last executing test programs:

2m57.4003542s ago: executing program 0 (id=884):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xffffff1f, 0x2000000}}, 0x20)

2m57.400027339s ago: executing program 0 (id=885):
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x1})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})

2m57.339872507s ago: executing program 0 (id=887):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r1, 0xe0824704187acfd7, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x0)

2m57.088588854s ago: executing program 0 (id=888):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000003880)=ANY=[@ANYRES32, @ANYBLOB="2f0000000400000004000000", @ANYRES32, @ANYBLOB='3'], 0x20)

2m57.058013933s ago: executing program 0 (id=890):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e6}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0)

2m56.985699379s ago: executing program 0 (id=892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x25, 0x1, 0x70bd2d, 0x2ddfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2m41.89985072s ago: executing program 32 (id=892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x25, 0x1, 0x70bd2d, 0x2ddfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2m32.259651991s ago: executing program 1 (id=1460):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005100), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000005240)={'wg1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000005340)={0x0, 0x0, &(0x7f0000005300)={&(0x7f0000005280)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000844}, 0xc0c0)

2m32.166356022s ago: executing program 1 (id=1462):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='afs_make_fs_call1\x00', r2, 0x0, 0x100000000000000}, 0x18)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000240))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})

2m32.004809646s ago: executing program 1 (id=1467):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xf0, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x2400}, [{0x8, 0x1, 0x7}, {0x8, 0x1, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b702000040000000850000008600"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x5c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
sendto$inet6(r9, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071126f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)

2m31.531501706s ago: executing program 1 (id=1473):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r0, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
close(0x3)

2m31.414576555s ago: executing program 1 (id=1475):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab0"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m31.412024917s ago: executing program 1 (id=1476):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)

2m27.643900219s ago: executing program 3 (id=1564):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x12, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="f8", 0x1}], 0x1}, 0x2c01}], 0x1, 0x4c851)

2m27.557178771s ago: executing program 3 (id=1565):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000020085000000700000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m27.556959283s ago: executing program 3 (id=1566):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newtaction={0xac, 0x30, 0x1, 0x0, 0x0, {}, [{0x98, 0x1, [@m_simple={0x94, 0x1, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x61, 0x3, 'vlUn\x00\xed\x1d\xddo\x0fk\x1aE\fL\x87\xf2\xc5\xc4\xd1\xc0ufV\xb6K\xe8\x9cM\xd2M\x1d\xdb[\xa2\x04x=\x8c\x96\x02\xc1\x8c6O\xa1nw\x15\x9f\x866\xe0\tE\x00\x89\x0e\'\f\x8dL\xd6|\nA\x9cP\xe32\x14\xdb\x82\n\xc8\x86\xbe\x10\x01\x1b\xe3\xe4\xba\x97\xf4\x1f&\x1aF\x8eAY\xbc'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x80)

2m27.484532778s ago: executing program 3 (id=1567):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20)

2m27.484070633s ago: executing program 3 (id=1568):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000780), 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000a2b", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000100"/28], 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'})
socket$netlink(0x10, 0x3, 0x400000000000004)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
connect$phonet_pipe(r4, &(0x7f0000000280)={0x23, 0x8, 0x3, 0x6}, 0x10)

2m27.136101948s ago: executing program 3 (id=1569):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m16.026376576s ago: executing program 33 (id=1476):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)

2m12.138381408s ago: executing program 34 (id=1569):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1.389676276s ago: executing program 2 (id=4993):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x9)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)

1.151826079s ago: executing program 5 (id=5001):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080), 0x4)

1.07245681s ago: executing program 5 (id=5002):
r0 = socket$kcm(0x2d, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc)

1.07222256s ago: executing program 5 (id=5003):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000001800c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x96, &(0x7f00000004c0)=""/150}, 0x94)

1.01916536s ago: executing program 5 (id=5004):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100000000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x40000000000}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xffffffffffffffff, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x7fffffff, 0x2}, 0x0, 0x0)

522.343068ms ago: executing program 4 (id=5012):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}]}}]}, 0x38}}, 0x0)

483.641975ms ago: executing program 2 (id=5013):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x80, 0x6, @remote}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[], 0x0)

412.016317ms ago: executing program 4 (id=5014):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031000000028bd7000fbdbdf250200090094"], 0x80}, 0x1, 0x7}, 0xc014)

359.755662ms ago: executing program 2 (id=5015):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x100408)

359.339678ms ago: executing program 4 (id=5016):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002)

278.979455ms ago: executing program 2 (id=5017):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080)

278.678859ms ago: executing program 4 (id=5018):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

211.932843ms ago: executing program 2 (id=5019):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[], 0xd0}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
unshare(0x2c020400)
socket$rxrpc(0x21, 0x2, 0x2)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r8, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}})
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x3, 0x4)

211.677519ms ago: executing program 4 (id=5020):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x5, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

131.779025ms ago: executing program 4 (id=5021):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38)
r1 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4)
sendmsg$nl_route_sched(r1, 0x0, 0x4048000)

114.723584ms ago: executing program 5 (id=5022):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10)

784.512µs ago: executing program 5 (id=5023):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

0s ago: executing program 2 (id=5024):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r1}, 0x38)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x96}, 0x28)
r3 = socket(0x15, 0x80000, 0x52)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x40, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x375}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x48894)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26, 0x0, 0x1}, 0x28)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000100)={r5, r5, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x4c, r8, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)={0x14, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x80)
r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close(r10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440), 0x10}, 0x94)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)

kernel console output (not intermixed with test programs):

