last executing test programs:

1m4.776628705s ago: executing program 1 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

55.718384783s ago: executing program 1 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

48.706938676s ago: executing program 1 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

41.954201873s ago: executing program 1 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

34.004482204s ago: executing program 1 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

26.20148399s ago: executing program 1 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

1.781555517s ago: executing program 2 (id=2297):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103000000000000ebff0a"], 0x14}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2517000000440006803c00040067636d28616573290000000000000000000000000000000000000000000000001400000096557917d5d82cebae93360000e1ace2fe62c0b178a66cd48079040001006ecaba2003f25c0590615715e588cfb6da2106977b91b6fe04765d7615b1f9e4204dfe662f2e56f31b48c22ab5dc46d98c50ad715eb178668df3a7c7ecd91c725b3b9d5e9114f786602b2df9b348aac6007e76254af477c50fac481be0189b0a72a31a488c9b251bc815983c8b7d8ed414df53d408d2a7b024e829407e65dcd3e2b74407e4892c09367c"], 0x58}}, 0x4004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=@newtfilter={0x60, 0x2c, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0xf}, {0xe, 0x4}, {0x1, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xd, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x40)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xfc}, 0x2)
recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r11=>r2, 0x4, 0xff, 0xaa, 0x0, 0x1, @private0, @remote, 0x8000, 0x40e0, 0xfffffff9, 0x4}})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r10, @ANYBLOB="00042dbd7000fbdbdf25170800000000000000000200626f6e643000000000000000000000000800030001000000080001009d37254a956a1a5e3923d1b32a6e4dbf0146ef4b419998c6ec6d1fac4a4bdcc9ead8b92e9a68ccdd0d5eac4e138271f1444d9c039c953db5f6933485ce25d54f042f47300fc48e00fa41beb253b9", @ANYRES32=r2, @ANYBLOB="0802000000000000000001801400020076657468305f766c61386d0000000000380001800800830000000000080003b78a9cb1053624336bc25888f800010000000800030003000000140002006970f565727370616e30000000000000080003000000000068000180140002007369743000000000000000000000000008000300060000001400020076657468305f74c7d7ef819d743de41b66ad1e6f5f7465616d00000008000100", @ANYRESDEC=r9, @ANYBLOB="08000300010000001400020070696d7265673000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="480001801400020067656e6576653000000000000000000008000300010000000800030000000000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="080003000100000008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000300030000007c00018008000300020000001400020076657468305f746f5f6261746164760008000300020000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYBLOB="5eb571670182c9fc5facc2a2962a679a7dadd57d1892cbac726d91ff116ba28e5622b43e89d7a4b4ac59bdfbe6cdb5dd402b45802eaead4c8e62db105a88bd913ad2a5c237700e8185223e02c216d0a021cc29c5c381c528cf44250059a145748b7c04656f67e626", @ANYBLOB="1400020069703665727370616e30000000000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r2, @ANYBLOB], 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x4001)

1.781098725s ago: executing program 0 (id=2298):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000100), 0x12)
r8 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x40)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4002840}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$inet_sctp(0x2, 0x800000000000001, 0x84)

1.721181736s ago: executing program 0 (id=2299):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
syz_emit_ethernet(0xa5, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080501061fe7eb2ef81127bff7375bfe3871853a22d1491e01db11bf4122f0710412116442cd00ff9e5fc0177627b82e54515ccb0b7b31fa74a42772d4630c0daa3311790c30b64741c7d4a7a74ffa0c1d1f8ca75b995952349d2f02f83debd635aedb20cde3ff3f7f0cd986b44ffa25f5e05ef09afaa95d8a05095254dc1c025d67c3fb01040000aae9b33dddb142a8b2e816ad95899b1fae"], 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r2, 0x601, 0x0, 0x24dfdbfd}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x344, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x16c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x988}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffe00000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x77d}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4c}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6, 0x3, "b23b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4ed}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "deeb96c1c7f1eec94c2f868b754971014612bf6709498583a54d0062"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "c2323938ee460721c8b6a62e970aa5d983cd9215886857ea6066"}}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ebcfc013021b621beed06679cca8443a40ce50be157c162422ccfb0a0f2467cf93"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x50}, 0x709239cb4b53374f)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r5, 0x181}, 0x14}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6fe}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0xfffbfff7, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @empty}}}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r6, 0x8b1a, &(0x7f0000000040))

1.612165081s ago: executing program 0 (id=2300):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)="385ead20725cd14f49d5acc4606532ba7178a1e076c0782f7120ffaea61710392988bc519097a1ad8f56a46cd89cedc581211eefeac87368b94447b9de96ba2ab65a937739314a676c06959de9ab79f3c6ba08", 0x0, 0x4}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000500)}, 0x20004000)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffbf)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='.'], 0x20)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000001c0)={0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x82}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x3d}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x28)
sendmsg$rds(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0xffffff00}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x60}}], 0x48, 0xc901}, 0x0)

916.714147ms ago: executing program 2 (id=2301):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000))
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x200000f, 0x28011, r0, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x1000)

755.138043ms ago: executing program 2 (id=2302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = gettid()
sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r3, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x60}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r7, 0x400454cd, 0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100)='/dev/net/tun\x00', <r8=>0x0}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r8}, 0x4) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r8}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='syzkaller\x00', 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='syzkaller\x00', 0x2}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000301010100000000000000000a00000014001980080001"], 0x38}, 0x1, 0x0, 0x0, 0x30000850}, 0x0)
socket$netlink(0x10, 0x3, 0x14) (async)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000014010000000000000000ce4f87a39ce21f148541f0988c2b8c53143d160f780900020073797a320000000008004116736977001400330073797a6b636c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000080)

232.978175ms ago: executing program 2 (id=2303):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="ddac4a45", 0x4}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

229.890101ms ago: executing program 0 (id=2304):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r2=>0x0}) (rerun: 32)
syz_emit_ethernet(0x5f, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@mpls_uc={0x8847, {[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x4d, 0x64, 0x0, 0xe, 0x1, 0x0, @local, @local, {[@ra={0x94, 0x4, 0x40}]}}, @parameter_prob={0xc, 0x0, 0x0, 0xd, 0xb, 0x0, {0xa, 0x4, 0x1, 0x39, 0x6, 0x67, 0x2, 0xa, 0x2e, 0x80, @broadcast, @multicast2, {[@timestamp={0x44, 0x14, 0xe3, 0x0, 0x1, [0x8, 0x1, 0x8, 0x1000]}]}}, "0ac6adec92"}}}}}}, &(0x7f0000000080)={0x0, 0x2, [0xa15, 0x8f9, 0x9fd, 0xd8e]}) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

96.33307ms ago: executing program 2 (id=2305):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff6203f0fff8ffffff71a4f0ff000000002d040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa48f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae5630800c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee96a1c685508e6ca4fe5a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9029bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcefb9303a7861fce422f3f9c422a1619e6c6c2dd825743b22a6f93604c73d886c25ecaaeafccdeb19bd0cdbc5d22dae879561ea5606fa0c9dc23c0f52621aaae42180aecfd32cd6a66a1efa0949bc195dfcb691a26344362989371f2d5bf274363416b3cafb9a3331285449dc1afe9af7fed27bd4e36fa423d6c05ffa2acee27e2444b5ca28fc16fe31bd1320d4415ec0f5471b0b671d7626f773"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async, rerun: 32)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r4, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x200081}, 0x1c) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32)
r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0)
preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000a80)={'c', ' *:* ', 'wm\x00'}, 0x9)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x601f38d67ca781f6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000000) (async)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) (async)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040085) (async, rerun: 64)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (rerun: 64)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000d00)=[{&(0x7f00000000c0)="05ebae369f5d555ef4ae209c526d3caab2edbe54be79f81c8f0c88ba27cf0b8777292ac3b71259e78ef9436dcd6aeb7233a255f964a03a1f0c5cb9f04562bac70f01831de0d56a", 0x47}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="ac00000000000000000000000700000000864000000003020379010b3896340ddf84ab65f2020e6581419d39bf957d4304a05e0262dafde4d95807bbcbe82370b40210f2f4f1d9b8bbc98ab3c97065da47863f00000001060b6a1321c30677c8394f06119384740bc14e65e46e2d013483532e010abb8ffc85ff1a1b3a01065c1a260401060b19f20a01074d1e55533a441cb7d3ac1e0101000000057f0000010000000f000000000000003b00000000"], 0xb0}}, {{&(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x78}}, {{&(0x7f0000000680)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)="a169863e24a14a7e7c0beadf5a382a0b0d0faaaac11986d513cbd6f084905139ee99bf7b4ceead467c5f40f37af828dc17fe380192bf55e432ab32fbd3eb41af2fffe5fcde430a8373dd6f0a0d8f3f852bdbf73d43055a6cdbb74f21e3feafa77ee3fa732847fc553ad36790ff89e1e5", 0x70}], 0x1, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}], 0x38}}, {{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000800)="67faec2d8923806dff79171b25306d3fe0cf791bd58e605c090df699caf3f82244964d34156cf96f1c6327ce690dc5e4ecfb126b83b2c249a75d30c224e2ed9646028f08f6bb0926c077ee808af08d0a1980541991be52d726dc5266291c169299c64e8055568d28cd55e7ffb93e7d2294cf275ea98cc5c8cb9fb46f6e5b85ca9f8f409b3ca9420c0c307f9b4215104e4d0cebe16af766f471265739308fc307d35820f0379ffd7a101cfdfdd777225065f654ee5885097afed3d8b3ecc28aeb9b79c97a3ee1a42d2420020c8d4028627edbeb58", 0xd4}], 0x1}}], 0x5, 0x0)

94.245211ms ago: executing program 0 (id=2306):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b1a, &(0x7f0000000040))

3.092168ms ago: executing program 2 (id=2307):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) (async)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7)
r1 = socket$inet6(0xa, 0x4, 0x7) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74)
r3 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg(r3, &(0x7f0000008440)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) (async)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) (async)
r4 = socket$netlink(0x10, 0x3, 0x10) (async)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r10, 0xd01}, 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf256600000008000300", @ANYRES32=r11, @ANYBLOB="080026186c0900000400b8000800b70099000000089591f500b70001010000"], 0x38}}, 0x0) (async)
r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
sendfile(r0, r12, 0x0, 0x1)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0xffffffffffffff35, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x840, 0x5700f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r8}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x1)

0s ago: executing program 0 (id=2313):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000080000000000000f0500000000000000000000030000000002000000010000000000000000000000000000030000"], &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3, 0xf06}, 0x28)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs$namespace(0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
shutdown(r2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)={0x10000000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014})
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
accept4$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c026000041000701000000000700"], 0x26c0}}, 0x4010)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'})

kernel console output (not intermixed with test programs):

