last executing test programs:

1.889610079s ago: executing program 0 (id=4190):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500000000e0ffffffffff", @ANYRESOCT, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000080"], 0x48}}, 0x40000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
connect(r1, &(0x7f0000000200)=@generic={0x1f, "0000000200000100"}, 0xa)

1.67155423s ago: executing program 1 (id=4193):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000065c0)=ANY=[], 0x1280}}], 0x1, 0xc081)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000))
shutdown(r0, 0x1)

1.56149011s ago: executing program 0 (id=4194):
write(0xca, &(0x7f0000000040)="040e0c01031000ffffffffff40ffff", 0xf)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c00078006"], 0x54}, 0x1, 0x0, 0x0, 0x1000c893}, 0x4080)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x7ff, r1, 0x1300}, 0x38)
connect(r0, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa)

1.448767828s ago: executing program 0 (id=4196):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bind(r0, &(0x7f0000000300)=@l2={0x1f, 0x6, @any, 0x5}, 0x80)
socket$igmp(0x2, 0x3, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x6bf1c2d5adba8c32})
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
close(0x3)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r5)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d25bd70000000000002000000000300060000000006001500060000fb130016"], 0x38}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x8, @private0, 0xf3}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0], 0x1d0}, 0x4000)
syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async)
bind(r0, &(0x7f0000000300)=@l2={0x1f, 0x6, @any, 0x5}, 0x80) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) (async)
socket(0xa, 0x3, 0x3a) (async)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$kcm(0x2b, 0x1, 0x0) (async)
close(0x3) (async)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24) (async)
close(r5) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d25bd70000000000002000000000300060000000006001500060000fb130016"], 0x38}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x8, @private0, 0xf3}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0], 0x1d0}, 0x4000) (async)

1.350192495s ago: executing program 1 (id=4197):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20002, 0x4)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r2=>0x0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, <r3=>0x0}, 0x8)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8, r0}, 0x18)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x28, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000004c0)={<r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x15, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x4}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f00000001c0)='GPL\x00', 0x1000, 0x29, &(0x7f0000000200)=""/41, 0x0, 0x0, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x4, 0x9, 0x80000000}, 0x10, r3, r4, 0x7, &(0x7f0000000540)=[r5, r6, r7, r8], &(0x7f0000000580)=[{0x3, 0x1, 0xd, 0x8}, {0x5, 0x5, 0x10, 0x7}, {0x3, 0x5, 0xb, 0x4}, {0x2, 0x4, 0x5, 0x3}, {0x2, 0x4, 0x7, 0x5}, {0x0, 0x5, 0x4, 0xb}, {0x3, 0x3, 0x6, 0x9}], 0x10, 0x9}, 0x94)

1.192723313s ago: executing program 0 (id=4198):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000000000)='ipvlan0\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
connect(r1, 0x0, 0x0)

1.09163695s ago: executing program 0 (id=4200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x8, 0xfc, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x2}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

386.76115ms ago: executing program 0 (id=4203):
write(0xca, &(0x7f0000000040)="040e0c01031000ffffffffff40ffff", 0xf) (async, rerun: 32)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 32)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
close(r2) (async, rerun: 64)
recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000)=r3, 0x4) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESDEC=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x24000880)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001a00330600000000fddbdf25fe8000000000000000000000000000aafe8000000000000000000000000000aa000040002c6c80050000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000003200000000000000000000000000000000000001230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005002100020000000800280000000000080027"], 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) (async)
listen(r7, 0xfffff789)
r8 = accept(r7, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4ea3, @empty}}, 0x1000, 0x2, 0x8005, 0x101, 0x4c, 0x8, 0xfc}, 0x9c) (async, rerun: 32)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'dvmrp0\x00'})
setsockopt$sock_attach_bpf(r9, 0x1, 0x7, &(0x7f0000000180), 0x4) (async)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) (async)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
connect(r10, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000280)) (async, rerun: 32)
unshare(0x52030880) (rerun: 32)

385.575195ms ago: executing program 1 (id=4208):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x4, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd32}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xba9d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}]}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}]}]}, 0x98}}, 0xc000)
setsockopt(r0, 0xc8, 0x14, 0x0, 0x62)
shutdown(r0, 0x0)