 0
[   68.867797][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.875234][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.883539][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.910835][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.931532][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.937200][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.959631][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.968727][ T4494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.977446][ T4494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.038102][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.041163][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.102541][  T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.112109][  T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.151595][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.163057][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.170274][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.205215][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.215353][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.253691][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.258796][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.370351][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4'.
[   69.486479][ T5930] netlink: 'syz.2.7': attribute type 3 has an invalid length.
[   69.520476][ T5930] syz_tun: entered allmulticast mode
[   69.573328][ T5930] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   69.594552][ T5930] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   69.654165][ T5935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.713209][ T5937] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.746502][ T5927] syz_tun: left allmulticast mode
[   70.156627][   T54] Bluetooth: hci1: command tx timeout
[   70.158830][   T54] Bluetooth: hci2: command tx timeout
[   70.229627][ T5856] Bluetooth: hci0: command tx timeout
[   70.419704][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26'.
[   70.863030][ T6008] syz.0.39 uses obsolete (PF_INET,SOCK_PACKET)
[   71.111147][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.113763][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.174646][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.230163][ T6035] warning: `syz.1.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.365517][ T6043] Zero length message leads to an empty skb
[   71.435641][ T6052] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   72.076626][ T6103] netlink: 104 bytes leftover after parsing attributes in process `syz.0.77'.
[   72.234966][ T5856] Bluetooth: hci2: command tx timeout
[   72.236789][   T54] Bluetooth: hci1: command tx timeout
[   72.304897][ T5856] Bluetooth: hci0: command tx timeout
[   72.348049][ T6125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.87'.
[   72.394506][ T6128] netlink: 96 bytes leftover after parsing attributes in process `syz.0.88'.
[   72.702799][ T6150] netlink: 'syz.1.98': attribute type 10 has an invalid length.
[   72.708550][ T6150] Bluetooth: MGMT ver 1.23
[   72.737976][ T6153] netlink: 'syz.0.100': attribute type 7 has an invalid length.
[   72.907127][ T6167] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   72.914024][ T6167] macsec1: entered promiscuous mode
[   72.917560][ T6167] macsec1: entered allmulticast mode
[   72.919574][ T6167] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   73.130751][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'.
[   73.284074][ T6199] netlink: 'syz.1.123': attribute type 3 has an invalid length.
[   73.329433][ T6204] netlink: 136 bytes leftover after parsing attributes in process `syz.0.126'.
[   73.332373][ T6204] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   73.475842][ T6215] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   73.533029][ T6215] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.580341][ T6216] netlink: 'syz.2.125': attribute type 1 has an invalid length.
[   73.583422][ T6216] netlink: 140 bytes leftover after parsing attributes in process `syz.2.125'.
[   73.588119][ T6216] netlink: 96 bytes leftover after parsing attributes in process `syz.2.125'.
[   73.621162][ T6215] bond1: (slave geneve2): making interface the new active one
[   73.632928][ T6215] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   74.238045][ T6249] netlink: 364 bytes leftover after parsing attributes in process `syz.2.143'.
[   74.255718][ T6249] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   74.307089][ T5856] Bluetooth: hci2: command tx timeout
[   74.309051][   T54] Bluetooth: hci1: command tx timeout
[   74.396771][ T5856] Bluetooth: hci0: command tx timeout
[   74.677442][ T6274] netlink: 'syz.2.154': attribute type 1 has an invalid length.
[   75.091549][ T6292] tipc: Started in network mode
[   75.098116][ T6292] tipc: Node identity 022d6558cae1, cluster identity 4711
[   75.102035][ T6292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.121327][ T6292] syzkaller0: entered promiscuous mode
[   75.123929][ T6292] syzkaller0: entered allmulticast mode
[   75.173373][ T6292] tipc: Resetting bearer <eth:syzkaller0>
[   75.206650][ T6291] tipc: Resetting bearer <eth:syzkaller0>
[   75.221908][ T6291] tipc: Disabling bearer <eth:syzkaller0>
[   75.370627][ T6307] netlink: 'syz.1.171': attribute type 11 has an invalid length.
[   75.372998][ T6307] netlink: 'syz.1.171': attribute type 11 has an invalid length.
[   75.383594][ T6307] netlink: 224 bytes leftover after parsing attributes in process `syz.1.171'.
[   75.623598][ T6322] tipc: Started in network mode
[   75.629168][ T6322] tipc: Node identity 9691815db103, cluster identity 4711
[   75.639975][ T6322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.645710][ T6322] syzkaller0: entered promiscuous mode
[   75.647685][ T6322] syzkaller0: entered allmulticast mode
[   75.707331][ T6322] tipc: Resetting bearer <eth:syzkaller0>
[   75.711217][ T6330] Illegal XDP return value 4294967282 on prog  (id 26) dev N/A, expect packet loss!
[   75.714613][ T6320] tipc: Resetting bearer <eth:syzkaller0>
[   75.733593][ T6320] tipc: Disabling bearer <eth:syzkaller0>
[   76.063320][ T6359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.189'.
[   76.272751][ T6379] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[   76.340921][ T5900] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.344344][ T5900] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.357584][ T5900] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.372116][ T5900] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.479714][ T6392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.572639][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[   76.608874][ T6399] netlink: 'syz.2.206': attribute type 11 has an invalid length.
[   76.738250][ T6403] siw: device registration error -23
[   77.049312][ T6428] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.051290][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'.
[   77.059843][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'.
[   77.080568][ T6424] tipc: Started in network mode
[   77.082464][ T6424] tipc: Node identity 022687643aa7, cluster identity 4711
[   77.089034][ T6424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.092500][ T6424] syzkaller0: entered promiscuous mode
[   77.094569][ T6424] syzkaller0: entered allmulticast mode
[   77.122059][ T6424] tipc: Resetting bearer <eth:syzkaller0>
[   77.125433][ T6423] tipc: Resetting bearer <eth:syzkaller0>
[   77.133890][ T6423] tipc: Disabling bearer <eth:syzkaller0>
[   77.182233][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.224'.
[   77.203800][ T6436] openvswitch: netlink: EtherType 0 is less than min 600
[   77.358092][ T6447] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.231'.
[   77.362560][ T6447] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.231'.
[   77.509042][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.1.237'.
[   77.511974][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.1.237'.
[   77.666465][ T6473] netlink: 'syz.1.243': attribute type 9 has an invalid length.
[   78.072961][ T6508] netlink: 'syz.0.260': attribute type 1 has an invalid length.
[   78.078342][ T6508] netlink: 'syz.0.260': attribute type 2 has an invalid length.
[   78.088493][ T6508] netlink: 'syz.0.260': attribute type 1 has an invalid length.
[   78.216625][ T6516] netlink: 'syz.0.263': attribute type 13 has an invalid length.
[   78.455461][ T6530] bond0: Caught tx_queue_len zero misconfig
[   78.796707][ T6546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.800273][ T6546] syzkaller0: entered promiscuous mode
[   78.802564][ T6546] syzkaller0: entered allmulticast mode
[   78.819185][ T6546] tipc: Resetting bearer <eth:syzkaller0>
[   78.823396][ T6545] tipc: Resetting bearer <eth:syzkaller0>
[   78.837788][ T6545] tipc: Disabling bearer <eth:syzkaller0>
[   79.234345][ T6576] dvmrp1: tun_chr_ioctl cmd 1074025681
[   79.376747][ T6587] openvswitch: netlink: nsh attr 0 has unexpected len 60 expected 0
[   79.380183][ T6587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.725520][ T6610] netlink: 'syz.1.308': attribute type 1 has an invalid length.
[   80.594079][ T6657] netlink: 'syz.1.330': attribute type 1 has an invalid length.
[   80.612250][ T6657] netlink: 'syz.1.330': attribute type 1 has an invalid length.
[   80.829324][ T6671] pim6reg: entered allmulticast mode
[   80.839897][ T6668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.859669][ T6671] pim6reg: left allmulticast mode
[   81.663864][ T6700] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.678094][ T6700] bridge0: port 3(bond1) entered blocking state
[   81.688255][ T6700] bridge0: port 3(bond1) entered disabled state
[   81.695362][ T6700] bond1: entered allmulticast mode
[   81.707145][ T6700] bond1: entered promiscuous mode
[   81.710555][ T6700] bridge0: port 3(bond1) entered blocking state
[   81.713310][ T6700] bridge0: port 3(bond1) entered forwarding state
[   81.756048][ T1091] bridge0: port 3(bond1) entered disabled state
[   81.891790][ T6714] __nla_validate_parse: 16 callbacks suppressed
[   81.891810][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.353'.
[   82.168611][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'.
[   82.172087][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.358'.
[   82.197143][ T6724] geneve2: entered promiscuous mode
[   82.201747][ T6724] geneve2: entered allmulticast mode
[   83.134059][ T6753] netlink: 'syz.0.368': attribute type 3 has an invalid length.
[   84.217368][ T6797] vlan3: entered promiscuous mode
[   84.219179][ T6797] vlan3: entered allmulticast mode
[   84.221044][ T6797] hsr_slave_1: entered allmulticast mode
[   84.287299][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[   84.691464][ T6828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.391'.
[   84.917119][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'.
[   84.921716][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'.
[   84.994926][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'.
[   85.010747][ T6850] vlan2: entered allmulticast mode
[   85.012425][ T6850] bridge0: entered allmulticast mode
[   85.014210][ T6850] bridge1: port 1(vlan2) entered blocking state
[   85.018965][ T6850] bridge1: port 1(vlan2) entered disabled state
[   85.022384][ T6850] vlan2: entered promiscuous mode
[   85.023912][ T6850] bridge0: entered promiscuous mode
[   85.048130][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.403'.
[   86.018989][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'.
[   86.124093][ T6904] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   86.248015][ T6910] smc: net device bond0 applied user defined pnetid SYZ2
[   86.252829][ T6910] smc: net device bond0 erased user defined pnetid SYZ2
[   86.319139][ T6915] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7
[   86.417166][ T6921] dvmrp1: tun_chr_ioctl cmd 1074025677
[   86.419719][ T6921] dvmrp1: linktype set to 805
[   86.466969][ T3143] cfg80211: failed to load regulatory.db
[   86.481108][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.484899][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.561732][ T6922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.570756][ T6922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.706711][ T6874] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.718249][ T6874] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.721058][ T6874] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.723799][ T6874] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.019898][ T6952] __nla_validate_parse: 2 callbacks suppressed
[   87.019909][ T6952] netlink: 56 bytes leftover after parsing attributes in process `syz.0.443'.
[   87.175098][ T6960] netlink: 'syz.1.448': attribute type 3 has an invalid length.
[   87.177476][ T6960] netlink: 'syz.1.448': attribute type 1 has an invalid length.
[   87.179837][ T6960] netlink: 212 bytes leftover after parsing attributes in process `syz.1.448'.
[   87.508502][ T6969] tc_dump_action: action bad kind
[   88.237157][ T7002] syzkaller1: entered promiscuous mode
[   88.239448][ T7002] syzkaller1: entered allmulticast mode
[   88.294123][ T7006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.297842][ T7006] syzkaller0: entered promiscuous mode
[   88.300044][ T7006] syzkaller0: entered allmulticast mode
[   88.332219][ T7006] tipc: Resetting bearer <eth:syzkaller0>
[   88.341679][ T7005] tipc: Resetting bearer <eth:syzkaller0>
[   88.366087][ T7005] tipc: Disabling bearer <eth:syzkaller0>
[   88.992948][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'.
[   89.845234][ T7093] openvswitch: netlink: IP tunnel dst address not specified
[   89.909673][ T7099] netlink: 'syz.2.514': attribute type 1 has an invalid length.
[   89.912690][ T7099] netlink: 216 bytes leftover after parsing attributes in process `syz.2.514'.
[   90.036952][ T7105] syzkaller1: entered promiscuous mode
[   90.038894][ T7105] syzkaller1: entered allmulticast mode
[   90.309254][ T7125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.526'.
[   90.315681][ T7125] netlink: 'syz.1.526': attribute type 32 has an invalid length.
[   90.323153][ T7125] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   90.611997][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.542'.
[   90.618549][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.542'.
[   90.622655][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'.
[   90.866097][ T7185] netlink: 256 bytes leftover after parsing attributes in process `syz.1.550'.
[   90.869534][ T7185] unsupported nlmsg_type 40
[   90.941668][ T7189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.552'.
[   90.948850][ T7189] netem: unknown loss type 12
[   90.952551][ T7189] netem: change failed
[   91.004630][ T7198] netlink: 'syz.1.556': attribute type 39 has an invalid length.
[   91.287988][ T7224] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   91.363747][ T7233] netlink: 'syz.1.569': attribute type 13 has an invalid length.
[   91.368782][ T7233] netlink: 'syz.1.569': attribute type 17 has an invalid length.
[   91.460234][ T7233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.568000][ T7226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.629368][ T7226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.686708][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.416475][   T24] tipc: Node number set to 3368838488
[   93.995594][ T7317] IPVS: Scheduler module ip_vs_sip not found
[   94.199809][ T7326] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   94.600523][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'.
[   94.632212][ T7339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.613'.
[   94.636216][ T7339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.613'.
[   94.695236][ T7341] netlink: 'syz.0.614': attribute type 1 has an invalid length.
[   94.697604][ T7341] netlink: 'syz.0.614': attribute type 2 has an invalid length.
[   94.710784][ T7341] netlink: 'syz.0.614': attribute type 1 has an invalid length.
[   94.713166][ T7341] netlink: 'syz.0.614': attribute type 2 has an invalid length.
[   95.093348][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.0.621'.
[   95.096541][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.621'.
[   95.099625][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.0.621'.
[   95.166205][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'.
[   95.327336][ T7371] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.629'.
[   95.518070][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'.
[   95.520857][ T7385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.181161][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'.
[   96.844089][ T7437] ip6tnl0: Caught tx_queue_len zero misconfig
[   96.968047][ T7440] pim6reg: entered allmulticast mode
[   96.981006][ T7440] pim6reg: left allmulticast mode
[   97.594424][ T7483] netlink: 'syz.2.677': attribute type 24 has an invalid length.
[   97.602662][ T7483] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   97.608627][ T7483] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   98.138099][ T7514] netlink: 'syz.2.691': attribute type 64 has an invalid length.
[   98.600392][ T7559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.602992][ T7559] syzkaller0: entered promiscuous mode
[   98.614057][ T7559] syzkaller0: entered allmulticast mode
[   98.660269][ T7559] tipc: Resetting bearer <eth:syzkaller0>
[   98.668498][ T7558] tipc: Resetting bearer <eth:syzkaller0>
[   98.680191][ T7558] tipc: Disabling bearer <eth:syzkaller0>
[   98.716541][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.095182][ T7589] mac80211_hwsim hwsim5 ;: renamed from wlan0 (while UP)
[   99.663051][ T7626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.729448][ T7628] __nla_validate_parse: 10 callbacks suppressed
[   99.729469][ T7628] netlink: 248 bytes leftover after parsing attributes in process `syz.2.747'.
[   99.844170][ T7631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.748'.
[   99.864129][ T7631] netlink: 152 bytes leftover after parsing attributes in process `syz.2.748'.
[  100.454021][ T7667] dvmrp0: entered allmulticast mode
[  100.478741][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'.
[  100.979130][ T7688] netlink: 'syz.2.764': attribute type 10 has an invalid length.
[  100.982313][ T7688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.764'.