tlink: 'syz.2.391': attribute type 12 has an invalid length.
[   94.432197][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'.
[   94.443178][ T7188] sctp: [Deprecated]: syz.2.392 (pid 7188) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.443178][ T7188] Use struct sctp_sack_info instead
[   94.455462][ T7187] ieee802154 phy0 wpan0: encryption failed: -22
[   94.502415][ T7181] netlink: 'syz.1.390': attribute type 1 has an invalid length.
[   94.505149][ T7181] nbd: error processing sock list
[   94.507909][ T7181] block nbd0: shutting down sockets
[   94.599801][ T7193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.654087][ T7191] netlink: 'syz.1.394': attribute type 1 has an invalid length.
[   94.657117][ T7191] netlink: 'syz.1.394': attribute type 11 has an invalid length.
[   94.660406][ T7191] netlink: 224 bytes leftover after parsing attributes in process `syz.1.394'.
[   94.918562][ T7202] netlink: 48 bytes leftover after parsing attributes in process `syz.2.398'.
[   94.952668][ T7202] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   94.986369][ T7206] netlink: 'syz.1.399': attribute type 12 has an invalid length.
[   95.063636][ T7213] netlink: 'syz.1.401': attribute type 1 has an invalid length.
[   95.317985][ T7229] netlink: 'syz.1.409': attribute type 12 has an invalid length.
[   95.326770][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'.
[   95.526485][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.416'.
[   95.541740][ T7254] bond3: entered promiscuous mode
[   95.543637][ T7254] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.633440][ T7254] bond3 (unregistering): Released all slaves
[   95.652150][ T7257] netlink: 'syz.1.417': attribute type 12 has an invalid length.
[   95.736063][ T7263] netlink: 76 bytes leftover after parsing attributes in process `syz.1.418'.
[   95.740864][ T7263] netlink: 76 bytes leftover after parsing attributes in process `syz.1.418'.
[   95.806591][ T7270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'.
[   95.868838][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.877159][ T7273] 8021q: adding VLAN 0 to HW filter on device team0
[   95.886408][ T7273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.945691][ T7281] netlink: 'syz.1.425': attribute type 12 has an invalid length.
[   96.151285][ T7295] block nbd0: server does not support multiple connections per device.
[   96.155914][ T7295] block nbd0: shutting down sockets
[   96.354356][ T7322] netlink: 'syz.2.435': attribute type 12 has an invalid length.
[   96.465812][ T7333] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   96.469081][ T7333] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   96.702682][ T7343] syzkaller0: entered promiscuous mode
[   96.704840][ T7343] syzkaller0: entered allmulticast mode
[   96.825130][ T7358] netlink: 256 bytes leftover after parsing attributes in process `syz.0.448'.
[   96.918447][ T7360] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   97.489957][ T7402] tipc: Started in network mode
[   97.497031][ T7402] tipc: Node identity 9, cluster identity 3142
[   97.499394][ T7402] tipc: Node number set to 9
[   97.504271][ T7402] tipc: Cannot configure node identity twice
[   98.247789][ T7456] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   98.250805][ T7456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.303475][ T7462] netlink: 'syz.2.487': attribute type 11 has an invalid length.
[   98.414466][ T7464] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.417047][ T7464] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.419543][ T7464] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.422282][ T7464] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.518787][ T7477] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   99.872398][ T7501] __nla_validate_parse: 99 callbacks suppressed
[   99.872416][ T7501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.496'.
[   99.952428][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'.
[  100.024524][ T7511] syzkaller0: entered promiscuous mode
[  100.026267][ T7511] syzkaller0: entered allmulticast mode
[  100.034517][ T7511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.185963][ T7510] infiniband syz!: set down
[  100.189376][ T7510] infiniband syz!: added team_slave_0
[  100.241212][ T7510] RDS/IB: syz!: added
[  100.243541][ T7510] smc: adding ib device syz! with port count 1
[  100.246008][ T7510] smc:    ib device syz! port 1 has pnetid 
[  100.734393][ T7516] validate_nla: 91 callbacks suppressed
[  100.734404][ T7516] netlink: 'syz.2.501': attribute type 12 has an invalid length.
[  100.775845][ T7518] x_tables: duplicate underflow at hook 3
[  100.785806][ T7503] tipc: Resetting bearer <eth:syzkaller0>
[  100.804107][ T7503] tipc: Disabling bearer <eth:syzkaller0>
[  101.113202][ T7548] netlink: 'syz.2.509': attribute type 12 has an invalid length.
[  101.153653][ T7552] xt_policy: output policy not valid in PREROUTING and INPUT
[  101.352426][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'.
[  101.375788][ T7568] netlink: 'syz.1.517': attribute type 12 has an invalid length.
[  101.427180][ T7566] netlink: 660 bytes leftover after parsing attributes in process `syz.2.516'.
[  101.536644][ T7587] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  101.541152][ T7587] netlink: 'syz.0.522': attribute type 10 has an invalid length.
[  101.543879][ T7587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.522'.
[  101.548692][ T7587] dummy0: entered promiscuous mode
[  101.550589][ T7587] dummy0: entered allmulticast mode
[  101.553127][ T7587] bridge0: port 3(dummy0) entered blocking state
[  101.555413][ T7587] bridge0: port 3(dummy0) entered disabled state
[  101.560264][ T7587] bridge0: port 3(dummy0) entered blocking state
[  101.563333][ T7587] bridge0: port 3(dummy0) entered forwarding state
[  101.596785][ T7590] netlink: 'syz.1.523': attribute type 14 has an invalid length.
[  101.605287][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'.
[  101.657353][ T7596] netlink: 'syz.2.525': attribute type 12 has an invalid length.
[  101.677454][ T7598] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  101.682770][ T7598] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  101.689923][ T7598] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  101.703785][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'.
[  101.787259][ T7609] netlink: 'syz.2.530': attribute type 6 has an invalid length.
[  101.898238][ T7625] netlink: 'syz.2.535': attribute type 12 has an invalid length.
[  102.027651][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'.
[  102.097443][ T7641] IPv6: addrconf: prefix option has invalid lifetime
[  102.173987][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'.
[  102.617412][ T7657] netlink: 'syz.1.545': attribute type 12 has an invalid length.
[  102.620521][ T7655] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  102.624643][ T7655] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  102.698005][ T7663] dvmrp8: entered allmulticast mode
[  102.706393][ T7663] delete_channel: no stack
[  102.709545][ T7662] dvmrp8: left allmulticast mode
[  103.133580][ T7679] netlink: 'syz.1.553': attribute type 12 has an invalid length.
[  103.670295][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.557'.
[  103.718101][ T7703] team0: Device ipvlan1 failed to register rx_handler
[  103.844709][ T7713] xt_TPROXY: Can be used only with -p tcp or -p udp
[  103.958631][ T7723] bond4: entered promiscuous mode
[  103.960754][ T7723] 8021q: adding VLAN 0 to HW filter on device bond4
[  104.132291][ T7751] netlink: 'syz.2.575': attribute type 11 has an invalid length.
[  105.174001][ T7836] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  105.531752][ T7854] __nla_validate_parse: 3 callbacks suppressed
[  105.531772][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.605'.
[  105.718226][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.608'.
[  105.902688][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.612'.
[  105.932570][ T7881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.613'.
[  105.937687][ T7881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.613'.
[  105.972449][ T7885] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  105.975010][ T7885] team0: Device macvtap1 is already an upper device of the team interface
[  106.135829][ T7898] validate_nla: 9 callbacks suppressed
[  106.135847][ T7898] netlink: 'syz.0.618': attribute type 22 has an invalid length.
[  106.143195][ T7895] netlink: 'syz.2.617': attribute type 12 has an invalid length.
[  106.218054][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'.
[  106.242989][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'.
[  106.421681][ T7918] netlink: 182632 bytes leftover after parsing attributes in process `syz.0.621'.
[  106.440501][ T7920] netlink: 'syz.2.625': attribute type 12 has an invalid length.
[  106.476665][ T7922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.626'.
[  106.518001][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'.
[  106.839335][ T7935] netlink: 'syz.1.630': attribute type 8 has an invalid length.
[  107.250510][ T7942] netlink: 'syz.0.633': attribute type 12 has an invalid length.
[  107.648654][ T7966] netlink: 'syz.1.641': attribute type 12 has an invalid length.
[  107.730180][ T7971] tun0: tun_chr_ioctl cmd 2147767520
[  107.744407][ T7974] sch_fq: defrate 0 ignored.
[  107.937035][ T7986] netlink: 'syz.0.649': attribute type 12 has an invalid length.
[  108.048681][ T7994] tipc: Started in network mode
[  108.050494][ T7994] tipc: Node identity 228380c152ac, cluster identity 4711
[  108.058375][ T7995] netlink: 'syz.1.652': attribute type 1 has an invalid length.
[  108.061632][ T7994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.064819][ T7992] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  108.068934][ T7994] syzkaller0: entered promiscuous mode
[  108.071478][ T7994] syzkaller0: entered allmulticast mode
[  108.105809][ T7994] tipc: Resetting bearer <eth:syzkaller0>
[  108.109453][ T7991] tipc: Resetting bearer <eth:syzkaller0>
[  108.124214][ T7991] tipc: Disabling bearer <eth:syzkaller0>
[  108.332260][ T8008] netlink: 'syz.0.656': attribute type 1 has an invalid length.
[  108.432138][ T8020] netlink: 'syz.1.659': attribute type 12 has an invalid length.
[  108.726587][ T8038] batadv_slave_0: entered promiscuous mode
[  108.728998][ T8038] batadv_slave_0: entered allmulticast mode
[  108.778709][ T8040] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  108.937336][ T8054] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  108.953648][ T8054] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  109.057435][ T8051] bond3: entered promiscuous mode
[  109.059794][ T8051] 8021q: adding VLAN 0 to HW filter on device bond3
[  109.195528][ T8068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.307533][ T8077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.909839][ T8109] 8021q: adding VLAN 0 to HW filter on device bond4
[  109.993918][ T8116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.016300][ T8118] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  110.020497][ T8118] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  110.026937][ T8119] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  110.031122][ T8119] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  110.565929][ T8147] ip6erspan0: entered allmulticast mode
[  110.742627][ T8154] __nla_validate_parse: 56 callbacks suppressed
[  110.742638][ T8154] netlink: 744 bytes leftover after parsing attributes in process `syz.1.708'.
[  110.747493][ T8154] netlink: zone id is out of range
[  110.749348][ T8154] netlink: zone id is out of range
[  110.753396][ T8154] netlink: zone id is out of range
[  110.755641][ T8154] netlink: zone id is out of range
[  110.757833][ T8154] netlink: zone id is out of range
[  110.759956][ T8154] netlink: zone id is out of range
[  110.950864][ T8164] batman_adv: batadv0: Adding interface: dummy0
[  110.962260][ T8164] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.970901][ T8164] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  111.305942][ T8189] netlink: 56 bytes leftover after parsing attributes in process `syz.2.720'.
[  111.578434][ T8202] validate_nla: 13 callbacks suppressed
[  111.578445][ T8202] netlink: 'syz.1.725': attribute type 12 has an invalid length.
[  111.586759][ T8200] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.724'.
[  111.649135][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.726'.
[  111.764052][ T8217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.729'.
[  111.875252][ T8227] netlink: 'syz.1.733': attribute type 12 has an invalid length.
[  111.882318][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'.
[  111.885166][ T8229] tipc: Invalid UDP bearer configuration
[  111.885195][ T8229] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  111.913607][ T8231] smc: net device bond0 applied user defined pnetid SYZ0
[  111.960344][ T8236] bond0: entered promiscuous mode
[  111.973885][ T8236] bond_slave_0: entered promiscuous mode
[  111.977526][ T8236] bond_slave_1: entered promiscuous mode
[  111.989970][ T8236] bond0: left promiscuous mode
[  112.000471][ T8236] bond_slave_0: left promiscuous mode
[  112.003465][ T8236] bond_slave_1: left promiscuous mode
[  112.138810][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'.
[  112.217948][ T8264] netlink: 'syz.1.743': attribute type 12 has an invalid length.
[  112.334036][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'.
[  112.537382][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'.
[  112.585350][ T8291] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.752'.
[  112.638378][ T8293] netlink: 'syz.0.753': attribute type 12 has an invalid length.
[  113.056028][ T8314] netlink: 'syz.2.761': attribute type 12 has an invalid length.
[  113.440776][ T8340] netlink: 'syz.2.769': attribute type 12 has an invalid length.
[  113.991102][ T8361] netlink: 'syz.2.777': attribute type 12 has an invalid length.
[  114.256118][ T8379] netlink: 'syz.0.784': attribute type 9 has an invalid length.
[  114.260341][ T8379] netlink: 'syz.0.784': attribute type 6 has an invalid length.
[  114.275440][ T8380] netlink: 'syz.2.785': attribute type 12 has an invalid length.
[  115.373169][ T8412] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  115.378425][ T8412] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  116.177582][ T8442] __nla_validate_parse: 6 callbacks suppressed
[  116.177592][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'.
[  116.300350][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'.
[  116.333618][ T8452] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.806'.
[  116.593675][ T8461] bridge0: port 3(dummy0) entered disabled state
[  116.603618][ T8461] bridge_slave_0: left allmulticast mode
[  116.605553][ T8461] bridge_slave_0: left promiscuous mode
[  116.607949][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.620831][ T8461] bridge_slave_1: left allmulticast mode
[  116.628577][ T8461] bridge_slave_1: left promiscuous mode
[  116.634641][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.644048][ T8461] bond0: (slave bond_slave_0): Releasing backup interface
[  116.662207][ T8461] bond0: (slave bond_slave_1): Releasing backup interface
[  116.690041][ T8461] team0: Port device team_slave_0 removed
[  116.775377][ T8461] team0: Port device team_slave_1 removed
[  116.778073][ T8461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.780381][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.811341][ T8461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.813755][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.836966][ T8461] bond2: (slave gretap1): Releasing active interface
[  117.046583][ T8486] validate_nla: 5 callbacks suppressed
[  117.046597][ T8486] netlink: 'syz.0.815': attribute type 12 has an invalid length.
[  117.056601][ T8484] netlink: 'syz.1.814': attribute type 1 has an invalid length.
[  117.346626][ T8499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.820'.
[  117.350436][ T8499] netlink: 56 bytes leftover after parsing attributes in process `syz.0.820'.
[  117.365979][ T8499] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  117.370497][ T8499] gretap2: entered promiscuous mode
[  117.372992][ T8499] gretap2: entered allmulticast mode
[  117.436602][ T8504] netlink: 'syz.0.821': attribute type 5 has an invalid length.
[  117.502305][ T8507] netlink: 'syz.0.822': attribute type 1 has an invalid length.
[  117.609763][ T8512] netlink: 'syz.0.824': attribute type 21 has an invalid length.
[  117.618950][ T8512] netlink: 'syz.0.824': attribute type 22 has an invalid length.
[  117.624771][ T8512] netlink: 'syz.0.824': attribute type 23 has an invalid length.