377.311138ms ago: executing program 1 (id=4209):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}}], 0x1, 0x640400d9)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0)

260.861634ms ago: executing program 1 (id=4210):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
setsockopt(r0, 0x112, 0x11, &(0x7f0000000100)="00ff000000000000ff0000000500000001000000ff000000050000000100000000000000000000000000000000000000000000000a0000000a000000", 0x3c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x5, 0x5, 0xff, 0x7}, {0x9, 0x4, 0x6, 0xeacf}, {0x8, 0x6, 0x7, 0x4}]})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x2)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0xa, 0x81, 0x1000, 0x0, 0xff, 0x0, 0x8, 'syz1\x00'})
getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000000)=""/191, &(0x7f00000000c0)=0xbf)
ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000140))

201.783455ms ago: executing program 1 (id=4211):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
socketpair(0x26, 0x800, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(0xffffffffffffffff, &(0x7f0000000140)=0x9, r4, &(0x7f0000000180)=0x200, 0x7, 0x0)
r5 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
r7 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac1414aa, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x5c, 0x6}}]}, 0x34}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}}], 0x1, 0x640400d9)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0)

201.518548ms ago: executing program 2 (id=4212):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
connect(r0, &(0x7f0000000200)=@generic={0x1f, "0000000200000100"}, 0xa)
ioctl(r0, 0x5, &(0x7f0000000000)="f16acf06483dde98f4ee45217f5244607e88ef6e566d075738a71c759640ad4530090adb10e2fa2ed6af99e3838f8fdbe3bb0c9f55b82c7a79be408a15fead5fba02d0c44b6405f984e11ee9a71a2f3b1779d541cf0ca50c072acb8a47df7e08be12a9ae06775fa902c60b9f8912e1d3979219f363aba8b1df379f7a57905ad781160452ec6462716774d65a2abf66b5aa4b2eabf571661dc17f7d454b26f41bf984f8d25763d95a")

141.958229ms ago: executing program 2 (id=4213):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000140))

141.224605ms ago: executing program 2 (id=4214):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000280)=0x6)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x21, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@u}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @alu={0x7, 0x0, 0x0, 0xb, 0x6, 0x8, 0x4}, @func, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
connect(r2, &(0x7f0000000200)=@generic={0x1f, "0000000200000100"}, 0xa)

81.900159ms ago: executing program 2 (id=4215):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000140))
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={<r2=>0x0, 0x6, 0x1, [0x0]}, &(0x7f0000000040)=0xa)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6c, 0xfffffffffffffffd}}, 0x10)
r4 = socket(0xa, 0x5, 0x0)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x5213, 0x8, 0xb, 0x200, 0x6, 0x8, 0x6, r6}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={r2, 0x1, 0x9, 0xa74d, 0x9, 0xcf24, 0xede0, 0x80000, {r6, @in6={{0xa, 0x4e21, 0x4, @empty, 0x7}}, 0x4, 0x5, 0x8, 0x8000, 0xd}}, &(0x7f0000000180)=0xb0)

547.382µs ago: executing program 2 (id=4216):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002180), r0)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000488}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x174, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0xe8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x38b33e86}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x840}, 0x8000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bind(r2, 0x0, 0x0)

0s ago: executing program 2 (id=4217):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0xc01, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x20000000)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x1000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x108)
close(0x3)
r7 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000005c0), 0x12)
r8 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f00000000c0)='THAWED\x00', 0x7)

kernel console output (not intermixed with test programs):