[  101.000726][ T7688] dummy0: entered promiscuous mode
[  101.012145][ T7688] bridge0: port 4(dummy0) entered blocking state
[  101.021127][ T7688] bridge0: port 4(dummy0) entered disabled state
[  101.023805][ T7688] dummy0: entered allmulticast mode
[  101.050434][ T7688] bridge0: port 4(dummy0) entered blocking state
[  101.053215][ T7688] bridge0: port 4(dummy0) entered forwarding state
[  101.408686][ T7714] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  101.414143][ T7716] netlink: 'syz.0.773': attribute type 10 has an invalid length.
[  101.421008][ T7716] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  101.503286][ T7724] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  101.510183][ T7724] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  101.517262][ T7724] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  101.745503][ T7730] netlink: 'syz.2.779': attribute type 1 has an invalid length.
[  101.748691][ T7730] nbd: error processing sock list
[  101.751439][ T7730] block nbd0: shutting down sockets
[  102.006439][ T7769] macvlan2: entered allmulticast mode
[  102.008126][ T7769] veth1_vlan: entered allmulticast mode
[  102.011698][ T7769] veth1_vlan: left allmulticast mode
[  102.123609][ T7777] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.801'.
[  102.127925][ T7777] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  102.484266][ T7780] bridge3: entered promiscuous mode
[  102.487655][ T7780] bridge3: entered allmulticast mode
[  102.493162][ T7780] team0: Port device bridge3 added
[  102.774526][ T7811] syzkaller1: entered promiscuous mode
[  102.776632][ T7811] syzkaller1: entered allmulticast mode
[  102.833587][ T7815] netlink: 'syz.2.819': attribute type 1 has an invalid length.
[  102.901939][ T7822] sctp: [Deprecated]: syz.1.822 (pid 7822) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.901939][ T7822] Use struct sctp_sack_info instead
[  102.961300][ T7826] netlink: 'syz.1.824': attribute type 1 has an invalid length.
[  102.963722][ T7826] netlink: 224 bytes leftover after parsing attributes in process `syz.1.824'.
[  103.061302][ T7831] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  103.067672][ T7831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.826'.
[  103.442363][ T7856] xt_l2tp: missing protocol rule (udp|l2tpip)
[  103.647840][ T7859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.938641][ T7884] netlink: 'syz.2.844': attribute type 13 has an invalid length.
[  103.941611][ T7884] netlink: 'syz.2.844': attribute type 17 has an invalid length.
[  103.996721][ T7884] 8021q: adding VLAN 0 to HW filter on device team0
[  104.001515][ T7884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.266315][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'.
[  104.408670][ T7908] netlink: 'syz.2.858': attribute type 1 has an invalid length.
[  104.411870][ T7908] netlink: 'syz.2.858': attribute type 2 has an invalid length.
[  104.493741][ T7913] gretap0: entered promiscuous mode
[  104.654238][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'.
[  104.696107][ T7928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.445370][ T7960] pimreg: entered allmulticast mode
[  105.656629][ T7978] netlink: 'syz.1.886': attribute type 1 has an invalid length.
[  105.659643][ T7978] __nla_validate_parse: 1 callbacks suppressed
[  105.659657][ T7978] netlink: 224 bytes leftover after parsing attributes in process `syz.1.886'.
[  106.050206][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'.
[  107.551026][ T8056] netlink: 276 bytes leftover after parsing attributes in process `syz.2.916'.
[  108.082602][ T8106] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  108.089973][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'.
[  108.120989][ T8106] bridge4: entered promiscuous mode
[  108.122825][ T8106] bridge4: entered allmulticast mode
[  108.129582][ T8106] team0: Port device bridge4 added
[  108.580584][ T5900] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  109.072922][ T8144] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  109.081661][ T8144] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.165831][ T8149] delete_channel: no stack
[  109.618959][ T8168] syzkaller1: entered promiscuous mode
[  109.621124][ T8168] syzkaller1: entered allmulticast mode
[  110.377588][ T8221] netlink: 'syz.1.983': attribute type 4 has an invalid length.
[  110.422046][ T8225] netlink: 'syz.1.985': attribute type 10 has an invalid length.
[  110.440229][ T8225] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  110.526163][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'.
[  110.582220][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'.
[  110.631461][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.993'.
[  110.657735][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'.
[  110.953663][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'.
[  111.660133][ T8269] xt_policy: too many policy elements
[  111.978794][ T8288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1011'.
[  112.139351][ T8303] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1018'.
[  112.407089][ T8326] vxcan1: entered allmulticast mode
[  112.409417][ T8326] vxcan1: left allmulticast mode
[  112.474434][ T8326] raw_sendmsg: syz.2.1027 forgot to set AF_INET. Fix it!
[  113.567653][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'.
[  113.572797][ T8352] veth1_macvtap: left promiscuous mode
[  113.739689][ T8365] netlink: 'syz.1.1044': attribute type 11 has an invalid length.
[  113.769460][ T8365] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1044'.
[  113.811811][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1044'.
[  113.979172][ T8373] netlink: 'syz.1.1048': attribute type 21 has an invalid length.
[  113.982392][ T8373] netlink: 'syz.1.1048': attribute type 1 has an invalid length.
[  113.988383][ T8373] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1048'.
[  114.019637][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1054'.
[  114.068375][ T8379] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1050'.
[  114.102202][ T8380] netlink: 'syz.1.1049': attribute type 13 has an invalid length.
[  114.106127][ T8380] netlink: 'syz.1.1049': attribute type 17 has an invalid length.
[  114.118104][ T8380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.873646][ T8414] delete_channel: no stack
[  115.277080][ T8429] pimreg: entered allmulticast mode
[  115.517682][ T8448] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1080'.
[  116.622636][ T8506] netlink: 'syz.1.1107': attribute type 4 has an invalid length.
[  116.841414][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1115'.
[  117.728345][ T8563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1122'.
[  117.779962][ T8566] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1123'.
[  118.282991][ T8602] dummy0: left allmulticast mode
[  118.286765][ T8602] dummy0: left promiscuous mode
[  118.289032][ T8602] bridge0: port 4(dummy0) entered disabled state
[  118.301233][ T8602] bridge_slave_0: left allmulticast mode
[  118.303479][ T8602] bridge_slave_0: left promiscuous mode
[  118.317596][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.323956][ T8602] bridge_slave_1: left allmulticast mode
[  118.334138][ T8602] bridge_slave_1: left promiscuous mode
[  118.339628][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.353129][ T8602] bond0: (slave bond_slave_0): Releasing backup interface
[  118.361437][ T8602] bond0: (slave bond_slave_1): Releasing backup interface
[  118.383240][ T8602] team0: Port device team_slave_0 removed
[  118.394470][ T8602] team0: Port device team_slave_1 removed
[  118.400150][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.403071][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.410996][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.413888][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.421613][ T8602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  118.510318][ T8606] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  118.521566][   T10] syz0: Port: 1 Link DOWN
[  119.081346][ T8651] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  119.548203][ T8668] netlink: 'syz.1.1168': attribute type 83 has an invalid length.
[  119.714460][ T8672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.723153][ T8672] syzkaller0: entered promiscuous mode
[  119.726810][ T8672] syzkaller0: entered allmulticast mode
[  119.729611][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1171'.
[  119.733135][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'.
[  119.738908][ T8672] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  119.756229][ T8672] tipc: Resetting bearer <eth:syzkaller0>
[  119.762017][ T8671] tipc: Resetting bearer <eth:syzkaller0>
[  119.774418][ T8671] tipc: Disabling bearer <eth:syzkaller0>
[  120.379891][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'.
[  120.382783][ T8698] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1179'.
[  120.639431][ T8708] netlink: 'syz.2.1184': attribute type 1 has an invalid length.
[  120.689658][ T8710] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1185'.
[  120.803362][ T8720] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1186'.
[  120.927878][ T8728] netlink: 'syz.2.1191': attribute type 4 has an invalid length.
[  121.372701][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.379634][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.384279][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.390442][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.394007][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  121.444707][ T8756] tipc: Enabled bearer <ib:caif0>, priority 14
[  121.629657][ T8751] chnl_net:caif_netlink_parms(): no params data found
[  121.738764][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1209'.
[  121.773974][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.780834][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.783671][ T8751] bridge_slave_0: entered allmulticast mode
[  121.799333][ T8751] bridge_slave_0: entered promiscuous mode
[  121.807210][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.810592][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.813896][ T8751] bridge_slave_1: entered allmulticast mode
[  121.821251][ T8751] bridge_slave_1: entered promiscuous mode
[  121.883886][ T8751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.892553][ T8751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.929025][ T8751] team0: Port device team_slave_0 added
[  121.935943][ T8751] team0: Port device team_slave_1 added
[  121.982070][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.986007][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.996972][ T8751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.001544][ T8780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.007524][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.009780][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.021242][ T8751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.031232][ T8780] syzkaller0: entered promiscuous mode
[  122.033399][ T8780] syzkaller0: entered allmulticast mode
[  122.069445][ T8780] tipc: Resetting bearer <eth:syzkaller0>
[  122.093999][ T8779] tipc: Resetting bearer <eth:syzkaller0>
[  122.114424][ T8779] tipc: Disabling bearer <eth:syzkaller0>
[  122.140314][ T8751] hsr_slave_0: entered promiscuous mode
[  122.142918][ T8751] hsr_slave_1: entered promiscuous mode
[  122.146065][ T8751] debugfs: 'hsr0' already exists in 'hsr'
[  122.148282][ T8751] Cannot create hsr debugfs directory
[  122.277888][ T8797] nftables ruleset with unbound set
[  122.406417][ T8805] veth2: entered allmulticast mode
[  122.467751][ T8751] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  122.495838][ T8751] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  122.511288][ T8751] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  122.517337][ T8751] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  122.556393][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.558894][ T8751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.561437][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.563859][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.627246][ T8751] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.631735][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.637770][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.663897][ T8751] 8021q: adding VLAN 0 to HW filter on device team0
[  122.698425][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.701059][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.707048][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.709831][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.755705][ T8826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.790405][ T8826] __nla_validate_parse: 1 callbacks suppressed
[  122.790422][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1231'.
[  122.970945][ T8751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.040783][ T8751] veth0_vlan: entered promiscuous mode
[  123.054344][ T8751] veth1_vlan: entered promiscuous mode
[  123.096845][ T8751] veth0_macvtap: entered promiscuous mode
[  123.102950][ T8751] veth1_macvtap: entered promiscuous mode
[  123.116084][   T10] tipc: Node number set to 663912797
[  123.118862][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.138143][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.167189][ T6874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.170499][ T6874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.259522][ T6874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.262916][ T6874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.334375][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.338064][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.387324][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.390227][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.437149][ T5856] Bluetooth: hci3: command tx timeout
[  123.450781][ T8850] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1239'.
[  123.668394][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'.
[  123.690091][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1247'.
[  123.920029][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1255'.
[  123.927039][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1255'.
[  123.948815][ T8886] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1256'.
[  123.969736][ T8886] netlink: 'syz.1.1256': attribute type 1 has an invalid length.
[  124.018051][ T8886] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.037424][ T8894] bond2: (slave gretap1): making interface the new active one
[  124.043025][ T8894] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  124.080393][ T8894] syz.1.1256 (8894) used greatest stack depth: 18992 bytes left
[  124.158687][ T8900] bond0: (slave syz_tun): Releasing backup interface
[  124.179101][ T8900] bridge_slave_0: left allmulticast mode
[  124.181176][ T8900] bridge_slave_0: left promiscuous mode
[  124.183041][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.194390][ T8900] bridge_slave_1: left allmulticast mode
[  124.197756][ T8900] bridge_slave_1: left promiscuous mode
[  124.200688][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.209385][ T8900] bond0: (slave bond_slave_0): Releasing backup interface
[  124.217698][ T8900] bond0: (slave bond_slave_1): Releasing backup interface
[  124.238347][ T8900] team0: Port device team_slave_0 removed
[  124.258650][ T8900] team0: Port device team_slave_1 removed
[  124.261171][ T8900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.264310][ T8900] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.269826][ T8900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.273624][ T8900] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.276652][ T8912] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1264'.
[  124.281465][ T8900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  124.288740][ T8904] netlink: 'syz.2.1264': attribute type 29 has an invalid length.
[  124.302689][ T8908] netlink: 'syz.2.1264': attribute type 29 has an invalid length.
[  124.464302][ T8920] netlink: 'syz.3.1271': attribute type 1 has an invalid length.
[  124.471403][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'.
[  124.487169][ T8924] netlink: 'syz.1.1272': attribute type 1 has an invalid length.
[  124.490302][ T8924] netlink: 'syz.1.1272': attribute type 2 has an invalid length.
[  124.493070][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'.
[  124.781802][ T8948] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  124.819548][ T8942] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.926440][ T8959] netlink: 'syz.3.1289': attribute type 11 has an invalid length.
[  124.974284][ T8961] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  125.012815][ T8961] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  125.111984][ T8970] netlink: 'syz.2.1290': attribute type 10 has an invalid length.
[  125.122375][ T8970] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  125.151548][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.187480][ T8974] TCP: TCP_TX_DELAY enabled
[  125.190682][ T8961] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.197180][ T8961] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.339951][ T8981] netlink: 'syz.3.1298': attribute type 1 has an invalid length.
[  125.390525][ T8983] netlink: del zone limit has 4 unknown bytes
[  125.505597][ T5856] Bluetooth: hci3: command tx timeout
[  125.903892][ T9022] netem: incorrect ge model size
[  125.910247][ T9022] netem: change failed
[  125.990573][ T9028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.993835][ T9028] syzkaller0: entered promiscuous mode
[  125.997086][ T9028] syzkaller0: entered allmulticast mode
[  126.011781][ T9028] tipc: Resetting bearer <eth:syzkaller0>
[  126.016614][ T9027] tipc: Resetting bearer <eth:syzkaller0>
[  126.026621][ T9027] tipc: Disabling bearer <eth:syzkaller0>
[  126.062935][ T9030] netlink: 'syz.2.1322': attribute type 3 has an invalid length.
[  126.331617][   T10] IPVS: starting estimator thread 0...
[  126.417797][ T9053] IPVS: using max 58 ests per chain, 139200 per kthread
[  126.730123][ T9074] sctp: [Deprecated]: syz.1.1342 (pid 9074) Use of struct sctp_assoc_value in delayed_ack socket option.
[  126.730123][ T9074] Use struct sctp_sack_info instead