[  117.627965][ T8512] netlink: 'syz.0.824': attribute type 25 has an invalid length.
[  117.634677][ T8512] netlink: 'syz.0.824': attribute type 26 has an invalid length.
[  117.637454][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.824'.
[  117.844501][ T8532] netlink: 720 bytes leftover after parsing attributes in process `syz.1.828'.
[  117.849174][ T8530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.829'.
[  117.857278][ T8533] netlink: 720 bytes leftover after parsing attributes in process `syz.1.828'.
[  117.878517][ T8532] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[  117.891066][ T8532] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  117.925683][ T8535] netlink: 72 bytes leftover after parsing attributes in process `syz.0.830'.
[  117.972139][ T8532] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  117.984266][ T8532] CPU: 1 UID: 0 PID: 8532 Comm: syz.1.828 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  117.984288][ T8532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.984297][ T8532] Call Trace:
[  117.984304][ T8532]  <TASK>
[  117.984346][ T8532]  dump_stack_lvl+0x189/0x250
[  117.984372][ T8532]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.984389][ T8532]  ? __pfx__printk+0x10/0x10
[  117.984408][ T8532]  ? kernfs_path_from_node+0x2c/0x260
[  117.984428][ T8532]  ? kernfs_path_from_node+0x2c/0x260
[  117.984445][ T8532]  ? kernfs_path_from_node+0x2c/0x260
[  117.984466][ T8532]  ? kernfs_path_from_node+0x22c/0x260
[  117.984483][ T8532]  ? kernfs_path_from_node+0x2c/0x260
[  117.984505][ T8532]  sysfs_warn_dup+0x8e/0xa0
[  117.984524][ T8532]  sysfs_do_create_link_sd+0xc0/0x110
[  117.984546][ T8532]  device_add_class_symlinks+0x1cf/0x240
[  117.984569][ T8532]  device_add+0x475/0xb50
[  117.984590][ T8532]  wiphy_register+0x199a/0x26b0
[  117.984623][ T8532]  ? __pfx_wiphy_register+0x10/0x10
[  117.984638][ T8532]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  117.984662][ T8532]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  117.984685][ T8532]  ieee80211_register_hw+0x33e1/0x4120
[  117.984719][ T8532]  ? ieee80211_register_hw+0x1431/0x4120
[  117.984745][ T8532]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  117.984768][ T8532]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  117.984795][ T8532]  ? __hrtimer_setup+0x187/0x210
[  117.984810][ T8532]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  117.984831][ T8532]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  117.984871][ T8532]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  117.984886][ T8532]  ? trace_kmalloc+0x1f/0xd0
[  117.984900][ T8532]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  117.984914][ T8532]  ? kstrndup+0xbf/0x160
[  117.984947][ T8532]  hwsim_new_radio_nl+0xea4/0x1b10
[  117.984965][ T8532]  ? __pfx___nla_validate_parse+0x10/0x10
[  117.984991][ T8532]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  117.985039][ T8532]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  117.985060][ T8532]  ? __nla_parse+0x40/0x60
[  117.985076][ T8532]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  117.985096][ T8532]  genl_family_rcv_msg_doit+0x215/0x300
[  117.985123][ T8532]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  117.985155][ T8532]  ? bpf_lsm_capable+0x9/0x20
[  117.985171][ T8532]  ? security_capable+0x7e/0x2e0
[  117.985195][ T8532]  genl_rcv_msg+0x60e/0x790
[  117.985221][ T8532]  ? __pfx_genl_rcv_msg+0x10/0x10
[  117.985239][ T8532]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  117.985267][ T8532]  netlink_rcv_skb+0x208/0x470
[  117.985284][ T8532]  ? __pfx_genl_rcv_msg+0x10/0x10
[  117.985305][ T8532]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  117.985338][ T8532]  ? down_read+0x1ad/0x2e0
[  117.985355][ T8532]  genl_rcv+0x28/0x40
[  117.985373][ T8532]  netlink_unicast+0x75b/0x8d0
[  117.985398][ T8532]  netlink_sendmsg+0x805/0xb30
[  117.985424][ T8532]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.985444][ T8532]  ? aa_sock_msg_perm+0x94/0x160
[  117.985467][ T8532]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  117.985480][ T8532]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.985497][ T8532]  __sock_sendmsg+0x21c/0x270
[  117.985515][ T8532]  ____sys_sendmsg+0x505/0x830
[  117.985538][ T8532]  ? __pfx_____sys_sendmsg+0x10/0x10
[  117.985565][ T8532]  ? import_iovec+0x74/0xa0
[  117.985585][ T8532]  ___sys_sendmsg+0x21f/0x2a0
[  117.985605][ T8532]  ? __pfx____sys_sendmsg+0x10/0x10
[  117.985656][ T8532]  ? __fget_files+0x2a/0x420
[  117.985673][ T8532]  ? __fget_files+0x3a0/0x420
[  117.985697][ T8532]  __x64_sys_sendmsg+0x19b/0x260
[  117.985713][ T8532]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  117.985738][ T8532]  ? rcu_is_watching+0x15/0xb0
[  117.985758][ T8532]  ? do_syscall_64+0xbe/0x3b0
[  117.985776][ T8532]  do_syscall_64+0xfa/0x3b0
[  117.985789][ T8532]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.985802][ T8532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.985813][ T8532]  ? exc_page_fault+0x9f/0xf0
[  117.985834][ T8532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.985846][ T8532] RIP: 0033:0x7fa56b18e929
[  117.985860][ T8532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.985872][ T8532] RSP: 002b:00007fa56bf3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.985887][ T8532] RAX: ffffffffffffffda RBX: 00007fa56b3b5fa0 RCX: 00007fa56b18e929
[  117.985897][ T8532] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000007
[  117.985906][ T8532] RBP: 00007fa56b210b39 R08: 0000000000000000 R09: 0000000000000000
[  117.985913][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.985922][ T8532] R13: 0000000000000000 R14: 00007fa56b3b5fa0 R15: 00007fffebc35558
[  117.985955][ T8532]  </TASK>
[  118.363192][ T8559] netlink: 'syz.2.834': attribute type 10 has an invalid length.
[  118.371326][ T8559] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.408859][ T8559] team0: Port device bond0 added
[  119.213612][ T8618] gretap1: entered promiscuous mode
[  120.043462][ T8653] sctp: [Deprecated]: syz.1.863 (pid 8653) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.043462][ T8653] Use struct sctp_sack_info instead
[  120.134448][ T8656] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20007
[  120.230414][ T8657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.951561][ T8691] veth1_macvtap: entered allmulticast mode
[  120.982066][ T8698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.985074][ T8694] xt_CT: No such helper "snmp"
[  120.987605][ T8697] syzkaller0: entered promiscuous mode
[  120.995170][ T8697] syzkaller0: entered allmulticast mode
[  121.012983][ T8702] xt_ecn: cannot match TCP bits for non-tcp packets
[  121.017940][ T8704] syzkaller1: entered promiscuous mode
[  121.019816][ T8704] syzkaller1: entered allmulticast mode
[  121.255728][ T8731] __nla_validate_parse: 9 callbacks suppressed
[  121.255739][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[  121.324785][ T8739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.892'.
[  121.328307][ T8741] netlink: 40 bytes leftover after parsing attributes in process `syz.2.891'.
[  121.328336][ T8742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.892'.
[  121.334839][ T8739] IPv6: NLM_F_CREATE should be specified when creating new route
[  121.337793][ T8742] IPv6: NLM_F_CREATE should be specified when creating new route
[  121.621891][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'.
[  121.682317][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'.
[  121.701527][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'.
[  121.790073][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.932750][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'.
[  122.062507][ T8816] netlink: 168 bytes leftover after parsing attributes in process `syz.1.917'.
[  122.220531][ T8831] validate_nla: 14 callbacks suppressed
[  122.220541][ T8831] netlink: 'syz.1.922': attribute type 1 has an invalid length.
[  122.225570][ T8831] netlink: 228 bytes leftover after parsing attributes in process `syz.1.922'.
[  122.228591][ T8831] NCSI netlink: No device for ifindex 0
[  122.278022][ T8834] netlink: 'syz.1.923': attribute type 1 has an invalid length.
[  122.281214][ T8834] netlink: 'syz.1.923': attribute type 11 has an invalid length.
[  123.881480][ T5220] Bluetooth: hci2: command tx timeout
[  124.060075][ T8960] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20007
[  124.084774][  T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.087193][  T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.105864][ T8960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.300207][ T8976] netlink: 'syz.1.946': attribute type 1 has an invalid length.
[  124.328986][ T8979] netlink: 'syz.1.947': attribute type 8 has an invalid length.
[  125.100693][ T9032] netlink: 'syz.1.963': attribute type 19 has an invalid length.
[  125.250081][ T9025] team0 (unregistering): Port device team_slave_0 removed
[  125.255108][ T9025] team0 (unregistering): Port device team_slave_1 removed
[  125.269347][ T9025] team0 (unregistering): Port device bond0 removed
[  125.394148][ T9048] netlink: 'syz.0.967': attribute type 12 has an invalid length.
[  125.430475][ T9055] 8021q: VLANs not supported on caif0
[  125.600848][ T9067] net_ratelimit: 166 callbacks suppressed
[  125.600864][ T9067] openvswitch: netlink: IPv4 tunnel dst address is zero
[  125.759389][ T9077] bond0: (slave wlan1): Releasing backup interface
[  125.764260][ T9077] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  125.792579][ T9078] netlink: 'syz.2.977': attribute type 33 has an invalid length.
[  126.490858][ T9117] __nla_validate_parse: 25 callbacks suppressed
[  126.490873][ T9117] netlink: 112 bytes leftover after parsing attributes in process `syz.1.995'.
[  126.743987][ T9122] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  126.748942][ T9122] netlink: 44 bytes leftover after parsing attributes in process `syz.0.997'.
[  126.996539][ T9133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.999'.
[  127.004908][ T9133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.999'.
[  127.010323][ T9134] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1001'.
[  127.021084][ T9134] nbd: illegal input index 813367268
[  127.025497][ T9134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1001'.
[  127.150871][ T9141] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1004'.
[  127.166188][ T9141] batadv1: entered promiscuous mode
[  127.168515][ T9141] batadv1: entered allmulticast mode
[  127.316414][ T9141] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1004'.
[  127.460719][ T9150] netlink: 'syz.1.1006': attribute type 12 has an invalid length.
[  127.465063][ T9150] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1006'.
[  127.505054][ T9153] xt_ecn: cannot match TCP bits for non-tcp packets
[  127.548417][ T9159] netlink: 'syz.1.1008': attribute type 7 has an invalid length.
[  127.552932][ T9159] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1008'.
[  127.597939][ T9162] syzkaller1: entered promiscuous mode
[  127.599729][ T9162] syzkaller1: entered allmulticast mode
[  127.967782][ T9181] netlink: 'syz.1.1013': attribute type 12 has an invalid length.
[  128.407572][ T9204] netlink: 'syz.1.1020': attribute type 12 has an invalid length.
[  128.589040][ T9214] tipc: Enabled bearer <udp:syz2>, priority 10
[  129.279084][ T9231] netlink: 'syz.2.1025': attribute type 29 has an invalid length.
[  129.284579][ T9231] netlink: 'syz.2.1025': attribute type 29 has an invalid length.
[  129.287575][ T9231] unsupported nla_type 58
[  129.289503][ T9231] netlink: 'syz.2.1025': attribute type 10 has an invalid length.
[  129.347568][ T9235] Illegal XDP return value 4294967282 on prog  (id 455) dev N/A, expect packet loss!
[  129.475386][ T9239] netlink: 'syz.1.1027': attribute type 21 has an invalid length.
[  129.478553][ T9239] netlink: 'syz.1.1027': attribute type 4 has an invalid length.
[  129.482867][ T9239] netlink: 'syz.1.1027': attribute type 5 has an invalid length.
[  130.523573][ T9301] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  130.912427][ T9345] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  131.670737][ T9384] __nla_validate_parse: 19 callbacks suppressed
[  131.670748][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'.
[  132.163340][ T9401] batadv_slave_0: left promiscuous mode
[  132.165628][ T9401] batadv_slave_0: left allmulticast mode
[  132.175119][ T9401] gretap1: left promiscuous mode
[  132.176812][ T9401] xfrm1: left allmulticast mode
[  132.179335][ T9401] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.182796][ T9401] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.185784][ T9401] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.188499][ T9401] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.197432][ T9401] bond3: left promiscuous mode
[  132.318524][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'.
[  132.326168][ T9414] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1077'.
[  132.365516][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.367579][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.479705][ T9426] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1082'.
[  132.522893][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1083'.
[  132.897924][ T9442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.905322][ T9442] syzkaller0: entered promiscuous mode
[  132.907471][ T9442] syzkaller0: entered allmulticast mode
[  132.926524][ T9442] tipc: Resetting bearer <eth:syzkaller0>
[  132.930635][ T9441] tipc: Resetting bearer <eth:syzkaller0>
[  132.943395][ T9441] tipc: Disabling bearer <eth:syzkaller0>
[  133.204022][ T9444] validate_nla: 7 callbacks suppressed
[  133.204033][ T9444] netlink: 'syz.2.1088': attribute type 12 has an invalid length.
[  133.252984][ T9446] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1089'.
[  133.372324][ T9457] ip6tnl1: entered promiscuous mode
[  133.374025][ T9457] ip6tnl1: entered allmulticast mode
[  133.379299][ T9457] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  133.409938][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'.
[  133.624785][ T9470] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1097'.
[  133.770290][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  133.803703][ T9488] x_tables: duplicate underflow at hook 1
[  133.890012][ T9499] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1107'.
[  134.050395][ T9510] pim6reg1: entered allmulticast mode
[  134.175768][ T9516] xfrm1: entered promiscuous mode
[  134.178012][ T9516] xfrm1: entered allmulticast mode
[  134.208410][ T9516] xt_hashlimit: size too large, truncated to 1048576
[  134.401505][ T9526] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  134.485962][ T5220] Bluetooth: hci2: link tx timeout
[  134.495148][ T5220] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.979377][ T9545] Cannot find add_set index 0 as target
[  135.168879][ T9560] tun0: tun_chr_ioctl cmd 1074025675
[  135.171307][ T9560] tun0: persist enabled
[  135.173278][ T9560] tun0: tun_chr_ioctl cmd 1074025675
[  135.175350][ T9560] tun0: persist enabled
[  135.503694][ T9595] netlink: zone id is out of range
[  135.509572][ T9595] netlink: zone id is out of range
[  135.514430][ T9599] openvswitch: netlink: IPv4 tun info is not correct
[  135.516357][ T9595] netlink: zone id is out of range
[  135.517224][ T9599] netlink: 'syz.0.1136': attribute type 30 has an invalid length.
[  135.518593][ T9595] netlink: zone id is out of range
[  135.522951][ T9599] netlink: 'syz.0.1136': attribute type 2 has an invalid length.
[  135.524139][ T9595] netlink: zone id is out of range
[  135.526638][ T9599] netlink: 'syz.0.1136': attribute type 1 has an invalid length.
[  135.528011][ T9595] netlink: zone id is out of range
[  135.531212][ T9599] netlink: 'syz.0.1136': attribute type 2 has an invalid length.
[  135.531227][ T9599] netlink: 'syz.0.1136': attribute type 2 has an invalid length.
[  135.531237][ T9599] netlink: 'syz.0.1136': attribute type 2 has an invalid length.
[  135.531247][ T9599] netlink: 'syz.0.1136': attribute type 2 has an invalid length.
[  135.551662][ T9595] netlink: zone id is out of range
[  135.553976][ T9595] netlink: zone id is out of range
[  135.555853][ T9595] netlink: zone id is out of range
[  135.646648][ T9605] netlink: 'syz.1.1140': attribute type 2 has an invalid length.
[  135.677463][ T9605] : entered promiscuous mode
[  135.819715][ T9622] x_tables: duplicate underflow at hook 2
[  135.905731][ T9623] netlink: 'syz.2.1142': attribute type 153 has an invalid length.
[  136.521242][ T5220] Bluetooth: hci2: command 0x0406 tx timeout
[  136.992305][ T9654] __nla_validate_parse: 10 callbacks suppressed
[  136.992315][ T9654] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1154'.
