last executing test programs:

19.90121494s ago: executing program 0 (id=8424):
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
close(0x4)

19.841419485s ago: executing program 0 (id=8429):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmmsg$nfc_llcp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}], 0x1, 0x8895)

19.841066731s ago: executing program 0 (id=8431):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0)

19.770510833s ago: executing program 0 (id=8435):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00'}, 0x1c)

19.451268385s ago: executing program 2 (id=8444):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x40}}, 0x10)

19.287568242s ago: executing program 2 (id=8445):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)

19.285695597s ago: executing program 2 (id=8446):
r0 = socket$inet6(0xa, 0x80002, 0x88)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22}, 0x48)
r2 = socket$inet6(0xa, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r2}, 0x20)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
sendmmsg$inet6(r4, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000200)={0xa0000004})

19.210893711s ago: executing program 2 (id=8447):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xffffffffffffff86, 0x0, 0x0, 0x0, 0xfffffbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}, 0x50)

19.210503765s ago: executing program 2 (id=8448):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r3}, 0x10)
r4 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0x0, 0x1)
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f00000006c0)={0x0, @adiantum, 0x0, @desc2})
ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})

18.899424118s ago: executing program 0 (id=8450):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0x10}, {0x10, 0x1, 0x2}], 0x20}}], 0x2, 0x40800)

18.829416648s ago: executing program 0 (id=8453):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000440)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x4, @f={0x8, 0x6, 0x2, 0x6, {0x4, 0xe, "c90e14cb62e92fba825ac2d2408fe32bcd06"}, 0x1}}, 0x1c)

18.333808402s ago: executing program 2 (id=8456):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req={0x2, 0xb, 0x187700, 0x4}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6c0800, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x1, 0x3}}, 0xe8)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x36, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20)
r8 = socket$inet6(0xa, 0x3, 0x81)
setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000001840)={0x3, {{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x106}}}, 0x88)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f00000001c0), 0x0}, 0x20)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

15.761344631s ago: executing program 1 (id=8486):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a)

15.671170707s ago: executing program 1 (id=8487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x1}, {0x1, 0xa}]}]}]}]}, 0x2c}}, 0x4000)

15.670764793s ago: executing program 1 (id=8488):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c000480380001800b00010064796e73657400002800028008000940000000020900010073797a300000000008000340000000000800044000"], 0xd8}}, 0x0)

15.611640168s ago: executing program 1 (id=8489):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x21, {{0x29, 0x0, 0x2000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000006}}}, 0x88)

15.611520607s ago: executing program 1 (id=8490):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090)

15.551321342s ago: executing program 1 (id=8491):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4)

2.988326094s ago: executing program 32 (id=8453):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000440)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x4, @f={0x8, 0x6, 0x2, 0x6, {0x4, 0xe, "c90e14cb62e92fba825ac2d2408fe32bcd06"}, 0x1}}, 0x1c)

2.975435614s ago: executing program 33 (id=8456):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req={0x2, 0xb, 0x187700, 0x4}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6c0800, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x1, 0x3}}, 0xe8)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x36, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20)
r8 = socket$inet6(0xa, 0x3, 0x81)
setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000001840)={0x3, {{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x106}}}, 0x88)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f00000001c0), 0x0}, 0x20)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

0s ago: executing program 34 (id=8491):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4)

kernel console output (not intermixed with test programs):

