ T6803] __nla_validate_parse: 2 callbacks suppressed
[   89.742779][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'.
[   89.750875][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'.
[   89.861002][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'.
[   89.867356][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'.
[   90.457622][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'.
[   90.714880][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.719135][ T6861] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.719855][ T2225] IPVS: starting estimator thread 0...
[   90.723931][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.727268][ T6861] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.807270][ T6861] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   90.822513][ T6866] IPVS: using max 67 ests per chain, 160800 per kthread
[   91.476172][ T6904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.081070][ T6929] netlink: ct family unspecified
[   92.087248][ T6929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.384013][  T797] cfg80211: failed to load regulatory.db
[   92.498073][ T6951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.534954][ T6961] batman_adv: batadv0: Adding interface: dummy0
[   92.541309][ T6961] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.564552][ T6961] batman_adv: batadv0: Interface activated: dummy0
[   92.602290][ T6961] batadv0: mtu less than device minimum
[   92.614123][ T6961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.619448][ T6961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.625358][ T6961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.630167][ T6961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.634723][ T6961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.677672][ T6951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.810430][ T6951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.879683][ T6976] netlink: 44 bytes leftover after parsing attributes in process `syz.0.528'.
[   92.893061][ T6976] netlink: 43 bytes leftover after parsing attributes in process `syz.0.528'.
[   92.897352][ T6976] netlink: 'syz.0.528': attribute type 6 has an invalid length.
[   92.902151][ T6976] netlink: 'syz.0.528': attribute type 5 has an invalid length.
[   92.905231][ T6976] netlink: 43 bytes leftover after parsing attributes in process `syz.0.528'.
[   92.938638][ T6951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.185455][ T5671] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.267205][ T5671] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.286784][ T5671] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.327675][ T5671] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.545221][ T7014] syzkaller0: entered promiscuous mode
[   93.548916][ T7014] syzkaller0: entered allmulticast mode
[   93.708713][ T7026] netlink: 'syz.0.549': attribute type 1 has an invalid length.
[   93.712351][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'.
[   93.737537][ T7028] netlink: 'syz.1.550': attribute type 12 has an invalid length.
[   93.740323][ T7028] netlink: 132 bytes leftover after parsing attributes in process `syz.1.550'.
[   93.753799][ T7028] netlink: 'syz.1.550': attribute type 39 has an invalid length.
[   93.773573][ T7032] netlink: 'syz.0.552': attribute type 1 has an invalid length.
[   95.403100][ T2225] bridge0: entered promiscuous mode
[   95.509831][ T7103] tipc: Started in network mode
[   95.512075][ T7103] tipc: Node identity , cluster identity 4711
[   95.514287][ T7103] tipc: Failed to obtain node identity
[   95.515942][ T7103] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   95.834468][ T7119] syzkaller0: entered promiscuous mode
[   95.836812][ T7119] syzkaller0: entered allmulticast mode
[   96.133612][ T7131] netlink: 'syz.0.593': attribute type 10 has an invalid length.
[   96.136884][ T7131] syz_tun: entered promiscuous mode
[   96.150321][ T7131] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   96.196172][ T7133] __nla_validate_parse: 1 callbacks suppressed
[   96.196183][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.594'.
[   96.202655][ T7133] bond0: ARP target 170.170.170.170 is already present
[   96.204908][ T7133] bond0: option arp_ip_target: invalid value (2863311530)
[   96.339472][ T7139] syzkaller0: entered promiscuous mode
[   96.342542][ T7139] syzkaller0: entered allmulticast mode
[   96.370306][ T7143] net_ratelimit: 14 callbacks suppressed
[   96.370318][ T7143] openvswitch: netlink: Tunnel attr 78 out of range max 16
[   96.403168][ T7145] netlink: 'syz.0.600': attribute type 32 has an invalid length.
[   97.648661][ T7186] netlink: 'syz.1.618': attribute type 4 has an invalid length.
[   97.775600][ T7199] bridge_slave_1: left allmulticast mode
[   97.777590][ T7199] bridge_slave_1: left promiscuous mode
[   97.779593][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.789821][ T7199] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   97.983617][ T7212] netlink: 'syz.2.630': attribute type 5 has an invalid length.
[   98.006650][ T7213] syzkaller0: entered promiscuous mode
[   98.011787][ T7213] syzkaller0: entered allmulticast mode
[   98.323234][ T7228] netlink: 'syz.2.637': attribute type 1 has an invalid length.
[   98.326441][ T7228] netlink: 248 bytes leftover after parsing attributes in process `syz.2.637'.
[   98.412511][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'.
[   98.748261][ T7250] xt_hashlimit: size too large, truncated to 1048576
[   99.120059][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'.
[   99.139264][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.661'.
[   99.206919][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'.
[   99.208657][ T7288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.409906][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'.
[   99.479912][ T7306] xt_l2tp: v2 tid > 0xffff: 37482740
[   99.643943][ T7317] netlink: 'syz.2.672': attribute type 83 has an invalid length.
[   99.867009][ T5486] nci: nci_rsp_packet: unknown rsp opcode 0x606
[  100.607962][ T7327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.714789][ T7347] netlink: zone id is out of range
[  101.116848][ T7384] raw_sendmsg: syz.1.703 forgot to set AF_INET. Fix it!
[  101.223638][ T7388] bond4: option lacp_active: invalid value (8)
[  101.232521][ T7388] bond4 (unregistering): Released all slaves
[  102.115866][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'.
[  102.351504][ T7431] gretap0: entered promiscuous mode
[  102.354754][ T7431] macvlan2: entered promiscuous mode
[  102.359148][ T7431] gretap0: left promiscuous mode
[  102.545994][ T7443] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  102.550935][ T7443] bond4 (unregistering): Released all slaves
[  102.570777][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'.
[  102.978549][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.740'.
[  103.059402][ T7466] hm3): entered promiscuous mode
[  103.290931][ T7478] sctp: [Deprecated]: syz.1.746 (pid 7478) Use of int in maxseg socket option.
[  103.290931][ T7478] Use struct sctp_assoc_value instead
[  103.395303][ T7481] syzkaller0: entered promiscuous mode
[  103.400744][ T7481] syzkaller0: entered allmulticast mode
[  103.580042][ T7490] bond1: option fail_over_mac: invalid value (127)
[  103.585372][ T7490] bond1 (unregistering): Released all slaves
[  103.692302][ T7493] netlink: 'syz.0.752': attribute type 5 has an invalid length.
[  103.778380][ T7497] batman_adv: batadv0: Interface deactivated: dummy0
[  103.810606][ T7498] netlink: 'syz.0.754': attribute type 13 has an invalid length.
[  103.814225][ T7498] netlink: 'syz.0.754': attribute type 17 has an invalid length.
[  103.845189][ T7497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.850884][ T7497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.971648][ T7497] gretap0: left allmulticast mode
[  103.986691][ T7498] gretap0: left promiscuous mode
[  104.045632][ T7498] syz_tun: left promiscuous mode
[  104.066438][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'.
[  104.083299][ T7498] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.086854][ T7498] 8021q: adding VLAN 0 to HW filter on device team0
[  104.090578][ T7498] batman_adv: batadv0: Interface activated: dummy0
[  104.093537][ T7498] batadv0: mtu less than device minimum
[  104.095960][ T7498] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.099568][ T7498] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.103272][ T7498] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.106892][ T7498] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.110462][ T7498] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.114188][ T7498] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.117822][ T7498] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.121494][ T7498] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.125117][ T7498] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.143591][ T7498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.179955][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.199792][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.219865][ T7498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  104.223639][ T7498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  104.229752][ T5486] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.233001][ T5486] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.239217][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.241736][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.245770][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.248024][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.274020][ T5486] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.278783][ T5486] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.307433][ T7511] netlink: 'syz.2.759': attribute type 83 has an invalid length.
[  104.310523][ T7513] netlink: 'syz.1.760': attribute type 15 has an invalid length.
[  104.313873][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.760'.
[  105.668931][ T7562] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.783'.
[  106.506420][ T7601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'.
[  106.874384][ T7620] netlink: 'syz.0.805': attribute type 1 has an invalid length.
[  106.877010][ T7620] netlink: 248 bytes leftover after parsing attributes in process `syz.0.805'.
[  107.158514][ T7640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.814'.
[  107.213865][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'.
[  107.247934][ T7647] netlink: 404 bytes leftover after parsing attributes in process `syz.1.815'.
[  107.250935][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.815'.
[  107.255749][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.815'.
[  107.258429][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.815'.
[  107.302375][ T7649] sctp: [Deprecated]: syz.0.817 (pid 7649) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.302375][ T7649] Use struct sctp_sack_info instead
[  107.465059][ T7658] syzkaller0: entered promiscuous mode
[  107.473112][ T7658] syzkaller0: entered allmulticast mode
[  107.554137][ T7662] syz.2.823 (7662) used obsolete PPPIOCDETACH ioctl
[  107.683140][ T7669] netlink: 'syz.1.825': attribute type 83 has an invalid length.
[  107.904698][ T7685] netlink: 52 bytes leftover after parsing attributes in process `syz.0.832'.
[  107.910354][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.832'.
[  108.014126][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'.
[  108.017831][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'.
[  108.122406][ T7704] netlink: 'syz.2.838': attribute type 13 has an invalid length.
[  108.125665][ T7704] netlink: 'syz.2.838': attribute type 17 has an invalid length.
[  108.132798][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.137246][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.258445][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.281765][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.428878][ T7704] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.433601][ T7704] 8021q: adding VLAN 0 to HW filter on device team0
[  108.442718][ T7704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.468864][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.471851][ T7704] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.478364][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.481311][ T7704] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.499384][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.505401][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.537113][ T5486] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.540341][ T5486] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.548559][ T5486] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.552209][ T5486] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.777880][ T7725] geneve1: entered promiscuous mode
[  109.167283][ T5671] net_ratelimit: 62 callbacks suppressed
[  109.167297][ T5671] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  109.347983][ T7745] syzkaller1: entered promiscuous mode
[  109.350954][ T7745] syzkaller1: entered allmulticast mode
[  109.701548][ T5486] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  109.721489][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.724015][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.730388][ T7766] batman_adv: batadv0: Interface deactivated: dummy0
[  109.754235][ T7766] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.757555][ T7768] netlink: 'syz.0.857': attribute type 13 has an invalid length.
[  109.759628][ T7766] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.760503][ T7768] netlink: 'syz.0.857': attribute type 17 has an invalid length.