[  137.213646][ T9663] gretap3: entered allmulticast mode
[  137.336515][ T5298] IPVS: starting estimator thread 0...
[  137.338744][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'.
[  137.399724][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'.
[  137.416484][ T9683] ipt_REJECT: TCP_RESET invalid for non-tcp
[  137.432242][ T9677] IPVS: using max 62 ests per chain, 148800 per kthread
[  137.635433][ T9703] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1169'.
[  137.721204][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'.
[  137.723839][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'.
[  137.726713][ T9710] netlink: 46 bytes leftover after parsing attributes in process `syz.2.1171'.
[  137.876588][ T9719] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1174'.
[  138.012158][ T9727] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1177'.
[  138.239458][ T9740] validate_nla: 9 callbacks suppressed
[  138.239469][ T9740] netlink: 'syz.1.1181': attribute type 12 has an invalid length.
[  138.576615][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'.
[  138.860255][ T9765] Bluetooth: MGMT ver 1.23
[  138.885909][ T9767] netlink: 'syz.1.1192': attribute type 12 has an invalid length.
[  139.080657][ T9782] xt_CT: No such helper "syz1"
[  139.156340][ T9792] netlink: 'syz.0.1201': attribute type 12 has an invalid length.
[  139.218157][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.221649][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.538679][ T9832] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  139.542398][ T9832] netlink: 'syz.0.1213': attribute type 2 has an invalid length.
[  139.545254][ T9832] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  139.548127][ T9832] netlink: 'syz.0.1213': attribute type 2 has an invalid length.
[  139.940064][ T9883] netlink: 'syz.2.1229': attribute type 12 has an invalid length.
[  140.347410][ T9908] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  140.794711][ T9885] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  141.011391][ T5220] Bluetooth: hci2: command 0x0406 tx timeout
[  141.368438][ T9944] 8021q: adding VLAN 0 to HW filter on device bond3
[  141.376218][ T9944] team0: Port device bond3 added
[  141.659897][ T9964] netlink: 'syz.0.1256': attribute type 9 has an invalid length.
[  141.665421][ T9964] netlink: 'syz.0.1256': attribute type 6 has an invalid length.
[  141.777840][ T9973] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  141.900836][ T9986] 8021q: adding VLAN 0 to HW filter on device bond5
[  142.051186][ T5843] Bluetooth: hci1: command 0x0401 tx timeout
[  142.053332][ T9989] Bluetooth: hci1: Opcode 0x0401 failed: -110
[  142.526385][T10001] __nla_validate_parse: 25 callbacks suppressed
[  142.526401][T10001] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1266'.
[  142.824059][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'.
[  142.889271][T10018] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  142.893010][T10018] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  143.081757][T10036] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  143.323657][T10054] validate_nla: 4 callbacks suppressed
[  143.323667][T10054] netlink: 'syz.0.1282': attribute type 12 has an invalid length.
[  143.380836][T10060] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1286'.
[  143.454843][T10066] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1288'.
[  143.457908][T10066] gretap0: entered promiscuous mode
[  143.460425][T10066] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1288'.
[  143.464322][T10066] 0XD: renamed from gretap0
[  143.468536][T10066] 0XD: left promiscuous mode
[  143.470497][T10066] 0XD: entered allmulticast mode
[  143.474717][T10066] net_ratelimit: 1163 callbacks suppressed
[  143.474732][T10066] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check.
[  143.495444][T10067] netlink: 'syz.1.1287': attribute type 1 has an invalid length.
[  143.498620][T10067] netlink: 'syz.1.1287': attribute type 4 has an invalid length.
[  143.501855][T10067] netlink: 14506 bytes leftover after parsing attributes in process `syz.1.1287'.
[  143.586212][T10071] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1289'.
[  143.645504][T10074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.649823][T10074] sctp: [Deprecated]: syz.1.1290 (pid 10074) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.649823][T10074] Use struct sctp_sack_info instead
[  143.956059][T10082] netlink: 'syz.1.1293': attribute type 12 has an invalid length.
[  144.125367][ T5843] Bluetooth: hci1: command 0x0401 tx timeout
[  144.206381][T10095] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1296'.
[  144.532025][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'.
[  144.597837][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1307'.
[  144.644374][T10133] netlink: 'syz.2.1308': attribute type 12 has an invalid length.
[  145.030323][T10154] ipt_ECN: cannot use operation on non-tcp rule
[  145.680066][T10192] netlink: 'syz.1.1328': attribute type 3 has an invalid length.
[  145.756464][T10192] netlink: 'syz.1.1328': attribute type 1 has an invalid length.
[  145.760161][T10192] netlink: 'syz.1.1328': attribute type 1 has an invalid length.
[  145.770480][T10192] netlink: 'syz.1.1328': attribute type 1 has an invalid length.
[  146.188661][T10221] netlink: 'syz.0.1337': attribute type 1 has an invalid length.
[  146.793564][T10279] syz_tun: entered allmulticast mode
[  146.805837][T10279] dvmrp8: entered allmulticast mode
[  146.821637][T10278] syz_tun: left allmulticast mode
[  147.224599][T10303] _Z`Ԁ@: entered promiscuous mode
[  147.585800][T10321] __nla_validate_parse: 35 callbacks suppressed
[  147.585810][T10321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1377'.
[  147.596740][T10321] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.1377'.
[  147.799506][T10330] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1381'.
[  147.867570][T10332] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1382'.
[  147.967167][T10334] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1383'.
[  147.995122][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'.
[  148.005822][T10336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1384'.
[  148.072521][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'.
[  148.329324][T10351] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  148.629496][T10376] validate_nla: 7 callbacks suppressed
[  148.629507][T10376] netlink: 'syz.2.1394': attribute type 12 has an invalid length.
[  148.655831][T10378] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  148.702458][T10378] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1395'.
[  148.834423][T10387] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1398'.
[  149.235350][T10394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.413591][T10405] unsupported nlmsg_type 40
[  149.813593][T10424] netlink: 'syz.0.1413': attribute type 12 has an invalid length.
[  150.527081][T10483] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001
[  150.596863][T10491] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  150.975141][   T33] audit: type=1800 audit(1752166952.613:4): pid=10527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1449" name=33FFFF dev="tmpfs" ino=2529 res=0 errno=0
[  151.137870][T10529] netlink: 'syz.2.1450': attribute type 12 has an invalid length.
[  151.243897][T10538] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  151.246831][T10538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.287910][T10543] netlink: 'syz.0.1453': attribute type 4 has an invalid length.
[  151.431566][T10551] netlink: 'syz.2.1458': attribute type 12 has an invalid length.
[  151.475431][T10553] xt_hashlimit: max too large, truncated to 1048576
[  151.478493][T10553] Cannot find add_set index 3 as target
[  151.614037][T10565] netlink: 'syz.0.1464': attribute type 13 has an invalid length.
[  151.618925][T10565] netlink: 'syz.0.1464': attribute type 11 has an invalid length.
[  151.645484][T10565] netlink: 'syz.0.1464': attribute type 9 has an invalid length.
[  151.720020][T10574] tun0: tun_chr_ioctl cmd 1074025677
[  151.722117][T10574] tun0: linktype set to 824
[  151.756024][T10577] netlink: 'syz.0.1467': attribute type 12 has an invalid length.
[  151.804958][T10579] batadv1: entered promiscuous mode
[  151.807087][T10579] batadv1: entered allmulticast mode
[  152.044415][T10600] netlink: 'syz.0.1474': attribute type 12 has an invalid length.
[  152.256010][T10610] team0: Port device bond3 removed
[  152.539442][T10623] sctp: [Deprecated]: syz.2.1483 (pid 10623) Use of int in maxseg socket option.
[  152.539442][T10623] Use struct sctp_assoc_value instead
[  152.674638][T10634] __nla_validate_parse: 32 callbacks suppressed
[  152.674660][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1484'.
[  152.694014][T10630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1484'.
[  153.058966][T10663] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1490'.
[  153.100538][T10667] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1491'.
[  153.375464][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'.
[  153.423717][T10701] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1498'.
[  153.469515][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'.
[  153.472990][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'.
[  153.601879][T10711] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1500'.
[  153.757503][T10727] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1505'.
[  153.845574][T10729] validate_nla: 1 callbacks suppressed
[  153.845592][T10729] netlink: 'syz.1.1506': attribute type 10 has an invalid length.
[  153.869045][T10729] veth0_vlan: left promiscuous mode
[  153.877508][T10729] veth0_vlan: entered promiscuous mode
[  153.884960][T10729] team0: Device veth0_vlan failed to register rx_handler
[  153.962956][T10729] syz.1.1506 (10729) used greatest stack depth: 19816 bytes left
[  154.026371][T10737] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  154.030300][T10737] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  154.086141][T10741] 8021q: VLANs not supported on ipvlan1
[  155.272371][T10793] dummy0: left promiscuous mode
[  155.273990][T10793] dummy0: left allmulticast mode
[  155.276750][T10793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.377327][T10799] netlink: 'syz.2.1529': attribute type 1 has an invalid length.
[  155.599965][T10817] netlink: 'syz.2.1533': attribute type 1 has an invalid length.
[  155.640385][T10823] wg1 speed is unknown, defaulting to 1000
[  155.647849][T10823] wg1 speed is unknown, defaulting to 1000
[  155.651041][T10823] wg1 speed is unknown, defaulting to 1000
[  155.656851][T10823] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  155.667360][T10823] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  155.685097][T10823] wg1 speed is unknown, defaulting to 1000
[  155.688487][T10823] wg1 speed is unknown, defaulting to 1000
[  155.696654][T10823] wg1 speed is unknown, defaulting to 1000
[  155.836021][T10834] openvswitch: netlink: Flow actions attr not present in new flow.
[  155.885863][T10836] netlink: 'syz.2.1539': attribute type 12 has an invalid length.
[  156.146036][T10852] IPVS: Unknown mcast interface: pimreg1
[  156.220715][T10856] 0XD: left allmulticast mode
[  156.243430][T10856] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.246534][T10856] batman_adv: batadv0: Interface activated: dummy0
[  156.256636][T10856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.704773][T10910] netlink: 'syz.1.1564': attribute type 12 has an invalid length.
[  158.036506][T10943] netlink: 'syz.1.1573': attribute type 1 has an invalid length.
[  158.075492][T10943] bond4: (slave vxcan2): The slave device specified does not support setting the MAC address
[  158.081212][T10943] bond4: (slave vxcan2): Error -95 calling set_mac_address
[  158.096560][T10946] __nla_validate_parse: 16 callbacks suppressed
[  158.096576][T10946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1574'.
[  158.096597][T10947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1574'.
[  158.156568][T10950] netlink: 'syz.2.1575': attribute type 12 has an invalid length.
[  158.257574][T10953] bond0: Unable to set down delay as MII monitoring is disabled
[  158.434289][T10970] netlink: 'syz.1.1582': attribute type 4 has an invalid length.
[  158.508540][T10975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.570496][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'.
[  158.574462][T10984] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1585'.
[  158.578972][T10984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1585'.
[  158.722844][T10993] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1588'.
[  158.758060][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1589'.
[  158.784715][T10997] batman_adv: batadv0: Interface deactivated: dummy0
[  158.787038][T10997] batman_adv: batadv0: Removing interface: dummy0
[  158.792458][T10997] bond0: (slave bond_slave_0): Releasing backup interface
[  158.801344][T10997] bond0: (slave bond_slave_1): Releasing backup interface
[  158.807405][T10997] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.819627][T10997] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.823818][T10997] bond1: (slave bridge2): Releasing active interface
[  158.826529][T10995] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1589'.
[  158.829610][T10999] netlink: 'syz.1.1591': attribute type 12 has an invalid length.
[  158.830209][T10997] netlink: 'syz.2.1590': attribute type 10 has an invalid length.
[  158.842690][T10997] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.847627][T10997] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  158.937085][T11005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1594'.
[  158.940690][T11005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1594'.
[  159.033019][T11016] Dead loop on virtual device ip6_vti0, fix it urgently!
[  159.394407][T11053] macvlan0: entered promiscuous mode
[  159.398121][T11053] netlink: 'syz.1.1611': attribute type 1 has an invalid length.
[  159.400634][T11053] netlink: 'syz.1.1611': attribute type 2 has an invalid length.
[  159.633574][T11069] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  159.766022][T11077] trusted_key: syz.1.1619 sent an empty control message without MSG_MORE.
[  159.876221][T11083] netlink: 'syz.1.1621': attribute type 1 has an invalid length.
[  159.945338][T11087] netlink: 'syz.1.1624': attribute type 30 has an invalid length.
[  160.069556][T11094] tipc: Invalid UDP bearer configuration
[  160.069588][T11094] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  160.839483][T11130] batman_adv: batadv0: Adding interface: dummy0
[  160.843639][T11130] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.860369][T11130] batman_adv: batadv0: Interface activated: dummy0
[  160.938918][T11128] netlink: 'syz.2.1639': attribute type 10 has an invalid length.
[  160.957138][T11140] netlink: 'syz.0.1641': attribute type 12 has an invalid length.
[  161.089640][T11144] xt_time: invalid argument - start or stop time greater than 23:59:59
[  161.154430][T11154] geneve2: entered promiscuous mode
[  161.242244][T11163] can: request_module (can-proto-3) failed.
[  161.251800][T11166] netlink: 'syz.2.1648': attribute type 12 has an invalid length.
[  161.263120][T11163] netlink: 'syz.0.1647': attribute type 1 has an invalid length.
[  161.265676][T11163] NCSI netlink: No device for ifindex 813332851
[  161.313952][T11172] netlink: 'syz.2.1651': attribute type 13 has an invalid length.
[  161.835851][T11211] syzkaller1: entered promiscuous mode
[  161.840063][T11211] syzkaller1: entered allmulticast mode
[  162.163187][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  162.166704][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  162.178292][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  162.184464][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  162.187070][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  162.342458][T11233] wg1 speed is unknown, defaulting to 1000
[  162.492557][T11233] chnl_net:caif_netlink_parms(): no params data found
[  162.526168][T11258] netlink: 'syz.0.1668': attribute type 3 has an invalid length.
[  162.580908][T11233] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.587109][T11233] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.591356][T11233] bridge_slave_0: entered allmulticast mode
[  162.596507][T11233] bridge_slave_0: entered promiscuous mode
[  162.611549][T11233] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.614389][T11233] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.617343][T11233] bridge_slave_1: entered allmulticast mode
[  162.621529][T11233] bridge_slave_1: entered promiscuous mode