008.0002: item fetching failed at offset 1/2
[  187.625658][ T5278] hid-generic 0005:0007:0008.0002: probe with driver hid-generic failed with error -22
[  188.032920][T13713] netlink: 'syz.2.3308': attribute type 1 has an invalid length.
[  188.632941][T13713] 8021q: adding VLAN 0 to HW filter on device bond4
[  188.640806][T13716] bond4: (slave geneve3): making interface the new active one
[  188.644932][T13716] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  188.655125][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.669575][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.672523][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.675716][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.692640][T13716] syz.2.3308 (13716) used greatest stack depth: 16952 bytes left
[  188.722022][   T33] audit: type=1800 audit(1760677467.253:4): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3315" name=CB dev="tmpfs" ino=5855 res=0 errno=0
[  188.744116][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3314'.
[  189.069861][T13749] tipc: Cannot configure node identity twice
[  189.184714][T13753] wg1 speed is unknown, defaulting to 1000
[  189.188464][T13753] wlan1 speed is unknown, defaulting to 1000
[  189.373510][T13764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.376030][T13764] syzkaller0: entered promiscuous mode
[  189.378117][T13764] syzkaller0: entered allmulticast mode
[  189.389723][T13764] tipc: Resetting bearer <eth:syzkaller0>
[  189.393237][T13763] tipc: Resetting bearer <eth:syzkaller0>
[  189.410007][T13763] tipc: Disabling bearer <eth:syzkaller0>
[  189.548684][T13775] pim6reg1: entered promiscuous mode
[  189.556120][T13775] pim6reg1: entered allmulticast mode
[  189.797970][T13792] wg1 speed is unknown, defaulting to 1000
[  189.812163][T13796] gretap3: entered promiscuous mode
[  189.827977][T13792] wlan1 speed is unknown, defaulting to 1000
[  189.867359][T13793] netlink: 'syz.0.3343': attribute type 10 has an invalid length.
[  189.876769][T13793] veth1_vlan: entered allmulticast mode
[  190.049656][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3351'.
[  190.053615][T13811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3351'.
[  190.510293][T13846] netlink: 'syz.2.3367': attribute type 4 has an invalid length.
[  190.577662][ T5861] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.581322][ T5861] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.584855][ T5861] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.591973][T13853] netlink: 'syz.0.3372': attribute type 1 has an invalid length.
[  190.595036][T13853] netlink: 'syz.0.3372': attribute type 1 has an invalid length.
[  190.603464][ T5861] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.829233][T13869] nbd0: detected capacity change from 0 to 127
[  190.836544][   T56] block nbd0: Receive control failed (result -104)
[  191.068907][T13900] rdma_op ffff888173bfc1f0 conn xmit_rdma 0000000000000000
[  191.136444][T13910] netlink: 'syz.2.3397': attribute type 1 has an invalid length.
[  191.153184][T13912] netlink: 'syz.1.3399': attribute type 64 has an invalid length.
[  191.165169][T13914] netlink: 'syz.2.3400': attribute type 3 has an invalid length.
[  191.167847][T13914] netlink: 'syz.2.3400': attribute type 3 has an invalid length.
[  191.201436][T13918] delete_channel: no stack
[  191.668401][T13954] bond5: option downdelay: invalid value (18446744073709551615)
[  191.689353][T13954] bond5: option downdelay: allowed values 0 - 2147483647
[  191.701800][T13954] bond5 (unregistering): Released all slaves
[  192.020742][T13976] bridge7: entered promiscuous mode
[  192.022831][T13976] bridge7: entered allmulticast mode
[  192.024611][T13976] team0: Device bridge7 is of different type
[  192.200456][T13986] __nla_validate_parse: 4 callbacks suppressed
[  192.200467][T13986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3433'.
[  193.233024][T14009] No such timeout policy "syz0"
[  193.583101][T14038] syzkaller0: entered promiscuous mode
[  193.584869][T14038] syzkaller0: entered allmulticast mode
[  193.992945][ T5201] Bluetooth: hci1: link tx timeout
[  193.995592][ T5201] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.181466][T14082] wg1 speed is unknown, defaulting to 1000
[  194.185340][T14082] wlan1 speed is unknown, defaulting to 1000
[  194.193460][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[  194.202869][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[  194.205653][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[  194.208655][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[  194.214773][   T11] block nbd0: Dead connection, failed to find a fallback
[  194.217825][   T11] block nbd0: shutting down sockets
[  194.221103][   T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  194.225033][   T11] Buffer I/O error on dev nbd0, logical block 3, async page read
[  194.228296][   T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  194.232823][   T11] Buffer I/O error on dev nbd0, logical block 2, async page read
[  194.235860][   T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  194.241900][   T11] Buffer I/O error on dev nbd0, logical block 1, async page read
[  194.245177][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  194.248782][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[  194.253216][T12886] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  194.258150][T12886] Buffer I/O error on dev nbd0, logical block 0, async page read
[  194.268116][T12886] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  194.272477][T12886] Buffer I/O error on dev nbd0, logical block 1, async page read
[  194.276121][T12886] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  194.280961][T12886] Buffer I/O error on dev nbd0, logical block 2, async page read
[  194.284257][T12886] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  194.287931][T12886] Buffer I/O error on dev nbd0, logical block 3, async page read
[  194.292302][T12886] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  194.295991][T12886] Buffer I/O error on dev nbd0, logical block 0, async page read
[  194.299754][T12886] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  194.303516][T12886] Buffer I/O error on dev nbd0, logical block 1, async page read
[  194.310004][T12886] ldm_validate_partition_table(): Disk read failed.
[  194.323692][T12886] Dev nbd0: unable to read RDB block 0
[  194.327518][T12886]  nbd0: unable to read partition table
[  194.342624][T12886] ldm_validate_partition_table(): Disk read failed.
[  194.346787][T12886] Dev nbd0: unable to read RDB block 0
[  194.361482][T12886]  nbd0: unable to read partition table
[  194.523923][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  195.114856][T14107] xt_TCPMSS: Only works on TCP SYN packets
[  195.601846][T14148] netlink: 'syz.0.3503': attribute type 10 has an invalid length.
[  195.607296][T14148] netlink: 'syz.0.3503': attribute type 1 has an invalid length.
[  195.747353][T14167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.797401][T14172] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3514'.
[  195.952785][T14188] bridge1: entered allmulticast mode
[  195.962422][T14188] syzkaller1: entered promiscuous mode
[  195.964727][T14188] syzkaller1: entered allmulticast mode
[  196.029355][ T5858] Bluetooth: hci1: command 0x040f tx timeout
[  196.091047][T14185] bridge1: left allmulticast mode
[  196.245392][T14201] wg2: entered promiscuous mode
[  196.247108][T14201] wg2: entered allmulticast mode
[  196.484123][T14210] wg1 speed is unknown, defaulting to 1000
[  196.487693][T14210] wlan1 speed is unknown, defaulting to 1000
[  196.591489][T14218] netlink: 'syz.1.3532': attribute type 3 has an invalid length.
[  196.597868][T14218] syz_tun: entered allmulticast mode
[  196.694481][T14218] siw: device registration error -23
[  196.699329][T14222] syz_tun: left promiscuous mode
[  196.723014][T14222] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.737923][T14222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.747834][ T5278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  196.805696][T14217] syz_tun: left allmulticast mode
[  196.906056][T14231] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  197.105595][T14243] delete_channel: no stack
[  197.166619][T14247] xt_ecn: cannot match TCP bits for non-tcp packets
[  197.219785][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  197.609597][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  197.777485][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3564'.
[  198.341132][T14330] netlink: 'syz.0.3584': attribute type 1 has an invalid length.
[  198.343687][T14330] netlink: 'syz.0.3584': attribute type 1 has an invalid length.
[  198.369976][T14332] lo: entered allmulticast mode
[  198.371754][T14332] lo: left allmulticast mode
[  198.402748][T14334] No such timeout policy "syz1"
[  198.408306][T14334] openvswitch: netlink: nsh attr 0 has unexpected len 324 expected 0
[  198.411376][T14334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.669803][ T5861] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  198.673312][ T5861] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  198.979346][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  199.004112][T14356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.157977][T14400] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  200.187856][T14400] syzkaller0: entered promiscuous mode
[  200.189974][T14400] syzkaller0: entered allmulticast mode
[  200.218596][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3620'.
[  200.577094][T14416] netlink: 'syz.2.3625': attribute type 1 has an invalid length.
[  201.251399][T14416] 8021q: adding VLAN 0 to HW filter on device bond5
[  201.457579][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3631'.
[  201.629346][ T5858] Bluetooth: hci1: command 0x040f tx timeout
[  201.686744][T14434] wg1: entered promiscuous mode
[  201.688892][T14434] wg1: entered allmulticast mode
[  201.725508][ T5858] Bluetooth: hci2: command 0x0405 tx timeout
[  201.826368][T14444] netlink: 'syz.1.3636': attribute type 2 has an invalid length.
[  201.849472][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3636'.
[  201.925734][T14448] 8021q: adding VLAN 0 to HW filter on device bond6
[  201.970720][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  202.001215][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  202.960250][T14489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  202.989719][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  203.628549][T14542] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  203.670691][T14544] syzkaller1: entered promiscuous mode
[  203.672998][T14544] syzkaller1: entered allmulticast mode
[  203.888993][T14564] IPv6: Can't replace route, no match found
[  204.060318][T14571] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  204.066150][T14571] syzkaller0: entered promiscuous mode
[  204.068372][T14571] syzkaller0: entered allmulticast mode
[  204.265571][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3693'.
[  204.268519][T14578] netlink: 'syz.0.3693': attribute type 5 has an invalid length.
[  204.273471][T14578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3693'.
[  204.280314][T14578] geneve3: entered promiscuous mode
[  204.282137][T14578] geneve3: entered allmulticast mode
[  204.285769][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  204.291099][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  204.294577][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  204.298035][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  204.612886][T14594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3701'.
[  204.775362][T14600] SET target dimension over the limit!
[  204.878609][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3707'.
[  204.931865][T14611] Bluetooth: hci0: unsupported parameter 512
[  204.934369][T14611] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  205.937377][T14627] wg1 speed is unknown, defaulting to 1000
[  205.941141][T14627] wlan1 speed is unknown, defaulting to 1000
[  205.994223][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'.
[  206.134461][T14638] wg1 speed is unknown, defaulting to 1000
[  206.137261][T14638] wlan1 speed is unknown, defaulting to 1000
[  206.701994][T14671] netlink: 'syz.2.3733': attribute type 21 has an invalid length.
[  206.704956][T14671] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3733'.
[  206.707727][T14671] netlink: 'syz.2.3733': attribute type 4 has an invalid length.
[  206.727619][T14671] netlink: 'syz.2.3733': attribute type 3 has an invalid length.
[  206.737678][T14671] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3733'.
[  206.809939][T14679] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3738'.
[  206.813754][T14679] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3738'.
[  206.821050][T14679] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3738'.
[  206.853617][T14685] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  206.904028][T14692] IPVS: length: 4096 != 8
[  207.018268][T14704] Set syz1 is full, maxelem 65536 reached
[  207.024293][T14704] netlink: 'syz.0.3750': attribute type 13 has an invalid length.
[  207.172203][T14704] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.175267][T14704] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.293188][T14704] tipc: Resetting bearer <eth:veth1_to_bridge>
[  207.365810][T14704] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.389835][T14704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.478846][T14704] tipc: Resetting bearer <ib:hsr0>
[  207.482518][T14704] tipc: Resetting bearer <ib:hsr0>
[  207.743521][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.746643][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.749857][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  207.753966][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.760211][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.763560][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  207.766456][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.770679][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.773656][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  207.776610][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.779821][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.784049][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  209.274766][ T5687] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.278279][T14774] __nla_validate_parse: 5 callbacks suppressed
[  209.278294][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'.
[  209.283463][ T5687] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.285520][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'.
[  209.287028][ T5687] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.287045][ T5687] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.335071][T14778] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  209.351936][T14776] vlan5: entered promiscuous mode
[  209.354227][T14776] v: entered promiscuous mode
[  209.491759][T14791] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.3785'.
[  209.902149][T14827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3799'.
[  209.930054][T14827] sctp: [Deprecated]: syz.2.3799 (pid 14827) Use of int in max_burst socket option.
[  209.930054][T14827] Use struct sctp_assoc_value instead
[  210.069791][T14831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.072646][T14831] syzkaller0: entered promiscuous mode
[  210.074871][T14831] syzkaller0: entered allmulticast mode
[  210.097522][T14831] tipc: Resetting bearer <eth:syzkaller0>
[  210.103088][T14830] tipc: Resetting bearer <eth:syzkaller0>
[  210.118878][T14830] tipc: Disabling bearer <eth:syzkaller0>
[  211.029564][T14886] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3826'.
[  211.045507][T14886] batadv2: entered promiscuous mode
[  211.049768][T14886] batadv2: entered allmulticast mode
[  211.789275][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  212.834683][T14927] netlink: 'syz.2.3837': attribute type 11 has an invalid length.
[  212.837913][T14927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3837'.
[  213.191996][T14957] wg1 speed is unknown, defaulting to 1000
[  213.198630][T14957] wlan1 speed is unknown, defaulting to 1000
[  213.386473][T14962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3851'.
[  213.873640][T14976] wg1 speed is unknown, defaulting to 1000
[  213.876214][T14976] wlan1 speed is unknown, defaulting to 1000
[  214.664880][T15014] wg1 speed is unknown, defaulting to 1000
[  214.671858][T15014] wlan1 speed is unknown, defaulting to 1000
[  215.247550][T15019] syzkaller0: entered promiscuous mode
[  215.252732][T15019] syzkaller0: entered allmulticast mode
[  215.274866][T15019] syzkaller1: entered promiscuous mode
[  215.277245][T15019] syzkaller1: entered allmulticast mode
[  215.503025][T15033] netlink: 'syz.1.3877': attribute type 16 has an invalid length.
[  215.506053][T15033] netlink: 'syz.1.3877': attribute type 17 has an invalid length.
[  215.554677][T15034] IPv6: NLM_F_REPLACE set, but no existing node found!
[  215.736246][T15040] vxcan1: entered allmulticast mode
[  215.961635][ T5687] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.964594][ T5687] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.967335][ T5687] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.995787][T15052] syzkaller1: entered promiscuous mode
[  215.997658][T15052] syzkaller1: entered allmulticast mode
[  216.007171][ T5687] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.020347][T15058] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3883'.
[  216.402844][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3888'.
[  216.708136][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3894'.
[  216.752428][T15105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3901'.
[  216.858376][T15116] netlink: 'syz.1.3908': attribute type 3 has an invalid length.
[  217.045732][T15146] No such timeout policy "syz1"
[  217.249062][T15165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3929'.
[  217.332213][T15177] tap0: tun_chr_ioctl cmd 1074025677
[  217.334472][T15177] tap0: linktype set to 825
[  217.681633][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3959'.
[  217.692644][T15230] delete_channel: no stack
[  217.836608][T15253] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3970'.
[  217.974726][T15268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3977'.
[  218.012324][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3977'.
[  218.041494][T15273] nbd: couldn't find device at index 536870912
[  218.087979][T15275] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3980'.
[  218.404630][T15307] vti0: entered promiscuous mode
[  218.597399][ T5687] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  218.604268][ T5687] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  218.610758][ T5687] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  218.614287][ T5687] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  218.824990][T15343] netlink: 'syz.2.4012': attribute type 1 has an invalid length.
[  218.915404][T15349] netlink: 'syz.1.4015': attribute type 13 has an invalid length.
[  219.344810][T15371] wg1 speed is unknown, defaulting to 1000
[  219.348599][T15371] wlan1 speed is unknown, defaulting to 1000
[  220.236230][T15411] netlink: 'syz.0.4042': attribute type 30 has an invalid length.
[  220.264763][T15413] sctp: [Deprecated]: syz.0.4043 (pid 15413) Use of struct sctp_assoc_value in delayed_ack socket option.
[  220.264763][T15413] Use struct sctp_sack_info instead
[  220.308863][T15415] netlink: 'syz.1.4044': attribute type 16 has an invalid length.
[  220.375741][T15417] xt_TCPMSS: Only works on TCP SYN packets
[  220.566775][T15438] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  220.742241][T15453] netem: change failed
[  220.816780][T15465] netlink: 'syz.1.4067': attribute type 1 has an invalid length.
[  222.217397][T15531] __nla_validate_parse: 14 callbacks suppressed
[  222.217414][T15531] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4096'.
[  222.394996][T15544] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4103'.
[  222.397651][T15544] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4103'.
[  222.403064][T15544] netlink: 'syz.2.4103': attribute type 5 has an invalid length.
[  222.405393][T15544] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4103'.
[  222.556273][T15561] Bluetooth: hci0: unsupported parameter 512
[  222.562609][T15561] Bluetooth: hci0: invalid length 11, exp 2 for type 19
[  223.286394][T15616] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.297518][T15616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  223.383702][T15623] syzkaller0: entered promiscuous mode
[  223.385693][T15623] syzkaller0: entered allmulticast mode
[  223.632055][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4139'.
[  223.754768][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4140'.
[  223.895660][T15652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4147'.
[  223.898646][T15652] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4147'.
[  224.031970][T15662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4150'.
[  224.214674][T15670] wg1 speed is unknown, defaulting to 1000
[  224.218031][T15670] wlan1 speed is unknown, defaulting to 1000
[  224.251357][T15675] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  224.445764][T15683] netlink: 'syz.2.4159': attribute type 2 has an invalid length.
[  224.450300][T15683] netlink: 'syz.2.4159': attribute type 3 has an invalid length.
[  224.452225][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4160'.
[  224.458295][T15685] netlink: 'syz.0.4160': attribute type 18 has an invalid length.
[  224.464574][T15685] netlink: 'syz.0.4160': attribute type 20 has an invalid length.
[  224.669915][ T5858] Bluetooth: hci1: command 0x040f tx timeout
[  226.045942][T15807] netlink: 'syz.2.4214': attribute type 1 has an invalid length.
[  226.134611][T15816] xt_connbytes: Forcing CT accounting to be enabled
[  226.137499][T15816] xt_CT: You must specify a L4 protocol and not use inversions on it
[  226.317652][T15833] netlink: 'syz.2.4226': attribute type 1 has an invalid length.