[  109.796691][ T7768] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.799986][ T7768] 8021q: adding VLAN 0 to HW filter on device team0
[  109.805501][ T7768] batman_adv: batadv0: Interface activated: dummy0
[  109.808048][ T7768] batadv0: mtu less than device minimum
[  109.811328][ T7768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.816462][ T7768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.821501][ T7768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.826368][ T7768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.831294][ T7768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.836556][ T7768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.841503][ T7768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.859894][ T7768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.873637][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.875866][ T7768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.879821][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.882170][ T7768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.897225][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.914520][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.087648][ T7776] netlink: 'syz.1.861': attribute type 1 has an invalid length.
[  110.657102][ T7788] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  110.744571][ T7790] lo speed is unknown, defaulting to 1000
[  110.748173][ T7790] lo speed is unknown, defaulting to 1000
[  110.753828][ T7790] lo speed is unknown, defaulting to 1000
[  110.758448][ T7790] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  110.764909][ T7790] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  110.773394][ T7790] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  110.781349][ T7790] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  110.790032][ T7790] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  110.815245][ T7790] lo speed is unknown, defaulting to 1000
[  110.819916][ T7790] lo speed is unknown, defaulting to 1000
[  110.823566][ T7790] lo speed is unknown, defaulting to 1000
[  110.921055][ T7798] Bluetooth: MGMT ver 1.23
[  112.039065][ T7847] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  112.049077][ T7847] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  112.061551][ T7847] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  112.077485][ T7847] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  112.173906][ T7856] netlink: 'syz.1.895': attribute type 1 has an invalid length.
[  112.177038][ T7856] netlink: 'syz.1.895': attribute type 7 has an invalid length.
[  112.181980][ T7856] netlink: 'syz.1.895': attribute type 8 has an invalid length.
[  112.185570][ T7856] __nla_validate_parse: 7 callbacks suppressed
[  112.185584][ T7856] netlink: 208 bytes leftover after parsing attributes in process `syz.1.895'.
[  112.200243][ T7856] NCSI netlink: No device for ifindex 1073545264
[  112.213129][ T7858] netlink: 'syz.0.896': attribute type 21 has an invalid length.
[  112.221479][ T7858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.896'.
[  112.224416][ T7858] netlink: 'syz.0.896': attribute type 1 has an invalid length.
[  112.253275][ T7860] netlink: 152 bytes leftover after parsing attributes in process `syz.1.897'.
[  112.288353][ T7864] nftables ruleset with unbound set
[  112.379370][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'.
[  112.779653][ T7900] xt_bpf: check failed: parse error
[  112.949811][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'.
[  112.958286][ T7908] sit1: entered promiscuous mode
[  112.974396][ T7908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.918'.
[  113.096006][ T7915] netlink: 96 bytes leftover after parsing attributes in process `syz.2.921'.
[  114.240074][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'.
[  114.255771][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'.
[  114.279064][ T7943] netlink: 'syz.2.934': attribute type 1 has an invalid length.
[  114.283169][ T7943] netlink: 'syz.2.934': attribute type 2 has an invalid length.
[  114.285875][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'.
[  114.290437][ T7509] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.301601][ T7509] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.307429][ T7509] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.314686][ T7509] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.321487][ T7509] net_ratelimit: 64 callbacks suppressed
[  114.321498][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  114.472539][ T7963] ipt_rpfilter: unknown options
[  114.851306][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  115.000030][ T8003] xt_hashlimit: size too large, truncated to 1048576
[  115.371369][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  115.704850][ T8050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.768658][  T797] IPVS: starting estimator thread 0...
[  115.779877][ T8053] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  115.868078][ T8058] IPVS: using max 58 ests per chain, 139200 per kthread
[  115.882647][ T5486] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  116.098611][ T8069] smbdirect: ib_dev[syz1] removed
[  116.207786][ T8085] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  116.401349][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  116.905699][ T8138] syzkaller0: entered promiscuous mode
[  116.911540][ T8138] syzkaller0: entered allmulticast mode
[  116.912696][ T5486] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  117.255253][ T8157] validate_nla: 5 callbacks suppressed
[  117.255268][ T8157] netlink: 'syz.2.1027': attribute type 1 has an invalid length.
[  117.372438][ T8165] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.377560][ T8167] __nla_validate_parse: 11 callbacks suppressed
[  117.377570][ T8167] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1032'.
[  117.421427][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  117.457964][ T8169] block nbd0: not configured, cannot reconfigure
[  117.604338][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'.
[  117.807663][ T8195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.511493][ T8213] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1052'.
[  118.519918][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1052'.
[  118.716483][   T33] audit: type=1804 audit(1779045250.574:2): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1058" name="/newroot/291/cgroup.controllers" dev="tmpfs" ino=1484 res=1 errno=0
[  118.725022][   T33] audit: type=1800 audit(1779045250.594:3): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1058" name="cgroup.controllers" dev="tmpfs" ino=1484 res=0 errno=0
[  118.788194][   T55] block nbd0: Receive control failed (result -32)
[  118.817048][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'.
[  118.953908][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'.
[  119.099032][ T8254] netlink: 'syz.1.1071': attribute type 1 has an invalid length.
[  119.105149][ T8254] netlink: 'syz.1.1071': attribute type 2 has an invalid length.
[  119.195202][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'.
[  119.202907][ T8267] macsec0: entered promiscuous mode
[  119.205177][ T8267] macsec0: entered allmulticast mode
[  119.225230][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1075'.
[  119.229666][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1075'.
[  119.491580][ T7509] net_ratelimit: 3 callbacks suppressed
[  119.491590][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  119.505411][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'.
[  119.650461][ T8295] netlink: 'syz.0.1089': attribute type 1 has an invalid length.
[  120.011479][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  120.524623][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  120.665514][ T8353] netlink: 'syz.0.1117': attribute type 1 has an invalid length.
[  121.027130][ T8373] hsr0: entered promiscuous mode
[  121.042477][ T8373] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  121.052180][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  121.174185][ T8372] hsr0: left promiscuous mode
[  121.539016][ T8386] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  121.572193][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  121.801020][ T8397] tipc: New replicast peer: 255.255.255.255
[  121.806328][ T8397] tipc: Enabled bearer <udp:syz2>, priority 10
[  121.816236][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.951411][ T8405] bridge4: entered promiscuous mode
[  121.956703][ T8405] bridge4: entered allmulticast mode
[  122.091719][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  122.177193][ T8427] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  122.357153][ T8440] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  122.382250][ T8440] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  122.432281][ T8446] __nla_validate_parse: 8 callbacks suppressed
[  122.432293][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'.
[  122.491897][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'.
[  122.495273][ T8448] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1156'.
[  122.498926][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'.
[  122.502985][ T8448] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1156'.
[  122.506625][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'.
[  122.899121][ T7703] tipc: Node number set to 2404936374
[  123.199245][ T8466] netlink: 'syz.1.1166': attribute type 1 has an invalid length.
[  123.227508][ T8466] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.240473][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1166'.
[  123.361969][ T8468] netlink: 'syz.1.1166': attribute type 1 has an invalid length.
[  123.375627][ T8468] bond1: (slave batadv1): Opening slave failed
[  124.196248][   T55] block nbd1: Receive control failed (result -32)
[  124.269850][ T8484] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1173'.
[  124.282981][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'.
[  124.440785][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1183'.
[  124.641452][ T7509] net_ratelimit: 3332 callbacks suppressed
[  124.641470][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  124.738278][ T8536] bridge2: entered promiscuous mode
[  124.740426][ T8536] bridge2: entered allmulticast mode
[  124.880054][ T8547] tipc: Started in network mode
[  124.883987][ T8547] tipc: Node identity e6e164ce8ed4, cluster identity 4711
[  124.887043][ T8547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.890412][ T8547] syzkaller0: entered promiscuous mode
[  124.895068][ T8547] syzkaller0: entered allmulticast mode
[  124.921000][ T8547] tipc: Resetting bearer <eth:syzkaller0>
[  124.934790][ T8545] tipc: Resetting bearer <eth:syzkaller0>
[  124.982019][ T8545] tipc: Disabling bearer <eth:syzkaller0>
[  124.993993][ T8553] syzkaller0: entered promiscuous mode
[  124.995848][ T8553] syzkaller0: entered allmulticast mode
[  125.151344][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  125.438018][ T8588] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  125.661337][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  126.171387][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  126.548868][ T8622] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  126.625601][ T8626] macvtap1: entered promiscuous mode
[  126.627311][ T8626] team0: entered promiscuous mode
[  126.628908][ T8626] team_slave_0: entered promiscuous mode
[  126.630885][ T8626] team_slave_1: entered promiscuous mode
[  126.634916][ T8626] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  126.637242][ T8626] team0: Device macvtap1 is already an upper device of the team interface
[  126.647038][ T8626] team0: left promiscuous mode
[  126.681421][ T5671] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  126.697217][   T10] team_slave_0: left promiscuous mode
[  126.699525][   T10] team_slave_1: left promiscuous mode
[  126.749801][ T8634] netlink: 'syz.2.1238': attribute type 10 has an invalid length.
[  127.004783][ T8657] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  127.191343][ T5671] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  127.702668][ T5671] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  127.823900][ T8664] bond4: entered promiscuous mode
[  127.826437][ T8664] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.014945][ T8676] __nla_validate_parse: 5 callbacks suppressed
[  128.014965][ T8676] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1249'.
[  128.028574][ T8664] Bluetooth: MGMT ver 1.23
[  128.161548][ T8682] block nbd2: server does not support multiple connections per device.
[  128.167667][ T8682] block nbd2: shutting down sockets
[  128.221558][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  128.538541][ T8712] netlink: 'syz.0.1268': attribute type 3 has an invalid length.
[  128.548155][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'.
[  128.731490][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  128.927242][ T8733] xt_socket: unknown flags 0x50
[  129.157691][ T8748] lo speed is unknown, defaulting to 1000
[  129.761626][ T5671] net_ratelimit: 1 callbacks suppressed
[  129.761654][ T5671] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  130.146134][ T8766] syz_tun: entered allmulticast mode
[  130.200858][ T8764] syz_tun: left allmulticast mode
[  130.271700][ T5671] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  130.386833][ T8783] netlink: 'syz.0.1296': attribute type 11 has an invalid length.
[  130.391994][ T8781] bridge0: port 2(macvlan2) entered blocking state
[  130.394374][ T8781] bridge0: port 2(macvlan2) entered disabled state
[  130.396708][ T8781] macvlan2: entered allmulticast mode
[  130.400799][ T8781] ip6gretap0: entered allmulticast mode
[  130.410157][ T8781] macvlan2: entered promiscuous mode
[  130.417028][ T8781] bridge0: port 2(macvlan2) entered blocking state
[  130.419339][ T8781] bridge0: port 2(macvlan2) entered forwarding state
[  130.599236][ T8795] geneve1: entered promiscuous mode
[  130.655900][ T8797] netlink: 'syz.2.1304': attribute type 4 has an invalid length.