[  162.659090][T11233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.666833][T11233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.716389][T11233] team0: Port device team_slave_0 added
[  162.724322][T11233] team0: Port device team_slave_1 added
[  162.762341][T11233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.765074][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.777943][T11233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.784802][T11233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.787457][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.800151][T11233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.864992][T11233] hsr_slave_0: entered promiscuous mode
[  162.868179][T11233] hsr_slave_1: entered promiscuous mode
[  162.873754][T11233] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.876755][T11233] Cannot create hsr debugfs directory
[  163.092980][T11284] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.096577][T11284] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.099755][T11284] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.105595][T11284] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.109060][T11284] geneve1: entered allmulticast mode
[  163.148141][T11233] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.238888][T11233] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.338556][T11233] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.415308][T11233] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.448890][T11283] wg1 speed is unknown, defaulting to 1000
[  163.728287][T11233] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  163.738414][T11233] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  163.748872][T11233] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  163.754916][T11233] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  163.842719][T11233] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.857810][T11233] 8021q: adding VLAN 0 to HW filter on device team0
[  163.866260][  T162] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.868582][  T162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.894044][T11308] __nla_validate_parse: 26 callbacks suppressed
[  163.894056][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'.
[  163.901832][  T162] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.904153][  T162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.936007][T11233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  163.939327][T11233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.103144][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'.
[  164.114670][T11233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.117632][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'.
[  164.139541][T11322] macsec1: entered allmulticast mode
[  164.141590][T11322] veth0: entered allmulticast mode
[  164.144794][T11322] veth0: left allmulticast mode
[  164.202471][ T5220] Bluetooth: hci2: command tx timeout
[  164.209165][T11233] veth0_vlan: entered promiscuous mode
[  164.230342][T11233] veth1_vlan: entered promiscuous mode
[  164.263518][T11233] veth0_macvtap: entered promiscuous mode
[  164.272863][T11233] veth1_macvtap: entered promiscuous mode
[  164.290306][T11233] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.298216][T11233] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.307288][T11233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.312042][T11233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.317378][T11233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.321549][T11233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.341271][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'.
[  164.346759][T11333] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1688'.
[  164.354787][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'.
[  164.475942][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.478727][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.530390][ T2264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.533554][ T2264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.652807][T11346] validate_nla: 3 callbacks suppressed
[  164.652820][T11346] netlink: 'syz.0.1691': attribute type 12 has an invalid length.
[  165.125648][T11371] dvmrp0: entered allmulticast mode
[  165.249245][T11379] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.1702'.
[  165.366794][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'.
[  165.370281][T11385] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1705'.
[  165.479402][T11390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1707'.
[  165.706128][T11405] vlan3: entered promiscuous mode
[  165.708238][T11405] bridge0: entered promiscuous mode
[  165.710438][T11405] vlan3: entered allmulticast mode
[  165.714386][T11405] bridge0: entered allmulticast mode
[  165.757197][T11410] bond0: (slave wlan1): Releasing backup interface
[  166.156903][T11424] wg1 speed is unknown, defaulting to 1000
[  166.158623][T11439] netlink: 'syz.0.1722': attribute type 1 has an invalid length.
[  166.467085][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.873904][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  166.879336][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  166.882205][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  166.885220][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  166.888311][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  167.024549][T11471] wg1 speed is unknown, defaulting to 1000
[  167.120852][T11471] chnl_net:caif_netlink_parms(): no params data found
[  168.921313][ T5843] Bluetooth: hci2: command tx timeout
[  169.878055][T11495] __nla_validate_parse: 4 callbacks suppressed
[  169.878068][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'.
[  169.944689][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.975047][T11471] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.979106][T11471] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.987057][T11471] bridge_slave_0: entered allmulticast mode
[  169.991387][T11471] bridge_slave_0: entered promiscuous mode
[  170.001741][T11471] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.008242][T11471] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.016028][T11471] bridge_slave_1: entered allmulticast mode
[  170.021766][T11471] bridge_slave_1: entered promiscuous mode
[  170.100127][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.112756][T11471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.117949][T11471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.127036][T11511] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[  170.158506][T11471] team0: Port device team_slave_0 added
[  170.179546][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.190307][T11471] team0: Port device team_slave_1 added
[  170.225038][T11517] xt_CT: You must specify a L4 protocol and not use inversions on it
[  170.250686][T11471] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.258168][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.272226][T11471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.289405][T11471] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.294208][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.313652][T11471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.414882][T11531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'.
[  170.518438][T11471] hsr_slave_0: entered promiscuous mode
[  170.528114][T11531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'.
[  170.529268][T11471] hsr_slave_1: entered promiscuous mode
[  170.533978][T11471] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.536439][T11471] Cannot create hsr debugfs directory
[  170.545381][T11535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1745'.
[  170.564863][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'.
[  170.619932][   T12] bridge_slave_1: left allmulticast mode
[  170.624178][   T12] bridge_slave_1: left promiscuous mode
[  170.628528][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.633597][T11538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1745'.
[  170.646648][   T12] bridge_slave_0: left allmulticast mode
[  170.648930][   T12] bridge_slave_0: left promiscuous mode
[  170.651444][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.005725][ T5843] Bluetooth: hci2: command tx timeout
[  171.027445][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.036795][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.041967][   T12] bond0 (unregistering): Released all slaves
[  171.254241][T11545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1748'.
[  171.309808][T11545] dummy0: mtu less than device minimum
[  171.765955][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1755'.
[  171.920152][   T12] hsr_slave_0: left promiscuous mode
[  171.922699][   T12] hsr_slave_1: left promiscuous mode
[  171.924973][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.927389][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.976438][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.978925][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.014281][   T12] veth1_macvtap: left promiscuous mode
[  172.016559][   T12] veth0_macvtap: left promiscuous mode
[  172.018440][   T12] veth1_vlan: left promiscuous mode
[  172.020342][   T12] veth0_vlan: left promiscuous mode
[  172.404775][   T12] team0 (unregistering): Port device team_slave_1 removed
[  172.456180][   T12] team0 (unregistering): Port device team_slave_0 removed
[  172.994662][T11471] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  173.017987][T11471] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  173.047512][T11471] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  173.076910][T11471] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  173.081452][ T5843] Bluetooth: hci2: command tx timeout
[  173.092809][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1758'.
[  173.284354][T11471] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.309793][T11471] 8021q: adding VLAN 0 to HW filter on device team0
[  173.353414][  T162] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.356294][  T162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.371198][  T162] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.373650][  T162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.485206][T11618] netlink: 'syz.2.1763': attribute type 12 has an invalid length.
[  173.555284][T11625] No such timeout policy "syz1"
[  173.577788][T11625] pim6reg: entered allmulticast mode
[  173.596715][T11625] pim6reg: left allmulticast mode
[  173.685347][T11471] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.722532][T11636] netlink: 'syz.2.1766': attribute type 1 has an invalid length.
[  173.725569][T11636] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1766'.
[  173.759844][T11471] veth0_vlan: entered promiscuous mode
[  173.770279][T11471] veth1_vlan: entered promiscuous mode
[  173.846168][T11640] syzkaller1: entered promiscuous mode
[  173.848435][T11640] syzkaller1: entered allmulticast mode
[  173.872530][T11471] veth0_macvtap: entered promiscuous mode
[  173.906731][T11471] veth1_macvtap: entered promiscuous mode
[  173.983559][T11471] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.992671][T11471] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.999300][T11471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.010256][T11471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.014399][T11471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.017075][T11471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.128016][ T5191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.130795][ T5191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.182896][ T2264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.185957][ T2264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.331865][T11670] netlink: 'syz.0.1775': attribute type 1 has an invalid length.
[  174.337946][T11670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  174.538956][T11680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.548683][T11680] netlink: 'syz.2.1779': attribute type 1 has an invalid length.
[  174.732024][T11689] netlink: 'syz.2.1782': attribute type 33 has an invalid length.
[  174.960565][T11706] netlink: del zone limit has 8 unknown bytes
[  175.085844][T11708] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.089175][T11708] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.094117][T11708] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.097419][T11708] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.157221][T11711] __nla_validate_parse: 4 callbacks suppressed
[  175.157235][T11711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1789'.
[  175.208906][T11716] Cannot find add_set index 0 as target
[  175.216378][T11716] pim6reg: entered allmulticast mode
[  175.220727][T11716] pim6reg: left allmulticast mode
[  175.350873][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1792'.
[  175.360063][T11720] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1792'.
[  175.365325][T11720] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1792'.
[  175.371533][T11720] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1792'.
[  175.498974][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.510226][T11727] netlink: 'syz.0.1795': attribute type 1 has an invalid length.
[  175.512922][T11727] netlink: 'syz.0.1795': attribute type 1 has an invalid length.
[  175.516604][T11727] netlink: 'syz.0.1795': attribute type 1 has an invalid length.
[  175.522438][T11727] netlink: 'syz.0.1795': attribute type 1 has an invalid length.
[  175.524931][T11727] netlink: 'syz.0.1795': attribute type 1 has an invalid length.
[  175.755907][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'.
[  175.945803][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.949577][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.953162][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.957132][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.959686][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.098367][T11753] wg1 speed is unknown, defaulting to 1000
[  176.398910][T11753] chnl_net:caif_netlink_parms(): no params data found
[  176.409380][T11779] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1809'.
[  176.486175][T11789] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1811'.
[  176.493615][T11753] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.496205][T11753] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.498590][T11753] bridge_slave_0: entered allmulticast mode
[  176.505896][T11753] bridge_slave_0: entered promiscuous mode
[  176.512931][T11753] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.515786][T11753] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.518357][T11753] bridge_slave_1: entered allmulticast mode
[  176.522458][T11753] bridge_slave_1: entered promiscuous mode
[  176.559959][T11753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.572298][T11753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.599421][T11753] team0: Port device team_slave_0 added
[  176.603065][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'.
[  176.608910][T11753] team0: Port device team_slave_1 added
[  176.655730][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.672219][T11753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.675078][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.687987][T11753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.704631][T11753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.707603][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.718801][T11753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.788802][T11753] hsr_slave_0: entered promiscuous mode
[  176.792489][T11753] hsr_slave_1: entered promiscuous mode
[  176.795301][T11753] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.798258][T11753] Cannot create hsr debugfs directory
[  176.814437][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'.
[  176.835833][T11796] xt_CT: You must specify a L4 protocol and not use inversions on it
[  176.954467][T11795] wg1 speed is unknown, defaulting to 1000
[  177.034779][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.092905][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.275950][   T12] bridge_slave_1: left allmulticast mode
[  177.278214][   T12] bridge_slave_1: left promiscuous mode
[  177.280394][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.288089][   T12] bridge_slave_0: left allmulticast mode
[  177.290256][   T12] bridge_slave_0: left promiscuous mode
[  177.303473][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.745028][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.754844][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.760393][   T12] bond0 (unregistering): Released all slaves