[  226.322041][T15833] netlink: 'syz.2.4226': attribute type 2 has an invalid length.
[  226.514321][T15854] netlink: 'syz.0.4235': attribute type 1 has an invalid length.
[  226.571785][T15862] wg1 speed is unknown, defaulting to 1000
[  226.579021][T15862] wlan1 speed is unknown, defaulting to 1000
[  226.750153][T15875] smc: net device ip_vti0 applied user defined pnetid SYZ0
[  226.936995][T15887] netlink: 'syz.0.4244': attribute type 13 has an invalid length.
[  227.489461][T15921] ieee802154 phy1 wpan1: encryption failed: -22
[  227.668904][T15929] __nla_validate_parse: 7 callbacks suppressed
[  227.668923][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4265'.
[  228.212604][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4274'.
[  228.312864][T15967] bond0: Caught tx_queue_len zero misconfig
[  228.372286][T15970] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  228.376684][T15970] syzkaller0: entered promiscuous mode
[  228.378859][T15970] syzkaller0: entered allmulticast mode
[  228.387400][T15971] syzkaller1: entered promiscuous mode
[  228.393804][T15971] syzkaller1: entered allmulticast mode
[  228.404242][T15970] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4280'.
[  228.497623][T15975] wg1 speed is unknown, defaulting to 1000
[  228.504142][T15975] wlan1 speed is unknown, defaulting to 1000
[  228.603660][ T5861] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  228.608847][ T5861] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  228.621420][ T5861] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  228.624212][ T5861] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  228.744149][T15989] bond0: (slave gre0): Error: Device type is different from other slaves
[  228.751406][T15989] netlink: 'syz.0.4285': attribute type 39 has an invalid length.
[  229.511871][T16046] ip6tnl5: entered promiscuous mode
[  229.777568][T16073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4321'.
[  229.837120][T16080] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4324'.
[  229.942849][T16088] wg1 speed is unknown, defaulting to 1000
[  229.946606][T16088] wlan1 speed is unknown, defaulting to 1000
[  230.047724][T16102] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4334'.
[  230.231637][T16109] tipc: New replicast peer: 255.255.255.255
[  230.234831][T16109] tipc: Enabled bearer <udp:syz2>, priority 10
[  230.774681][T16156] netlink: 'syz.0.4357': attribute type 6 has an invalid length.
[  230.813611][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4358'.
[  230.896920][T16172] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4366'.
[  230.901924][T16174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4365'.
[  230.939221][T16176] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  230.939787][T16174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4365'.
[  230.959966][ T2205] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.029556][ T2205] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.143136][T16194] netlink: 'syz.1.4376': attribute type 1 has an invalid length.
[  231.146351][T16194] netlink: 'syz.1.4376': attribute type 1 has an invalid length.
[  231.308755][T16215] netlink: 'syz.1.4386': attribute type 1 has an invalid length.
[  231.349277][T14717] tipc: Node number set to 4235887229
[  231.515589][T16224] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.519832][T16224] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  232.339773][T16268] netlink: 'syz.2.4410': attribute type 9 has an invalid length.
[  232.773212][T16297] __nla_validate_parse: 6 callbacks suppressed
[  232.773228][T16297] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4420'.
[  232.901668][T16308] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4423'.
[  233.003603][T16316] team_slave_1: Caught tx_queue_len zero misconfig
[  233.365664][T16343] syz.0.4435 uses old SIOCAX25GETINFO
[  233.473760][T16351] Bluetooth: hci0: unsupported parameter 512
[  233.476157][T16351] Bluetooth: hci0: invalid length 0, exp 2 for type 27
[  233.505102][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4441'.
[  233.514152][T16356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4441'.
[  233.629726][T16365] pimreg: entered allmulticast mode
[  233.632998][T16365] pimreg: left allmulticast mode
[  233.722313][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4447'.
[  233.788598][T16371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4447'.
[  234.101632][T16395] wg1 speed is unknown, defaulting to 1000
[  234.105416][T16395] wlan1 speed is unknown, defaulting to 1000
[  234.536780][T16418] openvswitch: netlink: Message has 4 unknown bytes.
[  234.637061][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4471'.
[  234.768193][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4474'.
[  234.771479][T16432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4474'.
[  235.120338][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4490'.
[  235.245125][T16476] bridge_slave_1: left allmulticast mode
[  235.247456][T16476] bridge_slave_1: left promiscuous mode
[  235.262554][T16483] netlink: 'syz.1.4498': attribute type 1 has an invalid length.
[  235.263714][T16476] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.281241][T16476] bridge_slave_0: left allmulticast mode
[  235.289439][T16476] bridge_slave_0: left promiscuous mode
[  235.291906][T16476] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.473888][T16483] 8021q: adding VLAN 0 to HW filter on device bond7
[  235.497481][T16486] veth7: entered promiscuous mode
[  235.509917][T16486] bond7: (slave veth7): Enslaving as an active interface with an up link
[  236.475269][T16527] netlink: 'syz.2.4515': attribute type 1 has an invalid length.
[  236.517261][T16527] bond7: (slave bridge9): making interface the new active one
[  236.524465][T16527] bond7: (slave bridge9): Enslaving as an active interface with an up link
[  236.572614][T16536] lo: Caught tx_queue_len zero misconfig
[  236.670028][T16545] SET target dimension over the limit!
[  236.842197][T16563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.845585][T16563] syzkaller0: entered promiscuous mode
[  236.847839][T16563] syzkaller0: entered allmulticast mode
[  236.869632][T16563] tipc: Resetting bearer <eth:syzkaller0>
[  236.879769][T16562] tipc: Resetting bearer <eth:syzkaller0>
[  236.896251][T16562] tipc: Disabling bearer <eth:syzkaller0>
[  236.946912][T16572] netlink: 'syz.2.4534': attribute type 2 has an invalid length.
[  236.950825][T16572] netlink: 'syz.2.4534': attribute type 1 has an invalid length.
[  237.104813][T16587] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  237.144912][T16587] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  237.197412][T16587] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  237.234846][T16599] x_tables: duplicate entry at hook 2
[  237.248598][T16587] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  237.311727][ T5861] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  237.315306][T16602] netlink: 'syz.2.4546': attribute type 3 has an invalid length.
[  237.325337][ T5861] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  237.336941][ T5861] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  237.351061][ T5861] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  238.029261][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  238.367909][T16650] bridge8: the hash_elasticity option has been deprecated and is always 16
[  238.373727][T16650] bridge8: entered allmulticast mode
[  238.484070][T16664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.486613][T16664] syzkaller0: entered promiscuous mode
[  238.488455][T16664] syzkaller0: entered allmulticast mode
[  238.494941][T16664] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  238.510604][T16664] tipc: Resetting bearer <eth:syzkaller0>
[  238.516812][T16663] tipc: Resetting bearer <eth:syzkaller0>
[  238.540124][T16663] tipc: Disabling bearer <eth:syzkaller0>
[  238.748671][T16687] __nla_validate_parse: 6 callbacks suppressed
[  238.748688][T16687] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4586'.
[  238.806658][T16693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4589'.
[  238.852430][T16697] bond7: invalid ARP target 0.0.0.0 specified for addition
[  238.855298][T16697] bond7: option arp_ip_target: invalid value (0)
[  238.861199][T16697] bond7 (unregistering): Released all slaves
[  238.960595][T16705] netlink: 'syz.0.4594': attribute type 15 has an invalid length.
[  238.963875][T16705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4594'.
[  239.161215][T16722] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4602'.
[  239.302141][T16744] tunl0: Caught tx_queue_len zero misconfig
[  239.357845][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4611'.
[  239.572334][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4624'.
[  239.576001][T16770] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4624'.
[  239.865333][T16795] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4632'.
[  240.038801][T16809] xfrm0: Caught tx_queue_len zero misconfig
[  240.101778][T16814] syzkaller1: entered promiscuous mode
[  240.104604][T16814] syzkaller1: entered allmulticast mode
[  240.301190][T16828] IPv6: NLM_F_REPLACE set, but no existing node found!
[  240.647349][T16864] wg1 speed is unknown, defaulting to 1000
[  240.650784][T16864] wlan1 speed is unknown, defaulting to 1000
[  240.690114][T16870] geneve5: entered promiscuous mode
[  240.693486][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  240.696443][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  240.703570][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  240.706915][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  240.718128][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4660'.
[  240.854798][T16881] netlink: 'syz.1.4663': attribute type 1 has an invalid length.
[  240.857797][T16881] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4663'.
[  241.058093][T16898] netlink: 'syz.1.4669': attribute type 1 has an invalid length.
[  241.430286][T16929] netlink: 'syz.0.4680': attribute type 12 has an invalid length.
[  241.685136][T16946] wg1 speed is unknown, defaulting to 1000
[  241.687887][T16946] wlan1 speed is unknown, defaulting to 1000
[  241.831858][T16952] netlink: 'syz.2.4692': attribute type 1 has an invalid length.
[  241.858086][T16955] netlink: 'syz.2.4693': attribute type 2 has an invalid length.
[  242.093750][T16969] xt_connbytes: Forcing CT accounting to be enabled
[  242.225550][T16981] wg1: left allmulticast mode
[  242.328007][T16995] netlink: 'syz.0.4712': attribute type 1 has an invalid length.
[  242.348595][T16995] 8021q: adding VLAN 0 to HW filter on device bond7
[  242.367766][T16995] bond7: (slave ip6gretap1): making interface the new active one
[  242.373066][T16995] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[  242.386353][T16995] erspan0: entered allmulticast mode
[  242.404065][T16995] bond7: (slave erspan0): Enslaving as an active interface with an up link
[  242.413674][T16995] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  243.025872][T17060] netlink: 'syz.2.4743': attribute type 4 has an invalid length.
[  243.040853][T17060] netlink: 'syz.2.4743': attribute type 4 has an invalid length.
[  243.838572][T17103] tls_set_device_offload_rx: netdev not found
[  243.910340][T17109] sctp: [Deprecated]: syz.0.4765 (pid 17109) Use of struct sctp_assoc_value in delayed_ack socket option.
[  243.910340][T17109] Use struct sctp_sack_info instead
[  243.940586][T17111] netlink: 'syz.0.4766': attribute type 3 has an invalid length.
[  244.495721][T17153] __nla_validate_parse: 22 callbacks suppressed
[  244.495731][T17153] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4782'.
[  244.654719][T17159] netlink: 'syz.0.4785': attribute type 12 has an invalid length.
[  244.805784][T17136] netlink: 'syz.1.4774': attribute type 1 has an invalid length.
[  244.920808][T17168] netlink: 'syz.2.4789': attribute type 29 has an invalid length.
[  244.925157][T17168] netlink: 'syz.2.4789': attribute type 29 has an invalid length.
[  245.173116][T17178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4793'.
[  245.212687][T17180] syzkaller0: entered promiscuous mode
[  245.214927][T17180] syzkaller0: entered allmulticast mode
[  245.587644][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4807'.
[  246.436144][T17251] IPv6: sit4: Disabled Multicast RS
[  247.964626][T17278] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  247.982160][T17280] netlink: 'syz.0.4836': attribute type 16 has an invalid length.
[  247.985319][T17280] netlink: 'syz.0.4836': attribute type 17 has an invalid length.
[  248.364963][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4841'.
[  248.522920][T17306] netlink: 'syz.1.4847': attribute type 1 has an invalid length.
[  248.525481][T17306] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4847'.
[  249.342591][T17374] IPv6: NLM_F_CREATE should be specified when creating new route
[  249.370194][T17379] netlink: 'syz.1.4881': attribute type 1 has an invalid length.
[  249.506767][T17391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.509674][T17391] syzkaller0: entered promiscuous mode
[  249.511926][T17391] syzkaller0: entered allmulticast mode
[  249.536077][T17391] tipc: Resetting bearer <eth:syzkaller0>
[  249.538999][T17390] tipc: Resetting bearer <eth:syzkaller0>
[  249.559772][T17390] tipc: Disabling bearer <eth:syzkaller0>
[  249.585752][T17399] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4888'.
[  249.589884][T17396] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4888'.
[  249.738972][T17417] netlink: 'syz.1.4898': attribute type 1 has an invalid length.
[  249.743993][T17417] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4898'.
[  249.922287][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4908'.
[  250.034738][T17440] netlink: 'syz.0.4909': attribute type 11 has an invalid length.
[  250.099701][T17444] ieee802154 phy1 wpan1: encryption failed: -90
[  250.465014][T17464] macsec1: entered promiscuous mode
[  250.467312][T17464] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  250.472578][T17464] macsec1: entered allmulticast mode
[  250.474793][T17464] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  250.663502][T17478] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  250.666887][T17478] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  250.984501][T17519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4946'.
[  250.987395][T17519] netlink: 'syz.1.4946': attribute type 1 has an invalid length.
[  250.990712][T17519] netlink: 'syz.1.4946': attribute type 2 has an invalid length.
[  251.150830][T17526] wg1 speed is unknown, defaulting to 1000
[  251.158515][T17526] wlan1 speed is unknown, defaulting to 1000
[  251.720841][T17569] SET target dimension over the limit!
[  251.745640][T17572] batadv_slave_1: entered promiscuous mode
[  251.748964][T17570] batadv_slave_1: left promiscuous mode
[  251.779452][T17575] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4966'.
[  251.796010][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'.
[  251.923449][T17597] netlink: 'syz.1.4977': attribute type 10 has an invalid length.
[  251.968710][T17594] wg1 speed is unknown, defaulting to 1000
[  251.974560][T17594] wlan1 speed is unknown, defaulting to 1000
[  252.856566][T17635] syzkaller1: tun_chr_ioctl cmd 1074025677
[  252.864082][T17635] syzkaller1: linktype set to 823
[  252.925955][T17641] nftables ruleset with unbound set
[  253.135498][T17660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5004'.
[  253.406021][T17682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5014'.
[  253.809105][T17715] : renamed from batadv_slave_1
[  253.934601][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5037'.
[  253.947174][T17733] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  254.094745][T17753] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  254.098017][T17753] syzkaller0: entered promiscuous mode
[  254.101175][T17753] syzkaller0: entered allmulticast mode
[  254.200894][T17761] syzkaller1: entered promiscuous mode
[  254.202797][T17761] syzkaller1: entered allmulticast mode
[  254.696192][T17801] syzkaller0: entered promiscuous mode
[  254.698330][T17801] syzkaller0: entered allmulticast mode
[  255.952232][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  256.246498][T17848] __nla_validate_parse: 2 callbacks suppressed
[  256.246512][T17848] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5091'.
[  256.254353][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5091'.
[  256.655032][T17873] netlink: 'syz.2.5103': attribute type 11 has an invalid length.
[  256.658166][T17873] netlink: 'syz.2.5103': attribute type 11 has an invalid length.
[  256.661345][T17873] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5103'.
[  256.731177][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5105'.
[  256.779852][T17881] openvswitch: netlink: IP tunnel dst address not specified
[  256.900411][T17889] tipc: Enabling of bearer <ib:caif0> rejected, max 3 bearers permitted
[  257.177291][   T56] block nbd1: Receive control failed (result -32)
[  257.181314][T17854] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  257.184769][T17910] wg1 speed is unknown, defaulting to 1000
[  257.187447][T17910] wlan1 speed is unknown, defaulting to 1000
[  257.385238][T17923] netlink: 428 bytes leftover after parsing attributes in process `syz.0.5124'.
[  257.388296][T17923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5124'.
[  257.422776][T17928] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5122'.
[  258.251729][T17955] wg1 speed is unknown, defaulting to 1000
[  258.254447][T17955] wlan1 speed is unknown, defaulting to 1000
[  258.763852][T17974] wg1 speed is unknown, defaulting to 1000
[  258.768684][T17974] wlan1 speed is unknown, defaulting to 1000
[  258.792233][T17976] netlink: 'syz.2.5144': attribute type 4 has an invalid length.
[  258.795576][T17976] netlink: 'syz.2.5144': attribute type 1 has an invalid length.
[  258.798899][T17976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5144'.
[  259.044016][T17979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5145'.
[  259.054151][T17979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5145'.
[  259.634539][T18020] x9: renamed from bridge_slave_0
[  260.514483][T18079] netlink: 'syz.1.5193': attribute type 1 has an invalid length.
[  260.518100][T18079] netlink: 'syz.1.5193': attribute type 1 has an invalid length.
[  261.318648][T18110] __nla_validate_parse: 7 callbacks suppressed
[  261.318693][T18110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5207'.
[  261.457399][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5215'.
[  261.488527][T18128] netlink: 'syz.0.5216': attribute type 4 has an invalid length.
[  261.496642][T18132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5218'.
[  261.652330][T18148] geneve4: entered promiscuous mode
[  261.673285][T18149] tap0: tun_chr_ioctl cmd 1074025681
[  261.791435][T18157] ip6t_srh: unknown srh invflags 4000
[  261.855465][T18165] netlink: 'syz.2.5234': attribute type 3 has an invalid length.
[  261.858146][T18165] netlink: 'syz.2.5234': attribute type 1 has an invalid length.
[  261.864411][T18165] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5234'.
[  261.868746][T18165] NCSI netlink: No device for ifindex 0
[  261.913686][T18171] bridge0: port 1(veth0_to_bridge) entered blocking state
[  261.916280][T18171] bridge0: port 1(veth0_to_bridge) entered disabled state
[  261.920141][T18171] veth0_to_bridge: entered allmulticast mode
[  261.923572][T18171] veth0_to_bridge: entered promiscuous mode
[  262.057927][T18185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5244'.
[  262.158131][T18193] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5248'.
[  262.163561][T18193] block nbd0: reconnected socket
[  262.165990][   T56] block nbd0: Receive control failed (result -32)
[  262.188871][T18197] pim6reg1: entered promiscuous mode
[  262.193965][T18197] pim6reg1: entered allmulticast mode
[  263.350704][T18238] syzkaller0: entered promiscuous mode
[  263.353011][T18238] syzkaller0: entered allmulticast mode
[  263.608825][T18259] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  263.836034][T18283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5287'.
[  263.841859][T18283] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5287'.
[  263.887062][T18291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'.
[  263.969197][T18306] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  264.055049][T18313] openvswitch: netlink: Key type 31 is not supported
[  264.235515][T18334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5309'.
[  264.278229][T18330] wg1 speed is unknown, defaulting to 1000
[  264.283328][T18330] wlan1 speed is unknown, defaulting to 1000
[  264.970642][T18351] wg1 speed is unknown, defaulting to 1000
[  264.973230][T18351] wlan1 speed is unknown, defaulting to 1000
[  264.996248][T18354] netlink: del zone limit has 8 unknown bytes
[  265.004791][T18354] pim6reg1: entered promiscuous mode
[  265.006568][T18354] pim6reg1: entered allmulticast mode
[  265.513071][T18383] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  265.618170][T18396] bridge1: entered allmulticast mode
[  265.623842][T18397] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  265.746256][T18394] bridge1: left allmulticast mode
[  265.948485][T18436] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  265.978307][T18435] wg1 speed is unknown, defaulting to 1000
[  265.988283][T18435] wlan1 speed is unknown, defaulting to 1000
[  266.007872][T18438] delete_channel: no stack
[  266.312980][T18467] netlink: 'syz.1.5366': attribute type 21 has an invalid length.
[  266.321002][T18467] __nla_validate_parse: 3 callbacks suppressed
[  266.321017][T18467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5366'.
[  266.521191][T18480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5372'.
[  266.526815][T18480] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  266.531582][T18480] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  266.572909][T18482] Bluetooth: hci0: invalid length 0, exp 2 for type 20
[  267.524426][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5400'.