scuous mode
[  102.474529][ T8833] mac80211_hwsim hwsim9 wlan3: entered promiscuous mode
[  102.474586][ T8833] syztnl1: entered promiscuous mode
[  102.474824][ T8833] mac80211_hwsim hwsim7 nicvf0: entered promiscuous mode
[  102.487532][ T8833] vxlan0: entered promiscuous mode
[  102.495284][ T8833] bond3: entered promiscuous mode
[  102.498842][ T5627] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.498866][ T5627] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.498894][ T5627] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.498909][ T5627] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.498932][ T5627] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.498947][ T5627] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.498969][ T5627] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.498984][ T5627] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.532907][ T8834] 8021q: adding VLAN 0 to HW filter on device bond4
[  102.538873][ T8817] batadv_slave_0: left promiscuous mode
[  102.605187][ T8839] syzkaller0: entered promiscuous mode
[  102.605199][ T8839] syzkaller0: entered allmulticast mode
[  102.636054][ T8846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.261915][ T8884] ip6t_rt: too many addresses specified
[  103.545287][ T8899] __nla_validate_parse: 71 callbacks suppressed
[  103.545303][ T8899] netlink: 68 bytes leftover after parsing attributes in process `syz.0.960'.
[  103.636492][ T8905] net_ratelimit: 1 callbacks suppressed
[  103.636509][ T8905] ip_tables: iptables: counters copy to user failed while replacing table
[  103.933614][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'.
[  103.963936][ T8927] syz_tun: entered allmulticast mode
[  103.978028][ T8926] syz_tun: left allmulticast mode
[  104.532484][ T8980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.981'.
[  104.532552][ T8980] geneve0: left promiscuous mode
[  104.601148][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.983'.
[  104.601172][ T8987] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  104.795170][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  104.818274][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  105.008731][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 228 > 9
[  105.008750][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  105.048412][ T9033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.997'.
[  105.048423][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.997'.
[  105.048430][ T9033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.997'.
[  105.664529][ T9047] ip6gre1: entered promiscuous mode
[  105.902441][ T9061] netlink: 'syz.2.1006': attribute type 15 has an invalid length.
[  105.965811][ T9069] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1008'.
[  105.965823][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'.
[  106.083434][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1011'.
[  106.129236][ T9083] bond_slave_0: left promiscuous mode
[  106.379593][ T9104] openvswitch: netlink: Message has 8 unknown bytes.
[  106.380401][ T9104] af_packet: packet size is too long (65578 > 1286)
[  106.713112][ T9121] syzkaller0: entered promiscuous mode
[  106.713131][ T9121] syzkaller0: entered allmulticast mode
[  107.613254][ T9126] netlink: 'syz.1.1024': attribute type 4 has an invalid length.
[  107.889289][ T9169] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  107.889345][ T9169] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  107.889391][ T9169] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  107.889435][ T9169] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  107.889478][ T9169] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  107.889521][ T9169] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  107.889565][ T9169] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  107.889608][ T9169] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  107.889680][ T9169] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  107.889727][ T9169] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  107.975351][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.975433][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.975497][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.975560][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.975621][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.976743][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.976783][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.976816][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.976848][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.977717][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.977753][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.977785][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.977818][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.977850][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.977883][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.977915][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.977954][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.977993][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.978044][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.978099][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.978154][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.978209][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979053][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979114][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979169][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979224][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979281][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979337][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979393][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979449][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979509][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979567][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  107.979624][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  108.607709][ T9255] __nla_validate_parse: 68 callbacks suppressed