[  130.669912][ T8797] netlink: 'syz.2.1304': attribute type 4 has an invalid length.
[  130.781411][ T5671] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  130.829780][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'.
[  131.294712][ T5486] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  131.756975][ T8859] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  131.811296][ T5486] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  132.107663][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'.
[  132.127248][   T33] audit: type=1804 audit(1779045263.984:4): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1339" name="/newroot/457/cgroup.controllers" dev="tmpfs" ino=2320 res=1 errno=0
[  132.139752][   T33] audit: type=1800 audit(1779045264.004:5): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1339" name="cgroup.controllers" dev="tmpfs" ino=2320 res=0 errno=0
[  132.157888][   T33] audit: type=1804 audit(1779045264.014:6): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1339" name="/newroot/457/cgroup.controllers" dev="tmpfs" ino=2320 res=1 errno=0
[  132.307204][ T8882] syzkaller0: entered promiscuous mode
[  132.313988][ T8882] syzkaller0: entered allmulticast mode
[  132.322147][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  132.469873][ T8890] netlink: 'syz.0.1347': attribute type 8 has an invalid length.
[  132.482587][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'.
[  132.668001][ T8904] bridge5: entered allmulticast mode
[  132.831328][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  132.869519][ T8921] netlink: 'syz.1.1359': attribute type 1 has an invalid length.
[  132.879281][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'.
[  133.351570][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  133.871723][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  134.314004][ T9020] netlink: 'syz.2.1393': attribute type 4 has an invalid length.
[  134.318388][ T9020] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1393'.
[  134.381537][ T5671] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  134.440209][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'.
[  134.457037][ T5671] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.458886][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'.
[  134.460661][ T5671] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.474598][ T5671] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.481576][ T5671] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.663121][ T9043] netlink: 'syz.0.1398': attribute type 1 has an invalid length.
[  134.672432][ T9043] nbd: couldn't find device at index -427251215
[  134.891331][ T5671] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  134.902771][ T9071] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1403'.
[  134.921608][ T9071] netlink: Conntrack attr has 4 unknown bytes
[  134.981077][ T9075] netlink: 'syz.0.1406': attribute type 3 has an invalid length.
[  134.984487][ T9075] netlink: 'syz.0.1406': attribute type 1 has an invalid length.
[  134.987532][ T9075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1406'.
[  135.104804][ T9083] lo: entered allmulticast mode
[  135.106701][ T9083] lo: left allmulticast mode
[  135.323270][ T9102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1418'.
[  135.408115][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  135.467830][ T9111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.504252][ T9113] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) !
[  135.518053][ T9113] syzkaller0: entered promiscuous mode
[  135.520304][ T9113] syzkaller0: entered allmulticast mode
[  135.688489][ T9128] netlink: 'syz.1.1431': attribute type 10 has an invalid length.
[  135.698399][ T9125] lo speed is unknown, defaulting to 1000
[  135.740158][ T9132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1433'.
[  135.746694][ T9132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1433'.
[  135.834198][ T9138] nbd: must specify an index to disconnect
[  135.931519][ T7509] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  136.106341][ T9157] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1444'.
[  136.307146][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'.
[  136.310446][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.312907][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.332901][ T9160] batman_adv: batadv0: Interface deactivated: dummy0
[  136.392699][ T9175] netlink: 'syz.2.1451': attribute type 1 has an invalid length.
[  136.400951][ T9160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.411906][ T9160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.433871][ T7707] lo speed is unknown, defaulting to 1000
[  136.436276][ T7707] syz2: Port: 1 Link DOWN
[  136.494478][ T9178] 8021q: adding VLAN 0 to HW filter on device bond6
[  136.495174][ T9181] SET target dimension over the limit!
[  136.499333][ T9178] bond5: (slave bond6): making interface the new active one
[  136.506234][ T9178] bond5: (slave bond6): Enslaving as an active interface with an up link
[  136.520294][ T9175] bond5: (slave gretap2): Enslaving as a backup interface with an up link
[  136.558267][ T9175] 8021q: adding VLAN 0 to HW filter on device bond5
[  138.452343][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  138.468301][ T9200] lo speed is unknown, defaulting to 1000
[  139.412868][ T9260] __nla_validate_parse: 3 callbacks suppressed
[  139.412878][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'.
[  139.538307][ T9263] bridge_slave_0: left allmulticast mode
[  139.540220][ T9263] bridge_slave_0: left promiscuous mode
[  139.546041][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.560810][ T9263] bridge_slave_1: left allmulticast mode
[  139.566712][ T9263] bridge_slave_1: left promiscuous mode
[  139.570425][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.579736][ T9263] bond0: (slave bond_slave_0): Releasing backup interface
[  139.595042][ T9263] bond0: (slave bond_slave_1): Releasing backup interface
[  139.612305][ T9263] team0: Port device team_slave_0 removed
[  139.623136][ T9263] team0: Port device team_slave_1 removed
[  139.627061][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.632370][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.637364][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.640850][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.646068][ T9263] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  140.540052][ T9335] netlink: 'syz.1.1497': attribute type 1 has an invalid length.
[  140.565805][ T9339] netlink: 'syz.2.1498': attribute type 22 has an invalid length.
[  140.569225][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'.
[  140.607492][ T9335] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.723883][ T9339] netlink: 'syz.2.1498': attribute type 22 has an invalid length.
[  140.727204][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'.
[  141.707519][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'.
[  141.747919][ T9384] netlink: 'syz.2.1515': attribute type 29 has an invalid length.
[  141.789312][ T9386] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.1517'.
[  141.847764][ T9390] syzkaller0: entered promiscuous mode
[  141.850290][ T9390] syzkaller0: entered allmulticast mode
[  141.888949][ T9392] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1520'.
[  142.118321][ T9410] bridge0: port 3(vlan3) entered blocking state
[  142.120810][ T9410] bridge0: port 3(vlan3) entered disabled state
[  142.125607][ T9410] vlan3: entered allmulticast mode
[  142.128474][ T9410] vlan3: entered promiscuous mode
[  142.939795][ T9411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  143.141465][ T9432] lo speed is unknown, defaulting to 1000
[  143.188024][ T9438] netlink: 'syz.0.1539': attribute type 1 has an invalid length.
[  143.200173][ T9430] netlink: 'syz.2.1536': attribute type 1 has an invalid length.
[  143.247412][ T9438] bond1: entered promiscuous mode
[  143.250424][ T9438] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.298427][ T9441] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.302234][ T9441] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  143.306134][ T9441] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  143.325852][ T9441] bond1: (slave ip6gre1): making interface the new active one
[  143.330303][ T9441] ip6gre1: entered promiscuous mode
[  143.334852][ T9441] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  143.433975][ T9446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1540'.
[  143.794009][ T9475] block nbd2: Unsupported socket: should be TCP or UNIX.
[  144.227530][ T9520] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1572'.
[  144.247057][ T9522] IPv6: NLM_F_CREATE should be specified when creating new route
[  144.297358][ T9527] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0
[  144.490157][ T9547] netlink: 820 bytes leftover after parsing attributes in process `syz.0.1585'.
[  144.501677][ T9547] netlink: 820 bytes leftover after parsing attributes in process `syz.0.1585'.
[  144.548101][ T9549] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  144.790763][ T9568] netlink: 'syz.0.1594': attribute type 1 has an invalid length.
[  144.820182][ T9570] netlink: 'syz.1.1595': attribute type 1 has an invalid length.
[  144.849807][ T9570] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.885389][ T9570] bond3: (slave veth0_to_bond): making interface the new active one
[  144.891101][ T9570] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  144.921107][ T9570] bond3: entered promiscuous mode
[  144.923832][ T9570] veth0_to_bond: entered promiscuous mode
[  144.926244][ T9570] bond3: entered allmulticast mode
[  144.928243][ T9570] veth0_to_bond: entered allmulticast mode
[  144.948863][ T9575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1597'.
[  144.959867][ T9575] ip6gre2: entered promiscuous mode
[  144.965350][ T9575] ip6gre2: entered allmulticast mode
[  144.976840][ T9575] netlink: 'syz.0.1597': attribute type 6 has an invalid length.
[  144.980109][ T9575] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1597'.
[  144.997451][ T9575] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.001493][ T9575] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.045751][ T9581] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.355757][ T9612] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1611'.
[  145.383910][ T9614] xt_TCPMSS: Only works on TCP SYN packets
[  145.597545][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'.
[  145.608196][ T9628] ip6tnl2: entered allmulticast mode
[  145.751672][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1621'.
[  145.822868][ T9646] netlink: 'syz.1.1624': attribute type 12 has an invalid length.
[  145.826347][ T9646] netlink: 'syz.1.1624': attribute type 2 has an invalid length.
[  145.829114][ T9646] netlink: 444 bytes leftover after parsing attributes in process `syz.1.1624'.
[  145.967455][ T9659] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1630'.
[  145.984084][ T9659] sctp: [Deprecated]: syz.0.1630 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.984084][ T9659] Use struct sctp_sack_info instead
[  146.039416][ T9664] lo speed is unknown, defaulting to 1000
[  146.106277][ T9671] netlink: 'syz.1.1635': attribute type 1 has an invalid length.
[  146.120867][ T9671] 8021q: adding VLAN 0 to HW filter on device bond5
[  146.152274][ T9671] vlan2: entered promiscuous mode
[  146.154357][ T9671] bond5: entered promiscuous mode
[  146.156681][ T9671] vlan2: entered allmulticast mode
[  146.158393][ T9671] bond5: entered allmulticast mode
[  146.182275][ T9671] bond5: (slave bridge7): making interface the new active one
[  146.187015][ T9671] bridge7: entered promiscuous mode
[  146.190178][ T9671] bridge7: entered allmulticast mode
[  146.195547][ T9671] bond5: (slave bridge7): Enslaving as an active interface with an up link
[  146.215663][ T9664] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  146.499595][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1637'.
[  147.456557][ T9748] xt_ecn: cannot match TCP bits for non-tcp packets
[  147.727096][ T9770] netlink: 'syz.1.1679': attribute type 10 has an invalid length.