[  267.544141][T18550] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  267.675851][T18565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.684766][T18565] syzkaller0: entered promiscuous mode
[  267.686638][T18565] syzkaller0: entered allmulticast mode
[  267.702821][T18565] tipc: Resetting bearer <eth:syzkaller0>
[  267.707170][T18563] tipc: Resetting bearer <eth:syzkaller0>
[  267.734786][T18563] tipc: Disabling bearer <eth:syzkaller0>
[  267.786491][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  267.852989][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5414'.
[  268.111948][T18584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.447866][T18597] netlink: 'syz.0.5423': attribute type 1 has an invalid length.
[  268.451157][T18597] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5423'.
[  268.632599][T18602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5425'.
[  268.646935][T18602] bridge0: entered allmulticast mode
[  268.653446][T18602] veth0_to_bridge: left allmulticast mode
[  268.655783][T18602] veth0_to_bridge: left promiscuous mode
[  268.659839][T18602] bridge0: port 1(veth0_to_bridge) entered disabled state
[  268.710384][T18606] ieee802154 phy1 wpan1: encryption failed: -90
[  268.878860][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5435'.
[  268.928076][T18630] netlink: 'syz.1.5437': attribute type 3 has an invalid length.
[  268.938451][T18630] netlink: 'syz.1.5437': attribute type 29 has an invalid length.
[  268.968323][T18634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5439'.
[  268.994755][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5440'.
[  269.040752][T18640] tipc: Resetting bearer <eth:veth1_to_bridge>
[  269.145897][T18649] wg1 speed is unknown, defaulting to 1000
[  269.150144][T18649] wlan1 speed is unknown, defaulting to 1000
[  269.281512][T18657] SET target dimension over the limit!
[  269.357445][T18649] netlink: 'syz.1.5447': attribute type 4 has an invalid length.
[  269.363478][T18649] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5447'.
[  269.383253][T18663] syzkaller0: entered promiscuous mode
[  269.385060][T18663] syzkaller0: entered allmulticast mode
[  270.093425][T18680] netlink: 'syz.2.5458': attribute type 25 has an invalid length.
[  270.951858][T18699] wg1 speed is unknown, defaulting to 1000
[  270.962377][T18699] wlan1 speed is unknown, defaulting to 1000
[  271.498842][T18733] __nla_validate_parse: 7 callbacks suppressed
[  271.498858][T18733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5483'.
[  271.622258][T18741] pimreg: entered allmulticast mode
[  271.729452][T18742] nbd2: detected capacity change from 0 to 127
[  272.035695][T18778] siw: device registration error -23
[  272.041949][T18778] wg1 speed is unknown, defaulting to 1000
[  272.329530][   T56] block nbd2: Receive control failed (result -104)
[  272.409011][T18798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5508'.
[  272.448092][T18802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.453241][T18802] syzkaller0: entered promiscuous mode
[  272.455204][T18802] syzkaller0: entered allmulticast mode
[  272.471271][T18802] tipc: Resetting bearer <eth:syzkaller0>
[  272.475065][T18800] tipc: Resetting bearer <eth:syzkaller0>
[  272.496709][T18800] tipc: Disabling bearer <eth:syzkaller0>
[  272.556394][T18808] netlink: 'syz.0.5513': attribute type 28 has an invalid length.
[  272.720188][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5519'.
[  272.773002][T18829] netlink: 'syz.2.5522': attribute type 4 has an invalid length.
[  273.054660][T18858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5535'.
[  273.496872][T18896] netlink: 'syz.2.5553': attribute type 4 has an invalid length.
[  273.734299][T18910] tipc: Failed to remove unknown binding: 66,1,1/4235887229:3268923009/3268923011
[  273.738119][T18910] tipc: Failed to remove unknown binding: 66,1,1/4235887229:3268923009/3268923011
[  273.742545][T18910] tipc: Failed to remove unknown binding: 66,1,1/4235887229:3268923009/3268923011
[  273.937422][T18921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5565'.
[  274.102357][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5567'.
[  274.118938][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5567'.
[  274.701832][T18944] wg1 speed is unknown, defaulting to 1000
[  274.704797][T18944] wlan1 speed is unknown, defaulting to 1000
[  274.770687][ T5861] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  274.773604][ T5861] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  274.777045][ T5861] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  274.785019][ T5861] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  274.798503][T18952] syzkaller1: entered promiscuous mode
[  274.808043][T18952] syzkaller1: entered allmulticast mode
[  275.090205][   T11] block nbd2: Connection timed out, retrying (0/1 alive)
[  275.092886][   T11] block nbd2: Connection timed out, retrying (0/1 alive)
[  275.095097][   T11] block nbd2: Connection timed out, retrying (0/1 alive)
[  275.097284][   T11] block nbd2: Connection timed out, retrying (0/1 alive)
[  275.099800][   T11] block nbd2: Dead connection, failed to find a fallback
[  275.101960][   T11] block nbd2: shutting down sockets
[  275.103986][   T11] blk_print_req_error: 138 callbacks suppressed
[  275.103996][   T11] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.109190][   T11] buffer_io_error: 138 callbacks suppressed
[  275.109200][   T11] Buffer I/O error on dev nbd2, logical block 3, async page read
[  275.114560][   T11] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.118178][   T11] Buffer I/O error on dev nbd2, logical block 2, async page read
[  275.121391][   T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.124231][   T11] Buffer I/O error on dev nbd2, logical block 1, async page read
[  275.126613][   T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.129812][   T11] Buffer I/O error on dev nbd2, logical block 0, async page read
[  275.132334][T18348] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.135137][T18348] Buffer I/O error on dev nbd2, logical block 0, async page read
[  275.137660][T18348] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.147045][T18348] Buffer I/O error on dev nbd2, logical block 1, async page read
[  275.166664][T18348] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.169996][T18348] Buffer I/O error on dev nbd2, logical block 2, async page read
[  275.172500][T18348] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.175246][T18348] Buffer I/O error on dev nbd2, logical block 3, async page read
[  275.183282][T18348] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.186167][T18348] Buffer I/O error on dev nbd2, logical block 0, async page read
[  275.188630][T18348] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.191680][T18348] Buffer I/O error on dev nbd2, logical block 1, async page read
[  275.195317][T18348] ldm_validate_partition_table(): Disk read failed.
[  275.198133][T18348] Dev nbd2: unable to read RDB block 0
[  275.205471][T18348]  nbd2: unable to read partition table
[  275.212468][T18348] ldm_validate_partition_table(): Disk read failed.
[  275.215285][T18348] Dev nbd2: unable to read RDB block 0
[  275.217808][T18348]  nbd2: unable to read partition table
[  275.257817][T18959] sch_tbf: burst 2 is lower than device lo mtu (14) !
[  275.280402][T18959] sch_tbf: burst 2 is lower than device lo mtu (14) !
[  275.284064][T18959] sch_tbf: burst 2 is lower than device lo mtu (14) !
[  275.438196][T18971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.444295][T18971] syzkaller0: entered promiscuous mode
[  275.446074][T18971] syzkaller0: entered allmulticast mode
[  275.460272][T18971] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  275.472101][T18971] tipc: Resetting bearer <eth:syzkaller0>
[  275.478995][T18970] tipc: Resetting bearer <eth:syzkaller0>
[  275.497383][T18970] tipc: Disabling bearer <eth:syzkaller0>
[  275.513174][T18979] IPv6: sit4: Disabled Multicast RS
[  275.515365][T18979] sit4: entered allmulticast mode
[  275.573524][   T33] audit: type=1800 audit(1760677554.103:5): pid=18981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5593" name="memory.events" dev="tmpfs" ino=10050 res=0 errno=0
[  275.587156][   T33] audit: type=1804 audit(1760677554.123:6): pid=18981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5593" name="/newroot/1989/memory.events" dev="tmpfs" ino=10050 res=1 errno=0
[  275.601340][T18985] xt_bpf: check failed: parse error
[  275.666774][T18995] netlink: 'syz.2.5598': attribute type 1 has an invalid length.
[  275.707041][T18995] bond8: (slave veth15): Enslaving as an active interface with a down link
[  275.721745][T18995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5598'.
[  275.726344][T18995] 8021q: adding VLAN 0 to HW filter on device bond8
[  275.843385][T19012] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  276.020896][T19020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5609'.
[  276.112502][T19026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5612'.
[  276.239670][ T5687] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  276.242295][ T5687] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  276.244901][ T5687] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  276.247946][ T5687] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  276.254560][ T5687] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  276.264915][ T5687] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  276.267608][ T5687] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  276.271539][ T5687] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  276.343017][T19047] netlink: 'syz.1.5621': attribute type 21 has an invalid length.
[  276.505242][T19071] netlink: 'syz.0.5634': attribute type 5 has an invalid length.
[  276.507993][T19071] __nla_validate_parse: 3 callbacks suppressed
[  276.508001][T19071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5634'.
[  276.523159][T19075] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  276.555903][T19078] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.5637'.
[  276.669069][T19087] block nbd3: Unsupported socket: should be TCP or UNIX.
[  276.714253][T19095] netlink: 'syz.2.5643': attribute type 3 has an invalid length.
[  276.896151][T19117] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.5655'.
[  276.902270][T19119] netlink: 'syz.2.5657': attribute type 1 has an invalid length.
[  276.926573][T19119] 8021q: adding VLAN 0 to HW filter on device bond9
[  276.961694][T19119] bond9: (slave veth17): Enslaving as an active interface with a down link
[  276.974177][T19119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.976950][T19119] bond9: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  277.096216][T19135] syzkaller1: entered promiscuous mode
[  277.098080][T19135] syzkaller1: entered allmulticast mode
[  277.278367][T19149] netlink: 'syz.1.5670': attribute type 9 has an invalid length.
[  278.063336][T19156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5672'.
[  278.173632][T19172] ieee802154 phy1 wpan1: encryption failed: -90
[  278.211277][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5682'.
[  278.289051][T19182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5684'.
[  278.322272][T19182] netlink: 'syz.2.5684': attribute type 20 has an invalid length.
[  278.324924][T19182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5684'.
[  278.327690][T19182] netlink: 'syz.2.5684': attribute type 20 has an invalid length.
[  278.975933][T19211] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5695'.
[  279.378945][T19233] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5705'.
[  279.628532][T19251] netlink: 'syz.1.5715': attribute type 4 has an invalid length.
[  279.632168][T19251] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5715'.
[  280.860650][T19355] netlink: 'syz.0.5756': attribute type 12 has an invalid length.
[  281.081848][T19376] netlink: 'syz.0.5765': attribute type 1 has an invalid length.
[  281.084976][T19376] netlink: 'syz.0.5765': attribute type 3 has an invalid length.
[  281.598867][T19403] xt_cgroup: path and classid specified
[  281.780464][T19411] __nla_validate_parse: 8 callbacks suppressed
[  281.780480][T19411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5781'.
[  281.866550][T19420] netlink: 'syz.2.5785': attribute type 46 has an invalid length.
[  282.028136][T19443] netlink: 'syz.0.5796': attribute type 39 has an invalid length.
[  282.271371][T19468] rdma_rxe: rxe_newlink: failed to add lo
[  282.393346][T19479] bond8: option fail_over_mac: invalid value (253)
[  282.396528][T19479] bond8 (unregistering): Released all slaves
[  282.413854][T19484] netlink: 'syz.0.5815': attribute type 1 has an invalid length.
[  282.416427][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5815'.
[  282.515161][T19492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5819'.
[  282.518127][T19492] netlink: 'syz.0.5819': attribute type 1 has an invalid length.
[  282.526004][T19492] vlan2: left promiscuous mode
[  282.527763][T19492] geneve3: left promiscuous mode
[  282.529773][T19492] macsec1: left promiscuous mode
[  282.531509][T19492] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  283.697557][T19528] validate_nla: 2 callbacks suppressed
[  283.697574][T19528] netlink: 'syz.2.5836': attribute type 74 has an invalid length.
[  283.861972][T19543] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  283.923155][T19548] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5845'.
[  283.935218][T19549] vlan0: entered allmulticast mode
[  283.937251][T19549] bridge_slave_0: entered allmulticast mode
[  285.007890][T19582] wg1 speed is unknown, defaulting to 1000
[  285.014078][T19582] wlan1 speed is unknown, defaulting to 1000
[  285.606023][T19617] veth1_vlan: default FDB implementation only supports local addresses
[  285.841988][T19634] netlink: 'syz.1.5883': attribute type 1 has an invalid length.
[  285.844370][T19634] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5883'.
[  285.972216][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5891'.
[  285.975370][T19652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5891'.
[  285.978734][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5891'.
[  285.982847][T19648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5890'.
[  286.013155][T19656] !: renamed from dummy0
[  286.124312][T19662] pim6reg: entered allmulticast mode
[  286.127732][T19662] pim6reg: left allmulticast mode
[  286.412676][T19677] syzkaller1: entered promiscuous mode
[  286.414827][T19677] syzkaller1: entered allmulticast mode
[  286.418128][T19677] nbd: nbd1 already in use
[  286.424654][T19677] block nbd1: NBD_DISCONNECT
[  286.426563][T19677] block nbd1: Send disconnect failed -32
[  286.440824][T19677] block nbd1: shutting down sockets
[  286.555907][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5907'.
[  286.665298][T19708] netlink: 'syz.0.5916': attribute type 2 has an invalid length.
[  286.823900][T19728] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  286.832294][T19728] syzkaller0: entered promiscuous mode
[  286.834144][T19728] syzkaller0: entered allmulticast mode
[  286.868662][T19734] __nla_validate_parse: 2 callbacks suppressed
[  286.868676][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5929'.
[  287.519718][T19783] netlink: 5116 bytes leftover after parsing attributes in process `syz.0.5950'.
[  287.525505][T19781] sctp: [Deprecated]: syz.2.5949 (pid 19781) Use of int in max_burst socket option.
[  287.525505][T19781] Use struct sctp_assoc_value instead
[  287.778683][T19802] netlink: 'syz.2.5958': attribute type 13 has an invalid length.
[  287.903373][T19812] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5963'.
[  288.008553][T19822] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  288.013550][T19822] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  288.016501][T19822] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  288.089729][T19828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5971'.
[  288.123830][T19832] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5972'.
[  288.211799][T19839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5975'.
[  288.215424][T19839] netlink: 'syz.0.5975': attribute type 7 has an invalid length.
[  288.218580][T19839] netlink: 'syz.0.5975': attribute type 8 has an invalid length.
[  288.222667][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5975'.
[  288.675050][T19856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5980'.
[  288.718826][T19859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5981'.
[  288.779677][T19863] bridge1: entered allmulticast mode
[  288.781916][T19862] bridge1: left allmulticast mode
[  288.824063][T19865] netlink: 'syz.0.5984': attribute type 21 has an invalid length.
[  288.827503][T19865] netlink: 'syz.0.5984': attribute type 6 has an invalid length.
[  288.840408][T19865] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5984'.
[  288.985077][T19871] netlink: 'syz.1.5988': attribute type 3 has an invalid length.
[  289.043832][T19878] batadv_slave_0: entered promiscuous mode
[  289.046422][T19877] batadv_slave_0: left promiscuous mode
[  289.088125][T19882] syzkaller0: entered promiscuous mode
[  289.092374][T19882] syzkaller0: entered allmulticast mode
[  289.168931][T19891] xt_TPROXY: Can be used only with -p tcp or -p udp
[  289.214093][T19895] netlink: 'syz.2.5999': attribute type 5 has an invalid length.
[  289.229349][ T5201] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  289.391774][T19920] Unsupported ieee802154 address type: 0
[  289.488464][T19933] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.517889][T19933] syzkaller0: entered promiscuous mode
[  289.519967][T19933] syzkaller0: entered allmulticast mode
[  289.522025][T19933] tipc: Resetting bearer <eth:syzkaller0>
[  289.556479][ T1093] tipc: Resetting bearer <eth:syzkaller0>
[  289.560250][T19932] tipc: Resetting bearer <eth:syzkaller0>
[  290.546461][T19932] tipc: Disabling bearer <eth:syzkaller0>
[  290.627695][T19955] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  290.641568][T19955] syzkaller0: entered promiscuous mode
[  290.643478][T19955] syzkaller0: entered allmulticast mode
[  290.849873][T19988] syz_tun: entered allmulticast mode
[  290.853687][T19988] netlink: 'syz.1.6038': attribute type 10 has an invalid length.
[  290.857222][T19988] bridge0: port 1(macsec0) entered blocking state
[  290.859895][T19988] bridge0: port 1(macsec0) entered disabled state
[  290.862106][T19988] macsec0: entered allmulticast mode
[  290.863846][T19988] veth1_macvtap: entered allmulticast mode
[  290.866644][T19988] macsec0: entered promiscuous mode
[  290.924741][T19987] syz_tun: left allmulticast mode
[  291.507110][T20046] erspan0: left allmulticast mode
[  291.512918][T20046] geneve3: left allmulticast mode
[  291.515478][T20046] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  291.517713][T20046] macsec1: left allmulticast mode
[  291.529571][ T5687] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  291.532924][ T5687] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  291.536749][ T5687] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  291.541590][ T5687] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  291.549919][T20045] wg1 speed is unknown, defaulting to 1000
[  291.553098][T20045] wlan1 speed is unknown, defaulting to 1000
[  292.136813][T20073] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000
[  292.979708][T20090] __nla_validate_parse: 3 callbacks suppressed
[  292.979719][T20090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6082'.
[  293.217404][T20103] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  293.497123][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6098'.
[  293.529979][T20131] vxcan1: entered allmulticast mode
[  293.676138][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6103'.
[  293.784630][T20144] wg1 speed is unknown, defaulting to 1000
[  293.787328][T20144] wlan1 speed is unknown, defaulting to 1000
[  293.855772][T20145] veth0: entered promiscuous mode
[  293.990426][T20145] netlink: 'syz.0.6106': attribute type 16 has an invalid length.
[  293.997539][T20145] netlink: 'syz.0.6106': attribute type 17 has an invalid length.
[  294.027971][T20145] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.032645][T20145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  294.080273][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.152878][T20145] veth0: left promiscuous mode
[  294.287681][T20163] wg1 speed is unknown, defaulting to 1000
[  294.325298][T20163] wlan1 speed is unknown, defaulting to 1000
[  294.823812][T20187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6124'.
[  294.989543][T14715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  296.029817][ T5687] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  296.032892][ T5687] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  296.108623][T20229] netlink: 'syz.1.6141': attribute type 12 has an invalid length.
[  296.228652][T20244] xfrm0: left promiscuous mode
[  296.236710][T20244] xfrm0: left allmulticast mode
[  296.240650][T20244] veth1_macvtap: left allmulticast mode
[  296.248800][T20244] vlan2: left promiscuous mode
[  296.254874][T20244] geneve1: left promiscuous mode
[  296.257129][T20244] vlan2: left allmulticast mode
[  296.259773][T20244] geneve1: left allmulticast mode
[  296.262710][T20244] macvtap1: left promiscuous mode
[  296.264911][T20244] macvtap1: left allmulticast mode
[  296.267369][T20244] xfrm1: left allmulticast mode
[  296.270566][T20244] bond5: left promiscuous mode
[  296.272551][T20244] bond5: left allmulticast mode
[  296.275181][T20244] vti0: left promiscuous mode
[  296.277702][T20244] ip6tnl5: left promiscuous mode
[  296.281076][T20244] veth7: left promiscuous mode
[  296.283121][T20244] bridge8: left allmulticast mode
[  296.285359][T20244] geneve5: left promiscuous mode
[  296.288139][T20244] sit4: left allmulticast mode
[  296.364520][T20250] wg1 speed is unknown, defaulting to 1000
[  296.368320][T20250] wlan1 speed is unknown, defaulting to 1000
[  296.584120][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6149'.
[  296.587788][T20254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6149'.