[  177.809699][T11814] batman_adv: batadv0: Interface deactivated: dummy0
[  177.816679][T11814] batman_adv: batadv0: Removing interface: dummy0
[  178.053540][ T5843] Bluetooth: hci2: command tx timeout
[  178.423362][   T12] hsr_slave_0: left promiscuous mode
[  178.426279][   T12] hsr_slave_1: left promiscuous mode
[  178.429047][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.435734][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.439315][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.443390][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.497793][   T12] veth1_macvtap: left promiscuous mode
[  178.509199][   T12] veth0_macvtap: left promiscuous mode
[  178.512135][   T12] veth1_vlan: left promiscuous mode
[  178.514287][   T12] veth0_vlan: left promiscuous mode
[  179.153655][   T12] team0 (unregistering): Port device team_slave_1 removed
[  179.205193][   T12] team0 (unregistering): Port device team_slave_0 removed
[  179.810631][T11753] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  179.831898][T11753] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  179.853107][T11753] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  179.864621][T11753] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  180.122045][ T5843] Bluetooth: hci2: command tx timeout
[  180.184623][T11753] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.227094][T11753] 8021q: adding VLAN 0 to HW filter on device team0
[  180.247549][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.250117][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.343893][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.347631][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.356298][T11871] wg1 speed is unknown, defaulting to 1000
[  180.605079][T11870] wg1 speed is unknown, defaulting to 1000
[  180.888482][T11753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.933246][T11753] veth0_vlan: entered promiscuous mode
[  181.039165][T11753] veth1_vlan: entered promiscuous mode
[  181.077740][T11753] veth0_macvtap: entered promiscuous mode
[  181.084719][T11753] veth1_macvtap: entered promiscuous mode
[  181.112710][T11753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.142106][T11753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.148996][T11753] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.158808][T11753] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.168859][T11753] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.172390][T11753] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.321488][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.324677][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.370390][T11921] hsr0: entered promiscuous mode
[  181.373050][T11921] hsr0: entered allmulticast mode
[  181.374815][T11921] hsr_slave_0: entered allmulticast mode
[  181.376633][T11921] hsr_slave_1: entered allmulticast mode
[  181.398941][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.402442][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.422457][T11923] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007
[  181.478166][T11923] __nla_validate_parse: 5 callbacks suppressed
[  181.478183][T11923] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1841'.
[  181.485853][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.488919][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.870243][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'.
[  181.877951][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'.
[  181.929491][T11951] bridge0: port 1(30XD) entered blocking state
[  181.933408][T11951] bridge0: port 1(30XD) entered disabled state
[  181.936078][T11951] 0XD: entered allmulticast mode
[  181.939867][T11951] 0XD: entered promiscuous mode
[  182.107715][T11959] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.111598][T11959] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.114754][T11959] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.117972][T11959] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.125220][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1853'.
[  182.244070][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'.
[  182.271166][T11962] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  182.487054][ T7485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.580179][T11969] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  182.619188][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1856'.
[  183.089237][T11978] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1858'.
[  183.095173][T11980] xt_SECMARK: invalid mode: 0
[  183.103620][T11981] xt_bpf: check failed: parse error
[  183.295107][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.299469][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.302244][T12000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'.
[  183.305397][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.309862][T12003] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1864'.
[  183.327656][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.332839][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.534724][T11998] wg1 speed is unknown, defaulting to 1000
[  183.702485][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'.
[  183.715778][T11998] chnl_net:caif_netlink_parms(): no params data found
[  183.856614][ T7485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.893021][T11998] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.895445][T11998] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.897870][T11998] bridge_slave_0: entered allmulticast mode
[  183.900760][T11998] bridge_slave_0: entered promiscuous mode
[  183.905323][T11998] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.907557][T11998] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.909821][T11998] bridge_slave_1: entered allmulticast mode
[  183.913177][T11998] bridge_slave_1: entered promiscuous mode
[  183.942942][T11998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.949017][T11998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.987378][T11998] team0: Port device team_slave_0 added
[  183.996402][T11998] team0: Port device team_slave_1 added
[  184.035357][T11998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.037518][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.062442][T11998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.067198][T11998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.069734][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.123154][T11998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.182594][T11998] hsr_slave_0: entered promiscuous mode
[  184.185223][T11998] hsr_slave_1: entered promiscuous mode
[  184.187470][T11998] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.189770][T11998] Cannot create hsr debugfs directory
[  184.244452][ T7485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.394510][ T7485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.602458][ T7485] bridge_slave_1: left allmulticast mode
[  184.604685][ T7485] bridge_slave_1: left promiscuous mode
[  184.606784][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.622577][ T7485] bridge_slave_0: left allmulticast mode
[  184.624819][ T7485] bridge_slave_0: left promiscuous mode
[  184.626868][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.056961][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.063294][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.068739][ T7485] bond0 (unregistering): Released all slaves
[  185.210837][T12084] vlan0: entered promiscuous mode
[  185.402958][ T5843] Bluetooth: hci2: command tx timeout
[  185.567466][T12098] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  185.827322][T11998] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  185.859888][T11998] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  185.870571][ T7485] hsr_slave_0: left promiscuous mode
[  185.873825][ T7485] hsr_slave_1: left promiscuous mode
[  185.875916][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.878584][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.885969][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.888847][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.905348][ T7485] veth1_macvtap: left promiscuous mode
[  185.907543][ T7485] veth0_macvtap: left promiscuous mode
[  185.909770][ T7485] veth1_vlan: left promiscuous mode
[  185.912486][ T7485] veth0_vlan: left promiscuous mode
[  186.382946][ T7485] team0 (unregistering): Port device team_slave_1 removed
[  186.420310][ T7485] team0 (unregistering): Port device team_slave_0 removed
[  186.809209][T11998] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  186.848009][T11998] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  187.079094][T11998] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.154840][T11998] 8021q: adding VLAN 0 to HW filter on device team0
[  187.191670][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.194528][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.241854][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.244673][ T6133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.354636][T11998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.485771][ T5843] Bluetooth: hci2: command tx timeout
[  187.619672][T11998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.636215][T12170] nbd: must specify a device to reconfigure
[  187.662360][T12170] __nla_validate_parse: 4 callbacks suppressed
[  187.662375][T12170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1899'.
[  187.708799][T11998] veth0_vlan: entered promiscuous mode
[  187.716957][T11998] veth1_vlan: entered promiscuous mode
[  187.740844][T11998] veth0_macvtap: entered promiscuous mode
[  187.750326][T11998] veth1_macvtap: entered promiscuous mode
[  187.761970][T11998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.770882][T11998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.793535][T11998] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.796201][T11998] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.799822][T11998] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.816109][T11998] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.835251][T12176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1901'.
[  187.990219][T12138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.992826][T12138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.043482][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1903'.
[  188.050371][T12142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.053875][T12142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.164278][T12185] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  188.167538][T12185] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  188.175284][T12187] validate_nla: 49 callbacks suppressed
[  188.175297][T12187] netlink: 'syz.0.1905': attribute type 1 has an invalid length.
[  188.180344][T12187] netlink: 'syz.0.1905': attribute type 2 has an invalid length.
[  188.183402][T12187] netlink: 'syz.0.1905': attribute type 8 has an invalid length.
[  188.185919][T12187] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.1905'.
[  188.390186][T12201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1908'.
[  188.645957][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'.
[  188.649076][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'.
[  188.847409][T12233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1919'.
[  188.949274][T12241] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1923'.
[  188.990165][T12243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1924'.
[  189.269670][ T7485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.597807][T12261] wg1 speed is unknown, defaulting to 1000
[  190.347014][ T7485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.516461][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.520825][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.525895][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.530801][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.534394][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.698124][T12295] netlink: 'syz.0.1937': attribute type 3 has an invalid length.
[  190.700619][T12295] netlink: 'syz.0.1937': attribute type 3 has an invalid length.
[  190.787006][T12306] SET target dimension over the limit!
[  190.814823][T12305] netlink: 'syz.2.1939': attribute type 10 has an invalid length.
[  190.818109][T12305] batadv0: entered promiscuous mode
[  190.820125][T12305] batadv0: entered allmulticast mode
[  190.824973][T12305] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.828260][T12305] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  190.886600][ T7485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.924539][T12284] wg1 speed is unknown, defaulting to 1000
[  190.962409][ T7485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.200818][ T7485] bridge_slave_1: left allmulticast mode
[  191.207445][ T7485] bridge_slave_1: left promiscuous mode
[  191.209362][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.219087][ T7485] bridge_slave_0: left allmulticast mode
[  191.221446][ T7485] bridge_slave_0: left promiscuous mode
[  191.223425][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.418645][T12330] netlink: 'syz.2.1945': attribute type 1 has an invalid length.
[  191.553035][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.559071][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.564966][ T7485] bond0 (unregistering): Released all slaves
[  191.580529][T12284] chnl_net:caif_netlink_parms(): no params data found
[  191.906674][T12284] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.909539][T12284] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.917845][T12284] bridge_slave_0: entered allmulticast mode
[  191.921897][T12284] bridge_slave_0: entered promiscuous mode
[  191.926463][T12284] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.929200][T12284] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.933470][T12284] bridge_slave_1: entered allmulticast mode
[  191.937308][T12284] bridge_slave_1: entered promiscuous mode
[  192.003597][T12284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.014243][T12284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.112189][T12284] team0: Port device team_slave_0 added
[  192.187364][T12284] team0: Port device team_slave_1 added
[  192.273205][ T7485] hsr_slave_0: left promiscuous mode
[  192.281231][ T7485] hsr_slave_1: left promiscuous mode
[  192.283515][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.286423][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.294727][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.297678][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.332158][ T7485] veth1_macvtap: left promiscuous mode
[  192.334472][ T7485] veth0_macvtap: left promiscuous mode
[  192.336865][ T7485] veth1_vlan: left promiscuous mode
[  192.338686][ T7485] veth0_vlan: left promiscuous mode
[  192.498147][T12379] netlink: 'syz.0.1959': attribute type 10 has an invalid length.
[  192.604068][ T5220] Bluetooth: hci2: command tx timeout
[  192.959624][ T7485] team0 (unregistering): Port device team_slave_1 removed
[  192.996296][ T7485] team0 (unregistering): Port device team_slave_0 removed
[  193.441971][T12284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.444648][T12284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.453218][T12284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.458214][T12284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.460864][T12284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.481490][T12284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.609720][T12284] hsr_slave_0: entered promiscuous mode
[  193.618796][T12284] hsr_slave_1: entered promiscuous mode
[  193.628714][T12284] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  193.637104][T12284] Cannot create hsr debugfs directory
[  193.806178][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.808392][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.390656][T12284] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  194.429040][T12284] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  194.441078][T12284] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  194.447041][T12284] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  194.461342][T12439] __nla_validate_parse: 8 callbacks suppressed
[  194.461392][T12439] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1974'.
[  194.634637][T12284] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.659759][T12284] 8021q: adding VLAN 0 to HW filter on device team0
[  194.675950][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.678177][ T6137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.681448][ T5220] Bluetooth: hci2: command tx timeout