[  126.905517][ T9092] smc: net device bond0 applied user defined pnetid SYZ0
[  126.925786][ T9092] smc: net device bond0 erased user defined pnetid SYZ0
[  127.531859][ T9133] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  127.538804][ T9133] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  127.598310][ T5856] Bluetooth: hci3: command tx timeout
[  127.806089][ T9157] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  128.095986][ T9176] __nla_validate_parse: 16 callbacks suppressed
[  128.096003][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1386'.
[  128.563959][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1406'.
[  128.568362][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1406'.
[  128.862184][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'.
[  129.248363][ T9231] geneve2: left promiscuous mode
[  129.250189][ T9231] geneve2: left allmulticast mode
[  129.290119][ T9231] bridge3: left promiscuous mode
[  129.292396][ T9231] bridge3: left allmulticast mode
[  129.303560][ T9231] bridge4: left promiscuous mode
[  129.307898][ T9231] bridge4: left allmulticast mode
[  129.317557][ T9240] hsr_slave_0: left promiscuous mode
[  129.319899][ T9240] hsr_slave_1: left promiscuous mode
[  129.333179][ T5865] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.339462][ T5865] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.342376][ T5865] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.345874][ T5865] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.394868][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'.
[  129.398832][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1424'.
[  129.460603][ T9264] xt_time: invalid argument - start or stop time greater than 23:59:59
[  129.597093][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'.
[  129.600585][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1428'.
[  129.603923][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'.
[  129.610262][ T9270] validate_nla: 4 callbacks suppressed
[  129.610294][ T9270] netlink: 'syz.3.1428': attribute type 5 has an invalid length.
[  129.665152][ T5856] Bluetooth: hci3: command tx timeout
[  129.983502][ T9292] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1439'.
[  131.344471][ T9374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.344259][ T9454] netlink: 'syz.3.1486': attribute type 5 has an invalid length.
[  132.550367][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.552929][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.615398][ T9467] netlink: 'syz.3.1492': attribute type 10 has an invalid length.
[  132.619067][ T9467] veth1_vlan: entered allmulticast mode
[  132.627204][ T9467] team0: Device veth1_vlan failed to register rx_handler
[  133.266378][ T9504] __nla_validate_parse: 10 callbacks suppressed
[  133.266399][ T9504] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1509'.
[  133.272352][ T9504] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1509'.
[  133.283640][ T9504] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1509'.
[  133.440309][ T9518] ieee802154 phy0 wpan0: encryption failed: -90
[  133.454519][ T9520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.611687][ T9537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1525'.
[  133.700609][ T5900] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  134.089573][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'.
[  134.092944][ T9575] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  134.100757][ T9575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.168470][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'.
[  134.171444][ T9583] tipc: Started in network mode
[  134.173332][ T9583] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711
[  134.181151][ T9583] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  137.498003][ T9665] netlink: 'syz.2.1582': attribute type 83 has an invalid length.
[  138.452708][ T9675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1585'.
[  139.770198][ T9702] nft_compat: unsupported protocol 0
[  139.807978][ T9704] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1599'.
[  140.181665][ T9718] erspan0: entered promiscuous mode
[  140.184191][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'.
[  140.289682][ T5900] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.296441][ T5900] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.299934][ T5900] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.303113][ T5900] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.332306][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1608'.
[  140.793514][ T9746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.799411][ T9746] syzkaller0: entered promiscuous mode
[  140.802640][ T9746] syzkaller0: entered allmulticast mode
[  140.821416][ T9746] tipc: Resetting bearer <eth:syzkaller0>
[  140.826976][ T9745] tipc: Resetting bearer <eth:syzkaller0>
[  140.839804][ T9745] tipc: Disabling bearer <eth:syzkaller0>
[  141.112241][ T9758] @: renamed from veth0_vlan
[  141.218858][ T9764] netlink: 'syz.2.1627': attribute type 7 has an invalid length.
[  141.222798][ T9764] netlink: 'syz.2.1627': attribute type 8 has an invalid length.
[  141.663461][ T9778] delete_channel: no stack
[  142.909129][ T9801] veth5: entered promiscuous mode
[  143.674506][ T9805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1644'.
[  143.764555][ T9808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1645'.
[  143.768452][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1645'.
[  144.760252][ T9821] netlink: 'syz.2.1649': attribute type 21 has an invalid length.
[  144.763548][ T9821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1649'.
[  144.770559][ T9821] netlink: 'syz.2.1649': attribute type 1 has an invalid length.
[  145.044240][ T9830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1653'.
[  146.044420][ T9837] netlink: 'syz.2.1656': attribute type 7 has an invalid length.
[  146.057286][ T9837] : entered promiscuous mode
[  147.027870][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'.
[  147.184310][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'.
[  147.227553][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  147.231107][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  147.234351][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  147.242180][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  147.245514][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  147.461412][ T9849] chnl_net:caif_netlink_parms(): no params data found
[  147.538084][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.541021][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.543556][ T9849] bridge_slave_0: entered allmulticast mode
[  147.547046][ T9849] bridge_slave_0: entered promiscuous mode
[  147.550569][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.552820][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.555152][ T9849] bridge_slave_1: entered allmulticast mode
[  147.558699][ T9849] bridge_slave_1: entered promiscuous mode
[  147.582499][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.588755][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.623037][ T9849] team0: Port device team_slave_0 added
[  147.627160][ T9849] team0: Port device team_slave_1 added
[  147.654067][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.657289][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.668128][ T9849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.674227][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.677588][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.687565][ T9849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.746203][ T9849] hsr_slave_0: entered promiscuous mode
[  147.749422][ T9849] hsr_slave_1: entered promiscuous mode
[  147.961681][ T9849] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  147.974911][ T9849] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  147.982014][ T9849] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  147.994040][ T9849] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  148.022403][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.025338][ T9849] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.028372][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.030944][ T9849] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.032264][ T9890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1674'.
[  148.037599][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1674'.
[  148.041339][ T9890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1674'.
[  148.083020][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.093909][ T9430] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.098431][ T9430] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.111684][ T9849] 8021q: adding VLAN 0 to HW filter on device team0
[  148.122634][ T9430] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.125212][ T9430] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.136449][ T9430] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.139247][ T9430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.271292][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.463987][ T9849] veth0_vlan: entered promiscuous mode
[  148.473659][ T9849] veth1_vlan: entered promiscuous mode
[  148.503732][ T9849] veth0_macvtap: entered promiscuous mode
[  148.513782][ T9849] veth1_macvtap: entered promiscuous mode
[  148.530905][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.544351][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.557074][ T5865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.560656][ T5865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.566016][ T5865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.569655][ T5865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.639825][ T4660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.649536][ T4660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.672930][ T4660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.676114][ T4660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.841952][ T9908] __nla_validate_parse: 1 callbacks suppressed
[  148.841970][ T9908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1676'.
[  149.056453][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'.
[  149.060143][ T9924] IPv6: Can't replace route, no match found
[  149.267968][   T54] Bluetooth: hci4: command tx timeout
[  149.426852][ T9946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1696'.
[  149.430309][ T9946] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1696'.
[  149.433913][ T9946] tipc: Invalid UDP bearer configuration
[  149.433960][ T9946] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  150.213557][ T9968] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  150.308896][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1711'.
[  150.650759][T10001] dvmrp8: entered allmulticast mode
[  150.655737][T10000] dvmrp8: left allmulticast mode
[  151.080743][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  151.086576][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  151.089464][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  151.093656][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  151.100304][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  151.257227][T10022] chnl_net:caif_netlink_parms(): no params data found
[  151.345220][ T5856] Bluetooth: hci4: command tx timeout
[  151.373964][T10022] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.377010][T10022] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.379977][T10022] bridge_slave_0: entered allmulticast mode
[  151.383792][T10022] bridge_slave_0: entered promiscuous mode
[  151.393165][T10022] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.396323][T10022] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.399424][T10022] bridge_slave_1: entered allmulticast mode
[  151.403160][T10022] bridge_slave_1: entered promiscuous mode
[  151.436997][T10022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.446712][T10022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.476738][T10022] team0: Port device team_slave_0 added
[  151.480352][T10022] team0: Port device team_slave_1 added
[  151.510190][T10022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.512861][T10022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.523001][T10022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.529383][T10022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.532031][T10022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.542806][T10022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.597714][T10022] hsr_slave_0: entered promiscuous mode
[  151.601133][T10022] hsr_slave_1: entered promiscuous mode
[  151.603997][T10022] debugfs: 'hsr0' already exists in 'hsr'
[  151.608615][T10022] Cannot create hsr debugfs directory
[  151.730803][T10056] netlink: 'syz.2.1745': attribute type 1 has an invalid length.
[  151.733873][T10056] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1745'.
[  151.811876][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'.
[  151.822157][T10022] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  151.832527][T10022] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  151.843110][T10022] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  151.852338][T10022] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  151.963426][T10022] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.979700][T10022] 8021q: adding VLAN 0 to HW filter on device team0
[  151.994658][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.997165][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.008780][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.011247][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.221639][T10022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.404694][T10100] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  152.410525][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'.
[  152.489778][T10022] veth0_vlan: entered promiscuous mode
[  152.499702][T10022] veth1_vlan: entered promiscuous mode
[  152.540257][T10022] veth0_macvtap: entered promiscuous mode
[  152.559186][T10022] veth1_macvtap: entered promiscuous mode
[  152.590545][T10022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.609227][T10022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.622294][ T5865] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.638747][ T5900] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.653645][ T5900] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.666383][ T5900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.782460][ T4492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.787229][ T4492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.837559][ T9430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.841593][ T9430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.146965][T10121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.155756][T10133] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input4
[  153.185910][ T5856] Bluetooth: hci5: command tx timeout
[  153.279144][T10121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.319417][T10121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.377163][T10121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.428397][ T5856] Bluetooth: hci4: command tx timeout
[  153.433178][T10145] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1768'.
[  153.487915][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  153.510354][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.524300][ T6874] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.560807][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  153.743223][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1774'.
[  153.879224][T10162] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1778'.
[  153.902654][T10164] ip6tnl1: entered promiscuous mode
[  153.966959][T10134] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  153.970899][T10134] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  153.997062][T10134] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  154.003570][T10134] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  154.050251][T10134] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  154.067886][T10134] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  154.219184][T10134] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  154.222732][T10134] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  154.247117][T10181] xt_l2tp: v2 tid > 0xffff: 37482740
[  154.328498][T10134] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  154.330596][T10134] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  154.356295][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1789'.
[  154.500920][T10201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1796'.
[  154.503944][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1796'.
[  154.510311][T10201] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1796'.
[  154.514009][T10201] netlink: 'syz.2.1796': attribute type 3 has an invalid length.
[  154.517128][   T24] IPVS: starting estimator thread 0...
[  154.517157][T10201] netlink: 'syz.2.1796': attribute type 2 has an invalid length.
[  154.521907][T10201] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1796'.
[  154.526600][T10201] netlink: 'syz.2.1796': attribute type 2 has an invalid length.
[  154.605411][T10203] IPVS: using max 56 ests per chain, 134400 per kthread
[  154.646358][T10206] syzkaller0: entered promiscuous mode
[  154.648671][T10206] syzkaller0: entered allmulticast mode
[  155.570561][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1803'.
[  156.580864][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1820'.
[  156.614300][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'.
[  157.079077][T10306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1846'.
[  157.150456][T10314] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  157.251612][T10320] geneve2: entered promiscuous mode
[  157.377594][T10331] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  158.187056][T10365] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.895824][T10425] __nla_validate_parse: 2 callbacks suppressed
[  158.895843][T10425] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1899'.
[  158.902181][T10425] netlink: 560 bytes leftover after parsing attributes in process `syz.5.1899'.