[  108.607720][ T9255] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1052'.
[  108.612181][ T9255] ip6gre1: entered promiscuous mode
[  108.613104][ T9253] syz_tun: entered allmulticast mode
[  108.615025][ T9250] syz_tun: left allmulticast mode
[  109.105006][ T9320] bond5: entered allmulticast mode
[  109.114955][ T9320] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1062'.
[  111.853336][ T9294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  111.916971][ T9413] sctp: [Deprecated]: syz.2.1067 (pid 9413) Use of int in max_burst socket option.
[  111.916971][ T9413] Use struct sctp_assoc_value instead
[  111.970673][ T9415] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1068'.
[  112.129700][ T9439] syz_tun: entered allmulticast mode
[  112.143286][ T9431] syz_tun: left allmulticast mode
[  112.342360][ T9472] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1078'.
[  112.382237][ T9477] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1079'.
[  112.383496][ T9477] netlink: 'syz.0.1079': attribute type 1 has an invalid length.
[  112.383510][ T9477] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1079'.
[  112.440835][ T9482] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1080'.
[  112.810436][ T9503] netlink: 'syz.0.1086': attribute type 1 has an invalid length.
[  112.810449][ T9503] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1086'.
[  112.810455][ T9503] netlink: 'syz.0.1086': attribute type 1 has an invalid length.
[  112.855252][ T9505] tc action pedit unable to extract header offset for header type (0x5)
[  112.855270][ T9505] tc action pedit unable to extract header offset for header type (0x5)
[  112.855277][ T9505] tc action pedit unable to extract header offset for header type (0x5)
[  112.855284][ T9505] tc action pedit unable to extract header offset for header type (0x5)
[  112.855292][ T9505] tc action pedit unable to extract header offset for header type (0x5)
[  112.855299][ T9505] tc action pedit unable to extract header offset for header type (0x5)
[  112.855306][ T9505] tc action pedit unable to extract header offset for header type (0x5)
[  112.855313][ T9505] tc action pedit unable to extract header offset for header type (0x5)
[  112.855321][ T9505] tc action pedit unable to extract header offset for header type (0x5)
[  112.855329][ T9505] tc action pedit unable to extract header offset for header type (0x5)
[  112.855345][ T9505] 0: reclassify loop, rule prio 0, protocol 800
[  113.030360][ T9514] syz_tun: entered allmulticast mode
[  113.031940][ T9513] syz_tun: left allmulticast mode
[  113.096859][ T9522] ip_tables: iptables: counters copy to user failed while replacing table
[  113.098759][ T9522] netlink: 'syz.2.1091': attribute type 1 has an invalid length.
[  113.125577][ T9522] 8021q: adding VLAN 0 to HW filter on device bond6
[  113.135390][ T9528] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1094'.
[  113.144688][ T9522] bond6: (slave gretap1): making interface the new active one
[  113.151368][ T9522] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  113.190122][ T9537] ip_tables: iptables: counters copy to user failed while replacing table
[  113.194521][ T9522] netlink: 'syz.2.1091': attribute type 1 has an invalid length.
[  113.308087][ T9550] syz_tun: entered allmulticast mode
[  113.308713][ T9548] syz_tun: left allmulticast mode
[  113.477488][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'.
[  113.555477][ T9579] syz_tun: entered allmulticast mode
[  113.558889][ T9578] syz_tun: left allmulticast mode
[  113.603714][ T9585] xt_CT: No such helper "syz0"
[  113.625584][ T9588] __nla_validate_parse: 1 callbacks suppressed
[  113.625624][ T9588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1110'.
[  113.697518][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'.
[  113.697530][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'.
[  113.697542][ T9598] netlink: 'syz.0.1114': attribute type 18 has an invalid length.
[  113.700565][ T9597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.701576][ T9597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.701738][ T9598] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  114.068576][ T9612] netlink: 'syz.0.1121': attribute type 6 has an invalid length.
[  114.068618][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'.
[  114.112697][ T9616] ip_tables: iptables: counters copy to user failed while replacing table
[  114.878679][ T9665] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1132'.
[  115.272439][ T9670] SET target dimension over the limit!
[  115.309936][ T9670] netlink: 'syz.1.1134': attribute type 1 has an invalid length.
[  115.357355][ T9678] netlink: 'syz.1.1137': attribute type 1 has an invalid length.
[  115.374384][ T9678] 8021q: adding VLAN 0 to HW filter on device bond6
[  115.381748][ T9678] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  115.383501][ T9678] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1137'.
[  115.384333][ T9678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1137'.
[  115.384485][ T9678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1137'.
[  115.405979][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1136'.
[  115.442666][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1138'.
[  115.528722][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  115.750899][ T9707] tipc: Resetting bearer <eth:syzkaller0>
[  115.761786][ T9707] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  115.765672][ T9704] tipc: Enabled bearer <ib:syz_tun>, priority 10
[  116.081693][ T9753] openvswitch: netlink: Missing key (keys=40, expected=100)
[  116.082130][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  116.168443][ T9759] bond7: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  116.168820][ T9759] bond7: (slave ip6tnl1): Error -95 calling set_mac_address