[  296.909928][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  297.130752][T20288] sock: sock_timestamping_bind_phc: sock not bind to device
[  297.196230][T20292] xt_hashlimit: max too large, truncated to 1048576
[  297.233155][T20296] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6167'.
[  297.278826][T20300] netlink: 'syz.0.6170': attribute type 1 has an invalid length.
[  297.282373][T20300] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.6170'.
[  297.637379][T20330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6185'.
[  298.105157][T20364] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6199'.
[  298.108607][T20364] 0X: renamed from caif0
[  298.113996][T20364] 0X: entered allmulticast mode
[  298.115857][T20364] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  298.124388][T20364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6199'.
[  298.128283][T20364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6199'.
[  298.415772][T20378] syzkaller1: entered promiscuous mode
[  298.417981][T20378] syzkaller1: entered allmulticast mode
[  298.500994][T20382] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6207'.
[  298.506197][T20382] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6207'.
[  298.510305][T20382] netlink: 'syz.1.6207': attribute type 6 has an invalid length.
[  298.513379][T20382] netlink: 'syz.1.6207': attribute type 4 has an invalid length.
[  298.614612][T20390] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  298.952103][T20414] netlink: 'syz.2.6220': attribute type 1 has an invalid length.
[  299.092040][T20424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.861195][T20441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.866656][T20442] syzkaller0: entered promiscuous mode
[  299.870252][T20442] syzkaller0: entered allmulticast mode
[  299.874756][T20449] tipc: Resetting bearer <eth:syzkaller0>
[  299.884386][T20436] tipc: Resetting bearer <eth:syzkaller0>
[  299.894333][T20436] tipc: Disabling bearer <eth:syzkaller0>
[  299.907327][T20429] wg1 speed is unknown, defaulting to 1000
[  299.912106][T20429] wlan1 speed is unknown, defaulting to 1000
[  299.961889][T20455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6231'.
[  300.084617][   T33] audit: type=1800 audit(1760677578.613:7): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6235" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9887 res=0 errno=0
[  300.349698][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  300.842769][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6253'.
[  300.916731][T20513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6256'.
[  300.941959][T20515] netlink: 'syz.2.6255': attribute type 8 has an invalid length.
[  300.949889][T20515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6255'.
[  300.960734][T20508] netlink: 'syz.2.6255': attribute type 8 has an invalid length.
[  300.963828][T20508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6255'.
[  301.013629][T20519] veth0_to_bridge: entered promiscuous mode
[  301.023494][T20518] veth0_to_bridge: left promiscuous mode
[  301.723491][T20601] wg1 speed is unknown, defaulting to 1000
[  301.726522][T20601] wlan1 speed is unknown, defaulting to 1000
[  301.909022][T20618] netlink: 'syz.2.6301': attribute type 1 has an invalid length.
[  302.913902][T20720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  303.298953][T20734] syzkaller0: entered promiscuous mode
[  303.301698][T20734] syzkaller0: entered allmulticast mode
[  303.762976][T20759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.766269][T20759] syzkaller0: entered promiscuous mode
[  303.768555][T20759] syzkaller0: entered allmulticast mode
[  303.787625][T20759] tipc: Resetting bearer <eth:syzkaller0>
[  303.791443][T20758] tipc: Resetting bearer <eth:syzkaller0>
[  303.807875][T20758] tipc: Disabling bearer <eth:syzkaller0>
[  304.157418][T20801] netlink: 'syz.1.6375': attribute type 1 has an invalid length.
[  304.251382][T20807] netlink: 'syz.1.6378': attribute type 1 has an invalid length.
[  304.253874][T20807] netlink: 'syz.1.6378': attribute type 4 has an invalid length.
[  304.256279][T20807] __nla_validate_parse: 8 callbacks suppressed
[  304.256285][T20807] netlink: 15586 bytes leftover after parsing attributes in process `syz.1.6378'.
[  304.521626][T20829] vlan5: entered allmulticast mode
[  304.618240][T20831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.621518][T20831] syzkaller0: entered promiscuous mode
[  304.623303][T20831] syzkaller0: entered allmulticast mode
[  304.636434][T20831] tipc: Resetting bearer <eth:syzkaller0>
[  304.640463][T20830] tipc: Resetting bearer <eth:syzkaller0>
[  304.652206][T20830] tipc: Disabling bearer <eth:syzkaller0>
[  304.844026][T20843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.275965][T20866] xt_l2tp: wrong L2TP version: 1
[  305.332590][T20871] netlink: 'syz.2.6405': attribute type 1 has an invalid length.
[  305.335701][T20871] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6405'.
[  305.347131][T20871] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6405'.
[  305.548147][T20886] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6411'.
[  305.636090][T20888] wg1 speed is unknown, defaulting to 1000
[  305.638908][T20888] wlan1 speed is unknown, defaulting to 1000
[  305.689845][T20890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6412'.
[  305.693154][T20890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6412'.
[  305.930489][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6419'.
[  305.978387][T20909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  305.980933][T20909] IPv6: NLM_F_CREATE should be set when creating new route
[  305.983602][T20909] IPv6: NLM_F_CREATE should be set when creating new route
[  306.089621][T20916] dvmrp1: tun_chr_ioctl cmd 1074025677
[  306.091518][T20916] dvmrp1: linktype set to 768
[  306.755010][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6451'.
[  307.025334][T20995] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  307.101272][T21000] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6462'.
[  307.166609][T21009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6467'.
[  307.723871][T21065] wg1 speed is unknown, defaulting to 1000
[  307.727670][T21065] wlan1 speed is unknown, defaulting to 1000
[  309.069355][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  309.369910][T21103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.374788][T21111] tipc: Resetting bearer <eth:syzkaller0>
[  309.390187][T21101] tipc: Disabling bearer <eth:syzkaller0>
[  309.539749][T21121] syzkaller0: entered promiscuous mode
[  309.541947][T21121] syzkaller0: entered allmulticast mode
[  309.583640][T21125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  309.803934][T21147] dvmrp8: entered allmulticast mode
[  309.825357][T21147] wg1 speed is unknown, defaulting to 1000
[  309.828654][T21147] wlan1 speed is unknown, defaulting to 1000
[  309.875997][T21149] netlink: 'syz.2.6524': attribute type 23 has an invalid length.
[  310.144997][T21146] dvmrp8: left allmulticast mode
[  310.176686][T21160] __nla_validate_parse: 1 callbacks suppressed
[  310.176700][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6529'.
[  310.342624][T21181] netlink: 'syz.2.6536': attribute type 11 has an invalid length.
[  310.635204][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6548'.
[  310.638069][T21210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6548'.
[  310.717197][T21217] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6549'.
[  311.157690][T21238] netlink: 'syz.2.6560': attribute type 1 has an invalid length.
[  311.223049][T21238] bond11: (slave geneve4): making interface the new active one
[  311.227307][T21238] bond11: (slave geneve4): Enslaving as an active interface with an up link
[  311.239786][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  311.243321][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  311.246731][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  311.255802][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6560'.
[  311.260140][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  311.265340][T21238] 8021q: adding VLAN 0 to HW filter on device bond11
[  311.361117][T21247] netlink: 'syz.1.6565': attribute type 10 has an invalid length.
[  311.386662][T21247] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  311.434027][T21253] Set syz1 is full, maxelem 65536 reached
[  311.818038][T21295] ieee802154 phy1 wpan1: encryption failed: -22
[  311.925868][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6591'.
[  311.940373][T21305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  311.942640][T21305] IPv6: NLM_F_CREATE should be set when creating new route
[  312.022520][T21317] syzkaller1: entered promiscuous mode
[  312.024409][T21317] syzkaller1: entered allmulticast mode
[  313.001675][T21351] netlink: 'syz.1.6611': attribute type 3 has an invalid length.
[  313.004506][T21351] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6611'.
[  313.111713][T21363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6617'.
[  313.115400][T21363] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6617'.
[  313.116644][T21365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.118491][T21363] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6617'.
[  313.121352][T21365] syzkaller0: entered promiscuous mode
[  313.126006][T21365] syzkaller0: entered allmulticast mode
[  313.142736][T21365] tipc: Resetting bearer <eth:syzkaller0>
[  313.146410][T21364] tipc: Resetting bearer <eth:syzkaller0>
[  313.159999][T21364] tipc: Disabling bearer <eth:syzkaller0>
[  313.302731][T21378] netlink: 'syz.0.6624': attribute type 11 has an invalid length.
[  313.351762][T21380] sock: sock_timestamping_bind_phc: sock not bind to device
[  313.382239][T21382] wg1 speed is unknown, defaulting to 1000
[  313.386082][T21382] wlan1 speed is unknown, defaulting to 1000
[  313.733474][T21402] dvmrp0: entered allmulticast mode
[  314.269984][ T5858] Bluetooth: hci1: command 0x040f tx timeout
[  314.351799][T21429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.354823][T21429] syzkaller0: entered promiscuous mode
[  314.357122][T21429] syzkaller0: entered allmulticast mode
[  314.384130][T21429] tipc: Resetting bearer <eth:syzkaller0>
[  314.392423][T21428] tipc: Resetting bearer <eth:syzkaller0>
[  314.412620][T21428] tipc: Disabling bearer <eth:syzkaller0>
[  314.562701][T21444] block nbd1: Unsupported socket: should be TCP or UNIX.
[  315.544289][T21509] __nla_validate_parse: 2 callbacks suppressed
[  315.544305][T21509] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6668'.
[  315.581237][T21513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6670'.
[  315.587567][T21511] netlink: 'syz.1.6669': attribute type 4 has an invalid length.
[  316.000098][T21535] netlink: 'syz.0.6679': attribute type 5 has an invalid length.
[  316.043598][T21537] netlink: 'syz.0.6681': attribute type 1 has an invalid length.
[  316.046194][T21537] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.6681'.
[  316.079591][T21534] bridge_slave_1: entered promiscuous mode
[  316.312410][T21554] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6689'.
[  316.318181][T21554] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6689'.
[  317.399296][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  317.410606][T21600] wg1 speed is unknown, defaulting to 1000
[  317.421456][T21600] wlan1 speed is unknown, defaulting to 1000
[  318.020263][T21598] netlink: 'syz.0.6707': attribute type 6 has an invalid length.
[  318.740358][   T33] audit: type=1107 audit(1760677597.273:8): pid=21609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  318.774468][T21612] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  318.817546][T21612] syzkaller0: entered promiscuous mode
[  318.820828][T21612] syzkaller0: entered allmulticast mode
[  318.845697][T21612] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  319.016532][T21633] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6719'.
[  319.022544][T21633] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  319.045573][T21635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6721'.
[  319.207026][T21653] openvswitch: netlink: Missing key (keys=40, expected=80)
[  319.301467][T21660] netlink: 'syz.2.6733': attribute type 1 has an invalid length.
[  319.304631][T21660] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6733'.
[  320.433100][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6749'.
[  320.857283][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6771'.
[  320.932278][T21746] netlink: 47 bytes leftover after parsing attributes in process `syz.0.6774'.
[  321.008359][T21754] netlink: 'syz.2.6778': attribute type 1 has an invalid length.
[  321.014151][T21754] netlink: 'syz.2.6778': attribute type 1 has an invalid length.
[  321.417236][T21801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6801'.
[  321.545993][T21815] netlink: 'syz.1.6808': attribute type 1 has an invalid length.
[  321.546630][T21814] geneve5: entered promiscuous mode
[  321.552086][T21815] netlink: 15 bytes leftover after parsing attributes in process `syz.1.6808'.
[  321.560366][ T5687] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 36551 - 0
[  321.571987][ T5687] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 36551 - 0
[  321.583556][ T5687] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 36551 - 0
[  321.587070][ T5687] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 36551 - 0
[  321.791502][T21842] netlink: 'syz.2.6820': attribute type 3 has an invalid length.
[  321.885731][T21850] netlink: 'syz.2.6827': attribute type 1 has an invalid length.
[  321.888571][T21850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  322.464449][T21917] syzkaller1: entered promiscuous mode
[  322.466335][T21917] syzkaller1: entered allmulticast mode
[  322.476107][T21920] netlink: 'syz.1.6855': attribute type 1 has an invalid length.
[  322.478468][T21917] netlink: 'syz.2.6854': attribute type 2 has an invalid length.
[  323.001678][T21963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6874'.
[  323.130681][T21974] pim6reg1: entered promiscuous mode
[  323.132481][T21974] pim6reg1: entered allmulticast mode
[  323.288980][T21984] netlink: 'syz.1.6885': attribute type 1 has an invalid length.
[  323.464803][T21993] x_tables: duplicate underflow at hook 3
[  323.492647][T21998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6892'.
[  323.556498][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6896'.
[  323.561350][T22007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6896'.
[  323.587628][T22009] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6897'.
[  323.658023][T22018] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0
[  324.063535][T22053] netlink: 'syz.2.6917': attribute type 1 has an invalid length.
[  324.066086][T22053] netlink: 17231 bytes leftover after parsing attributes in process `syz.2.6917'.
[  324.520710][T22082] netlink: 'syz.2.6930': attribute type 11 has an invalid length.
[  324.868135][T22107] wg1 speed is unknown, defaulting to 1000
[  324.872993][T22107] wlan1 speed is unknown, defaulting to 1000
[  325.036027][T22122] nftables ruleset with unbound chain
[  325.183302][T22129] team0: entered promiscuous mode
[  325.185623][T22129] team0: entered allmulticast mode
[  325.196447][T22133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.328035][T22139] vlan0: entered allmulticast mode
[  325.860842][T22144] xt_TPROXY: Can be used only with -p tcp or -p udp
[  326.116315][T22148] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  326.999279][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  327.250140][T22180] __nla_validate_parse: 5 callbacks suppressed
[  327.250154][T22180] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6975'.
[  327.265950][T22182] validate_nla: 1 callbacks suppressed
[  327.265961][T22182] netlink: 'syz.0.6976': attribute type 15 has an invalid length.
[  327.308995][T22184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6977'.
[  327.357129][T22190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6978'.
[  327.459934][T22195] nbd1: detected capacity change from 0 to 63
[  327.463092][T22201] block nbd1: NBD_DISCONNECT
[  327.465495][T22201] block nbd1: Disconnected due to user request.
[  327.467776][T22201] block nbd1: shutting down sockets
[  327.479732][    C1] blk_print_req_error: 138 callbacks suppressed
[  327.479743][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.485237][    C1] buffer_io_error: 138 callbacks suppressed
[  327.485245][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  327.490367][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.493638][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  327.496171][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.499306][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  327.501739][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.504493][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  327.508818][T22109] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.512938][T22109] Buffer I/O error on dev nbd1, logical block 0, async page read
[  327.515652][T22109] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.518388][T22109] Buffer I/O error on dev nbd1, logical block 1, async page read
[  327.521387][T22109] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.525297][T22109] Buffer I/O error on dev nbd1, logical block 2, async page read
[  327.528028][T22109] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.531543][T22109] Buffer I/O error on dev nbd1, logical block 3, async page read
[  327.532083][T22195] bond8: entered promiscuous mode
[  327.534177][T22109] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.538571][T22109] Buffer I/O error on dev nbd1, logical block 0, async page read
[  327.541665][T22109] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.544416][T22195] bond8: entered allmulticast mode
[  327.544580][T22109] Buffer I/O error on dev nbd1, logical block 1, async page read
[  327.549968][T22109] ldm_validate_partition_table(): Disk read failed.
[  327.551133][T22195] 8021q: adding VLAN 0 to HW filter on device bond8
[  327.552834][T22109] Dev nbd1: unable to read RDB block 0
[  327.564455][T22109]  nbd1: unable to read partition table
[  327.570395][T22109] ldm_validate_partition_table(): Disk read failed.
[  327.573599][T22109] Dev nbd1: unable to read RDB block 0
[  327.576487][T22109]  nbd1: unable to read partition table
[  327.777304][T22221] netlink: 364 bytes leftover after parsing attributes in process `syz.2.6988'.
[  327.783258][T22221] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  327.898191][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6994'.
[  327.925521][T22237] netlink: 'syz.1.6995': attribute type 1 has an invalid length.
[  327.925983][T22238] netlink: 'syz.2.6996': attribute type 5 has an invalid length.
[  327.927908][T22237] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6995'.
[  327.977431][T22242] xt_l2tp: missing protocol rule (udp|l2tpip)
[  328.006680][T22244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6999'.
[  328.032280][T22244] sch_tbf: burst 88 is lower than device veth19 mtu (1514) !
[  328.244260][T22267] wg1 speed is unknown, defaulting to 1000
[  328.247128][T22267] wlan1 speed is unknown, defaulting to 1000
[  328.399873][T22275] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7009'.
[  328.437865][T22277] vlan5: entered promiscuous mode
[  328.440180][T22277] bond0: entered promiscuous mode
[  328.442748][T22277] bridge0: entered promiscuous mode
[  328.497452][T22281] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  328.501941][T22281] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  328.551531][T22285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7015'.
[  328.554857][T22285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7015'.
[  328.747159][T22303] netlink: 'syz.0.7023': attribute type 4 has an invalid length.
[  328.768684][T22303] netlink: 'syz.0.7023': attribute type 4 has an invalid length.
[  328.966475][ T5687] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 36551 - 0
[  328.973632][ T5687] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 36551 - 0
[  328.980846][ T5687] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 36551 - 0
[  328.983647][ T5687] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 36551 - 0
[  329.154597][T22322] wg1 speed is unknown, defaulting to 1000
[  329.160203][T22327] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  329.203263][T22327] syzkaller0: entered promiscuous mode
[  329.205209][T22327] syzkaller0: entered allmulticast mode
[  329.210377][T22322] wlan1 speed is unknown, defaulting to 1000
[  330.375006][T22343] x_tables: ip_tables: ah match: only valid for protocol 51
[  331.384414][T22410] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  331.394112][T22410] bond0: (slave bridge0): Releasing backup interface
[  331.398379][T22410] bridge0: left promiscuous mode
[  331.402512][T22410] macsec0: left allmulticast mode
[  331.404726][T22410] macsec0: left promiscuous mode
[  331.406967][T22410] bridge0: port 1(macsec0) entered disabled state
[  331.419104][T22410] bond7: (slave veth7): Releasing backup interface
[  331.443378][T22410] netlink: 'syz.1.7069': attribute type 10 has an invalid length.
[  331.447250][T22410] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  331.451275][T22410] bond0: (slave wlan1): refused to change device type
[  331.461960][T22410] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  331.465700][T22410] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  331.672560][T22428] sctp: [Deprecated]: syz.2.7079 (pid 22428) Use of int in max_burst socket option deprecated.
[  331.672560][T22428] Use struct sctp_assoc_value instead
[  332.101851][T22450] netlink: 'syz.2.7089': attribute type 1 has an invalid length.
[  332.252583][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.256275][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  332.262621][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.266423][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  332.271932][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.275560][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  332.279938][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.283788][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  332.287556][T22457] __nla_validate_parse: 9 callbacks suppressed