[  148.318592][ T5624] Bluetooth: hci2: link tx timeout
[  148.321111][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.328641][ T5624] Bluetooth: hci2: link tx timeout
[  148.330439][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.337503][ T5624] Bluetooth: hci2: link tx timeout
[  148.342386][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.346796][ T5624] Bluetooth: hci2: link tx timeout
[  148.348713][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.354790][ T5624] Bluetooth: hci2: link tx timeout
[  148.356489][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.360633][ T5624] Bluetooth: hci2: link tx timeout
[  148.362461][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.365152][ T5624] Bluetooth: hci2: link tx timeout
[  148.366822][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.373202][ T5624] Bluetooth: hci2: link tx timeout
[  148.375585][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.378757][ T5624] Bluetooth: hci2: link tx timeout
[  148.380854][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.384611][ T5624] Bluetooth: hci2: link tx timeout
[  148.386723][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.389695][ T5624] Bluetooth: hci2: link tx timeout
[  148.391863][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.395298][ T5624] Bluetooth: hci2: link tx timeout
[  148.397424][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.400544][ T5624] Bluetooth: hci2: link tx timeout
[  148.402845][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.406150][ T5624] Bluetooth: hci2: link tx timeout
[  148.407915][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.410539][ T5624] Bluetooth: hci2: link tx timeout
[  148.412490][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.415308][ T5624] Bluetooth: hci2: link tx timeout
[  148.417058][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.419918][ T5624] Bluetooth: hci2: link tx timeout
[  148.422048][ T5624] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.471546][ T9826] netlink: 'syz.1.1701': attribute type 1 has an invalid length.
[  148.496368][ T9826] 8021q: adding VLAN 0 to HW filter on device bond6
[  148.516666][ T9826] vlan3: entered promiscuous mode
[  148.519403][ T9826] bond6: entered promiscuous mode
[  148.522422][ T9826] vlan3: entered allmulticast mode
[  148.525986][ T9826] bond6: entered allmulticast mode
[  148.545273][ T9826] 8021q: adding VLAN 0 to HW filter on device batadv1
[  148.555408][ T9826] bond6: (slave batadv1): making interface the new active one
[  148.558480][ T9826] batadv1: entered promiscuous mode
[  148.560551][ T9826] batadv1: entered allmulticast mode
[  148.563249][ T9826] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  149.233019][ T9867] syzkaller0: refused to change device tx_queue_len
[  149.262443][ T9871] pim6reg1: entered promiscuous mode
[  149.264484][ T9871] pim6reg1: entered allmulticast mode
[  149.396616][ T9880] tipc: Started in network mode
[  149.398668][ T9880] tipc: Node identity ac1414aa, cluster identity 4711
[  149.408414][ T9880] tipc: Enabled bearer <udp:s>, priority 10
[  149.578468][ T9893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.615677][ T9895] netlink: 'syz.1.1732': attribute type 3 has an invalid length.
[  149.618264][ T9895] netlink: 'syz.1.1732': attribute type 1 has an invalid length.
[  149.620751][ T9895] __nla_validate_parse: 6 callbacks suppressed
[  149.620763][ T9895] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1732'.
[  149.626496][ T9895] NCSI netlink: No device for ifindex 36
[  149.664579][ T9899] netlink: 'syz.1.1734': attribute type 8 has an invalid length.
[  149.667199][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'.
[  149.675405][ T9899] veth1_to_team: entered promiscuous mode
[  149.678126][ T9899] gretap0: entered promiscuous mode
[  149.684994][ T9899] veth1_to_team: left promiscuous mode
[  150.018688][ T9899] gretap0: left promiscuous mode
[  150.087666][ T9902] xt_TCPMSS: Only works on TCP SYN packets
[  150.173271][ T9904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.375914][ T5624] Bluetooth: hci2: command 0x0406 tx timeout
[  150.521547][ T5670] tipc: Node number set to 2886997162
[  150.699538][ T9952] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1757'.
[  151.070039][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1768'.
[  151.294595][ T9987] syzkaller0: entered promiscuous mode
[  151.296972][ T9987] syzkaller0: entered allmulticast mode
[  153.922826][ T9970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  154.183775][T10013] veth0: entered promiscuous mode
[  154.188865][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'.
[  154.282904][T10019] syzkaller1: entered promiscuous mode
[  154.284910][T10019] syzkaller1: entered allmulticast mode
[  154.287561][T10019] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  154.737065][T10051] netlink: 'syz.2.1801': attribute type 39 has an invalid length.
[  155.419318][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1818'.
[  155.444293][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'.
[  155.786398][T10112] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  156.214807][T10130] netlink: 'syz.2.1832': attribute type 1 has an invalid length.
[  156.242082][T10130] bond8: entered promiscuous mode
[  156.244637][T10130] 8021q: adding VLAN 0 to HW filter on device bond8
[  156.259697][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1832'.
[  156.263527][T10130] bond8: entered allmulticast mode
[  156.283160][T10130] bond8: (slave bridge3): making interface the new active one
[  156.286225][T10130] bridge3: entered promiscuous mode
[  156.288514][T10130] bridge3: entered allmulticast mode
[  156.292536][T10130] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  156.451957][T10142] set match dimension is over the limit!
[  156.475584][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'.
[  156.647395][T10163] gretap0: entered promiscuous mode
[  156.837037][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'.
[  156.969212][T10185] netlink: 'syz.0.1852': attribute type 10 has an invalid length.
[  156.973881][T10185] syz_tun: entered promiscuous mode
[  156.976243][T10185] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1852'.
[  156.979146][T10185] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1852'.
[  156.984950][T10185] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1852'.
[  157.068471][T10199] IPVS: ip_vs_add_dest(): server weight less than zero
[  157.673069][T10245] syzkaller0: entered promiscuous mode
[  157.676916][T10245] syzkaller0: entered allmulticast mode
[  157.839305][T10262] netlink: 'syz.1.1883': attribute type 12 has an invalid length.
[  158.118180][T10269] block nbd2: server does not support multiple connections per device.
[  158.126609][T10269] block nbd2: shutting down sockets
[  158.318320][T10285] netlink: 'syz.2.1893': attribute type 21 has an invalid length.
[  158.328113][T10288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1894'.
[  158.331500][T10288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'.
[  158.455154][T10298] tipc: Failed to remove unknown binding: 66,1,1/0:707170265/707170267
[  158.462534][T10298] tipc: Failed to remove unknown binding: 66,1,1/0:707170265/707170267
[  158.466067][T10298] tipc: Failed to remove unknown binding: 66,1,1/0:707170265/707170267
[  158.926853][T10352] netlink: 'syz.0.1924': attribute type 1 has an invalid length.
[  158.946914][T10352] 8021q: adding VLAN 0 to HW filter on device bond2
[  159.008680][T10359] netlink: 'syz.0.1924': attribute type 1 has an invalid length.
[  159.021467][T10359] bond2: (slave batadv1): Opening slave failed
[  160.975811][T10448] lo speed is unknown, defaulting to 1000
[  161.300935][T10462] netlink: 'syz.2.1970': attribute type 32 has an invalid length.
[  161.304897][T10462] __nla_validate_parse: 5 callbacks suppressed
[  161.304912][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'.
[  161.321802][T10462] bond9: Setting coupled_control to off (0)
[  161.733549][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1977'.
[  161.738161][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1977'.
[  162.756497][T10502] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  163.459336][T10423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  163.804251][T10536] xt_hashlimit: size too large, truncated to 1048576
[  163.814085][T10536] xt_hashlimit: max too large, truncated to 1048576
[  163.875447][T10541] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  163.966641][T10547] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2006'.
[  164.139825][T10564] IPVS: persistence engine module ip_vs_pe_ not found
[  164.160100][T10571] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  164.275273][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2017'.
[  164.575001][T10591] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.583072][T10591] 8021q: adding VLAN 0 to HW filter on device team0
[  164.589044][T10591] batman_adv: batadv0: Interface activated: dummy0
[  164.596856][T10591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.653176][T10591] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.661499][T10591] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  164.670127][   T24] lo speed is unknown, defaulting to 1000
[  164.672483][   T24] syz2: Port: 1 Link ACTIVE
[  164.675284][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.677434][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.684627][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.686792][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.690004][   T81] bridge0: port 3(vlan3) entered blocking state
[  164.691921][   T81] bridge0: port 3(vlan3) entered forwarding state
[  164.708193][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  164.753927][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2027'.
[  164.919599][T10622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2034'.
[  165.229754][T10652] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2049'.
[  165.278445][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2051'.
[  165.767577][T10702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2068'.
[  166.066457][T10729] syzkaller0: entered promiscuous mode
[  166.068293][T10729] syzkaller0: entered allmulticast mode
[  166.230445][T10737] syzkaller0: entered promiscuous mode
[  166.232689][T10737] syzkaller0: entered allmulticast mode
[  168.452404][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  169.002520][T10724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  169.005835][T10758] netlink: 'syz.2.2092': attribute type 1 has an invalid length.
[  169.009434][T10758] __nla_validate_parse: 2 callbacks suppressed
[  169.009445][T10758] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2092'.
[  169.027247][T10758] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR
[  169.133486][T10778] netlink: 'syz.0.2094': attribute type 4 has an invalid length.
[  169.144115][T10778] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2094'.
[  169.147484][T10781] Dead loop on virtual device ip6_vti0 (net 27), fix it urgently!
[  169.155257][T10781] Dead loop on virtual device ip6_vti0 (net 27), fix it urgently!
[  169.216944][T10785] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.2098'.
[  169.465175][T10806] x_tables: duplicate underflow at hook 4
[  170.375111][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'.
[  170.590569][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2129'.
[  170.608491][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2129'.
[  170.710935][T10860] IPv6: sit1: Disabled Multicast RS
[  170.778040][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2135'.
[  170.783497][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'.
[  170.787512][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'.
[  170.791775][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'.
[  171.418010][T10921] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  171.446503][T10919] syzkaller0: entered promiscuous mode
[  171.450462][T10919] syzkaller0: entered allmulticast mode
[  171.811272][T10949] netlink: 'syz.1.2175': attribute type 1 has an invalid length.
[  171.815818][T10949] netlink: 'syz.1.2175': attribute type 4 has an invalid length.
[  171.858314][T10953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.618342][T10979] netlink: 'syz.2.2189': attribute type 4 has an invalid length.
[  172.694146][T10988] netlink: 'syz.0.2193': attribute type 15 has an invalid length.
[  172.700748][T10988] netlink: 'syz.0.2193': attribute type 25 has an invalid length.
[  172.935210][T11014] netlink: 'syz.2.2202': attribute type 7 has an invalid length.
[  172.939192][T11014] netlink: 'syz.2.2202': attribute type 7 has an invalid length.
[  173.145515][T11039] : renamed from bond_slave_0 (while UP)
[  173.186581][T11043] netlink: 'syz.0.2218': attribute type 1 has an invalid length.