[  117.453362][ T9829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.556625][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  117.730375][ T9855] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  117.733105][ T9855] tipc: Resetting bearer <eth:syzkaller0>
[  118.001688][ T9873] syz_tun: entered allmulticast mode
[  118.002432][ T9872] syz_tun: left allmulticast mode
[  118.260349][ T9889] syzkaller0: entered promiscuous mode
[  118.260371][ T9889] syzkaller0: entered allmulticast mode
[  118.722212][ T9910] netlink: 'syz.2.1195': attribute type 7 has an invalid length.
[  118.722230][ T9910] netlink: 'syz.2.1195': attribute type 5 has an invalid length.
[  118.722238][ T9910] __nla_validate_parse: 13 callbacks suppressed
[  118.722245][ T9910] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1195'.
[  118.823760][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'.
[  118.964432][ T9930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  120.176746][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1208'.
[  120.220699][ T9951] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1208'.
[  120.309556][   T34] audit: type=1804 audit(1791193348.936:6): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1209" name="/newroot/407/memory.events" dev="tmpfs" ino=2096 res=1 errno=0
[  120.309599][   T34] audit: type=1800 audit(1791193348.936:7): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1209" name="memory.events" dev="tmpfs" ino=2096 res=0 errno=0
[  120.376926][ T9972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  120.382581][ T9974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1215'.
[  120.413953][ T9977] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  120.415359][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'.
[  121.148076][T10040] netlink: Setting conntrack mark requires 'commit' flag.
[  121.148101][T10040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.613151][T10046] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1235'.
[  121.616113][T10052] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1235'.
[  121.676036][T10054] macvtap0: entered promiscuous mode
[  121.871891][T10064] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1240'.
[  121.951018][T10072] netlink: 'syz.0.1243': attribute type 1 has an invalid length.
[  122.027133][T10083] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1245'.
[  122.169216][T10080] 8021q: VLANs not supported on ip6tnl0
[  122.699066][T10141] SET target dimension over the limit!
[  123.441667][T10154] syzkaller1: entered promiscuous mode
[  123.441680][T10154] syzkaller1: entered allmulticast mode
[  123.460451][T10157] netlink: 'syz.2.1267': attribute type 3 has an invalid length.
[  123.658893][T10180] netlink: 'syz.2.1275': attribute type 1 has an invalid length.
[  123.663483][T10177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  123.672537][T10180] 8021q: adding VLAN 0 to HW filter on device bond9
[  123.674080][T10180] macvlan0: left promiscuous mode
[  123.681616][T10180] bond9: (slave macvlan0): Enslaving as an active interface with a down link
[  123.829082][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  123.879975][T10214] tc_dump_action: action bad kind
[  123.917200][T10221] __nla_validate_parse: 12 callbacks suppressed
[  123.917213][T10221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1287'.
[  123.965593][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1285'.
[  123.979917][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  124.052400][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  124.071919][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  124.114295][T10249] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1293'.
[  124.343907][T10269] tipc: Resetting bearer <eth:syzkaller0>
[  124.345033][T10269] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.345743][T10269] batman_adv: batadv0: Adding interface: syzkaller0
[  124.345750][T10269] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.345761][T10269] batman_adv: batadv0: Interface activated: syzkaller0
[  124.403599][T10272] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1300'.
[  132.899331][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  132.899423][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  150.230070][T10299] netlink: 'syz.1.1305': attribute type 2 has an invalid length.
[  150.230087][T10299] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1305'.
[  150.445542][T10312] netlink: 'syz.0.1310': attribute type 4 has an invalid length.
[  150.445567][T10312] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1310'.
[  150.753662][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  150.947621][T10352] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1321'.
[  151.061251][T10342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1320'.
[  151.160348][T10358] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1324'.
[  151.224876][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1325'.
[  151.286164][T10367] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1326'.
[  151.453039][T10380] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1331'.
[  151.455061][T10380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1331'.
[  151.456953][T10380] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1331'.
[  151.659274][T10403] syzkaller0: entered promiscuous mode
[  151.659286][T10403] syzkaller0: entered allmulticast mode
[  151.660542][T10403] 0: reclassify loop, rule prio 0, protocol 700
[  151.853273][T10424] team0: No ports can be present during mode change