[  332.287568][T22457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7092'.
[  333.199820][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7100'.
[  333.497975][T22498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.657702][T22518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7120'.
[  333.822412][T22534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7129'.
[  333.826571][T22534] netlink: 'syz.2.7129': attribute type 5 has an invalid length.
[  333.830478][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7129'.
[  334.164832][T22565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7143'.
[  334.332978][T22582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7151'.
[  334.418978][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7154'.
[  334.583880][T22595] wg1 speed is unknown, defaulting to 1000
[  334.587189][T22595] wlan1 speed is unknown, defaulting to 1000
[  334.732080][T22609] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7163'.
[  334.834794][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7167'.
[  334.880872][T22629] netlink: 'syz.0.7170': attribute type 5 has an invalid length.
[  335.207127][T22671] netlink: 'syz.0.7191': attribute type 1 has an invalid length.
[  335.231551][T22671] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[  335.234808][T22671] bond8: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  335.241285][T22671] bond8: (slave vcan1): making interface the new active one
[  335.244166][T22671] bond8: (slave vcan1): Enslaving as an active interface with an up link
[  335.266602][T22671] bond8: (slave vcan2): The slave device specified does not support setting the MAC address
[  335.273098][T22671] bond8: (slave vcan2): Enslaving as a backup interface with an up link
[  335.278883][T22671] 8021q: adding VLAN 0 to HW filter on device bond8
[  335.366190][T22689] ip6tnl0: Caught tx_queue_len zero misconfig
[  336.390524][T22743] wg1 speed is unknown, defaulting to 1000
[  336.393167][T22743] wlan1 speed is unknown, defaulting to 1000
[  336.977391][T22779] wg1 speed is unknown, defaulting to 1000
[  336.982447][T22779] wlan1 speed is unknown, defaulting to 1000
[  337.022697][T22787] syzkaller1: entered promiscuous mode
[  337.024796][T22787] syzkaller1: entered allmulticast mode
[  337.330227][T22803] netlink: 'syz.0.7247': attribute type 11 has an invalid length.
[  337.394939][T22809] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  337.472568][T22817] __nla_validate_parse: 11 callbacks suppressed
[  337.472580][T22817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7253'.
[  337.740130][T22834] bond8: option mode: unable to set because the bond device has slaves
[  337.997909][T22859] netlink: 'syz.1.7271': attribute type 10 has an invalid length.
[  338.000849][T22859] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7271'.
[  338.143906][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7279'.
[  338.157838][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7280'.
[  338.254315][T22890] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  338.263320][T22891] netlink: 'syz.0.7286': attribute type 2 has an invalid length.
[  338.401064][T22906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7292'.
[  338.517409][T22913] netlink: 'syz.1.7293': attribute type 1 has an invalid length.
[  338.522514][T22913] netlink: 'syz.1.7293': attribute type 4 has an invalid length.
[  338.524950][T22913] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7293'.
[  338.532111][T22913] netlink: 'syz.1.7293': attribute type 1 has an invalid length.
[  338.535254][T22913] netlink: 'syz.1.7293': attribute type 4 has an invalid length.
[  338.538382][T22913] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7293'.
[  338.629023][T22921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7300'.
[  338.633495][T22921] tipc: Enabled bearer <eth:vlan0>, priority 18
[  338.728204][T22925] netlink: 'syz.2.7302': attribute type 1 has an invalid length.
[  338.731176][T22925] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7302'.
[  338.833890][T22941] batadv_slave_0: Caught tx_queue_len zero misconfig
[  338.886891][T22946] geneve5: entered promiscuous mode
[  338.894355][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.897246][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.902382][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.909383][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.918031][T22948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7312'.
[  338.924786][T22948] vlan0: entered promiscuous mode
[  339.630580][T22980] Cannot find add_set index 4 as target
[  339.865042][T22998] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  340.188216][T23011] netlink: 'syz.0.7342': attribute type 142 has an invalid length.
[  340.429611][T23022] openvswitch: netlink: ufid size 132 bytes exceeds the range (1, 16)
[  340.432956][T23022] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  340.481231][T23024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.485998][T23024] syzkaller0: entered promiscuous mode
[  340.488337][T23024] syzkaller0: entered allmulticast mode
[  340.509702][T23024] tipc: Resetting bearer <eth:syzkaller0>
[  340.512291][T23024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.515882][T23024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.521341][T23023] tipc: Resetting bearer <eth:syzkaller0>
[  340.536802][T23023] tipc: Disabling bearer <eth:syzkaller0>
[  340.555813][T23030] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  340.602461][T23032] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  340.633978][T23032] syzkaller0: entered promiscuous mode
[  340.635762][T23032] syzkaller0: entered allmulticast mode
[  341.260949][T23056] netlink: 'syz.1.7362': attribute type 9 has an invalid length.
[  342.592640][T23092] x_tables: duplicate underflow at hook 2
[  342.894956][T23098] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  342.992524][T23104] __nla_validate_parse: 4 callbacks suppressed
[  342.992535][T23104] netlink: 292 bytes leftover after parsing attributes in process `syz.1.7384'.
[  343.308731][T23132] wg1 speed is unknown, defaulting to 1000
[  343.314578][T23132] wlan1 speed is unknown, defaulting to 1000
[  343.327767][T23137] netlink: 'syz.2.7399': attribute type 1 has an invalid length.
[  343.331819][T23137] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7399'.
[  344.141089][T23149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7404'.
[  344.146110][T23149] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7404'.
[  344.248131][T23155] bridge7: entered promiscuous mode
[  344.259739][T23155] bridge7: entered allmulticast mode
[  344.269868][T23155] team0: Port device bridge7 added
[  344.278785][T23157] bridge0: port 1(team0) entered blocking state
[  344.289004][T23157] bridge0: port 1(team0) entered disabled state
[  344.478824][T23162] wg1 speed is unknown, defaulting to 1000
[  344.483186][T23162] wlan1 speed is unknown, defaulting to 1000
[  344.764778][T23192] syzkaller0: entered promiscuous mode
[  344.767030][T23192] syzkaller0: entered allmulticast mode
[  344.982069][T23217] netlink: 'syz.0.7434': attribute type 178 has an invalid length.
[  344.992623][T23218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7432'.
[  344.996123][T23218] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7432'.
[  346.014681][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7436'.
[  346.031607][T23223] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  346.035457][T23223] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  346.167508][T23235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.172287][T23235] syzkaller0: entered promiscuous mode
[  346.176892][T23235] syzkaller0: entered allmulticast mode
[  346.185074][T23235] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  346.202440][T23235] tipc: Resetting bearer <eth:syzkaller0>
[  346.206343][T23234] tipc: Resetting bearer <eth:syzkaller0>
[  346.222698][T23234] tipc: Disabling bearer <eth:syzkaller0>
[  346.363888][T23246] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.7445'.
[  346.887306][T23259] openvswitch: netlink: Unknown key attributes 1
[  346.967052][T23263] netlink: 'syz.2.7452': attribute type 1 has an invalid length.
[  347.282001][T23285] wg1 speed is unknown, defaulting to 1000
[  347.284757][T23285] wlan1 speed is unknown, defaulting to 1000
[  347.543620][T23301] netlink: 'syz.1.7470': attribute type 16 has an invalid length.
[  347.546809][T23301] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.7470'.
[  347.852477][T23325] wg1 speed is unknown, defaulting to 1000
[  347.857665][T23325] wlan1 speed is unknown, defaulting to 1000
[  347.885603][T23330] syzkaller1: entered promiscuous mode
[  347.887488][T23330] syzkaller1: entered allmulticast mode
[  348.189976][ T5858] Bluetooth: hci1: command 0x040f tx timeout
[  348.398359][T23366] TCP: TCP_TX_DELAY enabled
[  348.725399][T23390] bond10: Unable to set up delay as MII monitoring is disabled
[  348.730573][T23390] bond10 (unregistering): Released all slaves
[  348.871363][T23405] tipc: Failed to remove unknown binding: 66,1,1/1536260500:3285020018/3285020020
[  348.875070][T23405] tipc: Failed to remove unknown binding: 66,1,1/1536260500:3285020018/3285020020
[  349.133950][T23434] netlink: 'syz.0.7531': attribute type 33 has an invalid length.
[  349.137325][T23434] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7531'.
[  349.233801][T23444] wg1 speed is unknown, defaulting to 1000
[  349.236417][T23444] wlan1 speed is unknown, defaulting to 1000
[  349.447093][T23450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7538'.
[  351.224584][T23522] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.7568'.
[  351.270984][T23526] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  351.358801][T23536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7574'.
[  351.423429][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7577'.
[  351.431823][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7577'.
[  351.438246][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7577'.
[  351.449583][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7577'.
[  351.454446][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7577'.
[  351.460742][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7577'.
[  351.490925][T23542] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.497238][T23542] 0X: left allmulticast mode
[  351.499899][T23542] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  351.529662][T14715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  351.712978][T23571] netlink: 'syz.0.7589': attribute type 1 has an invalid length.
[  352.139462][T14715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  352.350590][T21105] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.404238][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.407604][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.643924][T23660] netlink: 'syz.1.7626': attribute type 1 has an invalid length.
[  353.807361][T23678] netlink: 'syz.0.7633': attribute type 5 has an invalid length.
[  354.269808][ T2205] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  354.387768][T23736] xt_TPROXY: Can be used only with -p tcp or -p udp
[  354.518479][T23748] syzkaller1: tun_chr_ioctl cmd 1074025677
[  354.521622][T23748] syzkaller1: Linktype set failed because interface is up
[  354.540263][T23750] nbd: must specify a size in bytes for the device
[  354.541579][T23752] __nla_validate_parse: 18 callbacks suppressed
[  354.541590][T23752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7669'.
[  354.582193][T23750] nbd: must specify a size in bytes for the device
[  354.661788][T23762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7672'.
[  354.666061][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7674'.
[  354.804398][T23771] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  354.843189][T23783] netlink: 516 bytes leftover after parsing attributes in process `syz.0.7681'.
[  355.064090][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7691'.
[  355.314866][T23827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7700'.
[  355.447138][T23843] netlink: 'syz.0.7707': attribute type 83 has an invalid length.
[  355.809905][T23886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7722'.
[  355.814451][T23886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7722'.
[  355.817864][T23886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7722'.
[  355.873267][T23891] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7724'.
[  356.103095][T23923] netlink: 'syz.2.7739': attribute type 14 has an invalid length.
[  356.760509][T23961] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  357.150057][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  357.187323][T23992] xt_hashlimit: overflow, rate too high: 0
[  357.313206][T23998] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  357.427628][T24004] IPVS: Scheduler module ip_vs_sip not found
[  357.438474][T24004] IPVS: sh: FWM 3 0x00000003 - no destination available
[  357.543791][T24015] vlan0: entered promiscuous mode
[  357.687071][T24026] netlink: 'syz.0.7780': attribute type 1 has an invalid length.
[  357.717616][T24026] bond9: entered promiscuous mode
[  357.729604][T24026] 8021q: adding VLAN 0 to HW filter on device bond9
[  357.737155][T24026] bond9: entered allmulticast mode
[  357.751500][T24026] bond9: (slave bridge8): making interface the new active one
[  357.753911][T24026] bridge8: entered promiscuous mode
[  357.755723][T24026] bridge8: entered allmulticast mode
[  357.759981][T24026] bond9: (slave bridge8): Enslaving as an active interface with an up link
[  359.530170][T24120] bond12: Unable to set down delay as MII monitoring is disabled
[  359.536133][T24120] bond12 (unregistering): Released all slaves
[  359.565640][T24128] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  359.729978][T24140] __nla_validate_parse: 10 callbacks suppressed
[  359.729995][T24140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7829'.
[  360.843142][T24195] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7854'.
[  360.854831][T24196] delete_channel: no stack
[  362.509518][T24311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7905'.
[  362.536286][T24313] netlink: 'syz.0.7906': attribute type 3 has an invalid length.
[  362.903939][T24352] bridge_slave_1: left promiscuous mode
[  362.928797][T24352] bond8: left promiscuous mode
[  362.931972][T24352] bond8: left allmulticast mode
[  363.223123][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7929'.
[  363.316350][T24388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7933'.
[  363.587716][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7942'.
[  363.598280][T24408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7942'.
[  363.603963][T24408] netlink: 540 bytes leftover after parsing attributes in process `syz.0.7942'.
[  363.845162][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7957'.
[  363.847840][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7957'.
[  364.309083][T24468] netlink: 'syz.0.7967': attribute type 2 has an invalid length.
[  364.312104][T24468] netlink: 'syz.0.7967': attribute type 2 has an invalid length.
[  364.749256][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  365.164729][T24503] __nla_validate_parse: 1 callbacks suppressed
[  365.164739][T24503] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7983'.
[  365.169761][T24503] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7983'.
[  365.172800][T24503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7983'.
[  365.685082][T24519] netlink: 'syz.0.7990': attribute type 29 has an invalid length.
[  365.688688][T24519] netlink: 'syz.0.7990': attribute type 29 has an invalid length.
[  365.692521][T24519] netlink: 500 bytes leftover after parsing attributes in process `syz.0.7990'.
[  365.852202][T24531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7996'.
[  367.173573][T24590] netlink: 'syz.2.8020': attribute type 10 has an invalid length.
[  367.184404][T24592] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  367.256294][T24597] netlink: 'syz.2.8023': attribute type 1 has an invalid length.
[  367.271504][T24598] wg1 speed is unknown, defaulting to 1000
[  367.274420][T24598] wlan1 speed is unknown, defaulting to 1000
[  367.543532][T24609] netlink: 4308 bytes leftover after parsing attributes in process `syz.1.8028'.
[  367.920037][T24662] netlink: 'syz.0.8043': attribute type 4 has an invalid length.
[  368.481870][T24692] netlink: 364 bytes leftover after parsing attributes in process `syz.2.8050'.
[  368.551734][T24697] xt_recent: Unsupported userspace flags (000000b1)
[  368.633753][T24703] bridge_slave_0: default FDB implementation only supports local addresses
[  368.637039][T24703] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8055'.
[  368.641166][T24703] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8055'.
[  368.792048][T24729] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8067'.
[  368.831783][T24733] netlink: 'syz.1.8069': attribute type 2 has an invalid length.
[  368.930924][T24742] netlink: 'syz.1.8073': attribute type 1 has an invalid length.
[  368.997670][T24742] 8021q: adding VLAN 0 to HW filter on device bond10
[  369.006801][T24747] bond10: (slave ip6gretap1): making interface the new active one
[  369.010119][T24747] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[  369.057990][T24742] veth9: entered promiscuous mode
[  369.065549][T24742] bond10: (slave veth9): Enslaving as an active interface with a down link
[  369.089059][T24752] Bluetooth: hci0: unsupported parameter 512
[  369.092110][T24742] erspan0: entered allmulticast mode
[  369.092418][T24752] Bluetooth: hci0: invalid length 0, exp 2 for type 6
[  369.120892][T24742] bond10: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  369.595867][T24782] wg1 speed is unknown, defaulting to 1000
[  369.604994][T24782] wlan1 speed is unknown, defaulting to 1000
[  369.634928][T24787] netlink: 'syz.2.8090': attribute type 29 has an invalid length.
[  369.644825][T24787] netlink: 'syz.2.8090': attribute type 29 has an invalid length.
[  369.671456][T24785] wg1 speed is unknown, defaulting to 1000
[  369.719441][T24785] wlan1 speed is unknown, defaulting to 1000
[  370.172989][T24817] Bluetooth: hci0: invalid length 44, exp 2 for type 2
[  370.206309][T24822] __nla_validate_parse: 3 callbacks suppressed
[  370.206319][T24822] netlink: 165 bytes leftover after parsing attributes in process `syz.1.8103'.
[  370.347924][T24835] ip6gre2: entered promiscuous mode
[  370.460673][T24845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8115'.
[  370.507663][T24845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8115'.
[  370.517102][T24845] 8021q: VLANs not supported on team0
[  370.824917][T24891] wg1 speed is unknown, defaulting to 1000
[  370.835849][T24891] wlan1 speed is unknown, defaulting to 1000
[  371.122819][T24923] Bluetooth: hci0: unsupported parameter 256
[  371.123507][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8152'.
[  371.124881][T24923] Bluetooth: hci0: invalid length 0, exp 2 for type 26
[  371.284283][T24941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8159'.
[  371.313304][T24943] wg1 speed is unknown, defaulting to 1000
[  371.315798][T24943] wlan1 speed is unknown, defaulting to 1000
[  371.829522][T24971] x_tables: duplicate entry at hook 2
[  371.832039][T24972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8174'.
[  372.078036][T25000] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8187'.
[  372.226343][T25008] bond12: option updelay: invalid value (18446744073709551607)
[  372.228765][T25008] bond12: option updelay: allowed values 0 - 2147483647
[  372.251099][T25008] bond12 (unregistering): Released all slaves
[  372.329770][T25018] netlink: 'syz.2.8194': attribute type 9 has an invalid length.
[  372.910604][T25049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8209'.
[  373.227940][T25083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8226'.
[  373.292594][T25092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8230'.
[  373.299459][T25089] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  373.322402][T25089] syzkaller0: entered promiscuous mode
[  373.324638][T25089] syzkaller0: entered allmulticast mode
[  373.430680][T21105] syzkaller0: tun_net_xmit 76
[  373.432340][T25101] syzkaller0: create flow: hash 1975516872 index 2
[  373.432869][T21105] syzkaller0: tun_net_xmit 48
[  373.459566][ T2205] syzkaller0: tun_net_xmit 76
[  373.505061][T25106] syzkaller0: delete flow: hash 1975516872 index 2
[  373.515702][T25108] netlink: 'syz.1.8238': attribute type 6 has an invalid length.
[  373.743882][T25116] netlink: 'syz.1.8238': attribute type 12 has an invalid length.
[  374.815918][T25136] netlink: 'syz.2.8248': attribute type 13 has an invalid length.
[  374.961684][T25149] netlink: 'syz.0.8254': attribute type 32 has an invalid length.
[  374.964840][T25149] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  375.516613][T25163] __nla_validate_parse: 4 callbacks suppressed
[  375.516623][T25163] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.8260'.
[  375.962971][T25194] netlink: 'syz.1.8274': attribute type 30 has an invalid length.
[  376.066352][T25207] netlink: 'syz.0.8278': attribute type 1 has an invalid length.
[  376.152416][T25207] bond10: (slave gretap3): making interface the new active one
[  376.157004][T25207] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  376.182386][T25207] macvlan0: entered promiscuous mode
[  376.184170][T25207] macvlan0: entered allmulticast mode
[  376.250315][T25230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8290'.
[  376.274575][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8290'.
[  376.311357][T25236] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  376.318933][T25236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8293'.
[  376.534561][T25253] xt_cgroup: xt_cgroup: no path or classid specified