[  158.939669][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'.
[  158.944522][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'.
[  159.159704][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1907'.
[  159.312998][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'.
[  159.316761][T10457] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  159.319166][T10457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.448921][T10468] netlink: 'syz.5.1918': attribute type 4 has an invalid length.
[  159.532184][T10473] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1919'.
[  159.544408][T10472] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1919'.
[  160.474108][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1931'.
[  160.493540][T10498] bridge0: entered promiscuous mode
[  160.497654][T10498] bridge0: left promiscuous mode
[  160.905285][T10527] netlink: 'syz.4.1943': attribute type 8 has an invalid length.
[  161.119242][T10541] dvmrp1: tun_chr_ioctl cmd 1074025677
[  161.121575][T10541] dvmrp1: linktype set to 773
[  161.210659][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1956'.
[  162.546269][T10653] nbd1: detected capacity change from 0 to 127
[  162.552226][   T56] block nbd1: Receive control failed (result -32)
[  162.558678][T10138] block nbd1: Dead connection, failed to find a fallback
[  162.561532][T10138] block nbd1: shutting down sockets
[  162.563993][T10138] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  162.592924][T10138] Buffer I/O error on dev nbd1, logical block 0, async page read
[  162.607479][T10138] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  162.611026][T10138] Buffer I/O error on dev nbd1, logical block 1, async page read
[  162.614227][T10138] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  162.619225][T10662] netlink: 'syz.5.2006': attribute type 178 has an invalid length.
[  162.626390][T10138] Buffer I/O error on dev nbd1, logical block 2, async page read
[  162.629617][T10138] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  162.633185][T10138] Buffer I/O error on dev nbd1, logical block 3, async page read
[  162.656054][T10138] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  162.659683][T10138] Buffer I/O error on dev nbd1, logical block 0, async page read
[  162.662900][T10138] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  162.695379][T10138] Buffer I/O error on dev nbd1, logical block 1, async page read
[  162.698761][T10138] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  162.702399][T10138] Buffer I/O error on dev nbd1, logical block 2, async page read
[  162.712381][T10138] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  162.717996][T10138] Buffer I/O error on dev nbd1, logical block 3, async page read
[  162.727585][T10138] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  162.730444][T10138] Buffer I/O error on dev nbd1, logical block 0, async page read
[  162.733955][T10138] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  162.744938][T10138] Buffer I/O error on dev nbd1, logical block 1, async page read
[  162.775448][T10138] ldm_validate_partition_table(): Disk read failed.
[  162.778858][T10138] Dev nbd1: unable to read RDB block 0
[  162.782412][T10138]  nbd1: unable to read partition table
[  162.817277][T10138] ldm_validate_partition_table(): Disk read failed.
[  162.822578][T10138] Dev nbd1: unable to read RDB block 0
[  162.828815][T10673] netlink: 'syz.5.2011': attribute type 39 has an invalid length.
[  162.829542][T10138]  nbd1: unable to read partition table
[  164.900826][T10734] netlink: 'syz.5.2037': attribute type 22 has an invalid length.
[  164.962258][T10740] tipc: Started in network mode
[  164.969411][T10740] tipc: Node identity a2c522f8a7cd, cluster identity 4711
[  164.971799][T10740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.980598][T10740] syzkaller0: entered promiscuous mode
[  164.982498][T10740] syzkaller0: entered allmulticast mode
[  164.990626][T10742] __nla_validate_parse: 7 callbacks suppressed
[  164.990642][T10742] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2040'.
[  165.028241][T10740] tipc: Resetting bearer <eth:syzkaller0>
[  165.038474][T10739] tipc: Resetting bearer <eth:syzkaller0>
[  165.066243][T10739] tipc: Disabling bearer <eth:syzkaller0>
[  165.150266][T10755] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2047'.
[  165.209356][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2049'.
[  165.234629][T10760] tipc: Enabled bearer <eth:vlan0>, priority 18
[  165.295434][T10766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.301142][T10770] netlink: 'syz.2.2055': attribute type 3 has an invalid length.
[  165.716367][T10805] openvswitch: netlink: Message has 20 unknown bytes.
[  165.718491][T10805] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.147544][T10800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  166.225496][   T24] tipc: Node number set to 84419320
[  166.277307][T10832] netlink: 'syz.4.2077': attribute type 1 has an invalid length.
[  166.285061][T10832] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2077'.
[  166.771195][T10884] dummy0: entered allmulticast mode
[  166.773813][T10883] dummy0: left allmulticast mode
[  166.944634][T10895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.258190][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2121'.
[  167.454008][T10940] netlink: 'syz.5.2129': attribute type 3 has an invalid length.
[  167.463017][T10940] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2129'.
[  167.571455][T10951] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2134'.
[  167.889010][T10966] netlink: 'syz.4.2141': attribute type 6 has an invalid length.
[  167.891997][T10966] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2141'.
[  168.441458][T11014] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2165'.
[  168.630913][T11025] netlink: 'syz.5.2170': attribute type 1 has an invalid length.
[  168.633739][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2170'.
[  168.688848][T11030] netlink: 'syz.4.2172': attribute type 7 has an invalid length.
[  168.701776][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  168.701803][T11030] netlink: 'syz.4.2172': attribute type 7 has an invalid length.
[  168.707924][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  168.712577][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  168.733051][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  168.890410][T11044] netlink: 'syz.4.2179': attribute type 1 has an invalid length.
[  169.350423][T11081] netlink: 'syz.5.2195': attribute type 1 has an invalid length.
[  169.389902][T11081] bond1: entered promiscuous mode
[  169.395751][T11081] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.427619][T11085] batadv1: entered promiscuous mode
[  169.429798][T11085] batadv1: entered allmulticast mode
[  169.433519][T11085] 8021q: adding VLAN 0 to HW filter on device batadv1
[  169.443270][T11085] bond1: (slave batadv1): making interface the new active one
[  169.448594][T11085] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  170.783383][T11141] __nla_validate_parse: 21 callbacks suppressed
[  170.783405][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'.
[  171.182065][T11174] syzkaller0: entered promiscuous mode
[  171.184226][T11174] syzkaller0: entered allmulticast mode
[  171.258352][T11178] validate_nla: 2 callbacks suppressed
[  171.258366][T11178] netlink: 'syz.5.2236': attribute type 3 has an invalid length.
[  171.316720][T11180] netlink: 'syz.5.2237': attribute type 11 has an invalid length.
[  171.319343][T11180] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2237'.
[  173.097247][T11221] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[  173.546795][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2265'.
[  173.566236][T11251] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  173.882308][T11289] netlink: 'syz.2.2284': attribute type 10 has an invalid length.
[  173.933090][T11293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.939812][T11293] syzkaller0: entered promiscuous mode
[  173.942086][T11293] syzkaller0: entered allmulticast mode
[  173.979148][T11293] tipc: Resetting bearer <eth:syzkaller0>
[  173.982693][T11292] tipc: Resetting bearer <eth:syzkaller0>
[  173.995923][T11292] tipc: Disabling bearer <eth:syzkaller0>
[  174.202858][T11309] tipc: Failed to remove unknown binding: 66,1,1/0:2242564529/2242564531
[  174.209503][T11309] tipc: Failed to remove unknown binding: 66,1,1/0:2242564529/2242564531
[  174.213194][T11309] tipc: Failed to remove unknown binding: 66,1,1/0:2242564529/2242564531
[  174.358610][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2300'.
[  174.361627][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2300'.
[  174.385424][T11323] netlink: 'syz.4.2301': attribute type 10 has an invalid length.
[  174.392520][T11323] 8021q: adding VLAN 0 to HW filter on device team0
[  174.397495][T11323] bond0: (slave team0): Enslaving as an active interface with an up link
[  174.414254][T11323] netlink: 'syz.4.2301': attribute type 10 has an invalid length.
[  174.444327][T11323] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  174.448206][T11330] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2305'.
[  174.628585][T11347] netlink: 'syz.2.2313': attribute type 1 has an invalid length.
[  174.661813][T11347] 8021q: adding VLAN 0 to HW filter on device bond3
[  174.684642][T11347] 8021q: adding VLAN 0 to HW filter on device bond3
[  174.688172][T11347] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  174.693695][T11347] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  174.734064][T11354] bond3: (slave bridge5): Enslaving as an active interface with a down link
[  175.093122][T11373] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  175.473182][T11412] sctp: [Deprecated]: syz.2.2337 (pid 11412) Use of int in max_burst socket option deprecated.
[  175.473182][T11412] Use struct sctp_assoc_value instead
[  176.033246][T11437] netlink: 'syz.4.2346': attribute type 2 has an invalid length.
[  176.219757][T11452] openvswitch: netlink: IPv4 tun info is not correct
[  176.243934][T11454] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2353'.
[  176.283489][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2355'.
[  176.287891][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2355'.
[  176.372849][T11462] nbd: must specify at least one socket
[  176.506500][T11473] netlink: 'syz.2.2362': attribute type 2 has an invalid length.
[  176.509695][T11473] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2362'.
[  176.787816][T11494] netlink: 'syz.4.2371': attribute type 3 has an invalid length.
[  176.796827][T11494] netlink: 'syz.4.2371': attribute type 1 has an invalid length.
[  176.801089][T11494] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2371'.
[  177.387870][T11521] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2382'.
[  177.391586][T11521] ..0: renamed from hsr0 (while UP)
[  177.399802][T11521] ..0: entered allmulticast mode
[  177.401981][T11521] hsr_slave_0: entered allmulticast mode
[  177.404194][T11521] hsr_slave_1: entered allmulticast mode
[  177.409433][T11521] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  177.926855][T11527] netlink: 'syz.2.2385': attribute type 1 has an invalid length.
[  177.929831][T11527] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2385'.
[  177.933484][T11527] netlink: 'syz.2.2385': attribute type 1 has an invalid length.
[  178.175268][T11539] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2391'.
[  178.207682][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'.
[  178.363664][ T5850] IPVS: starting estimator thread 0...
[  178.475572][T11553] IPVS: using max 64 ests per chain, 153600 per kthread
[  178.703405][T11591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2414'.
[  178.759341][T11595] syzkaller1: entered promiscuous mode
[  178.761710][T11595] syzkaller1: entered allmulticast mode
[  178.810559][T11599] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma?
[  178.961294][T11599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.988637][T11599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.008122][T11599] bond0 (unregistering): Released all slaves
[  179.780562][T11643] netlink: 'syz.4.2438': attribute type 4 has an invalid length.
[  179.803819][T11645] veth0_to_bridge: entered promiscuous mode
[  179.808335][T11644] veth0_to_bridge: left promiscuous mode
[  179.861321][T11650] netlink: 'syz.4.2438': attribute type 4 has an invalid length.
[  180.727937][T11718] syz.5.2474 uses old SIOCAX25GETINFO
[  180.890055][T11735] geneve3: entered promiscuous mode
[  180.891948][T11735] geneve3: entered allmulticast mode
[  181.510814][T11785] syzkaller0: entered promiscuous mode
[  181.513053][T11785] syzkaller0: entered allmulticast mode
[  182.928699][T11804] netlink: 'syz.4.2513': attribute type 1 has an invalid length.
[  182.931212][T11804] __nla_validate_parse: 6 callbacks suppressed
[  182.931219][T11804] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2513'.
[  182.985001][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2516'.
[  183.253203][T11839] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2528'.
[  183.483935][T11844] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2530'.
[  183.716135][T11865] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2534'.
[  184.474129][T11880] netlink: 'syz.5.2546': attribute type 3 has an invalid length.
[  184.478044][T11880] netlink: 'syz.5.2546': attribute type 1 has an invalid length.
[  184.481211][T11880] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.2546'.
[  184.634018][T11887] netlink: 'syz.4.2548': attribute type 2 has an invalid length.
[  184.872981][T11911] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2560'.
[  184.879292][T11910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2559'.
[  184.886353][T11910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2559'.
[  185.020205][T11923] netlink: 'syz.4.2566': attribute type 4 has an invalid length.
[  185.022932][T11923] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2566'.
[  185.030304][T11925] netlink: 'syz.5.2568': attribute type 15 has an invalid length.
[  185.741022][T11993] pim6reg1: entered allmulticast mode
[  185.865065][T12002] netlink: 'syz.4.2603': attribute type 1 has an invalid length.
[  186.440098][T12052] netlink: 'syz.2.2627': attribute type 28 has an invalid length.
[  186.639008][T12068] geneve3: entered promiscuous mode
[  186.641565][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.646254][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.653683][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.658262][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.828152][T12090] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  186.832488][T12090] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.912948][T12098] netlink: 'syz.5.2649': attribute type 6 has an invalid length.
[  187.244262][T12126] IPVS: Scheduler module ip_vs_sip not found
[  187.857548][T12157] netlink: 'syz.5.2676': attribute type 1 has an invalid length.
[  187.909224][T12157] bond0: (slave geneve2): making interface the new active one
[  187.915256][T12157] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  187.918237][ T5900] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  187.925531][ T5865] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  187.931448][ T5865] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  187.937389][ T5865] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  187.952092][T12162] __nla_validate_parse: 6 callbacks suppressed
[  187.952104][T12162] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2678'.
[  188.003555][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2680'.
[  188.014881][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2680'.
[  188.163215][T12179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2686'.
[  188.170789][T12179] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2686'.
[  188.280284][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2691'.
[  188.283693][T12191] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2691'.
[  188.421776][T12203] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2697'.
[  188.587007][T12224] IPVS: rr: FWM 3 0x00000003 - no destination available
[  188.747982][T12241] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2712'.
[  188.814411][T12245] netlink: 'syz.2.2714': attribute type 2 has an invalid length.
[  188.980843][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2719'.
[  189.211578][T12259] bridge0: port 1(erspan0) entered blocking state
[  189.218306][T12259] bridge0: port 1(erspan0) entered disabled state
[  189.221193][T12259] erspan0: entered allmulticast mode
[  189.243284][T12259] erspan0: left allmulticast mode
[  189.246744][T12259] bridge0: port 1(erspan0) entered disabled state
[  190.031483][T12323] netlink: 'syz.4.2751': attribute type 58 has an invalid length.
[  193.584528][T12589] netlink: 'syz.2.2874': attribute type 1 has an invalid length.
[  193.587614][T12589] __nla_validate_parse: 13 callbacks suppressed
[  193.587622][T12589] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2874'.
[  193.990207][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.328836][T12626] netlink: 'syz.5.2889': attribute type 10 has an invalid length.
[  194.332181][T12626] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.344118][T12626] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.510914][T12632] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2892'.
[  194.513915][T12632] nbd: illegal input index 65508
[  194.600128][T12638] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2894'.
[  194.706128][T12644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2897'.
[  196.581455][T12677] bond0: Unable to set up delay as MII monitoring is disabled
[  196.800453][T12692] bridge_slave_0: left allmulticast mode
[  196.803192][T12692] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.812995][T12692] bridge_slave_1: left allmulticast mode
[  196.818428][T12692] bridge_slave_1: left promiscuous mode
[  196.821902][T12692] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.843025][T12692] team0: Port device team_slave_0 removed
[  196.848413][T12696] netlink: 'syz.5.2917': attribute type 10 has an invalid length.
[  196.852688][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2917'.