[  194.702243][ T6137] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.705071][ T6137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.834272][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'.
[  194.838304][T12463] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1978'.
[  194.943493][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'.
[  194.997764][T12284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.074245][T12284] veth0_vlan: entered promiscuous mode
[  195.092074][T12284] veth1_vlan: entered promiscuous mode
[  195.117723][T12284] veth0_macvtap: entered promiscuous mode
[  195.143577][T12284] veth1_macvtap: entered promiscuous mode
[  195.165805][T12284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.179764][T12284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.190160][T12284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.205496][T12284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.208986][T12284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.215425][T12284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.492903][T12138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.498468][T12138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.595163][T12143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.603958][T12143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.060545][T12535] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:0
[  196.228794][T12542] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1991'.
[  196.356503][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'.
[  196.426933][T12558] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  196.827123][T12580] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  196.918524][T12588] netlink: 'syz.2.2002': attribute type 11 has an invalid length.
[  197.143117][T12595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2004'.
[  197.179415][ T5850] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.208302][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'.
[  197.971860][T12601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2006'.
[  198.335279][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  198.342463][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  198.347974][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  198.358208][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  198.368186][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  198.374983][T12630] batman_adv: batadv0: Adding interface: dummy0
[  198.377412][T12630] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.399561][T12630] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  198.477458][T12630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2013'.
[  198.659227][T12645] sctp: [Deprecated]: syz.2.2016 (pid 12645) Use of int in max_burst socket option deprecated.
[  198.659227][T12645] Use struct sctp_assoc_value instead
[  198.708721][T12625] wg1 speed is unknown, defaulting to 1000
[  198.796906][ T5850] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.888742][ T5850] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.012104][ T5850] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.028603][T12625] chnl_net:caif_netlink_parms(): no params data found
[  199.106055][T12659] mac80211_hwsim hwsim2 ": renamed from wlan0
[  199.152091][T12625] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.154342][T12625] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.156600][T12625] bridge_slave_0: entered allmulticast mode
[  199.159927][T12625] bridge_slave_0: entered promiscuous mode
[  199.169135][T12625] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.172756][T12625] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.175118][T12625] bridge_slave_1: entered allmulticast mode
[  199.178491][T12625] bridge_slave_1: entered promiscuous mode
[  199.312074][T12625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.325379][T12625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.434203][T12625] team0: Port device team_slave_0 added
[  199.464458][T12625] team0: Port device team_slave_1 added
[  199.476301][ T5850] bridge_slave_1: left allmulticast mode
[  199.478399][ T5850] bridge_slave_1: left promiscuous mode
[  199.480897][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.502036][ T5850] bridge_slave_0: left allmulticast mode
[  199.510205][ T5850] bridge_slave_0: left promiscuous mode
[  199.515821][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.651225][T12681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2024'.
[  199.952315][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.958244][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.964466][ T5850] bond0 (unregistering): Released all slaves
[  200.028477][T12676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2022'.
[  200.089891][T12625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.096625][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.106558][T12625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.154644][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2026'.
[  200.166838][T12625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.169553][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.180289][T12625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.198792][T12686] netlink: 'syz.2.2026': attribute type 2 has an invalid length.
[  200.289232][T12625] hsr_slave_0: entered promiscuous mode
[  200.299763][T12625] hsr_slave_1: entered promiscuous mode
[  200.304746][T12625] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.307599][T12625] Cannot create hsr debugfs directory
[  200.446136][ T5220] Bluetooth: hci2: command tx timeout
[  200.525563][T12708] Cannot find del_set index 4 as target
[  200.630169][T12711] xt_CT: No such helper "netbios-ns"
[  200.699421][T12715] 0XD: left allmulticast mode
[  200.702196][T12715] 0XD: left promiscuous mode
[  200.704798][T12715] bridge0: port 1(30XD) entered disabled state
[  200.709728][T12715] batman_adv: batadv0: Removing interface: dummy0
[  200.939591][T12695] wg1 speed is unknown, defaulting to 1000
[  201.083645][ T5850] hsr_slave_0: left promiscuous mode
[  201.088568][ T5850] hsr_slave_1: left promiscuous mode
[  201.101106][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.103410][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.106373][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.108648][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.129221][ T5850] veth1_macvtap: left promiscuous mode
[  201.133923][ T5850] veth0_macvtap: left promiscuous mode
[  201.135668][ T5850] veth1_vlan: left promiscuous mode
[  201.137292][ T5850] veth0_vlan: left promiscuous mode
[  201.618300][ T5850] team0 (unregistering): Port device team_slave_1 removed
[  201.649091][ T5850] team0 (unregistering): Port device team_slave_0 removed
[  201.966392][T12733] bridge0: failed insert local address into bridge forwarding table
[  202.053941][T12742] netlink: 'syz.2.2036': attribute type 1 has an invalid length.
[  202.056486][T12742] netlink: 'syz.2.2036': attribute type 1 has an invalid length.
[  202.059094][T12742] netlink: 'syz.2.2036': attribute type 2 has an invalid length.
[  202.077641][T12742] netlink: 'syz.2.2036': attribute type 1 has an invalid length.
[  202.353840][T12625] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  202.358714][T12625] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  202.366273][T12625] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  202.376396][T12625] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  202.495314][T12757] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2037'.
[  202.515754][T12625] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.530081][ T5220] Bluetooth: hci2: command tx timeout
[  202.573601][T12625] 8021q: adding VLAN 0 to HW filter on device team0
[  202.583964][T12137] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.586223][T12137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.619134][T12137] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.621353][T12137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.708626][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'.
[  202.729297][T12763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2038'.
[  202.755850][T12763] gtp0: entered promiscuous mode
[  202.757509][T12763] gtp0: entered allmulticast mode
[  202.838091][T12625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.918385][T12782] netlink: 'syz.2.2041': attribute type 1 has an invalid length.
[  202.919437][T12625] veth0_vlan: entered promiscuous mode
[  203.013882][T12625] veth1_vlan: entered promiscuous mode
[  203.083281][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'.
[  203.092368][T12625] veth0_macvtap: entered promiscuous mode
[  203.096871][T12790] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2042'.
[  203.105346][T12790] netlink: 'syz.2.2042': attribute type 10 has an invalid length.
[  203.114236][T12625] veth1_macvtap: entered promiscuous mode
[  203.159576][T12625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.185782][T12625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.194591][T12625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.198121][T12625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.204233][T12625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.208356][T12625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.308468][T12142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.320424][T12142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.354908][T12137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.357763][T12137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.447626][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'.
[  203.471581][T12802] macvtap1: entered promiscuous mode
[  203.473434][T12802] syz_tun: entered promiscuous mode
[  203.475241][T12802] macvtap1: entered allmulticast mode
[  203.477199][T12802] syz_tun: entered allmulticast mode
[  203.486348][T12799] syz_tun: left allmulticast mode
[  203.488204][T12799] syz_tun: left promiscuous mode
[  203.781558][T12812] netlink: 'syz.2.2049': attribute type 39 has an invalid length.
[  203.842272][T12814] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.377856][T12842] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2056'.
[  204.493614][T12849] netlink: 'syz.0.2058': attribute type 7 has an invalid length.
[  204.496793][T12849] netlink: 'syz.0.2058': attribute type 8 has an invalid length.
[  204.549684][T12851] xt_hashlimit: size too large, truncated to 1048576
[  204.805896][T12858] ieee802154 phy0 wpan0: encryption failed: -22
[  204.952307][ T5868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.938232][T12883] __nla_validate_parse: 2 callbacks suppressed
[  205.938244][T12883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2069'.
[  206.042013][T12889] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  206.056245][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  206.063177][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  206.071252][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  206.074822][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  206.079328][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  206.158322][T12898] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2072'.
[  206.225553][T12900] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2073'.
[  206.276026][T12902] bridge3: entered promiscuous mode
[  206.277975][T12902] bridge3: entered allmulticast mode
[  206.285959][T12902] team0: Port device bridge3 added
[  206.292746][T12904] ip6gre2: entered allmulticast mode
[  206.300552][T12904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.323858][T12893] wg1 speed is unknown, defaulting to 1000
[  206.358727][T12904] tipc: Resetting bearer <eth:syzkaller0>
[  206.504561][T12893] chnl_net:caif_netlink_parms(): no params data found
[  206.651610][ T5868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.664132][T12893] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.667114][T12893] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.670028][T12893] bridge_slave_0: entered allmulticast mode
[  206.675261][T12893] bridge_slave_0: entered promiscuous mode
[  206.685714][T12893] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.695992][T12893] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.699835][T12893] bridge_slave_1: entered allmulticast mode
[  206.705125][T12893] bridge_slave_1: entered promiscuous mode
[  206.777080][ T5868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.780244][T12933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2083'.
[  206.792407][T12933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2083'.
[  206.797359][T12893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.806587][T12893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.907902][ T5868] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.931289][T12893] team0: Port device team_slave_0 added
[  206.936591][T12893] team0: Port device team_slave_1 added
[  207.011107][T12893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.015841][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.035680][T12893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.046876][T12893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.050145][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.063503][T12893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.068286][T12950] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2086'.
[  207.095994][T12952] macvlan0: entered allmulticast mode
[  207.100597][T12952] netlink: 'syz.0.2087': attribute type 1 has an invalid length.
[  207.107856][T12952] netlink: 'syz.0.2087': attribute type 2 has an invalid length.
[  207.111401][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2086'.
[  207.245682][T12893] hsr_slave_0: entered promiscuous mode
[  207.248774][T12893] hsr_slave_1: entered promiscuous mode
[  207.257094][T12893] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.260036][T12893] Cannot create hsr debugfs directory
[  207.352901][ T5876] tipc: Node number set to 2744909128
[  207.511964][ T5868] bridge_slave_1: left allmulticast mode
[  207.514267][ T5868] bridge_slave_1: left promiscuous mode
[  207.516634][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.543309][ T5868] bridge_slave_0: left allmulticast mode
[  207.545557][ T5868] bridge_slave_0: left promiscuous mode
[  207.547877][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.604203][T12963] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2089'.
[  207.891433][ T5868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.899166][ T5868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.903568][ T5868] bond0 (unregistering): Released all slaves
[  207.920292][T12957] wg1 speed is unknown, defaulting to 1000
[  208.064166][T12962] wg1 speed is unknown, defaulting to 1000
[  208.122437][ T5843] Bluetooth: hci2: command tx timeout
[  208.740293][ T5868] hsr_slave_0: left promiscuous mode
[  208.743410][ T5868] hsr_slave_1: left promiscuous mode
[  208.746260][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.749352][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.758274][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.762943][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.789087][ T5868] veth1_macvtap: left promiscuous mode
[  208.794606][ T5868] veth0_macvtap: left promiscuous mode
[  208.796932][ T5868] veth1_vlan: left promiscuous mode
[  208.799421][ T5868] veth0_vlan: left promiscuous mode
[  209.286467][ T5868] team0 (unregistering): Port device team_slave_1 removed
[  209.326303][ T5868] team0 (unregistering): Port device team_slave_0 removed
[  209.766765][T12893] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  209.775206][T12893] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  209.821323][T12893] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  209.830110][T12893] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  209.936311][T12893] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.963866][T12893] 8021q: adding VLAN 0 to HW filter on device team0
[  209.974281][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'.
[  209.999758][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.003135][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.010740][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.013754][ T6151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.042394][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'.
[  210.066714][T12893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  210.201445][ T5843] Bluetooth: hci2: command tx timeout
[  210.289176][T12893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.361805][T12893] veth0_vlan: entered promiscuous mode