[  152.043820][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  152.163518][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  152.339885][T10502] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.340717][T10502] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.534538][T10519] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  152.534676][T10519] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  152.534800][T10519] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  152.534959][T10519] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  152.535089][T10519] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  152.535242][T10519] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  152.535366][T10519] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  152.810126][T10546] Bluetooth: hci0: unsupported parameter 5134
[  152.810146][T10546] Bluetooth: hci0: unsupported parameter 8192
[  152.810156][T10546] Bluetooth: hci0: unsupported parameter 5134
[  152.810165][T10546] Bluetooth: hci0: unsupported parameter 8192
[  152.883422][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  153.098829][T10577] netlink: set zone limit has 4 unknown bytes
[  153.213324][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  153.404370][T10610] netlink: 'syz.1.1389': attribute type 1 has an invalid length.
[  153.413441][T10610] geneve3: entered promiscuous mode
[  153.498461][T10619] block nbd0: Unsupported socket: should be TCP or UNIX.
[  153.652537][T10633] dvmrp16: entered allmulticast mode
[  153.902336][T10669] veth0_to_bond: left promiscuous mode
[  153.985972][T10685] tap0: tun_chr_ioctl cmd 1074025676
[  153.985992][T10685] tap0: owner set to 0
[  154.200929][T10700] openvswitch: netlink: Duplicate or invalid key (type 0).
[  154.296762][ T6897] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c
[  154.329808][T10704] bond5: (slave geneve3): making interface the new active one
[  154.330863][T10704] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  154.366462][T10286] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  154.366597][T10286] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  154.366618][T10286] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  154.366631][T10286] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  157.220934][T10703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  157.353930][T10723] validate_nla: 3 callbacks suppressed
[  157.353941][T10723] netlink: 'syz.0.1423': attribute type 3 has an invalid length.
[  157.353947][T10723] __nla_validate_parse: 20 callbacks suppressed
[  157.353953][T10723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1423'.
[  157.407974][T10726] netlink: 'syz.2.1422': attribute type 58 has an invalid length.
[  157.407992][T10726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1422'.
[  157.565756][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  157.699525][T10745] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1428'.
[  157.770881][T10749] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1429'.
[  157.866933][T10755] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001
[  157.972993][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 13 > 9
[  161.705952][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 13 > 9
[  161.705969][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  161.762382][T10818] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1453'.
[  161.763867][T10818] netlink: 'syz.0.1453': attribute type 2 has an invalid length.
[  161.823780][T10818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.823804][T10818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  161.936143][T10818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.936161][T10818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  162.011877][T10818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.011905][T10818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  162.091938][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  162.107433][T10818] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.107458][T10818] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  162.228478][T10285] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  162.228501][T10285] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  162.228521][T10285] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  162.228533][T10285] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  162.286428][ T5647] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  162.286452][ T5647] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  162.286484][T10286] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  162.286505][T10286] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  162.504721][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  162.824573][T10878] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  163.330820][T10904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1483'.
[  163.330846][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'.
[  163.431068][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'.
[  163.435176][T10911] tls_set_device_offload: netdev not found
[  163.620476][T10921] netlink: 'syz.0.1487': attribute type 2 has an invalid length.
[  164.159857][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'.
[  164.800901][T10999] lo speed is unknown, defaulting to 1000
[  164.803535][T10999] lo speed is unknown, defaulting to 1000
[  164.804796][T10999] lo speed is unknown, defaulting to 1000
[  164.905315][   T33] lo speed is unknown, defaulting to 1000
[  164.905509][T10999] infiniband syz0: set down
[  164.905517][T10999] infiniband syz0: added lo
[  164.917940][T10999] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  164.917956][T10999] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  164.917974][T10999] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  164.935938][T10999] RDS/IB: syz0: added
[  164.938141][T10999] smc: adding ib device syz0 with port count 1
[  164.938226][T10999] smc:    ib device syz0 port 1 has no pnetid
[  164.942999][  T805] lo speed is unknown, defaulting to 1000
[  164.943670][T10999] lo speed is unknown, defaulting to 1000
[  164.978238][T11004] lo: left promiscuous mode
[  165.082723][T10999] lo speed is unknown, defaulting to 1000