[  376.628415][T25260] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  376.878610][T25273] netlink: 'syz.2.8308': attribute type 39 has an invalid length.
[  377.301323][T25287] bridge_slave_0: default FDB implementation only supports local addresses
[  377.412196][T25297] netlink: 'syz.0.8320': attribute type 21 has an invalid length.
[  377.414806][T25297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8320'.
[  377.651199][T25311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8326'.
[  377.674125][T25313] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8327'.
[  377.866914][T25339] IPVS: set_ctl: invalid protocol: 135 172.30.0.1:20000
[  377.902896][T25343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8342'.
[  377.938573][T25349] syzkaller1: entered promiscuous mode
[  377.940870][T25349] syzkaller1: entered allmulticast mode
[  378.098635][T25365] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8353'.
[  378.491819][T25410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8375'.
[  378.623391][T25428] netlink: 'syz.1.8384': attribute type 5 has an invalid length.
[  378.747858][T25444] netlink: 'syz.1.8391': attribute type 1 has an invalid length.
[  378.750464][T25444] netlink: 'syz.1.8391': attribute type 1 has an invalid length.
[  378.834727][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  379.131219][T25462] bond0 (unregistering): Released all slaves
[  379.479459][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  379.568185][T25490] syzkaller0: entered promiscuous mode
[  379.570123][T25490] syzkaller0: entered allmulticast mode
[  379.689707][T25504] hsr0: entered allmulticast mode
[  379.691403][T25504] hsr_slave_0: entered allmulticast mode
[  379.693207][T25504] hsr_slave_1: entered allmulticast mode
[  379.696961][T25504] hsr_slave_0: left promiscuous mode
[  379.703351][T25504] hsr_slave_1: left promiscuous mode
[  379.721004][T25504] hsr0 (unregistering): left allmulticast mode
[  379.723366][T25504] tipc: Disabling bearer <ib:hsr0>
[  379.880396][T25533] netlink: 'syz.2.8430': attribute type 1 has an invalid length.
[  380.533286][T25582] __nla_validate_parse: 8 callbacks suppressed
[  380.533298][T25582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8448'.
[  380.857784][T25594] netlink: 'syz.1.8452': attribute type 3 has an invalid length.
[  380.986905][ T5839] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  382.222930][T25628] 0: reclassify loop, rule prio 0, protocol 800
[  382.256764][T25607] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  382.260897][T25607] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  382.269403][T25607] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  382.271396][T25607] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  382.494411][T25651] netlink: 'syz.1.8472': attribute type 11 has an invalid length.
[  382.496887][T25651] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8472'.
[  383.414304][T25708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8475'.
[  407.629416][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  440.275169][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  465.869392][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  501.714612][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  540.109396][   T34] INFO: task kworker/0:7:14717 blocked for more than 143 seconds.
[  540.112061][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  540.121166][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  540.124200][   T34] task:kworker/0:7     state:D stack:24008 pid:14717 tgid:14717 ppid:2      task_flags:0x4208060 flags:0x00080000
[  540.127949][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  540.130363][   T34] Call Trace:
[  540.131513][   T34]  <TASK>
[  540.132543][   T34]  __schedule+0x1798/0x4cc0
[  540.134046][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  540.135777][   T34]  ? __pfx___schedule+0x10/0x10
[  540.137357][   T34]  ? schedule+0x91/0x360
[  540.138731][   T34]  schedule+0x165/0x360
[  540.140332][   T34]  schedule_preempt_disabled+0x13/0x30
[  540.142571][   T34]  __mutex_lock+0x7e6/0x1350
[  540.144528][   T34]  ? __mutex_lock+0x5bb/0x1350
[  540.146498][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  540.149082][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  540.151636][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  540.154059][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  540.156369][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  540.158824][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  540.161497][   T34]  process_scheduled_works+0xae1/0x17b0
[  540.163586][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  540.165588][   T34]  worker_thread+0x8a0/0xda0
[  540.167350][   T34]  ? __kthread_parkme+0x7b/0x200
[  540.169885][   T34]  kthread+0x711/0x8a0
[  540.171626][   T34]  ? __pfx_worker_thread+0x10/0x10
[  540.173776][   T34]  ? __pfx_kthread+0x10/0x10
[  540.175717][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  540.177789][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.180194][   T34]  ? __pfx_kthread+0x10/0x10
[  540.182143][   T34]  ret_from_fork+0x4bc/0x870
[  540.184086][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  540.186249][   T34]  ? __switch_to_asm+0x39/0x70
[  540.188239][   T34]  ? __switch_to_asm+0x33/0x70
[  540.190779][   T34]  ? __pfx_kthread+0x10/0x10
[  540.192678][   T34]  ret_from_fork_asm+0x1a/0x30
[  540.194246][   T34]  </TASK>
[  540.195256][   T34] INFO: task syz.0.8453:25595 blocked for more than 143 seconds.
[  540.197815][   T34]       Not tainted syzkaller #0
[  540.200016][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  540.203546][   T34] task:syz.0.8453      state:D stack:25960 pid:25595 tgid:25595 ppid:7856   task_flags:0x400040 flags:0x00080002
[  540.208350][   T34] Call Trace:
[  540.210149][   T34]  <TASK>
[  540.211390][   T34]  __schedule+0x1798/0x4cc0
[  540.213314][   T34]  ? __lock_acquire+0xab9/0xd20
[  540.215378][   T34]  ? __lock_acquire+0xab9/0xd20
[  540.217397][   T34]  ? __pfx___schedule+0x10/0x10
[  540.219875][   T34]  ? schedule+0x91/0x360
[  540.221795][   T34]  schedule+0x165/0x360
[  540.223538][   T34]  schedule_preempt_disabled+0x13/0x30
[  540.225748][   T34]  __mutex_lock+0x7e6/0x1350
[  540.227382][   T34]  ? __mutex_lock+0x5bb/0x1350
[  540.228888][   T34]  ? rfkill_unregister+0xc8/0x220
[  540.230952][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  540.233025][   T34]  ? __pfx_device_del+0x10/0x10
[  540.234758][   T34]  rfkill_unregister+0xc8/0x220
[  540.236783][   T34]  nfc_unregister_device+0x96/0x2a0
[  540.238945][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  540.241726][   T34]  virtual_ncidev_close+0x56/0x90
[  540.243809][   T34]  __fput+0x44c/0xa70
[  540.245478][   T34]  task_work_run+0x1d4/0x260
[  540.247381][   T34]  ? __pfx_task_work_run+0x10/0x10
[  540.269682][   T34]  ? exit_to_user_mode_loop+0x40/0x130
[  540.272268][   T34]  exit_to_user_mode_loop+0xe9/0x130
[  540.274446][   T34]  do_syscall_64+0x2bd/0xfa0
[  540.276332][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.278479][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.289353][   T34]  ? exc_page_fault+0xab/0x100
[  540.291353][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.293768][   T34] RIP: 0033:0x7fe71318eec9
[  540.295235][   T34] RSP: 002b:00007ffd2c865748 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  540.298456][   T34] RAX: 0000000000000000 RBX: 00007fe7133e7da0 RCX: 00007fe71318eec9
[  540.301836][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  540.304980][   T34] RBP: 00007fe7133e7da0 R08: 000000000000764c R09: 000000062c865a3f
[  540.308195][   T34] R10: 00007fe7133e7cb0 R11: 0000000000000246 R12: 000000000005d296
[  540.311599][   T34] R13: 00007fe7133e6090 R14: ffffffffffffffff R15: 00007ffd2c865860
[  540.314880][   T34]  </TASK>
[  540.316146][   T34] INFO: task syz.2.8456:25607 blocked for more than 143 seconds.
[  540.318440][   T34]       Not tainted syzkaller #0
[  540.320409][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  540.323131][   T34] task:syz.2.8456      state:D stack:25600 pid:25607 tgid:25606 ppid:5856   task_flags:0x400140 flags:0x00080003
[  540.327606][   T34] Call Trace:
[  540.328962][   T34]  <TASK>
[  540.330366][   T34]  __schedule+0x1798/0x4cc0
[  540.332264][   T34]  ? __lock_acquire+0xab9/0xd20
[  540.334294][   T34]  ? __lock_acquire+0xab9/0xd20
[  540.336142][   T34]  ? __pfx___schedule+0x10/0x10
[  540.337677][   T34]  ? schedule+0x91/0x360
[  540.338985][   T34]  schedule+0x165/0x360
[  540.340733][   T34]  schedule_preempt_disabled+0x13/0x30
[  540.342708][   T34]  __mutex_lock+0x7e6/0x1350
[  540.344438][   T34]  ? __mutex_lock+0x5bb/0x1350
[  540.346070][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  540.347802][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  540.349913][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.351577][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  540.353475][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  540.355488][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  540.357323][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  540.359019][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  540.360961][   T34]  rfkill_set_block+0x1d2/0x440
[  540.362499][   T34]  rfkill_fop_write+0x44b/0x570
[  540.364057][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  540.365760][   T34]  ? security_file_permission+0x30/0x290
[  540.367617][   T34]  ? rw_verify_area+0x255/0x4d0
[  540.369398][   T34]  ? __lock_acquire+0xab9/0xd20
[  540.371020][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  540.372666][   T34]  vfs_write+0x27e/0xb30
[  540.373977][   T34]  ? __pfx_vfs_write+0x10/0x10
[  540.375512][   T34]  ? __fget_files+0x2a/0x420
[  540.376981][   T34]  ? __fget_files+0x2a/0x420
[  540.378521][   T34]  ? __fget_files+0x3a0/0x420
[  540.380138][   T34]  ? __fget_files+0x2a/0x420
[  540.381608][   T34]  ksys_write+0x145/0x250
[  540.382978][   T34]  ? __pfx_ksys_write+0x10/0x10
[  540.384504][   T34]  ? do_syscall_64+0xbe/0xfa0
[  540.386082][   T34]  do_syscall_64+0xfa/0xfa0
[  540.387526][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.389372][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.391600][   T34]  ? exc_page_fault+0xab/0x100
[  540.393438][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.395373][   T34] RIP: 0033:0x7f064dd8eec9
[  540.396763][   T34] RSP: 002b:00007f064eb8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  540.399563][   T34] RAX: ffffffffffffffda RBX: 00007f064dfe5fa0 RCX: 00007f064dd8eec9
[  540.402109][   T34] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000005
[  540.404741][   T34] RBP: 00007f064de11f91 R08: 0000000000000000 R09: 0000000000000000
[  540.407269][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  540.410174][   T34] R13: 00007f064dfe6038 R14: 00007f064dfe5fa0 R15: 00007ffdd0acaf88
[  540.412878][   T34]  </TASK>
[  540.413919][   T34] INFO: task syz.1.8491:25744 blocked for more than 143 seconds.
[  540.416605][   T34]       Not tainted syzkaller #0
[  540.418256][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  540.421364][   T34] task:syz.1.8491      state:D stack:26696 pid:25744 tgid:25743 ppid:5850   task_flags:0x400040 flags:0x00080002
[  540.425109][   T34] Call Trace:
[  540.426172][   T34]  <TASK>
[  540.427124][   T34]  __schedule+0x1798/0x4cc0
[  540.428571][   T34]  ? __lock_acquire+0xab9/0xd20
[  540.430534][   T34]  ? __lock_acquire+0xab9/0xd20
[  540.432141][   T34]  ? __pfx___schedule+0x10/0x10
[  540.433731][   T34]  ? schedule+0x91/0x360
[  540.435142][   T34]  schedule+0x165/0x360
[  540.436556][   T34]  schedule_preempt_disabled+0x13/0x30
[  540.438329][   T34]  __mutex_lock+0x7e6/0x1350
[  540.440213][   T34]  ? __mutex_lock+0x5bb/0x1350
[  540.441810][   T34]  ? rfkill_register+0x37/0x8e0
[  540.443426][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  540.445029][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  540.446811][   T34]  ? device_initialize+0x24b/0x440
[  540.448510][   T34]  rfkill_register+0x37/0x8e0
[  540.450228][   T34]  nfc_register_device+0x14a/0x320
[  540.451882][   T34]  nci_register_device+0x87f/0x9d0
[  540.453602][   T34]  ? __pfx_nci_register_device+0x10/0x10
[  540.455516][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  540.457451][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  540.459751][   T34]  virtual_ncidev_open+0x129/0x1a0
[  540.461882][   T34]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  540.464255][   T34]  misc_open+0x2d5/0x350
[  540.466049][   T34]  chrdev_open+0x4cc/0x5e0
[  540.467909][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  540.470216][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  540.472769][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  540.474815][   T34]  do_dentry_open+0x953/0x13f0
[  540.476773][   T34]  vfs_open+0x3b/0x340
[  540.478459][   T34]  ? path_openat+0x2ecd/0x3830
[  540.480585][   T34]  path_openat+0x2ee5/0x3830
[  540.482480][   T34]  ? __pfx_path_openat+0x10/0x10
[  540.484527][   T34]  do_filp_open+0x1fa/0x410
[  540.486378][   T34]  ? __lock_acquire+0xab9/0xd20
[  540.488298][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  540.490308][   T34]  ? _raw_spin_unlock+0x28/0x50
[  540.492226][   T34]  ? alloc_fd+0x64c/0x6c0
[  540.494061][   T34]  do_sys_openat2+0x121/0x1c0
[  540.496023][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  540.497917][   T34]  ? __pfx___se_sys_futex+0x10/0x10
[  540.499895][   T34]  __x64_sys_openat+0x138/0x170
[  540.501507][   T34]  do_syscall_64+0xfa/0xfa0
[  540.503348][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.505478][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.507956][   T34]  ? exc_page_fault+0xab/0x100
[  540.509760][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.511841][   T34] RIP: 0033:0x7f24e9b8eec9
[  540.513269][   T34] RSP: 002b:00007f24eaa07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  540.516040][   T34] RAX: ffffffffffffffda RBX: 00007f24e9de5fa0 RCX: 00007f24e9b8eec9
[  540.518754][   T34] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  540.521683][   T34] RBP: 00007f24e9c11f91 R08: 0000000000000000 R09: 0000000000000000
[  540.524310][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  540.527105][   T34] R13: 00007f24e9de6038 R14: 00007f24e9de5fa0 R15: 00007ffdd5ca1fd8
[  540.529911][   T34]  </TASK>
[  540.531082][   T34] 
[  540.531082][   T34] Showing all locks held in the system:
[  540.533592][   T34] 1 lock held by khungtaskd/34:
[  540.535434][   T34]  #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  540.539080][   T34] 2 locks held by getty/5639:
[  540.541251][   T34]  #0: ffff88816dafa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  540.545216][   T34]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  540.549604][   T34] 3 locks held by kworker/0:7/14717:
[  540.551804][   T34]  #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  540.556222][   T34]  #1: ffffc90003957ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  540.561732][   T34]  #2: ffffffff8f7be468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  540.566268][   T34] 2 locks held by syz.0.8453/25595:
[  540.568338][   T34]  #0: ffff88816ac9e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  540.572352][   T34]  #1: ffffffff8f7be468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  540.576293][   T34] 2 locks held by syz.2.8456/25607:
[  540.578376][   T34]  #0: ffffffff8f7be468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  540.582475][   T34]  #1: ffff88816ac9e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  540.586340][   T34] 3 locks held by syz.1.8491/25744:
[  540.588470][   T34]  #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  540.592137][   T34]  #1: ffff8881ad6ea100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  540.596029][   T34]  #2: ffffffff8f7be468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  540.600239][   T34] 1 lock held by syz-executor/25751:
[  540.602317][   T34]  #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  540.605715][   T34] 1 lock held by syz-executor/25752:
[  540.607823][   T34]  #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  540.611459][   T34] 1 lock held by syz-executor/25754:
[  540.613561][   T34]  #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  540.616960][   T34] 1 lock held by syz-executor/25756:
[  540.619092][   T34]  #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  540.622639][   T34] 1 lock held by syz-executor/25758:
[  540.624776][   T34]  #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  540.628182][   T34] 1 lock held by syz-executor/25760:
[  540.630875][   T34]  #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  540.633579][   T34] 1 lock held by syz-executor/25765:
[  540.635287][   T34]  #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  540.637835][   T34] 1 lock held by syz-executor/25767:
[  540.639788][   T34]  #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  540.642755][   T34] 1 lock held by syz-executor/25769:
[  540.644807][   T34]  #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  540.647687][   T34] 
[  540.648541][   T34] =============================================
[  540.648541][   T34] 
[  540.654172][   T34] NMI backtrace for cpu 1
[  540.654183][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  540.654192][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  540.654197][   T34] Call Trace:
[  540.654200][   T34]  <TASK>
[  540.654205][   T34]  dump_stack_lvl+0x189/0x250
[  540.654218][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  540.654226][   T34]  ? __pfx__printk+0x10/0x10
[  540.654237][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  540.654248][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  540.654258][   T34]  ? __pfx__printk+0x10/0x10
[  540.654266][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  540.654276][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  540.654286][   T34]  watchdog+0xf60/0xfa0
[  540.654298][   T34]  ? watchdog+0x1e2/0xfa0
[  540.654309][   T34]  kthread+0x711/0x8a0
[  540.654318][   T34]  ? __pfx_watchdog+0x10/0x10
[  540.654326][   T34]  ? __pfx_kthread+0x10/0x10
[  540.654334][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  540.654344][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.654350][   T34]  ? __pfx_kthread+0x10/0x10
[  540.654358][   T34]  ret_from_fork+0x4bc/0x870
[  540.654368][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  540.654379][   T34]  ? __switch_to_asm+0x39/0x70
[  540.654387][   T34]  ? __switch_to_asm+0x33/0x70
[  540.654394][   T34]  ? __pfx_kthread+0x10/0x10
[  540.654401][   T34]  ret_from_fork_asm+0x1a/0x30
[  540.654414][   T34]  </TASK>
[  540.654417][   T34] Sending NMI from CPU 1 to CPUs 0:
[  540.706232][    C0] NMI backtrace for cpu 0
[  540.706248][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  540.706261][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  540.706267][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  540.706282][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 21 1c 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  540.706291][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  540.706302][    C0] RAX: 6916e02ceaf75e00 RBX: ffffffff8196bc07 RCX: 6916e02ceaf75e00
[  540.706310][    C0] RDX: 0000000000000001 RSI: ffffffff8d7e83ae RDI: ffffffff8bc076e0
[  540.706317][    C0] RBP: ffffffff8de07ea8 R08: ffff888121032fdb R09: 1ffff110242065fb
[  540.706325][    C0] R10: dffffc0000000000 R11: ffffed10242065fc R12: ffffffff8f9e1170
[  540.706333][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40
[  540.706340][    C0] FS:  0000000000000000(0000) GS:ffff88818e70c000(0000) knlGS:0000000000000000
[  540.706349][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  540.706357][    C0] CR2: 00007ffddcc9f1c8 CR3: 000000000df38000 CR4: 00000000000006f0
[  540.706389][    C0] Call Trace:
[  540.706397][    C0]  <TASK>
[  540.706402][    C0]  default_idle+0x13/0x20
[  540.706416][    C0]  default_idle_call+0x73/0xb0
[  540.706430][    C0]  do_idle+0x1e7/0x510
[  540.706447][    C0]  ? __pfx_do_idle+0x10/0x10
[  540.706465][    C0]  cpu_startup_entry+0x44/0x60
[  540.706480][    C0]  rest_init+0x2de/0x300
[  540.706494][    C0]  start_kernel+0x3ae/0x410
[  540.706509][    C0]  x86_64_start_reservations+0x24/0x30
[  540.706525][    C0]  x86_64_start_kernel+0x143/0x1c0
[  540.706539][    C0]  common_startup_64+0x13e/0x147
[  540.706557][    C0]  </TASK>
[  540.707222][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  540.766166][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  540.769128][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  540.772763][   T34] Call Trace:
[  540.773849][   T34]  <TASK>
[  540.774843][   T34]  dump_stack_lvl+0x99/0x250
[  540.776350][   T34]  ? __asan_memcpy+0x40/0x70
[  540.777854][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  540.779564][   T34]  ? __pfx__printk+0x10/0x10
[  540.781091][   T34]  vpanic+0x237/0x6d0
[  540.782385][   T34]  ? __pfx_vpanic+0x10/0x10
[  540.783812][   T34]  ? preempt_schedule_common+0x83/0xd0
[  540.785578][   T34]  panic+0xb9/0xc0
[  540.786850][   T34]  ? __pfx_panic+0x10/0x10
[  540.788339][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  540.790114][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  540.792041][   T34]  watchdog+0xf9f/0xfa0
[  540.793349][   T34]  ? watchdog+0x1e2/0xfa0
[  540.794850][   T34]  kthread+0x711/0x8a0
[  540.796152][   T34]  ? __pfx_watchdog+0x10/0x10
[  540.797708][   T34]  ? __pfx_kthread+0x10/0x10
[  540.799216][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  540.800871][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.802580][   T34]  ? __pfx_kthread+0x10/0x10
[  540.804079][   T34]  ret_from_fork+0x4bc/0x870
[  540.805527][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  540.807148][   T34]  ? __switch_to_asm+0x39/0x70
[  540.808561][   T34]  ? __switch_to_asm+0x33/0x70
[  540.810137][   T34]  ? __pfx_kthread+0x10/0x10
[  540.811539][   T34]  ret_from_fork_asm+0x1a/0x30
[  540.813052][   T34]  </TASK>
[  540.814656][   T34] Kernel Offset: disabled
[  540.816030][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:10:18  Registers:
info registers vcpu 0