[  210.371028][T12893] veth1_vlan: entered promiscuous mode
[  210.406399][T12893] veth0_macvtap: entered promiscuous mode
[  210.410813][T12893] veth1_macvtap: entered promiscuous mode
[  210.425391][T12893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.434259][T12893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.439323][T12893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.445984][T12893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.449148][T12893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.453138][T12893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.569831][ T6137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.579555][ T6137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.606910][ T6151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.609887][ T6151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.429449][T13046] __nla_validate_parse: 2 callbacks suppressed
[  211.429464][T13046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2104'.
[  211.756289][T13064] netlink: 'syz.0.2108': attribute type 1 has an invalid length.
[  211.809212][T13064] 8021q: adding VLAN 0 to HW filter on device bond8
[  211.858661][T13072] 8021q: adding VLAN 0 to HW filter on device bond8
[  211.869256][T13072] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  211.876062][T13072] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  211.907953][T13074] TCP: TCP_TX_DELAY enabled
[  211.963450][T13076] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2110'.
[  212.256710][T13091] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  212.282232][ T5220] Bluetooth: hci2: command tx timeout
[  212.647504][T13106] x_tables: duplicate underflow at hook 1
[  213.033804][T13132] ip6t_srh: unknown srh match flags  4000
[  213.094483][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'.
[  213.097399][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'.
[  213.138422][T13139] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  213.199942][T13146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2131'.
[  213.210306][T13146] netlink: 'syz.0.2131': attribute type 1 has an invalid length.
[  213.213292][T13146] netlink: 'syz.0.2131': attribute type 4 has an invalid length.
[  213.215970][T13146] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2131'.
[  213.365709][T13157] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2133'.
[  213.863026][T13170] wg1 speed is unknown, defaulting to 1000
[  213.954635][T13178] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2137'.
[  214.293976][T13185] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  214.351429][T13187] sctp: [Deprecated]: syz.0.2140 (pid 13187) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.351429][T13187] Use struct sctp_sack_info instead
[  214.359019][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'.
[  214.366955][T13187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2140'.
[  214.685288][T13197] wg1 speed is unknown, defaulting to 1000
[  214.852928][T13196] wg1 speed is unknown, defaulting to 1000
[  215.194268][T13213] openvswitch: netlink: IP tunnel dst address not specified
[  215.196823][T13213] openvswitch: netlink: IP tunnel dst address not specified
[  215.199343][T13213] openvswitch: netlink: IP tunnel dst address not specified
[  215.217025][T13213] openvswitch: netlink: IP tunnel dst address not specified
[  215.219512][T13213] openvswitch: netlink: IP tunnel dst address not specified
[  215.225047][T13213] openvswitch: netlink: IP tunnel dst address not specified
[  215.227547][T13213] openvswitch: netlink: IP tunnel dst address not specified
[  215.288029][T13218] xt_TPROXY: Can be used only with -p tcp or -p udp
[  215.306282][T13220] xt_TPROXY: Can be used only with -p tcp or -p udp
[  215.406782][T13232] netlink: 'syz.2.2151': attribute type 1 has an invalid length.
[  215.463733][T13232] netlink: 'syz.2.2151': attribute type 11 has an invalid length.
[  216.772578][T13296] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.854631][T13298] syzkaller0: entered promiscuous mode
[  216.856999][T13298] syzkaller0: entered allmulticast mode
[  216.969566][T13305] __nla_validate_parse: 4 callbacks suppressed
[  216.969582][T13305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'.
[  217.414932][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'.
[  217.625311][T13389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2185'.
[  217.727948][T13393] netlink: 'syz.2.2186': attribute type 39 has an invalid length.
[  218.483963][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'.
[  219.058464][T13418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2194'.
[  219.335072][T13421] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2195'.
[  219.424745][T13426] team0: Port device veth9 added
[  220.497883][T13450] netlink: 'syz.0.2202': attribute type 13 has an invalid length.
[  220.500882][T13450] netlink: 'syz.0.2202': attribute type 17 has an invalid length.
[  220.555542][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'.
[  220.622571][T13450] net_ratelimit: 10 callbacks suppressed
[  220.622580][T13450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.729222][T13461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2206'.
[  220.803462][T13443] wg1 speed is unknown, defaulting to 1000
[  220.939781][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'.
[  221.069832][T13457] wg1 speed is unknown, defaulting to 1000
[  222.361923][T13485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2213'.
[  222.367544][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'.
[  222.371633][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2213'.
[  222.627502][T13505] netlink: 'syz.2.2218': attribute type 8 has an invalid length.
[  222.715915][T13514] tc_dump_action: action bad kind
[  222.910361][T13535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2227'.
[  222.935992][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'.
[  223.110683][T13543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2229'.
[  223.196013][T13552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2232'.
[  223.200456][T13552] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2232'.
[  223.204104][T13552] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2232'.
[  223.211983][T13547] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2230'.
[  223.447275][T13566] wg1 speed is unknown, defaulting to 1000
[  223.552253][T13566] smc: removing ib device syz!
[  223.604255][T13568] netlink: 'syz.0.2235': attribute type 12 has an invalid length.
[  224.398315][T13582] netlink: 'syz.2.2239': attribute type 1 has an invalid length.
[  224.471504][T13586] xt_cgroup: xt_cgroup: no path or classid specified
[  225.669669][T13621] delete_channel: no stack
[  225.799939][T13634] wg1 speed is unknown, defaulting to 1000
[  226.106875][T13652] gre0: Master is either lo or non-ether device
[  226.113704][T11919] IPVS: starting estimator thread 0...
[  226.116095][T13654] netlink: 'syz.0.2260': attribute type 1 has an invalid length.
[  226.221131][T13655] IPVS: using max 62 ests per chain, 148800 per kthread
[  226.526127][T13671] mac80211_hwsim hwsim3 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  226.571694][T13677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.575782][T13677] syzkaller0: entered promiscuous mode
[  226.578295][T13677] syzkaller0: entered allmulticast mode
[  226.598697][T13677] tipc: Resetting bearer <eth:syzkaller0>
[  226.614132][T13677] tipc: Disabling bearer <eth:syzkaller0>
[  227.783993][T13695] __nla_validate_parse: 19 callbacks suppressed
[  227.784008][T13695] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2272'.
[  227.824560][T13697] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2273'.
[  227.880146][T13701] wg1 speed is unknown, defaulting to 1000
[  227.928273][T13706] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  228.174657][T13709] team0 (unregistering): Port device bridge3 removed
[  228.178562][T13709] team0 (unregistering): Port device veth9 removed
[  228.228916][T13714] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2278'.
[  228.377668][T13727] netlink: 'syz.0.2280': attribute type 6 has an invalid length.
[  228.538833][T13739] nbd: must specify a device to reconfigure
[  228.542600][T13739] mac80211_hwsim hwsim3 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  228.785575][T13751] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  228.946399][T13760] nbd: must specify a device to reconfigure
[  228.953641][T13760] mac80211_hwsim hwsim3 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  229.404497][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2297'.
[  229.413723][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2297'.
[  229.472496][T13782] nbd: must specify a device to reconfigure
[  229.475346][T13782] mac80211_hwsim hwsim3 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  230.907067][T13799] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2303'.
[  233.401475][T13361] wlan0: Trigger new scan to find an IBSS to join
[  236.442559][T12137] wlan0: Trigger new scan to find an IBSS to join
[  237.364446][T12138] wlan0: Creating new IBSS network, BSSID 0e:e3:e5:ea:2c:71
[  250.764724][ T5902] ------------[ cut here ]------------
[  250.767391][ T5902] workqueue: cannot queue hci_conn_timeout on wq hci2
[  250.770017][ T5902] WARNING: CPU: 1 PID: 5902 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  250.773427][ T5902] Modules linked in:
[  250.775200][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: kworker/1:3 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  250.780935][ T5902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.784769][ T5902] Workqueue: events l2cap_chan_timeout
[  250.786919][ T5902] RIP: 0010:__queue_work+0xd62/0xfe0
[  250.788980][ T5902] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  250.796262][ T5902] RSP: 0018:ffffc900044777a8 EFLAGS: 00010046
[  250.798614][ T5902] RAX: 5d2ddd2eb99ecf00 RBX: 0000000000000020 RCX: ffff8881092cb980
[  250.801690][ T5902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  250.804642][ T5902] RBP: 1ffff11007358e38 R08: 0000000000000003 R09: 0000000000000004
[  250.807594][ T5902] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000
[  250.810601][ T5902] R13: ffff8881227a0960 R14: ffff888100004008 R15: ffff888039ac7178
[  250.813598][ T5902] FS:  0000000000000000(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[  250.816971][ T5902] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  250.819480][ T5902] CR2: 00007f16b0419547 CR3: 000000000df38000 CR4: 00000000000006f0
[  250.822548][ T5902] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  250.825594][ T5902] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  250.828645][ T5902] Call Trace:
[  250.829980][ T5902]  <TASK>
[  250.831152][ T5902]  ? __queue_delayed_work+0xe1/0x2d0
[  250.833259][ T5902]  queue_delayed_work_on+0x18b/0x280
[  250.835295][ T5902]  ? __pfx___cancel_work+0x10/0x10
[  250.837289][ T5902]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  250.839528][ T5902]  ? hci_conn_drop+0x14d/0x280
[  250.841388][ T5902]  l2cap_chan_del+0x285/0x5e0
[  250.843270][ T5902]  l2cap_chan_close+0x597/0x980
[  250.845160][ T5902]  ? __pfx_l2cap_chan_close+0x10/0x10
[  250.847259][ T5902]  ? process_scheduled_works+0x9ef/0x17b0
[  250.849476][ T5902]  l2cap_chan_timeout+0x158/0x390
[  250.851443][ T5902]  ? process_scheduled_works+0x9ef/0x17b0
[  250.853627][ T5902]  process_scheduled_works+0xae1/0x17b0
[  250.855804][ T5902]  ? __pfx_process_scheduled_works+0x10/0x10
[  250.858159][ T5902]  worker_thread+0x8a0/0xda0
[  250.860014][ T5902]  kthread+0x711/0x8a0
[  250.861653][ T5902]  ? __pfx_worker_thread+0x10/0x10
[  250.863664][ T5902]  ? __pfx_kthread+0x10/0x10
[  250.865458][ T5902]  ? _raw_spin_unlock_irq+0x23/0x50
[  250.867435][ T5902]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.869415][ T5902]  ? __pfx_kthread+0x10/0x10
[  250.871200][ T5902]  ret_from_fork+0x3fc/0x770
[  250.873001][ T5902]  ? __pfx_ret_from_fork+0x10/0x10
[  250.874980][ T5902]  ? __switch_to_asm+0x39/0x70
[  250.876822][ T5902]  ? __switch_to_asm+0x33/0x70
[  250.878690][ T5902]  ? __pfx_kthread+0x10/0x10
[  250.880462][ T5902]  ret_from_fork_asm+0x1a/0x30
[  250.882307][ T5902]  </TASK>
[  250.883497][ T5902] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  250.886326][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: kworker/1:3 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  250.891052][ T5902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.894985][ T5902] Workqueue: events l2cap_chan_timeout
[  250.897099][ T5902] Call Trace:
[  250.898412][ T5902]  <TASK>
[  250.899587][ T5902]  dump_stack_lvl+0x99/0x250
[  250.901412][ T5902]  ? __asan_memcpy+0x40/0x70
[  250.903144][ T5902]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.905113][ T5902]  ? __pfx__printk+0x10/0x10
[  250.906879][ T5902]  panic+0x2db/0x790
[  250.908450][ T5902]  ? __pfx_panic+0x10/0x10
[  250.910237][ T5902]  ? show_trace_log_lvl+0x4fb/0x550
[  250.912269][ T5902]  ? ret_from_fork_asm+0x1a/0x30
[  250.914140][ T5902]  __warn+0x31b/0x4b0
[  250.915672][ T5902]  ? __queue_work+0xd62/0xfe0
[  250.917488][ T5902]  ? __queue_work+0xd62/0xfe0
[  250.919269][ T5902]  report_bug+0x2be/0x4f0
[  250.920951][ T5902]  ? __queue_work+0xd62/0xfe0
[  250.922743][ T5902]  ? __queue_work+0xd62/0xfe0
[  250.924574][ T5902]  ? __queue_work+0xd64/0xfe0
[  250.926390][ T5902]  handle_bug+0x84/0x160
[  250.927999][ T5902]  exc_invalid_op+0x1a/0x50
[  250.929786][ T5902]  asm_exc_invalid_op+0x1a/0x20
[  250.931682][ T5902] RIP: 0010:__queue_work+0xd62/0xfe0
[  250.933708][ T5902] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  250.940817][ T5902] RSP: 0018:ffffc900044777a8 EFLAGS: 00010046
[  250.943115][ T5902] RAX: 5d2ddd2eb99ecf00 RBX: 0000000000000020 RCX: ffff8881092cb980
[  250.946112][ T5902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  250.949236][ T5902] RBP: 1ffff11007358e38 R08: 0000000000000003 R09: 0000000000000004
[  250.952255][ T5902] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000
[  250.955237][ T5902] R13: ffff8881227a0960 R14: ffff888100004008 R15: ffff888039ac7178
[  250.958250][ T5902]  ? __queue_work+0xd61/0xfe0
[  250.960060][ T5902]  ? __queue_delayed_work+0xe1/0x2d0
[  250.962132][ T5902]  queue_delayed_work_on+0x18b/0x280
[  250.964151][ T5902]  ? __pfx___cancel_work+0x10/0x10
[  250.966128][ T5902]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  250.968404][ T5902]  ? hci_conn_drop+0x14d/0x280
[  250.970292][ T5902]  l2cap_chan_del+0x285/0x5e0
[  250.972106][ T5902]  l2cap_chan_close+0x597/0x980
[  250.974087][ T5902]  ? __pfx_l2cap_chan_close+0x10/0x10
[  250.976230][ T5902]  ? process_scheduled_works+0x9ef/0x17b0
[  250.978488][ T5902]  l2cap_chan_timeout+0x158/0x390
[  250.980491][ T5902]  ? process_scheduled_works+0x9ef/0x17b0
[  250.982689][ T5902]  process_scheduled_works+0xae1/0x17b0
[  250.984815][ T5902]  ? __pfx_process_scheduled_works+0x10/0x10
[  250.987104][ T5902]  worker_thread+0x8a0/0xda0
[  250.988931][ T5902]  kthread+0x711/0x8a0
[  250.990527][ T5902]  ? __pfx_worker_thread+0x10/0x10
[  250.992494][ T5902]  ? __pfx_kthread+0x10/0x10
[  250.994298][ T5902]  ? _raw_spin_unlock_irq+0x23/0x50
[  250.996267][ T5902]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.998243][ T5902]  ? __pfx_kthread+0x10/0x10
[  251.000025][ T5902]  ret_from_fork+0x3fc/0x770
[  251.001804][ T5902]  ? __pfx_ret_from_fork+0x10/0x10
[  251.003778][ T5902]  ? __switch_to_asm+0x39/0x70
[  251.005613][ T5902]  ? __switch_to_asm+0x33/0x70
[  251.007507][ T5902]  ? __pfx_kthread+0x10/0x10
[  251.009312][ T5902]  ret_from_fork_asm+0x1a/0x30
[  251.011156][ T5902]  </TASK>
[  251.013100][ T5902] Kernel Offset: disabled
[  251.014810][ T5902] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:04:12  Registers:
info registers vcpu 0

CPU#0
RAX=a6a51c3a2547a100 RBX=ffffffff81975d58 RCX=a6a51c3a2547a100 RDX=0000000000000001
RSI=ffffffff8d996d18 RDI=ffffffff8be28fc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1def0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f191c19a580 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000033070780 0000000000000005 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004476f50
R8 =ffff888107ab0237 R9 =1ffff11020f56046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7920 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f16b0419547 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f16b2785d00
XMM02=060168960280a010 0000040100001008 XMM03=10000fffffffffff ff04010000000806
XMM04=0000000000000000 0000000000000000 XMM05=0000555590837691 0000555590837670
XMM06=0000555590829d84 0000555590829d80 XMM07=6f6c01ffffffffff ffffffdf08000300
XMM08=0800061000201000 061270d00010000f XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