[  173.384673][T11059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.387404][T11059] syzkaller0: entered promiscuous mode
[  173.389127][T11059] syzkaller0: entered allmulticast mode
[  173.420378][T11059] tipc: Resetting bearer <eth:syzkaller0>
[  173.439040][T11058] tipc: Resetting bearer <eth:syzkaller0>
[  173.467909][T11058] tipc: Disabling bearer <eth:syzkaller0>
[  173.618011][T11073] bridge0: port 3(vlan3) entered disabled state
[  173.620570][T11073] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.623068][T11073] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.647995][T11073] batman_adv: batadv0: Interface deactivated: dummy0
[  173.689819][T11073] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.718669][  T797] lo speed is unknown, defaulting to 1000
[  173.724010][  T797] syz2: Port: 1 Link DOWN
[  174.285991][T11137] nicvf0: tun_chr_ioctl cmd 2148553947
[  174.409601][T11148] ip6gretap1: entered allmulticast mode
[  174.669131][T11175] __nla_validate_parse: 11 callbacks suppressed
[  174.669141][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2279'.
[  174.828748][T11152] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2269'.
[  174.927730][T11182] syzkaller0: entered promiscuous mode
[  174.929537][T11182] syzkaller0: entered allmulticast mode
[  174.935800][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2282'.
[  174.938587][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2282'.
[  174.942853][T11182] 0: reclassify loop, rule prio 0, protocol 800
[  174.990933][T11184] netlink: 'syz.0.2283': attribute type 11 has an invalid length.
[  175.117439][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2286'.
[  175.140264][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2286'.
[  175.146084][T11186] lo speed is unknown, defaulting to 1000
[  175.590824][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2294'.
[  175.602201][T11210] validate_nla: 2 callbacks suppressed
[  175.602213][T11210] netlink: 'syz.1.2294': attribute type 14 has an invalid length.
[  175.625877][T11210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2294'.
[  175.806061][T11234] netlink: 'syz.0.2306': attribute type 1 has an invalid length.
[  175.806563][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2305'.
[  175.808564][T11234] netlink: 'syz.0.2306': attribute type 3 has an invalid length.
[  175.817205][T11234] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2306'.
[  175.820015][T11234] NCSI netlink: No device for ifindex 813332851
[  176.740414][ T7509] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  176.989319][T11335] xt_HMARK: spi-set and port-set can't be combined
[  177.514114][T11347] syzkaller0: entered promiscuous mode
[  177.516064][T11347] syzkaller0: entered allmulticast mode
[  179.669584][T11307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.915737][T11374] __nla_validate_parse: 2 callbacks suppressed
[  179.915751][T11374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2366'.
[  179.921590][T11374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2366'.
[  180.051003][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'.
[  180.085083][T11386] vlan5: entered promiscuous mode
[  180.086645][T11386] bond_slave_1: entered promiscuous mode
[  180.217713][T11397] netlink: 'syz.0.2377': attribute type 1 has an invalid length.
[  180.247695][T11397] bond3: (slave geneve3): making interface the new active one
[  180.254659][T11397] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  180.258182][ T7509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  180.260909][ T7509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  180.263872][ T7509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  180.267528][ T7509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  180.321094][T11406] syzkaller0: entered promiscuous mode
[  180.325370][T11406] syzkaller0: entered allmulticast mode
[  180.968175][T11433] netlink: 'syz.2.2393': attribute type 3 has an invalid length.
[  180.981567][T11433] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2393'.
[  181.044054][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'.
[  181.052573][T11439] xfrm1: entered promiscuous mode
[  181.054212][T11439] xfrm1: entered allmulticast mode
[  181.057530][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'.
[  181.068153][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'.
[  182.180143][T11494] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.217450][T11494] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.266302][T11494] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.328614][T11494] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.403521][T11502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2424'.
[  182.407195][T11502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2424'.
[  182.410857][T11502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2424'.
[  182.568936][ T7509] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.583540][ T7509] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.602768][ T7509] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.614806][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.890777][T11523] sctp: [Deprecated]: syz.2.2433 (pid 11523) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.890777][T11523] Use struct sctp_sack_info instead
[  183.188371][T11531] ip6erspan0: entered allmulticast mode
[  183.435233][T11565] netlink: 'syz.0.2452': attribute type 1 has an invalid length.
[  183.540657][T11563] bridge0: port 2(macvlan2) entered disabled state
[  183.543610][T11563] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.719387][T11563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.734359][T11563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.074594][T11569] bond4: (slave bridge3): Enslaving as a backup interface with an up link
[  184.083121][T11570] macvlan4: entered promiscuous mode
[  184.084860][T11570] macvlan4: entered allmulticast mode
[  184.086878][T11570] bond4: entered promiscuous mode
[  184.088666][T11570] bridge3: entered promiscuous mode
[  184.095630][T11570] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  184.103064][T11570] bond4: left promiscuous mode
[  184.106294][T11570] bridge3: left promiscuous mode
[  184.127092][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.130266][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.134911][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.138218][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.439573][T11595] netlink: 'syz.1.2462': attribute type 7 has an invalid length.
[  184.447311][T11595] netlink: 'syz.1.2462': attribute type 8 has an invalid length.
[  185.274414][T11626] lo speed is unknown, defaulting to 1000
[  185.344022][T11635] __nla_validate_parse: 7 callbacks suppressed
[  185.344033][T11635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'.
[  185.455636][T11645] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2483'.
[  185.672783][T11665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2489'.
[  186.621442][ T5001] Bluetooth: hci1: command 0x0406 tx timeout
[  186.624286][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  188.973986][T11706] netlink: 'syz.2.2497': attribute type 21 has an invalid length.
[  188.976650][T11706] netlink: 'syz.2.2497': attribute type 22 has an invalid length.
[  188.979296][T11706] netlink: 'syz.2.2497': attribute type 23 has an invalid length.
[  188.982640][T11706] netlink: 'syz.2.2497': attribute type 25 has an invalid length.
[  188.985483][T11706] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2497'.
[  189.292695][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2507'.
[  189.639385][T11753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2515'.
[  189.940189][T11763] block nbd0: Unsupported socket: should be TCP or UNIX.
[  192.971665][T11765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  193.186379][T11804] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.2534'.
[  193.212353][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2536'.
[  193.217722][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2536'.
[  193.399146][T11812] smc: adding net device wlan0 with user defined pnetid SYZ0
[  194.192779][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'.
[  194.204449][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'.
[  194.222259][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'.
[  194.228938][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'.
[  194.554609][T11881] netlink: 'syz.2.2568': attribute type 1 has an invalid length.
[  194.688609][ T5486] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x25
[  194.786290][T11904] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2577'.
[  194.806318][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2578'.
[  194.810716][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2578'.
[  195.445262][T11886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.598558][T11920] netlink: 'syz.0.2582': attribute type 12 has an invalid length.
[  195.892475][T11939] netlink: 'syz.1.2590': attribute type 1 has an invalid length.
[  196.358654][T11982] lo speed is unknown, defaulting to 1000
[  196.364368][T11989] block nbd3: Unsupported socket: should be TCP or UNIX.
[  196.908907][T12018] sit0: entered promiscuous mode
[  196.911094][T12018] netlink: 'syz.1.2621': attribute type 1 has an invalid length.
[  197.086855][T12026] xt_HMARK: proto mask must be zero with L3 mode
[  197.526815][T12038] syzkaller0: entered promiscuous mode
[  197.529202][T12038] syzkaller0: entered allmulticast mode
[  197.889559][T12052] x_tables: unsorted underflow at hook 4
[  197.935813][ T5486] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  197.941021][ T5486] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  197.947131][T12054] netlink: 'syz.0.2638': attribute type 11 has an invalid length.
[  197.951090][ T5486] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  197.956153][ T5486] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.110509][T12140] Unsupported ieee802154 address type: 0
[  199.144949][T12145] __nla_validate_parse: 13 callbacks suppressed
[  199.144963][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2679'.
[  199.437316][T12165] batman_adv: batadv0: Adding interface: vlan0
[  199.439757][T12165] batman_adv: batadv0: The MTU of interface vlan0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.463676][T12165] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active
[  199.893096][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  200.319496][T12187] xt_CT: No such helper "snmp"
[  200.403703][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'.
[  200.408857][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'.
[  200.413895][T12197] netlink: 'syz.0.2701': attribute type 5 has an invalid length.
[  200.442276][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'.
[  200.446096][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'.
[  200.449503][T12197] netlink: 'syz.0.2701': attribute type 5 has an invalid length.
[  200.890031][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'.
[  200.958950][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'.
[  200.991327][T12242] team1: entered promiscuous mode
[  200.993902][T12242] team1: entered allmulticast mode
[  200.996493][T12242] 8021q: adding VLAN 0 to HW filter on device team1
[  201.007054][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'.
[  201.020575][T12242] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  201.043120][T12242] team2: entered promiscuous mode
[  201.045246][T12242] team2: entered allmulticast mode
[  201.048137][T12242] 8021q: adding VLAN 0 to HW filter on device team2
[  201.530477][T12271] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  201.547183][T12271] bond11: (slave lo): Enslaving as an active interface with an up link
[  201.556754][T12271] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  201.665205][T12276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.668433][T12276] syzkaller0: entered promiscuous mode
[  201.670777][T12276] syzkaller0: entered allmulticast mode
[  201.697342][T12276] tipc: Resetting bearer <eth:syzkaller0>
[  201.704796][T12275] tipc: Resetting bearer <eth:syzkaller0>
[  201.732848][T12275] tipc: Disabling bearer <eth:syzkaller0>
[  202.883748][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2770'.
[  202.934443][T12348] bridge5: port 1(dummy0) entered blocking state
[  202.937754][T12348] bridge5: port 1(dummy0) entered disabled state
[  202.943171][T12348] dummy0: entered allmulticast mode
[  202.950776][T12348] dummy0: entered promiscuous mode
[  202.968831][T12348] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2770'.
[  202.986951][T12348] dummy0 (unregistering): left allmulticast mode
[  202.995059][T12348] dummy0 (unregistering): left promiscuous mode
[  203.001036][T12348] bridge5: port 1(dummy0) entered disabled state
[  203.304853][T12390] syzkaller0: entered promiscuous mode
[  203.311308][T12390] syzkaller0: entered allmulticast mode
[  203.523031][T12410] xt_CT: You must specify a L4 protocol and not use inversions on it
[  203.545040][T12414] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  203.827454][T12439] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  203.829912][T12439] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  203.946491][T12446] veth13: entered promiscuous mode
[  203.948541][T12446] veth13: entered allmulticast mode
[  204.117674][T12456] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  204.120665][T12456] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  205.128190][T12485] __nla_validate_parse: 2 callbacks suppressed
[  205.128209][T12485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2831'.
[  205.414586][T12485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2831'.
[  205.591595][T12499] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2838'.