[  196.864402][T12692] team0: Port device team_slave_1 removed
[  196.872292][T12692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.876711][T12692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.882964][T12692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  196.920673][T12696] batman_adv: batadv0: Adding interface: virt_wifi0
[  196.928569][T12696] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.963836][T12696] batman_adv: batadv0: Interface activated: virt_wifi0
[  197.042993][T12702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2921'.
[  197.054294][T12702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2921'.
[  197.304957][T12716] tipc: Started in network mode
[  197.306586][T12716] tipc: Node identity 3e200de87a84, cluster identity 4711
[  197.309088][T12716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.343259][T12716] syzkaller0: entered promiscuous mode
[  197.345912][T12716] syzkaller0: entered allmulticast mode
[  197.348294][T12716] tipc: Resetting bearer <eth:syzkaller0>
[  197.356989][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2928'.
[  197.443077][T12714] tipc: Resetting bearer <eth:syzkaller0>
[  198.426781][   T24] tipc: Node number set to 1151602152
[  198.988041][T12714] tipc: Disabling bearer <eth:syzkaller0>
[  199.476926][T12781] netlink: 'syz.2.2956': attribute type 1 has an invalid length.
[  199.591751][T12785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2958'.
[  200.589886][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'.
[  200.882666][T12826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  201.269836][T12855] netlink: zone id is out of range
[  201.272956][T12855] netlink: zone id is out of range
[  201.277844][T12855] netlink: zone id is out of range
[  201.280212][T12855] netlink: zone id is out of range
[  201.326391][T12855] netlink: set zone limit has 4 unknown bytes
[  201.347157][T12857] netlink: del zone limit has 4 unknown bytes
[  201.423468][T12844] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  201.445918][T12844] tipc: Resetting bearer <eth:vlan0>
[  201.552405][T12844] bond1: left promiscuous mode
[  201.562203][T12844] batadv1: left promiscuous mode
[  201.564229][T12844] batadv1: left allmulticast mode
[  201.580049][T12854] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  201.605314][ T5900] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.608835][ T5900] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  201.612235][ T5900] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.623130][ T5900] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  201.627848][ T5900] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.631315][ T5900] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  201.634610][ T5900] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.642359][ T5900] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  201.770585][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2993'.
[  201.774039][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2993'.
[  202.007540][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'.
[  202.700612][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2999'.
[  202.704539][T12882] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2999'.
[  202.911722][T12892] bond0: Error: Cannot enslave bond to itself.
[  203.243952][T12915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3016'.
[  203.247875][T12915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3016'.
[  203.299009][T12920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.302152][T12920] syzkaller0: entered promiscuous mode
[  203.304354][T12920] syzkaller0: entered allmulticast mode
[  203.313159][T12920] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  203.657271][T12927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.662284][T12927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.756264][T12927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.760409][T12927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.831598][T12927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.835948][T12927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.893426][T12928] tipc: Resetting bearer <eth:syzkaller0>
[  203.951907][T12927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.956883][T12927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.057404][ T6874] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  204.060406][ T6874] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.075649][ T6874] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  204.078615][ T6874] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.098362][ T6874] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  204.101786][ T6874] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.116604][ T6874] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.134022][ T6874] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.315379][   T10] tipc: Node number set to 948012900
[  204.681045][T12971] netlink: 'syz.5.3042': attribute type 1 has an invalid length.
[  204.701750][T12971] 8021q: adding VLAN 0 to HW filter on device bond2
[  204.730784][T12971] vlan4: entered allmulticast mode
[  204.732456][T12971] batadv0: entered allmulticast mode
[  204.742146][T12971] bond2: (slave vlan4): Opening slave failed
[  204.973431][T12987] 8021q: adding VLAN 0 to HW filter on device team0
[  205.043195][T12991] netlink: 'syz.4.3049': attribute type 1 has an invalid length.
[  205.046706][T12991] netlink: 'syz.4.3049': attribute type 1 has an invalid length.
[  205.328146][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3054'.
[  205.438331][T13006] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  205.450997][T13006] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  205.462953][T13006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.473997][T13006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.552481][T13011] netlink: 'syz.2.3058': attribute type 13 has an invalid length.
[  205.555808][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3058'.
[  205.559888][ T5900] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.561663][T13011] netlink: 'syz.2.3058': attribute type 13 has an invalid length.
[  205.570749][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3058'.
[  205.574316][ T5900] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.585232][ T5900] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.591822][ T5900] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.600727][ T6874] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.603879][ T6874] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.608080][ T6874] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.611167][ T6874] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.526873][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'.
[  207.201900][T13110] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3099'.
[  207.209615][T13110] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  207.213005][T13110] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  207.329389][T13122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3105'.
[  207.332884][T13122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3105'.
[  207.339544][T13122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3105'.
[  207.600358][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'.
[  207.609486][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'.
[  207.946525][T13162] netlink: 'syz.5.3124': attribute type 29 has an invalid length.
[  207.964132][T13164] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  207.964852][T13162] netlink: 'syz.5.3124': attribute type 29 has an invalid length.
[  207.967345][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.386703][T13196] trusted_key: syz.2.3139 sent an empty control message without MSG_MORE.
[  208.521419][T13208] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  209.202545][T13256] net veth1_virt_wifi : renamed from virt_wifi0
[  211.852325][T13300] __nla_validate_parse: 4 callbacks suppressed
[  211.852341][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3183'.
[  211.935524][T13303] netlink: 464 bytes leftover after parsing attributes in process `syz.4.3185'.
[  211.941322][T13303] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3185'.
[  211.950548][T13303] 0: renamed from ..0
[  211.958256][T13303] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  211.965560][T13303] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  211.976252][T13303] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  212.025549][T13310] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3188'.
[  212.464320][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3205'.
[  212.504492][T13348] batman_adv: batadv0: Removing interface: virt_wifi0
[  212.610811][T13358] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3210'.
[  213.371533][T13418] netlink: 'syz.5.3237': attribute type 29 has an invalid length.
[  213.383125][T13418] netlink: 'syz.5.3237': attribute type 29 has an invalid length.
[  213.499294][T13425] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3242'.
[  213.557769][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3243'.
[  213.561711][T13429] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3243'.
[  213.719504][ T5865] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  214.916444][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3260'.
[  215.028594][T13480] netlink: 'syz.5.3265': attribute type 3 has an invalid length.
[  215.071012][T13484] IPv6: NLM_F_CREATE should be specified when creating new route
[  215.392653][T13495] openvswitch: netlink: IP tunnel dst address not specified
[  215.697608][T13508] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  215.974133][T13518] netlink: 'syz.4.3278': attribute type 21 has an invalid length.
[  215.978169][T13518] netlink: 'syz.4.3278': attribute type 5 has an invalid length.
[  215.981197][T13518] netlink: 'syz.4.3278': attribute type 6 has an invalid length.
[  216.156481][T13531] netlink: 'syz.2.3286': attribute type 3 has an invalid length.
[  216.590846][T13557] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  217.304514][T13589] tipc: Enabled bearer <udp:syz2>, priority 10
[  218.239859][T13652] bridge_slave_1: left allmulticast mode
[  218.242421][T13652] bridge_slave_1: left promiscuous mode
[  218.247435][T13652] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.253586][T13652] bridge_slave_0: left allmulticast mode
[  218.256813][T13652] bridge_slave_0: left promiscuous mode
[  218.259329][T13652] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.900127][T13681] 0: left allmulticast mode
[  218.906424][T13681] hsr_slave_0: left allmulticast mode
[  218.910072][T13681] hsr_slave_1: left allmulticast mode
[  218.918024][T13681] geneve2: left promiscuous mode
[  218.920397][T13681] geneve3: left promiscuous mode
[  218.922507][T13681] geneve3: left allmulticast mode
[  219.101291][T13694] netlink: 'syz.5.3349': attribute type 1 has an invalid length.
[  219.104536][T13694] netlink: 'syz.5.3349': attribute type 2 has an invalid length.
[  219.125342][T13694] __nla_validate_parse: 3 callbacks suppressed
[  219.125359][T13694] netlink: 1172 bytes leftover after parsing attributes in process `syz.5.3349'.
[  219.338626][T13709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.347330][T13709] syzkaller0: entered promiscuous mode
[  219.356343][T13709] syzkaller0: entered allmulticast mode
[  219.401350][T13709] tipc: Resetting bearer <eth:syzkaller0>
[  219.411510][T13707] tipc: Resetting bearer <eth:syzkaller0>
[  219.436736][T13707] tipc: Disabling bearer <eth:syzkaller0>
[  219.941147][T13751] xfrm1: entered allmulticast mode
[  220.080872][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'.
[  220.092450][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3381'.
[  220.229319][T13777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3386'.
[  220.452609][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3394'.
[  221.147685][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3422'.
[  221.174559][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3422'.
[  221.362806][T13873] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3427'.
[  221.701466][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3440'.
[  221.757055][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'.
[  222.154147][T13935] netlink: 'syz.4.3456': attribute type 1 has an invalid length.
[  222.708692][T13968] netlink: 'syz.2.3470': attribute type 9 has an invalid length.
[  224.840840][T14042] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  225.275463][T14070] __nla_validate_parse: 2 callbacks suppressed
[  225.275482][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3515'.
[  225.770121][T14095] netlink: 'syz.4.3526': attribute type 1 has an invalid length.
[  225.783637][T14095] netlink: 'syz.4.3526': attribute type 1 has an invalid length.
[  225.790373][T14095] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3526'.
[  225.796973][T14095] netlink: 'syz.4.3526': attribute type 1 has an invalid length.
[  225.801162][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3526'.
[  225.887993][T14099] : entered promiscuous mode
[  225.954067][T14103] netlink: 'syz.4.3530': attribute type 2 has an invalid length.
[  226.137265][T14111] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3534'.
[  226.140899][T14111] nbd: couldn't find a device at index 0
[  226.445415][T14124] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.3540'.
[  226.657473][T14138] netlink: 91 bytes leftover after parsing attributes in process `syz.5.3547'.
[  226.726334][T14142] netlink: 'syz.4.3549': attribute type 1 has an invalid length.
[  226.937177][T14156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3555'.
[  226.940717][T14156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.370725][T14189] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3570'.
[  227.401251][T14185] 8021q: adding VLAN 0 to HW filter on device bond4
[  227.430123][T14192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3571'.
[  227.510993][T14195] netlink: 'syz.5.3573': attribute type 1 has an invalid length.
[  227.514331][T14195] netlink: 'syz.5.3573': attribute type 4 has an invalid length.
[  227.518581][T14195] netlink: 15538 bytes leftover after parsing attributes in process `syz.5.3573'.
[  227.596704][T14185] bond4 (unregistering): Released all slaves
[  227.631910][T14190] veth1_to_bond: entered allmulticast mode
[  227.652254][T14192] bond0: (slave bond_slave_1): Releasing backup interface
[  227.690561][T14192] veth1_to_bond (unregistering): left allmulticast mode
[  227.839887][T14213] netlink: zone id is out of range
[  227.841914][T14213] netlink: zone id is out of range
[  227.843878][T14213] netlink: zone id is out of range
[  227.901620][T14213] netlink: zone id is out of range
[  227.921249][T14213] netlink: zone id is out of range
[  227.923870][T14213] netlink: zone id is out of range
[  227.926597][T14213] netlink: zone id is out of range
[  227.928675][T14213] netlink: zone id is out of range
[  227.930693][T14213] netlink: zone id is out of range
[  228.174076][T14221] netlink: 'syz.5.3586': attribute type 2 has an invalid length.
[  229.168578][ T5865] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  229.171898][ T5865] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  229.195037][ T5865] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  229.201003][ T5865] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  229.309937][ T5129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.313189][ T5129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.326610][T14279] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  229.332777][T14279] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  229.396523][T14285] netlink: 'syz.4.3613': attribute type 12 has an invalid length.
[  230.330627][T14350] syzkaller0: entered promiscuous mode
[  230.332720][T14350] syzkaller0: entered allmulticast mode
[  230.338355][T14350] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  230.813867][T14380] __nla_validate_parse: 10 callbacks suppressed
[  230.813899][T14380] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3659'.
[  231.151797][T14402] netlink: 'syz.5.3666': attribute type 11 has an invalid length.
[  231.280867][T14413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3669'.
[  231.283943][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3671'.
[  231.299217][T14414] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3671'.
[  231.335866][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3672'.
[  231.481724][T14430] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3679'.
[  231.606328][T14438] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3684'.
[  231.609935][T14438] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3684'.
[  231.622659][T14440] netlink: 'syz.2.3683': attribute type 3 has an invalid length.
[  231.626652][T14440] netlink: 'syz.2.3683': attribute type 1 has an invalid length.
[  231.981954][   T33] audit: type=1800 audit(1757701227.760:2): pid=14473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3700" name="memory.events" dev="tmpfs" ino=6971 res=0 errno=0
[  232.043951][T14482] netlink: 'syz.5.3702': attribute type 1 has an invalid length.
[  232.072625][T14484] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3705'.
[  232.217676][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3711'.
[  232.759506][T14531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.763011][T14531] syzkaller0: entered promiscuous mode
[  232.767206][T14531] syzkaller0: entered allmulticast mode
[  232.776529][T14531] tipc: Resetting bearer <eth:syzkaller0>
[  232.784346][T14530] tipc: Resetting bearer <eth:syzkaller0>
[  232.812834][T14530] tipc: Disabling bearer <eth:syzkaller0>
[  233.359790][T14567] xfrm1: left allmulticast mode
[  233.510883][T14584] netlink: 'syz.5.3750': attribute type 11 has an invalid length.
[  234.093121][T14624] netlink: 'syz.4.3770': attribute type 6 has an invalid length.
[  234.391361][T14654] netlink: 'syz.2.3785': attribute type 2 has an invalid length.
[  234.839671][T14702] net_ratelimit: 13 callbacks suppressed
[  234.839707][T14702] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  234.854122][T14706] bond0: (slave rose0): Error: Device can not be enslaved while up
[  235.127450][T14730] netlink: 'syz.2.3821': attribute type 4 has an invalid length.