CPU#0
RAX=6916e02ceaf75e00 RBX=ffffffff8196bc07 RCX=6916e02ceaf75e00 RDX=0000000000000001
RSI=ffffffff8d7e83ae RDI=ffffffff8bc076e0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff888121032fdb R9 =1ffff110242065fb R10=dffffc0000000000 R11=ffffed10242065fc
R12=ffffffff8f9e1170 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a40
RIP=ffffffff8b4c0dd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818e70c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffddcc9f1c8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000227f0c55 000000000000000b XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=5ca0dc0f6f33f400 RDX=0000000000000000
RSI=ffff8881b8064580 RDI=ffff8881b8063a00 RBP=ffffffff863d909d RSP=ffffc90003c37928
R8 =0000000000000000 R9 =ffffffff863d909d R10=dffffc0000000000 R11=fffffbfff1d89415
R12=0000000000000000 R13=ffffffff8ec4a0b8 R14=0000000000000001 R15=0000000000000246
RIP=ffffffff819da269 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9d0c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcf3f8dc687 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fcf41bb7d20
XMM02=0000000500000007 ffffffff00000001 XMM03=ffffffff8b00446f ffffffff8a20127f
XMM04=0000000000000000 00007fcf41bb7d20 XMM05=0000000000000000 000000000003bf12
XMM06=ffffffff8a432592 ffffffff00000007 XMM07=ffffffff00000000 ffffffff8b1fcb6c
XMM08=ffffffff824635f1 ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