[  205.627402][T12499] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  205.634212][T12499] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  205.757192][T12509] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  205.788742][T12509] bond8: (slave lo): Enslaving as an active interface with an up link
[  205.793456][T12509] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  205.926505][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2846'.
[  205.973022][T12531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2851'.
[  206.303071][T12557] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  206.460498][T12571] IPv6: sit2: Disabled Multicast RS
[  206.720784][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2882'.
[  206.875385][T12614] xt_limit: Overflow, try lower: 268435456/134217728
[  207.216945][T12653] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  207.363099][T12668] tun0: tun_chr_ioctl cmd 1074025672
[  207.364993][T12668] tun0: ignored: set checksum disabled
[  207.459228][T12677] syzkaller0: entered promiscuous mode
[  207.466981][T12677] syzkaller0: entered allmulticast mode
[  207.480431][T12678] netlink: 'syz.1.2920': attribute type 1 has an invalid length.
[  207.550469][T12683] bond5: entered allmulticast mode
[  207.577761][T12678] 8021q: adding VLAN 0 to HW filter on device bond10
[  207.610397][T12678] bond9: (slave bond10): making interface the new active one
[  207.620359][T12678] bond9: (slave bond10): Enslaving as an active interface with an up link
[  207.629562][T12678] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2920'.
[  207.705175][T12698] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  207.717562][T12701] netlink: 8772 bytes leftover after parsing attributes in process `syz.0.2931'.
[  207.789881][T12706] IPv6: sit2: Disabled Multicast RS
[  207.816666][T12709] nbd: must specify a size in bytes for the device
[  207.868837][T12711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'.
[  208.066142][T12733] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2946'.
[  208.265752][T12751] lo speed is unknown, defaulting to 1000
[  208.284484][T12758] netlink: 'syz.0.2958': attribute type 2 has an invalid length.
[  208.287517][T12758] netlink: 'syz.0.2958': attribute type 9 has an invalid length.
[  208.507095][T12775] netlink: 'syz.0.2965': attribute type 29 has an invalid length.
[  209.115502][T12817] netlink: 'syz.0.2985': attribute type 5 has an invalid length.
[  209.247294][T12826] syz_tun: entered allmulticast mode
[  209.256016][T12826] dvmrp8: entered allmulticast mode
[  209.258663][T12825] syz_tun: left allmulticast mode
[  209.381514][T12839] Unknown options in mask 6
[  209.586805][T12851] netlink: 'syz.2.3000': attribute type 11 has an invalid length.
[  210.609852][T12889] __nla_validate_parse: 3 callbacks suppressed
[  210.609870][T12889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3014'.
[  211.153518][T12909] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3022'.
[  211.162469][T12909] syzkaller1: entered promiscuous mode
[  211.165522][T12909] syzkaller1: entered allmulticast mode
[  211.308653][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3026'.
[  211.313663][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3026'.
[  211.366782][T12919] netlink: 'syz.2.3027': attribute type 4 has an invalid length.
[  211.489650][T12927] vlan1: entered allmulticast mode
[  211.495289][T12927] bond0: entered allmulticast mode
[  211.497459][T12927] bond_slave_0: entered allmulticast mode
[  211.500012][T12927] bond_slave_1: entered allmulticast mode
[  211.556087][T12933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3034'.
[  211.617845][T12935] netlink: 'syz.2.3035': attribute type 3 has an invalid length.
[  211.620972][T12935] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3035'.
[  211.758739][T12943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.798342][T12943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3039'.
[  211.806371][T12943] tipc: Resetting bearer <eth:syzkaller0>
[  211.868901][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3041'.
[  211.877946][T12953] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  212.190568][T12978] netlink: 'syz.1.3055': attribute type 6 has an invalid length.
[  212.383816][T12987] ip6t_srh: unknown srh invflags BA61
[  212.533502][T12993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3061'.
[  212.655534][T13003] bond12 (unregistering): Released all slaves
[  213.084250][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3083'.
[  214.736532][T13157] lo speed is unknown, defaulting to 1000
[  215.497361][T13225] sctp: [Deprecated]: syz.1.3165 (pid 13225) Use of int in max_burst socket option deprecated.
[  215.497361][T13225] Use struct sctp_assoc_value instead
[  215.905927][T13262] syzkaller0: entered promiscuous mode
[  215.915011][T13262] syzkaller0: entered allmulticast mode
[  216.102134][T13269] block nbd3: server does not support multiple connections per device.
[  216.111665][T13269] block nbd3: shutting down sockets
[  216.141441][ T5486] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.144902][ T5486] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  216.148674][ T5486] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.153418][ T5486] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  216.159321][ T5486] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.169878][ T5486] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  216.174452][ T5486] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.178114][ T5486] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  216.365652][T13280] netlink: 'syz.0.3187': attribute type 4 has an invalid length.
[  216.372081][T13280] netlink: 'syz.0.3187': attribute type 8 has an invalid length.
[  216.375399][T13280] netlink: 'syz.0.3187': attribute type 1 has an invalid length.
[  216.379093][T13280] __nla_validate_parse: 10 callbacks suppressed
[  216.379106][T13280] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3187'.
[  216.392665][T13280] NCSI netlink: No device for ifindex 0
[  216.994755][T13313] policy can only be matched on NF_INET_PRE_ROUTING
[  216.994775][T13313] unable to load match
[  217.805455][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3222'.
[  217.809408][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3222'.
[  217.820643][T13362] erspan0: entered promiscuous mode
[  217.827440][T13362] gretap0: entered promiscuous mode
[  217.830830][T13362] gretap0: left promiscuous mode
[  217.840515][T13362] erspan0: left promiscuous mode
[  217.940123][T13369] netlink: 'syz.2.3226': attribute type 3 has an invalid length.
[  218.068313][T13375] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3228'.
[  218.232977][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'.
[  218.250856][ T5615] Bluetooth: hci2: link tx timeout
[  218.253211][ T5615] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  218.486802][T13401] syzkaller1: entered promiscuous mode
[  218.496675][T13401] syzkaller1: entered allmulticast mode
[  218.577537][T13410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3243'.
[  220.291644][ T5615] Bluetooth: hci2: command 0x0406 tx timeout
[  221.574083][T13411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  221.747240][T13492] netlink: 'syz.1.3261': attribute type 1 has an invalid length.
[  221.775087][T13492] bond11: entered promiscuous mode
[  221.778802][T13492] bond11: entered allmulticast mode
[  221.784362][T13492] 8021q: adding VLAN 0 to HW filter on device bond11
[  221.806809][T13492] erspan1: entered allmulticast mode
[  221.817928][T13492] bond11: (slave erspan1): making interface the new active one
[  221.820787][T13492] erspan1: entered promiscuous mode
[  221.825758][T13492] bond11: (slave erspan1): Enslaving as an active interface with an up link
[  222.293466][T13519] lo speed is unknown, defaulting to 1000
[  222.406819][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3274'.
[  222.506860][T13524] 8021q: adding VLAN 0 to HW filter on device bond12
[  222.854931][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'.
[  223.140301][T13574] netlink: 'syz.2.3297': attribute type 11 has an invalid length.
[  223.445061][T13606] netlink: 'syz.2.3312': attribute type 8 has an invalid length.
[  223.919054][T13639] netlink: 'syz.0.3329': attribute type 1 has an invalid length.
[  223.936574][T13641] syzkaller0: entered promiscuous mode
[  223.942517][T13641] syzkaller0: entered allmulticast mode
[  224.304713][T13656] lo speed is unknown, defaulting to 1000
[  225.080683][T13674] netlink: 'syz.2.3340': attribute type 1 has an invalid length.
[  225.088752][T13672] pim6reg1: entered promiscuous mode
[  225.089552][T13674] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3340'.
[  225.093237][T13672] pim6reg1: entered allmulticast mode
[  225.473072][T13694] lo speed is unknown, defaulting to 1000
[  225.479635][T13694] lo speed is unknown, defaulting to 1000
[  225.484664][T13694] lo speed is unknown, defaulting to 1000
[  225.621080][ T7708] lo speed is unknown, defaulting to 1000
[  225.627050][T13694] infiniband syz0: set down
[  225.628546][T13694] infiniband syz0: added lo
[  225.658290][T13694] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  225.663679][T13694] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  225.668855][T13694] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  225.701336][T13694] RDS/IB: syz0: added
[  225.704524][T13694] smc: adding ib device syz0 with port count 1
[  225.706641][T13694] smc:    ib device syz0 port 1 has no pnetid
[  225.712293][ T7708] lo speed is unknown, defaulting to 1000
[  225.723540][T13694] lo speed is unknown, defaulting to 1000
[  225.851403][T13694] lo speed is unknown, defaulting to 1000
[  225.962727][T13694] lo speed is unknown, defaulting to 1000
[  226.163222][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'.
[  228.713136][T13711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.050737][T13750] bond11: (slave lo): Releasing backup interface
[  229.055530][T13750] bond11: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  229.064124][T13753] netlink: 'syz.0.3373': attribute type 61 has an invalid length.
[  229.080983][T13750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  229.119290][T13757] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3376'.
[  229.127265][T13750] ip6gre1: entered allmulticast mode
[  229.137282][T13750] team0: Refused to change device type
[  229.227648][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3379'.
[  229.235964][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3379'.
[  229.239899][T13765] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3379'.
[  229.248222][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3379'.
[  229.252594][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3379'.
[  229.256284][T13765] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3379'.
[  229.405436][T13771] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  229.427015][T13761] nbd3: detected capacity change from 0 to 63
[  229.441841][ T8230] block nbd3: Receive control failed (result -32)
[  229.442234][   T55] block nbd3: Receive control failed (result -32)
[  229.455941][T13161] block nbd3: Send control failed (result -32)
[  229.467083][T13161] block nbd3: Request send failed, requeueing
[  229.510114][  T131] block nbd3: Dead connection, failed to find a fallback
[  229.510509][T13161] block nbd3: Dead connection, failed to find a fallback
[  229.533280][  T131] block nbd3: shutting down sockets
[  229.537784][  T131] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.543240][  T131] Buffer I/O error on dev nbd3, logical block 0, async page read
[  229.543310][T13161] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.563402][T13161] Buffer I/O error on dev nbd3, logical block 1, async page read
[  229.570489][T13161] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.577973][T13161] Buffer I/O error on dev nbd3, logical block 2, async page read
[  229.583181][T13161] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.589734][T13161] Buffer I/O error on dev nbd3, logical block 3, async page read
[  229.598376][T13161] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.604995][T13161] Buffer I/O error on dev nbd3, logical block 0, async page read
[  229.607956][T13161] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.613492][T13161] Buffer I/O error on dev nbd3, logical block 1, async page read
[  229.616436][T13161] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.619942][T13161] Buffer I/O error on dev nbd3, logical block 2, async page read
[  229.627776][T13161] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.631319][T13161] Buffer I/O error on dev nbd3, logical block 3, async page read
[  229.634161][T13161] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.637480][T13161] Buffer I/O error on dev nbd3, logical block 0, async page read
[  229.640500][T13161] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.651275][T13161] Buffer I/O error on dev nbd3, logical block 1, async page read
[  229.655746][T13161] ldm_validate_partition_table(): Disk read failed.