[  235.162215][T14730] netlink: 'syz.2.3821': attribute type 4 has an invalid length.
[  235.330740][T14746] netlink: 'syz.5.3829': attribute type 13 has an invalid length.
[  235.333992][T14746] netlink: 'syz.5.3829': attribute type 17 has an invalid length.
[  235.516282][T14746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.753298][T14777] netlink: 'syz.4.3844': attribute type 21 has an invalid length.
[  235.932505][T14799] __nla_validate_parse: 13 callbacks suppressed
[  235.932517][T14799] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3856'.
[  236.422504][T14850] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3877'.
[  236.429622][T14850] netlink: zone id is out of range
[  236.431886][T14850] netlink: get zone limit has 8 unknown bytes
[  237.497201][T14880] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  238.012987][T14914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3905'.
[  238.122825][T14918] veth7: entered promiscuous mode
[  238.478685][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3914'.
[  238.511225][T14940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3916'.
[  238.514360][T14940] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3916'.
[  238.519935][T14940] validate_nla: 6 callbacks suppressed
[  238.519948][T14940] netlink: 'syz.2.3916': attribute type 6 has an invalid length.
[  238.525288][T14940] netlink: 'syz.2.3916': attribute type 4 has an invalid length.
[  238.589775][T14945] netlink: 'syz.5.3917': attribute type 16 has an invalid length.
[  238.592454][T14945] netlink: 'syz.5.3917': attribute type 17 has an invalid length.
[  238.661242][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3917'.
[  238.664664][ T6874] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.669694][ T6874] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.687779][ T6874] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.691855][ T6874] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.702042][T14945] IPv6: NLM_F_REPLACE set, but no existing node found!
[  238.998869][T14967] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3928'.
[  239.003266][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3929'.
[  239.583409][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3944'.
[  239.670670][T15007] netlink: 'syz.2.3948': attribute type 27 has an invalid length.
[  239.673550][T15007] netlink: 'syz.2.3948': attribute type 4 has an invalid length.
[  239.896328][T15031] netlink: 'syz.4.3959': attribute type 21 has an invalid length.
[  239.899201][T15031] netlink: 'syz.4.3959': attribute type 1 has an invalid length.
[  240.042647][T15047] netlink: 'syz.5.3968': attribute type 1 has an invalid length.
[  240.539447][T15096] tipc: Trying to set illegal importance in message
[  240.776602][T15116] netlink: 'syz.5.3999': attribute type 5 has an invalid length.
[  241.156313][T15150] __nla_validate_parse: 7 callbacks suppressed
[  241.156359][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4013'.
[  241.158623][T15148] netlink: 1184 bytes leftover after parsing attributes in process `syz.5.4012'.
[  241.545519][T15180] macsec1: entered allmulticast mode
[  241.547667][T15180] ip6gretap0: entered allmulticast mode
[  241.560750][T15180] ip6gretap0: left allmulticast mode
[  242.014663][T15216] bond4: entered promiscuous mode
[  242.018322][T15216] 8021q: adding VLAN 0 to HW filter on device bond4
[  242.021089][T15223] batadv_slave_1: entered promiscuous mode
[  242.033927][T15223] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4046'.
[  242.041286][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4046'.
[  242.070338][T15216] 8021q: adding VLAN 0 to HW filter on device bond5
[  242.076494][T15216] bond4: (slave bond5): making interface the new active one
[  242.079083][T15216] bond5: entered promiscuous mode
[  242.083703][T15216] bond4: (slave bond5): Enslaving as an active interface with an up link
[  242.088594][T15226] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.4047'.
[  242.161902][T15216] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  242.167258][T15216] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  242.265926][T15222] batadv_slave_1: left promiscuous mode
[  242.584301][T15261] syzkaller1: entered promiscuous mode
[  242.593227][T15261] syzkaller1: entered allmulticast mode
[  242.726823][T15277] Bluetooth: MGMT ver 1.23
[  243.463856][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4098'.
[  243.469804][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4098'.
[  243.770294][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4106'.
[  243.780367][T15362] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  243.833801][T15364] validate_nla: 3 callbacks suppressed
[  243.833819][T15364] netlink: 'syz.4.4108': attribute type 21 has an invalid length.
[  243.847509][T15364] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4108'.
[  243.851196][T15364] netlink: 'syz.4.4108': attribute type 4 has an invalid length.
[  243.867502][T15364] netlink: 'syz.4.4108': attribute type 5 has an invalid length.
[  243.870583][T15364] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4108'.
[  245.195680][T15479] v: renamed from ip6_vti0
[  246.208941][T15591] syzkaller1: entered promiscuous mode
[  246.211898][T15591] syzkaller1: entered allmulticast mode
[  246.621717][T15613] netlink: 'syz.4.4215': attribute type 19 has an invalid length.
[  246.626828][T15613] __nla_validate_parse: 8 callbacks suppressed
[  246.626843][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4215'.
[  246.633590][T15613] netlink: 'syz.4.4215': attribute type 19 has an invalid length.
[  246.638923][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4215'.
[  248.210867][T15688] netlink: 'syz.4.4249': attribute type 6 has an invalid length.
[  248.325444][T15694] syzkaller1: entered promiscuous mode
[  248.327883][T15694] syzkaller1: entered allmulticast mode
[  248.821691][T15724] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4261'.
[  248.824510][T15724] nbd: couldn't find a device at index 0
[  249.111738][T15743] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4271'.
[  249.181848][T15747] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  249.856525][T15783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.166828][T15793] netlink: 'syz.2.4291': attribute type 21 has an invalid length.
[  250.169505][T15793] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4291'.
[  250.657804][T15831] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4308'.
[  250.726190][T15835] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4310'.
[  250.739553][   T33] audit: type=1800 audit(1757701246.520:3): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4311" name="@" dev="tmpfs" ino=4461 res=0 errno=0
[  251.046436][T15863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4322'.
[  251.050148][T15863] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4322'.
[  251.573140][T15903] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4341'.
[  251.580012][T15903] netlink: 'syz.2.4341': attribute type 2 has an invalid length.
[  251.628668][T15907] syzkaller1: entered promiscuous mode
[  251.631124][T15907] syzkaller1: entered allmulticast mode
[  251.906838][T15929] __nla_validate_parse: 1 callbacks suppressed
[  251.906856][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4353'.
[  251.912983][T15929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4353'.
[  251.929940][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4353'.
[  251.933758][T15929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4353'.
[  251.939145][T15929] netlink: 'syz.4.4353': attribute type 6 has an invalid length.
[  251.999174][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4358'.
[  252.002338][T15940] netlink: 'syz.5.4358': attribute type 3 has an invalid length.
[  252.624366][T15987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.627994][T15987] syzkaller0: entered promiscuous mode
[  252.630223][T15987] syzkaller0: entered allmulticast mode
[  252.669089][T15987] tipc: Resetting bearer <eth:syzkaller0>
[  252.673438][T15985] tipc: Resetting bearer <eth:syzkaller0>
[  252.719547][T15985] tipc: Disabling bearer <eth:syzkaller0>
[  253.125008][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4396'.
[  254.134504][T16096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.238449][T16099] nicvf0: entered promiscuous mode
[  254.254264][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  254.263741][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  254.275381][ T5865] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  254.279041][ T5865] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  255.371276][T16145] block nbd2: not configured, cannot reconfigure
[  255.548426][T16156] vlan3: entered allmulticast mode
[  255.550431][T16156] bridge_slave_0: entered allmulticast mode
[  255.742544][T16175] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  255.747045][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4465'.
[  255.750480][T16175] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  255.753180][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4465'.
[  255.760583][T16175] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  255.763185][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4465'.
[  255.775107][T16175] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  255.777639][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4465'.
[  255.780446][T16175] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  255.782886][T16175] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  255.795084][T16175] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  255.799244][T16175] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  255.802184][T16175] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  255.808637][T16175] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  255.811815][T16175] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  257.484404][T16265] bond2: (slave gretap1): making interface the new active one
[  257.488408][T16265] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  257.590105][T16275] __nla_validate_parse: 44 callbacks suppressed
[  257.590122][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4509'.
[  257.930717][T16308] syzkaller1: entered promiscuous mode
[  257.932609][T16308] syzkaller1: entered allmulticast mode
[  258.245832][T16326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4530'.
[  259.291820][T16420] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  259.299709][T16420] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  259.355717][T16421] block nbd2: server does not support multiple connections per device.
[  259.358809][T16421] block nbd2: shutting down sockets
[  259.984307][T16442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.061581][T16446] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4581'.
[  260.477845][T16466] 8021q: adding VLAN 0 to HW filter on device bond7
[  260.489027][T16466] bond7: (slave dummy0): making interface the new active one
[  260.497696][T16466] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  260.841925][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4600'.
[  261.370284][T16508] vlan3: entered promiscuous mode
[  261.372505][T16508] bond0: entered promiscuous mode
[  261.374623][T16508] bond_slave_0: entered promiscuous mode
[  261.377830][T16508] team0: entered promiscuous mode
[  261.379873][T16508] team_slave_0: entered promiscuous mode
[  261.382209][T16508] team_slave_1: entered promiscuous mode
[  261.386800][T16508] syz_tun: entered promiscuous mode
[  261.389674][T16508] vlan3: entered allmulticast mode
[  261.391721][T16508] bond0: entered allmulticast mode
[  261.393796][T16508] bond_slave_0: entered allmulticast mode
[  261.396938][T16508] team0: entered allmulticast mode
[  261.399046][T16508] team_slave_0: entered allmulticast mode
[  261.401355][T16508] team_slave_1: entered allmulticast mode
[  261.403667][T16508] syz_tun: entered allmulticast mode
[  261.444653][T16510] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  261.950431][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4626'.
[  261.957652][T16549] macsec1: entered promiscuous mode
[  261.959810][T16549] syz_tun: entered promiscuous mode
[  261.962046][T16549] macsec1: entered allmulticast mode
[  261.964403][T16549] syz_tun: entered allmulticast mode
[  261.970761][T16549] syz_tun: left allmulticast mode
[  261.972914][T16549] syz_tun: left promiscuous mode
[  262.130364][T16557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.318327][T16573] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4636'.
[  262.321923][T16573] nbd: couldn't find a device at index 0
[  262.458823][T16582] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4640'.
[  262.474396][T16582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4640'.
[  262.479692][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4640'.
[  262.632117][T16593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.987684][T16651] validate_nla: 40 callbacks suppressed
[  263.987703][T16651] netlink: 'syz.5.4667': attribute type 13 has an invalid length.
[  264.001828][T16651] netlink: 'syz.5.4667': attribute type 17 has an invalid length.
[  264.074192][T16651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.206076][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4667'.
[  264.251870][T16651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.909849][T16673] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  265.206360][T16677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4682'.
[  266.443890][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4712'.
[  266.502153][T16752] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  266.527083][T16746] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4712'.
[  268.273992][T16768] tap0: tun_chr_ioctl cmd 35108
[  268.390746][   T33] audit: type=1800 audit(1757701264.170:4): pid=16777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4726" name="memory.events" dev="tmpfs" ino=4861 res=0 errno=0
[  268.400035][   T33] audit: type=1804 audit(1757701264.170:5): pid=16777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4726" name="/newroot/962/memory.events" dev="tmpfs" ino=4861 res=1 errno=0
[  268.733886][T16805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.771225][T16805] syzkaller0: entered promiscuous mode
[  268.782020][T16805] syzkaller0: entered allmulticast mode
[  268.784403][T16805] tipc: Resetting bearer <eth:syzkaller0>
[  268.792196][T16809] netlink: 'syz.4.4737': attribute type 21 has an invalid length.
[  268.812627][T16809] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4737'.
[  268.816845][T16804] tipc: Resetting bearer <eth:syzkaller0>
[  268.901704][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4739'.
[  270.606184][T16804] tipc: Disabling bearer <eth:syzkaller0>
[  272.418865][T16977] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4813'.
[  272.603293][   T33] audit: type=1800 audit(1757701268.380:6): pid=16984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4816" name="memory.events" dev="tmpfs" ino=5147 res=0 errno=0
[  273.715677][T17064] netlink: 'syz.2.4854': attribute type 5 has an invalid length.
[  274.279896][T17121] netlink: 'syz.5.4879': attribute type 30 has an invalid length.
[  274.850951][T17158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.889007][T17158] syzkaller0: entered promiscuous mode
[  274.891169][T17158] syzkaller0: entered allmulticast mode
[  274.895774][T17158] tipc: Resetting bearer <eth:syzkaller0>
[  274.902471][T17157] tipc: Resetting bearer <eth:syzkaller0>
[  276.405536][T17171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4897'.
[  276.568849][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4900'.
[  276.652970][T17157] tipc: Disabling bearer <eth:syzkaller0>
[  277.120351][T17217] sctp: [Deprecated]: syz.5.4919 (pid 17217) Use of int in max_burst socket option.
[  277.120351][T17217] Use struct sctp_assoc_value instead
[  277.180582][T17221] netlink: 'syz.5.4920': attribute type 6 has an invalid length.
[  277.191715][T17220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  277.247805][T17220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  277.303193][T17220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.322949][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4957'.
[  280.326837][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4957'.
[  281.079089][T17350] netlink: 'syz.5.4973': attribute type 15 has an invalid length.
[  281.292425][T17374] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4984'.
[  281.640557][T17399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4993'.
[  281.643928][T17399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4993'.
[  281.653226][T17399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4993'.
[  281.661134][T17399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4993'.
[  281.725425][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4998'.
[  282.033802][T17421] netlink: 'syz.4.5005': attribute type 4 has an invalid length.
[  282.038320][T17421] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5005'.
[  282.092975][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5006'.
[  282.950719][   T34] INFO: task syz.1.1476:9393 blocked for more than 143 seconds.
[  282.953687][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  282.962329][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  282.966119][   T34] task:syz.1.1476      state:D stack:25368 pid:9393  tgid:9392  ppid:5853   task_flags:0x400040 flags:0x00004004
[  282.970135][   T34] Call Trace:
[  282.971517][   T34]  <TASK>
[  282.972628][   T34]  __schedule+0x1798/0x4cc0
[  282.974493][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.018148][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.019878][   T34]  ? __pfx___schedule+0x10/0x10
[  283.021484][   T34]  ? schedule+0x91/0x360
[  283.022834][   T34]  schedule+0x165/0x360
[  283.024148][   T34]  schedule_preempt_disabled+0x13/0x30
[  283.034923][   T34]  __mutex_lock+0x7e6/0x1350
[  283.036995][   T34]  ? __mutex_lock+0x5bb/0x1350
[  283.043725][   T34]  ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  283.051660][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  283.058423][   T34]  ? stack_trace_save+0x9c/0xe0
[  283.064404][   T34]  ? stack_depot_save_flags+0x40/0x860