[  165.200895][T10999] lo speed is unknown, defaulting to 1000
[  167.042228][T10958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  167.195933][T11011] tipc: Resetting bearer <ib:syz_tun>
[  167.201009][T11011] tipc: Resetting bearer <ib:syz_tun>
[  167.218103][T11011] tipc: Resetting bearer <eth:hsr0>
[  167.218486][T11011] tipc: Resetting bearer <eth:hsr0>
[  167.239646][ T1112] tipc: Resetting bearer <eth:hsr0>
[  167.239741][ T1112] tipc: Resetting bearer <eth:hsr0>
[  167.275099][T11022] xt_hashlimit: size too large, truncated to 1048576
[  167.284002][T11011] bond6: entered promiscuous mode
[  167.285549][T11011] 8021q: adding VLAN 0 to HW filter on device bond6
[  167.308363][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'.
[  167.354277][T11027] xt_hashlimit: size too large, truncated to 1048576
[  167.356367][T11032] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1504'.
[  167.356460][T11030] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1504'.
[  167.453165][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'.
[  167.581350][T11069] netlink: 'syz.0.1516': attribute type 23 has an invalid length.
[  167.665465][T11078] openvswitch: netlink: IP tunnel dst address not specified
[  167.665480][T11078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.672770][T11078] netlink: 'syz.1.1518': attribute type 23 has an invalid length.
[  167.682921][T11075] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1517'.
[  167.728993][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  167.887235][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1528'.
[  168.040055][   T55] Bluetooth: hci2: unexpected event for opcode 0xff40
[  168.143617][T11133] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.363606][T11154] netlink: 'syz.0.1539': attribute type 1 has an invalid length.
[  168.379687][T11154] bond7: entered promiscuous mode
[  168.379961][T11154] 8021q: adding VLAN 0 to HW filter on device bond7
[  168.391692][T11154] vlan3: entered allmulticast mode
[  168.391703][T11154] bond7: entered allmulticast mode
[  168.403448][T11154] bond7: (slave bridge5): making interface the new active one
[  168.403460][T11154] bridge5: entered promiscuous mode
[  168.403536][T11154] bridge5: entered allmulticast mode
[  168.405279][T11154] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  168.489250][T11162] __nla_validate_parse: 1 callbacks suppressed
[  168.489262][T11162] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1540'.
[  168.525670][T11168] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  169.052848][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  169.130455][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  170.826394][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  172.032077][T11193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.158566][   T55] Bluetooth: hci2: link tx timeout
[  172.158582][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.253761][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1003
[  172.372629][T11239] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  172.372644][T11239] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  172.463871][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1557'.
[  172.521680][T11255] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1558'.
[  172.522746][T11255] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  172.545228][ T5595] Bluetooth: hci1: ISO packet for unknown connection handle 3684
[  172.551905][ T5595] Bluetooth: hci1: ISO packet for unknown connection handle 3684
[  172.933122][T11298] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002
[  173.005441][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'.
[  173.724856][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'.
[  173.833250][T11339] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1587'.
[  173.909158][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'.
[  173.912426][T11344] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.915871][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'.
[  173.980442][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 13 > 9
[  173.980470][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1003
[  174.021515][T11350] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  174.045795][T11353] netlink: 'syz.1.1593': attribute type 1 has an invalid length.
[  174.072238][T11353] 8021q: adding VLAN 0 to HW filter on device bond7
[  174.096152][T11353] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1593'.
[  174.098636][T11357] syzkaller0: entered promiscuous mode
[  174.098653][T11357] syzkaller0: entered allmulticast mode
[  174.183587][T11359] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  174.183619][T11359] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  174.183764][T11359] tipc: Resetting bearer <eth:syzkaller0>
[  174.281346][T11364] netlink: 'syz.1.1597': attribute type 83 has an invalid length.
[  174.375346][T11370] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.1599'.
[  174.398953][T11371] tun0: tun_chr_ioctl cmd 1074025675
[  174.400470][T11371] tun0: persist enabled
[  174.452891][T11379] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  174.452906][T11379] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  174.774745][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  174.815945][T11401] bridge3: entered promiscuous mode
[  174.816017][T11401] bridge3: entered allmulticast mode
[  174.896166][T11409] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1610'.
[  174.904797][T11404] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1609'.
[  174.984487][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  175.084015][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'.
[  175.084733][T11429] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.109895][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 13 > 9