[  229.659503][T13161] Dev nbd3: unable to read RDB block 0
[  229.667114][T13161]  nbd3: unable to read partition table
[  229.677674][T13161] ldm_validate_partition_table(): Disk read failed.
[  229.680668][T13161] Dev nbd3: unable to read RDB block 0
[  229.684620][T13161]  nbd3: unable to read partition table
[  229.739120][T13789] netlink: 'syz.0.3384': attribute type 3 has an invalid length.
[  229.744253][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'.
[  229.935267][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3392'.
[  230.110381][T13804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  230.354576][T13818] bond12: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  230.358584][T13818] bond12 (unregistering): Released all slaves
[  230.593121][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'.
[  230.611790][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  230.628754][T13841] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.709611][T13849] netlink: 'syz.0.3416': attribute type 15 has an invalid length.
[  230.744540][T13851] netlink: 'syz.0.3417': attribute type 21 has an invalid length.
[  230.752609][T13851] netlink: 'syz.0.3417': attribute type 22 has an invalid length.
[  230.755216][T13851] netlink: 'syz.0.3417': attribute type 23 has an invalid length.
[  230.757953][T13851] netlink: 'syz.0.3417': attribute type 25 has an invalid length.
[  230.760708][T13851] netlink: 'syz.0.3417': attribute type 26 has an invalid length.
[  230.917772][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  233.833363][T13860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  234.121653][T13893] __nla_validate_parse: 2 callbacks suppressed
[  234.121664][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3429'.
[  234.132121][T13893] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3429'.
[  234.137044][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3429'.
[  234.141953][T13893] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3429'.
[  234.169027][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3429'.
[  234.188199][T13897] lo speed is unknown, defaulting to 1000
[  234.217046][T13897] lo speed is unknown, defaulting to 1000
[  234.555220][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3439'.
[  234.583516][T13924] bond6: entered promiscuous mode
[  234.586402][T13924] 8021q: adding VLAN 0 to HW filter on device bond6
[  234.724810][T13924] 8021q: adding VLAN 0 to HW filter on device bond6
[  234.735551][T13924] bond6: (slave sit3): The slave device specified does not support setting the MAC address
[  234.752522][T13924] bond6: (slave sit3): Error -95 calling set_mac_address
[  234.807278][T13929] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  234.965666][T13937] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3444'.
[  235.067686][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3445'.
[  235.500101][T13974] netlink: 'syz.2.3460': attribute type 4 has an invalid length.
[  235.509463][T13974] netlink: 'syz.2.3460': attribute type 4 has an invalid length.
[  235.519021][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3459'.
[  235.918795][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3472'.
[  236.737933][T14016] bond6: entered allmulticast mode
[  236.748410][T14015] bond6: left allmulticast mode
[  236.918686][T14038] x_tables: ip_tables: icmp match: only valid for protocol 1
[  237.001291][T14047] netlink: 'syz.1.3493': attribute type 1 has an invalid length.
[  237.324375][T14073] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2
[  237.374546][T14077] xt_CONNSECMARK: invalid mode: 0
[  237.719770][   T24] 
[  237.720660][   T24] ======================================================
[  237.722813][   T24] WARNING: possible circular locking dependency detected
[  237.725463][   T24] syzkaller #0 Not tainted
[  237.727011][   T24] ------------------------------------------------------
SYZFAIL: failed to recv rpc
[  237.729416][   T24] kworker/1:0/24 is trying to acquire lock:
[  237.731505][   T24] ffff888197fe9d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_pm_addr_send_ack_avoid_list+0x5ba/0x6d0
[  237.735149][   T24] 
[  237.735149][   T24] but task is already holding lock:
[  237.737529][   T24] ffff8881bb5f0f60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_worker+0x35/0x1420
[  237.740611][   T24] 
[  237.740611][   T24] which lock already depends on the new lock.
[  237.740611][   T24] 
[  237.743825][   T24] 
[  237.743825][   T24] the existing dependency chain (in reverse order) is:
[  237.746637][   T24] 
[  237.746637][   T24] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  237.749074][   T24]        lock_sock_nested+0x41/0x100
[  237.750738][   T24]        inet_shutdown+0x6a/0x390
[  237.752314][   T24]        nbd_mark_nsock_dead+0x2e9/0x560
[  237.754133][   T24]        sock_shutdown+0x15e/0x260
[  237.756114][   T24]        nbd_clear_sock+0x24/0x170
[  237.757827][   T24]        nbd_config_put+0x2dd/0x580
[  237.759496][   T24]        nbd_genl_connect+0x19d5/0x1cf0
[  237.761351][   T24]        genl_family_rcv_msg_doit+0x22a/0x330
[  237.763397][   T24]        genl_rcv_msg+0x61c/0x7a0
[  237.764988][   T24]        netlink_rcv_skb+0x232/0x4b0
[  237.766657][   T24]        genl_rcv+0x28/0x40
[  237.768139][   T24]        netlink_unicast+0x75c/0x8e0
[  237.769758][   T24]        netlink_sendmsg+0x813/0xb40
[  237.771584][   T24]        ____sys_sendmsg+0x972/0x9f0
[  237.773572][   T24]        ___sys_sendmsg+0x2a5/0x360
[  237.775600][   T24]        __x64_sys_sendmsg+0x1bd/0x2a0
[  237.777731][   T24]        do_syscall_64+0x15f/0xf80
[  237.779722][   T24]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.781757][   T24] 
[  237.781757][   T24] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  237.784582][   T24]        __mutex_lock+0x1a3/0x1550
[  237.786612][   T24]        nbd_queue_rq+0x37b/0x1100
[  237.788587][   T24]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  237.790990][   T24]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  237.793658][   T24]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  237.796238][   T24]        blk_mq_run_hw_queue+0x348/0x4f0
[  237.798459][   T24]        blk_mq_dispatch_list+0xd16/0xe10
[  237.800270][   T24]        blk_mq_flush_plug_list+0x48d/0x570
[  237.802275][   T24]        __blk_flush_plug+0x3ed/0x4d0
[  237.803968][   T24]        __submit_bio+0x28d/0x580
[  237.805663][   T24]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  237.807817][   T24]        block_read_full_folio+0x599/0x830
[  237.809865][   T24]        filemap_read_folio+0x137/0x3b0
[  237.811950][   T24]        do_read_cache_folio+0x358/0x590
[  237.814164][   T24]        read_part_sector+0xb6/0x2b0
[  237.815874][   T24]        adfspart_check_ICS+0xb1/0x960
[  237.817610][   T24]        bdev_disk_changed+0x817/0x1770
[  237.819462][   T24]        blkdev_get_whole+0x380/0x510
[  237.821147][   T24]        bdev_open+0x31e/0xd30
[  237.822631][   T24]        blkdev_open+0x470/0x610
[  237.824597][   T24]        do_dentry_open+0x785/0x14e0
[  237.826480][   T24]        vfs_open+0x3b/0x340
[  237.828022][   T24]        path_openat+0x2e08/0x3860
[  237.829954][   T24]        do_file_open+0x23e/0x4a0
[  237.831919][   T24]        do_sys_openat2+0x113/0x200
[  237.833832][   T24]        __x64_sys_openat+0x138/0x170
[  237.835986][   T24]        do_syscall_64+0x15f/0xf80
[  237.837620][   T24]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.839709][   T24] 
[  237.839709][   T24] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  237.841954][   T24]        __mutex_lock+0x1a3/0x1550
[  237.843542][   T24]        nbd_queue_rq+0xc6/0x1100
[  237.845235][   T24]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  237.847634][   T24]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  237.850171][   T24]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  237.852494][   T24]        blk_mq_run_hw_queue+0x348/0x4f0
[  237.854548][   T24]        blk_mq_dispatch_list+0xd16/0xe10
[  237.856624][   T24]        blk_mq_flush_plug_list+0x48d/0x570
[  237.858751][   T24]        __blk_flush_plug+0x3ed/0x4d0
[  237.860829][   T24]        __submit_bio+0x28d/0x580
[  237.862780][   T24]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  237.865162][   T24]        block_read_full_folio+0x599/0x830
[  237.867361][   T24]        filemap_read_folio+0x137/0x3b0
[  237.869459][   T24]        do_read_cache_folio+0x358/0x590
[  237.871574][   T24]        read_part_sector+0xb6/0x2b0
[  237.873573][   T24]        adfspart_check_ICS+0xb1/0x960
[  237.875340][   T24]        bdev_disk_changed+0x817/0x1770
[  237.877235][   T24]        blkdev_get_whole+0x380/0x510
[  237.879183][   T24]        bdev_open+0x31e/0xd30
[  237.881021][   T24]        blkdev_open+0x470/0x610
[  237.882938][   T24]        do_dentry_open+0x785/0x14e0
[  237.884995][   T24]        vfs_open+0x3b/0x340
[  237.886912][   T24]        path_openat+0x2e08/0x3860
[  237.888606][   T24]        do_file_open+0x23e/0x4a0
[  237.890196][   T24]        do_sys_openat2+0x113/0x200
[  237.891817][   T24]        __x64_sys_openat+0x138/0x170
[  237.893522][   T24]        do_syscall_64+0x15f/0xf80
[  237.895117][   T24]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.897052][   T24] 
[  237.897052][   T24] -> #4 (set->srcu){.+.+}-{0:0}:
[  237.899236][   T24]        __synchronize_srcu+0xca/0x300
[  237.900881][   T24]        elevator_switch+0x1e8/0x7a0
[  237.902665][   T24]        elevator_change+0x2cc/0x450
[  237.904265][   T24]        elevator_set_default+0x36c/0x430
[  237.906102][   T24]        blk_register_queue+0x3e9/0x4e0
[  237.908041][   T24]        __add_disk+0x677/0xd50
[  237.909803][   T24]        add_disk_fwnode+0xfb/0x480
[  237.911850][   T24]        nbd_dev_add+0x72c/0xb50
[  237.913762][   T24]        nbd_init+0x168/0x1f0
[  237.915613][   T24]        do_one_initcall+0x250/0x870
[  237.917639][   T24]        do_initcall_level+0x104/0x190
[  237.919666][   T24]        do_initcalls+0x59/0xa0
[  237.921587][   T24]        kernel_init_freeable+0x2a6/0x3e0
[  237.923804][   T24]        kernel_init+0x1d/0x1d0
[  237.925724][   T24]        ret_from_fork+0x514/0xb70
[  237.927701][   T24]        ret_from_fork_asm+0x1a/0x30
[  237.929737][   T24] 
[  237.929737][   T24] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  237.932735][   T24]        __mutex_lock+0x1a3/0x1550
[  237.934683][   T24]        elevator_change+0x1b3/0x450
[  237.936719][   T24]        elevator_set_none+0xb5/0x140
[  237.938802][   T24]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  237.941246][   T24]        nbd_start_device+0x17f/0xb10
[  237.943320][   T24]        nbd_genl_connect+0x165b/0x1cf0
[  237.945406][   T24]        genl_family_rcv_msg_doit+0x22a/0x330
[  237.947762][   T24]        genl_rcv_msg+0x61c/0x7a0
[  237.949734][   T24]        netlink_rcv_skb+0x232/0x4b0
[  237.951922][   T24]        genl_rcv+0x28/0x40
[  237.953687][   T24]        netlink_unicast+0x75c/0x8e0
[  237.955733][   T24]        netlink_sendmsg+0x813/0xb40
[  237.957696][   T24]        ____sys_sendmsg+0x972/0x9f0
[  237.959723][   T24]        ___sys_sendmsg+0x2a5/0x360
[  237.961734][   T24]        __x64_sys_sendmsg+0x1bd/0x2a0
[  237.963777][   T24]        do_syscall_64+0x15f/0xf80
[  237.965819][   T24]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.968366][   T24] 
[  237.968366][   T24] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  237.971750][   T24]        blk_alloc_queue+0x546/0x680
[  237.973906][   T24]        __blk_mq_alloc_disk+0x197/0x390
[  237.976145][   T24]        nbd_dev_add+0x499/0xb50
[  237.978110][   T24]        nbd_init+0x168/0x1f0
[  237.980017][   T24]        do_one_initcall+0x250/0x870
[  237.982057][   T24]        do_initcall_level+0x104/0x190
[  237.984172][   T24]        do_initcalls+0x59/0xa0
[  237.986066][   T24]        kernel_init_freeable+0x2a6/0x3e0
[  237.988237][   T24]        kernel_init+0x1d/0x1d0
[  237.990106][   T24]        ret_from_fork+0x514/0xb70
[  237.992070][   T24]        ret_from_fork_asm+0x1a/0x30
[  237.994124][   T24] 
[  237.994124][   T24] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  237.996914][   T24]        fs_reclaim_acquire+0x71/0x100
[  237.999031][   T24]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  238.001420][   T24]        __alloc_skb+0x1d0/0x7d0
[  238.003359][   T24]        tcp_stream_alloc_skb+0x3f/0x580
[  238.005541][   T24]        tcp_connect+0x1570/0x5400
[  238.007509][   T24]        tcp_v4_connect+0x10f7/0x19b0
[  238.009527][   T24]        tcp_v6_connect+0xc43/0x1c30
[  238.011574][   T24]        mptcp_connect+0x56b/0x830
[  238.013542][   T24]        __inet_stream_connect+0x25a/0xdd0
[  238.015761][   T24]        inet_stream_connect+0x66/0xa0
[  238.017713][   T24]        __sys_connect+0x312/0x450
[  238.019468][   T24]        __x64_sys_connect+0x7a/0x90
[  238.021326][   T24]        do_syscall_64+0x15f/0xf80
[  238.023150][   T24]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.025600][   T24] 
[  238.025600][   T24] -> #0 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  238.028304][   T24]        __lock_acquire+0x15a5/0x2cf0
[  238.029982][   T24]        lock_acquire+0x106/0x350
[  238.031526][   T24]        __mptcp_pm_send_ack+0x76/0x200
[  238.033246][   T24]        mptcp_pm_addr_send_ack_avoid_list+0x5ba/0x6d0
[  238.035344][   T24]        mptcp_pm_create_subflow_or_signal_addr+0x1453/0x18f0
[  238.037609][   T24]        __mptcp_pm_kernel_worker+0x1a33/0x20e0
[  238.039503][   T24]        mptcp_pm_worker+0x1bb/0x300
[  238.041138][   T24]        mptcp_worker+0xd3/0x1420
[  238.042659][   T24]        process_scheduled_works+0xb5d/0x1860
[  238.044511][   T24]        worker_thread+0xa53/0xfc0
[  238.046074][   T24]        kthread+0x389/0x470
[  238.047471][   T24]        ret_from_fork+0x514/0xb70
[  238.049054][   T24]        ret_from_fork_asm+0x1a/0x30
[  238.050904][   T24] 
[  238.050904][   T24] other info that might help us debug this:
[  238.050904][   T24] 
[  238.054005][   T24] Chain exists of:
[  238.054005][   T24]   k-sk_lock-AF_INET6 --> &nsock->tx_lock --> sk_lock-AF_INET6
[  238.054005][   T24] 
[  238.058201][   T24]  Possible unsafe locking scenario:
[  238.058201][   T24] 
[  238.060441][   T24]        CPU0                    CPU1
[  238.062085][   T24]        ----                    ----
[  238.063692][   T24]   lock(sk_lock-AF_INET6);
[  238.065296][   T24]                                lock(&nsock->tx_lock);
[  238.067441][   T24]                                lock(sk_lock-AF_INET6);
[  238.069561][   T24]   lock(k-sk_lock-AF_INET6);
[  238.071105][   T24] 
[  238.071105][   T24]  *** DEADLOCK ***
[  238.071105][   T24] 
[  238.073587][   T24] 3 locks held by kworker/1:0/24:
[  238.075191][   T24]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  238.078770][   T24]  #1: ffffc900001e7c40 ((work_completion)(&msk->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  238.082301][   T24]  #2: ffff8881bb5f0f60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_worker+0x35/0x1420
[  238.085181][   T24] 
[  238.085181][   T24] stack backtrace:
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  238.087207][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) 
[  238.087218][   T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.087225][   T24] Workqueue: events mptcp_worker
[  238.087240][   T24] Call Trace:
[  238.087246][   T24]  <TASK>
[  238.087251][   T24]  dump_stack_lvl+0xe8/0x150
[  238.087262][   T24]  print_circular_bug+0x2e1/0x300
[  238.087272][   T24]  check_noncircular+0x12e/0x150
[  238.087283][   T24]  __lock_acquire+0x15a5/0x2cf0
[  238.087293][   T24]  ? __pfx___schedule+0x10/0x10
[  238.087304][   T24]  ? mptcp_pm_addr_send_ack_avoid_list+0x5ba/0x6d0
[  238.087316][   T24]  lock_acquire+0x106/0x350
[  238.087323][   T24]  ? mptcp_pm_addr_send_ack_avoid_list+0x5ba/0x6d0
[  238.087333][   T24]  ? preempt_schedule_thunk+0x16/0x30
[  238.087343][   T24]  ? preempt_schedule_common+0x82/0xd0
[  238.087353][   T24]  ? mptcp_pm_addr_send_ack_avoid_list+0x5ba/0x6d0
[  238.087363][   T24]  __mptcp_pm_send_ack+0x76/0x200
[  238.087373][   T24]  ? mptcp_pm_addr_send_ack_avoid_list+0x5ba/0x6d0
[  238.087384][   T24]  mptcp_pm_addr_send_ack_avoid_list+0x5ba/0x6d0
[  238.087397][   T24]  mptcp_pm_create_subflow_or_signal_addr+0x1453/0x18f0
[  238.087408][   T24]  ? unwind_next_frame+0xa6/0x2550
[  238.087417][   T24]  ? mptcp_pm_create_subflow_or_signal_addr+0x329/0x18f0
[  238.087427][   T24]  ? unwind_next_frame+0xa6/0x2550
[  238.087435][   T24]  ? unwind_next_frame+0xa6/0x2550
[  238.087444][   T24]  ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10
[  238.087455][   T24]  ? unwind_next_frame+0xa6/0x2550
[  238.087463][   T24]  ? ret_from_fork_asm+0x1a/0x30
[  238.087471][   T24]  ? ret_from_fork_asm+0x1a/0x30
[  238.087479][   T24]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  238.087490][   T24]  ? arch_stack_walk+0x11b/0x150
[  238.087500][   T24]  ? ret_from_fork_asm+0x1a/0x30
[  238.087509][   T24]  ? __lock_acquire+0x6b5/0x2cf0
[  238.087516][   T24]  ? stack_depot_save_flags+0x33/0x810
[  238.087527][   T24]  __mptcp_pm_kernel_worker+0x1a33/0x20e0
[  238.087538][   T24]  ? __pfx_hlock_conflict+0x10/0x10
[  238.087546][   T24]  ? __bfs+0x153/0x290
[  238.087552][   T24]  ? __pfx_hlock_conflict+0x10/0x10
[  238.087561][   T24]  ? check_path+0x21/0x40
[  238.087569][   T24]  ? __pfx___mptcp_pm_kernel_worker+0x10/0x10
[  238.087580][   T24]  ? lockdep_unlock+0x5d/0xd0
[  238.087586][   T24]  ? __lock_acquire+0x146e/0x2cf0
[  238.087598][   T24]  ? do_raw_spin_lock+0x12b/0x2f0
[  238.087607][   T24]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  238.087617][   T24]  ? mptcp_pm_worker+0xe2/0x300
[  238.087624][   T24]  mptcp_pm_worker+0x1bb/0x300
[  238.087631][   T24]  mptcp_worker+0xd3/0x1420
[  238.087640][   T24]  ? process_scheduled_works+0xa70/0x1860
[  238.087647][   T24]  ? process_scheduled_works+0xa70/0x1860
[  238.087655][   T24]  process_scheduled_works+0xb5d/0x1860
[  238.087666][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  238.087674][   T24]  ? assign_work+0x3d5/0x5e0
[  238.087681][   T24]  worker_thread+0xa53/0xfc0
[  238.087693][   T24]  kthread+0x389/0x470
[  238.087702][   T24]  ? __pfx_worker_thread+0x10/0x10
[  238.087709][   T24]  ? __pfx_kthread+0x10/0x10
[  238.087717][   T24]  ret_from_fork+0x514/0xb70
[  238.087726][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  238.087733][   T24]  ? __switch_to+0xc79/0x1410
[  238.087744][   T24]  ? __pfx_kthread+0x10/0x10
[  238.087752][   T24]  ret_from_fork_asm+0x1a/0x30
[  238.087764][   T24]  </TASK>
[  238.351054][ T5619] bond0: (slave syz_tun): Releasing backup interface