[  283.072909][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  283.081512][   T34]  nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  283.090073][   T34]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  283.099820][   T34]  ? kmalloc_reserve+0x136/0x290
[  283.105756][   T34]  ? __alloc_skb+0x142/0x2d0
[  283.111277][   T34]  ? netlink_dump+0x1b7/0xe90
[  283.117919][   T34]  ? __netlink_dump_start+0x5cb/0x7e0
[  283.122191][   T34]  ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  283.145368][   T34]  ? genl_rcv_msg+0x5da/0x790
[  283.147403][   T34]  ? netlink_rcv_skb+0x208/0x470
[  283.149549][   T34]  ? genl_rcv+0x28/0x40
[  283.151378][   T34]  ? netlink_unicast+0x82f/0x9e0
[  283.158093][   T34]  ? netlink_sendmsg+0x805/0xb30
[  283.163885][   T34]  ? __sock_sendmsg+0x21c/0x270
[  283.170953][   T34]  ? ____sys_sendmsg+0x505/0x830
[  283.180140][   T34]  ? ___sys_sendmsg+0x21f/0x2a0
[  283.187872][   T34]  ? __x64_sys_sendmsg+0x19b/0x260
[  283.192257][   T34]  ? do_syscall_64+0xfa/0x3b0
[  283.201265][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.208067][   T34]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  283.220697][   T34]  ? rcu_is_watching+0x15/0xb0
[  283.227545][   T34]  ? trace_kmalloc+0x1f/0xd0
[  283.234094][   T34]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  283.241652][   T34]  ? __build_skb_around+0x257/0x3e0
[  283.249779][   T34]  genl_dumpit+0x10b/0x1b0
[  283.256411][   T34]  netlink_dump+0x6e4/0xe90
[  283.261627][   T34]  ? __pfx_netlink_dump+0x10/0x10
[  283.270067][   T34]  ? genl_start+0x1c9/0x6c0
[  283.274185][   T34]  ? genl_start+0x499/0x6c0
[  283.281299][   T34]  __netlink_dump_start+0x5cb/0x7e0
[  283.288867][   T34]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  283.297011][   T34]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  283.303695][   T34]  ? genl_get_cmd+0x496/0x910
[  283.312117][   T34]  ? __pfx_genl_start+0x10/0x10
[  283.321194][   T34]  ? __pfx_genl_dumpit+0x10/0x10
[  283.326685][   T34]  ? __pfx_genl_done+0x10/0x10
[  283.333236][   T34]  genl_rcv_msg+0x5da/0x790
[  283.340816][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.345284][   T34]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  283.373222][   T34]  ? __asan_memcpy+0x40/0x70
[  283.389420][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  283.395309][   T34]  netlink_rcv_skb+0x208/0x470
[  283.401656][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.409490][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.420988][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.433024][   T34]  ? down_read+0x1ad/0x2e0
[  283.439823][   T34]  genl_rcv+0x28/0x40
[  283.447498][   T34]  netlink_unicast+0x82f/0x9e0
[  283.454238][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  283.475175][   T34]  ? netlink_sendmsg+0x642/0xb30
[  283.481860][   T34]  ? skb_put+0x11b/0x210
[  283.498803][   T34]  netlink_sendmsg+0x805/0xb30
[  283.500450][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.502097][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.503895][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.525186][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.526992][   T34]  __sock_sendmsg+0x21c/0x270
[  283.528428][   T34]  ____sys_sendmsg+0x505/0x830
[  283.530300][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.531886][   T34]  ? import_iovec+0x74/0xa0
[  283.533703][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  283.546447][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.548169][   T34]  ? __fget_files+0x2a/0x420
[  283.549623][   T34]  ? __fget_files+0x3a0/0x420
[  283.551166][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  283.553138][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.566321][   T34]  ? rcu_is_watching+0x15/0xb0
[  283.568194][   T34]  ? do_syscall_64+0xbe/0x3b0
[  283.569961][   T34]  do_syscall_64+0xfa/0x3b0
[  283.571574][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.573456][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.590340][   T34]  ? exc_page_fault+0x9f/0xf0
[  283.592197][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.594574][   T34] RIP: 0033:0x7ff2a738eba9
[  283.610631][   T34] RSP: 002b:00007ff2a8204038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.614188][   T34] RAX: ffffffffffffffda RBX: 00007ff2a75d5fa0 RCX: 00007ff2a738eba9
[  283.629875][   T34] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  283.633053][   T34] RBP: 00007ff2a7411e19 R08: 0000000000000000 R09: 0000000000000000
[  283.645399][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.648558][   T34] R13: 00007ff2a75d6038 R14: 00007ff2a75d5fa0 R15: 00007ffc4d6ea428
[  283.651692][   T34]  </TASK>
[  283.665567][   T34] INFO: task syz.3.1569:9637 blocked for more than 144 seconds.
[  283.668669][   T34]       Not tainted syzkaller #0
[  283.670653][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  283.674002][   T34] task:syz.3.1569      state:D stack:25896 pid:9637  tgid:9636  ppid:8751   task_flags:0x400140 flags:0x00004004
[  283.727364][   T34] Call Trace:
[  283.728798][   T34]  <TASK>
[  283.729972][   T34]  __schedule+0x1798/0x4cc0
[  283.731807][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.733778][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.759241][   T34]  ? __pfx___schedule+0x10/0x10
[  283.761332][   T34]  ? schedule+0x91/0x360
[  283.763032][   T34]  schedule+0x165/0x360
[  283.764706][   T34]  schedule_preempt_disabled+0x13/0x30
[  283.770957][   T34]  __mutex_lock+0x7e6/0x1350
[  283.772848][   T34]  ? __mutex_lock+0x5bb/0x1350
[  283.785039][   T34]  ? nfsd_nl_listener_set_doit+0x137/0x1690
[  283.786987][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  283.788573][   T34]  ? __asan_memset+0x22/0x50
[  283.789992][   T34]  ? ____sys_sendmsg+0x505/0x830
[  283.791827][   T34]  ? ___sys_sendmsg+0x21f/0x2a0
[  283.793726][   T34]  ? __x64_sys_sendmsg+0x19b/0x260
[  283.807888][   T34]  nfsd_nl_listener_set_doit+0x137/0x1690
[  283.809780][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  283.812047][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  283.814222][   T34]  ? __nla_parse+0x40/0x60
[  283.827846][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  283.830128][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  283.831893][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  283.833989][   T34]  ? bpf_lsm_capable+0x9/0x20
[  283.837305][   T34]  ? security_capable+0x7e/0x2e0
[  283.839160][   T34]  genl_rcv_msg+0x60e/0x790
[  283.840861][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.842750][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  283.844672][   T34]  netlink_rcv_skb+0x208/0x470
[  283.849695][   T34]  ? __lock_acquire+0xab9/0xd20
[  283.851270][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.852863][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.854532][   T34]  ? down_read+0x1ad/0x2e0
[  283.856669][   T34]  genl_rcv+0x28/0x40
[  283.857969][   T34]  netlink_unicast+0x82f/0x9e0
[  283.859556][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  283.861213][   T34]  ? netlink_sendmsg+0x642/0xb30
[  283.862811][   T34]  ? skb_put+0x11b/0x210
[  283.864246][   T34]  netlink_sendmsg+0x805/0xb30
[  283.868935][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.870780][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.872410][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.874048][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.878131][   T34]  __sock_sendmsg+0x21c/0x270
[  283.879661][   T34]  ____sys_sendmsg+0x505/0x830
[  283.881270][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.883281][   T34]  ? import_iovec+0x74/0xa0
[  283.887927][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  283.889839][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.891942][   T34]  ? __fget_files+0x2a/0x420
[  283.893807][   T34]  ? __fget_files+0x3a0/0x420
[  283.896471][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  283.898472][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.900658][   T34]  ? rcu_is_watching+0x15/0xb0
[  283.902580][   T34]  ? do_syscall_64+0xbe/0x3b0
[  283.904594][   T34]  do_syscall_64+0xfa/0x3b0
[  283.909371][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.911285][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.913726][   T34]  ? exc_page_fault+0x9f/0xf0
[  283.916217][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.918263][   T34] RIP: 0033:0x7f513338eba9
[  283.919772][   T34] RSP: 002b:00007f5134271038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.922391][   T34] RAX: ffffffffffffffda RBX: 00007f51335d5fa0 RCX: 00007f513338eba9
[  283.928574][   T34] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  283.931035][   T34] RBP: 00007f5133411e19 R08: 0000000000000000 R09: 0000000000000000
[  283.933542][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.936661][   T34] R13: 00007f51335d6038 R14: 00007f51335d5fa0 R15: 00007ffe5c6e9f48
[  283.939166][   T34]  </TASK>
[  283.953500][   T34] 
[  283.953500][   T34] Showing all locks held in the system:
[  283.959705][   T34] 1 lock held by khungtaskd/34:
[  283.961738][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  283.985165][   T34] 3 locks held by kworker/1:2/3143:
[  283.987356][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  283.992045][   T34]  #1: ffffc900028bfbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  284.004916][   T34]  #2: ffffffff8e13f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  284.009382][   T34] 2 locks held by getty/5675:
[  284.011289][   T34]  #0: ffff88802474d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  284.024835][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  284.028962][   T34] 3 locks held by kworker/0:4/5901:
[  284.031054][   T34] 2 locks held by syz.0.892/7994:
[  284.033159][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  284.054947][   T34]  #1: ffffffff8e418708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  284.059106][   T34] 3 locks held by syz.1.1476/9393:
[  284.061144][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  284.064365][   T34]  #1: ffff88811b65a6e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  284.074919][   T34]  #2: ffffffff8e418708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  284.078978][   T34] 2 locks held by syz.3.1569/9637:
[  284.080964][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  284.084182][   T34]  #1: ffffffff8e418708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  284.104876][   T34] 1 lock held by syz-executor/10022:
[  284.106964][   T34]  #0: ffffffff8f539588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  284.110401][   T34] 1 lock held by syz.2.5024/17460:
[  284.112469][   T34] 
[  284.135109][   T34] =============================================
[  284.135109][   T34] 
[  284.144990][   T34] NMI backtrace for cpu 1
[  284.145023][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  284.145033][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.145039][   T34] Call Trace:
[  284.145044][   T34]  <TASK>
[  284.145070][   T34]  dump_stack_lvl+0x189/0x250
[  284.145088][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.145099][   T34]  ? __pfx__printk+0x10/0x10
[  284.145116][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  284.145137][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  284.145149][   T34]  ? __pfx__printk+0x10/0x10
[  284.145162][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  284.145178][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  284.145191][   T34]  watchdog+0xf93/0xfe0
[  284.145207][   T34]  ? watchdog+0x1de/0xfe0
[  284.145221][   T34]  kthread+0x711/0x8a0
[  284.145233][   T34]  ? __pfx_watchdog+0x10/0x10
[  284.145243][   T34]  ? __pfx_kthread+0x10/0x10
[  284.145254][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.145262][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.145269][   T34]  ? __pfx_kthread+0x10/0x10
[  284.145279][   T34]  ret_from_fork+0x3fc/0x770
[  284.145289][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  284.145300][   T34]  ? __switch_to_asm+0x39/0x70
[  284.145309][   T34]  ? __switch_to_asm+0x33/0x70
[  284.145319][   T34]  ? __pfx_kthread+0x10/0x10
[  284.145329][   T34]  ret_from_fork_asm+0x1a/0x30
[  284.145345][   T34]  </TASK>
[  284.145349][   T34] Sending NMI from CPU 1 to CPUs 0:
[  284.201719][    C0] NMI backtrace for cpu 0
[  284.201737][    C0] CPU: 0 UID: 0 PID: 5901 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  284.201752][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.201761][    C0] Workqueue: rcu_gp process_srcu
[  284.201789][    C0] RIP: 0010:delay_tsc+0x5b/0xc0
[  284.201808][    C0] Code: 31 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 b2 88 16 f6 65 8b 05 3b 4b 27 07 85 c0 74 1c f3 90 <bf> 01 00 00 00 e8 eb 86 16 f6 e8 16 3c 01 00 39 c5 75 0e 0f ae e8
[  284.201821][    C0] RSP: 0018:ffffc90003e0f8c0 EFLAGS: 00000286
[  284.201831][    C0] RAX: 0000000080000000 RBX: 00000000000036b2 RCX: 0000000000000000
[  284.201837][    C0] RDX: 00000000000000ba RSI: ffffffff8be33860 RDI: 00000000ffffffff
[  284.201843][    C0] RBP: 0000000000000000 R08: ffffe8ffffc22307 R09: 1ffffd1ffff84460
[  284.201849][    C0] R10: dffffc0000000000 R11: ffffffff8b7974a0 R12: 0000000000000001
[  284.201855][    C0] R13: 0000000000000002 R14: 000000bac515157c R15: 0000000000001fe8
[  284.201861][    C0] FS:  0000000000000000(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  284.201870][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  284.201878][    C0] CR2: 00007fffb7817c98 CR3: 000000010fa28000 CR4: 00000000000006f0
[  284.201910][    C0] Call Trace:
[  284.201917][    C0]  <TASK>
[  284.201926][    C0]  try_check_zero+0x5dd/0x670
[  284.201948][    C0]  process_srcu+0x2c6/0x1410
[  284.201968][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  284.201984][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.201998][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  284.202009][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  284.202025][    C0]  process_scheduled_works+0xae1/0x17b0
[  284.202084][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  284.202106][    C0]  worker_thread+0x8a0/0xda0
[  284.202120][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  284.202135][    C0]  ? __kthread_parkme+0x7b/0x200
[  284.202152][    C0]  kthread+0x711/0x8a0
[  284.202168][    C0]  ? __pfx_worker_thread+0x10/0x10
[  284.202179][    C0]  ? __pfx_kthread+0x10/0x10
[  284.202193][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.202204][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.202215][    C0]  ? __pfx_kthread+0x10/0x10
[  284.202230][    C0]  ret_from_fork+0x3fc/0x770
[  284.202245][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  284.202260][    C0]  ? __switch_to_asm+0x39/0x70
[  284.202277][    C0]  ? __switch_to_asm+0x33/0x70
[  284.202293][    C0]  ? __pfx_kthread+0x10/0x10
[  284.202307][    C0]  ret_from_fork_asm+0x1a/0x30
[  284.202329][    C0]  </TASK>
[  284.304333][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  284.306887][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  284.310249][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.313819][   T34] Call Trace:
[  284.315202][   T34]  <TASK>
[  284.316391][   T34]  dump_stack_lvl+0x99/0x250
[  284.318211][   T34]  ? __asan_memcpy+0x40/0x70
[  284.320057][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.321811][   T34]  ? __pfx__printk+0x10/0x10
[  284.323276][   T34]  vpanic+0x281/0x750
[  284.324530][   T34]  ? __pfx_vpanic+0x10/0x10
[  284.325976][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  284.327680][   T34]  ? preempt_schedule+0xae/0xc0
[  284.329248][   T34]  ? preempt_schedule_common+0x83/0xd0
[  284.331295][   T34]  panic+0xb9/0xc0
[  284.332631][   T34]  ? __pfx_panic+0x10/0x10
[  284.334263][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  284.335958][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  284.338160][   T34]  watchdog+0xfd2/0xfe0
[  284.339714][   T34]  ? watchdog+0x1de/0xfe0
[  284.341374][   T34]  kthread+0x711/0x8a0
[  284.342824][   T34]  ? __pfx_watchdog+0x10/0x10
[  284.344350][   T34]  ? __pfx_kthread+0x10/0x10
[  284.345773][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.347608][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.349430][   T34]  ? __pfx_kthread+0x10/0x10
[  284.350885][   T34]  ret_from_fork+0x3fc/0x770
[  284.352481][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  284.354732][   T34]  ? __switch_to_asm+0x39/0x70
[  284.356740][   T34]  ? __switch_to_asm+0x33/0x70
[  284.358719][   T34]  ? __pfx_kthread+0x10/0x10
[  284.360673][   T34]  ret_from_fork_asm+0x1a/0x30
[  284.362667][   T34]  </TASK>
[  284.364643][   T34] Kernel Offset: disabled
[  284.366416][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:21:18  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffd400008b011 RBX=ffffea0000458088 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000012a4c RDI=0000000000011602 RBP=ffffc9000324f890 RSP=ffffc9000324f5e0
R8 =ffffea000045aa73 R9 =1ffffd400008b54e R10=dffffc0000000000 R11=fffff9400008b54f
R12=0000555567c00000 R13=0000555567b48000 R14=ffffea000045c888 R15=ffff88802242a040
RIP=ffffffff820949d9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f53ec107d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f53eb5a76c3 00007f53eb5a76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000055556795ad48
XMM06=0000000000000000 0000555567964e08 XMM07=03aaaaaaaaaa01ff fffffffffffffff5
XMM08=0802880300040002 84033e0400028003 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b4310b8 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888025d40000
RSI=ffffffff8be33860 RDI=ffffffff8be33820 RBP=ffffc90003dff9d0 RSP=ffffc90003dff850
R8 =0000000000000000 R9 =ffffffff8b431080 R10=dffffc0000000000 R11=ffffed1023718217
R12=ffff88812304f200 R13=ffff88812304f210 R14=dffffc0000000000 R15=ffff888121944908
RIP=ffffffff8b7ab151 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556b84c588 CR3=000000004825e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f97b97a7498 00007f97b97a7470 XMM03=00007f97b97a74a8 00007f97b97a74a0
XMM04=00007f97ba30d100 00007f97b97a7460 XMM05=00007f97b97a7478 00007f97b97a74c0
XMM06=00007f97b97a74b8 00007f97b97a74b0 XMM07=00007f97b97a74a8 00007f97b97a74a0
XMM08=0000000000000000 00007f97b9612ee7 XMM09=0000000000000000 00007f97b9612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