[  175.109913][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  175.145629][T11434] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.145711][T11434] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.145793][T11434] bridge_slave_0: entered allmulticast mode
[  175.155159][T11434] bridge_slave_0: entered promiscuous mode
[  175.294193][T11447] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20003
[  175.294721][T11444] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1624'.
[  175.371263][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 13 > 9
[  175.371287][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  176.037603][T11525] syzkaller1: entered promiscuous mode
[  176.037617][T11525] syzkaller1: entered allmulticast mode
[  176.064924][T11527] syzkaller1: entered promiscuous mode
[  176.064935][T11527] syzkaller1: entered allmulticast mode
[  176.512442][T11549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.513177][T11549] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  176.542193][T11552] bridge2: entered promiscuous mode
[  176.648033][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 13 > 9
[  176.648058][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  176.713974][T11565] netlink: ct family unspecified
[  176.713999][T11565] openvswitch: netlink: Actions may not be safe on all matching packets
[  176.794100][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  177.330627][T11608] pimreg: entered allmulticast mode
[  177.447105][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  178.203386][T11680] netlink: 'syz.2.1697': attribute type 1 has an invalid length.
[  178.427188][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  178.452497][T11694] tipc: Resetting bearer <ib:syz_tun>
[  178.454487][T11694] tipc: Resetting bearer <ib:syz_tun>
[  178.983167][T11718] __nla_validate_parse: 21 callbacks suppressed
[  178.983185][T11718] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1711'.
[  179.448290][T11743] lo speed is unknown, defaulting to 1000
[  179.520645][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 13 > 9
[  179.520671][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  179.583433][T11753] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1724'.
[  179.807394][T11764] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1725'.
[  179.879103][T11773] netlink: 'syz.2.1726': attribute type 15 has an invalid length.
[  179.879122][T11773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1726'.
[  179.997246][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  180.511801][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'.
[  180.511837][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'.
[  180.529424][T11823] gretap2: entered allmulticast mode
[  180.563817][T11829] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1741'.
[  180.640156][T11846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1749'.
[  180.903403][T11860] openvswitch: netlink: Duplicate key (type 0).
[  181.096669][T11873] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  181.180829][T11877] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004
[  181.323488][T11875] trusted_key: syz.0.1760 sent an empty control message without MSG_MORE.
[  181.550335][T11898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1765'.
[  181.559740][T11895] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1764'.
[  181.592508][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 13 > 9
[  181.592527][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  182.185181][T11959] ksmbd: Unknown IPC event: 0, ignore.
[  182.196085][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  182.282963][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 13 > 9
[  182.282980][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  182.858430][T12024] netlink: 'syz.2.1794': attribute type 62 has an invalid length.
[  183.032179][T12039] ip_tables: iptables: counters copy to user failed while replacing table
[  183.120855][T12044] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  183.121015][T12044] ipt_ECN: cannot use operation on non-tcp rule
[  183.223492][   T55] Bluetooth: hci1: unexpected event for opcode 0xdf03
[  186.278186][T12073] __nla_validate_parse: 7 callbacks suppressed
[  186.278197][T12073] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.1805'.
[  186.320802][T12075] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1806'.
[  186.324792][T12082] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1806'.
[  186.482166][T12095] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1812'.
[  186.507200][T12101] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1814'.
[  186.515299][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'.
[  186.633298][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'.
[  186.658345][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  186.662234][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1816'.
[  186.775089][T12132] netlink: 'syz.2.1821': attribute type 17 has an invalid length.
[  186.775100][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'.
[  189.744866][T12132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  189.843652][T12157] netlink: 'syz.0.1825': attribute type 16 has an invalid length.
[  189.843671][T12157] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1825'.
[  189.923125][T12162] netlink: 'syz.2.1826': attribute type 1 has an invalid length.
[  189.954125][T12162] vxlan: RTM_NEWNEIGH with invalid state 0x9
[  191.174448][T12224] tipc: Resetting bearer <ib:syz_tun>
[  191.188654][T12224] tipc: Resetting bearer <eth:hsr0>
[  191.204087][T12224] ip6gre1: left promiscuous mode
[  191.214271][T12224] 8021q: adding VLAN 0 to HW filter on device bond4
[  191.223982][T12224] 8021q: adding VLAN 0 to HW filter on device bond5
[  191.230288][T12224] 8021q: adding VLAN 0 to HW filter on device eth0
[  191.232718][T12224] 8021q: adding VLAN 0 to HW filter on device eth1
[  191.234155][T12224] 8021q: adding VLAN 0 to HW filter on device eth2
[  191.235272][T12224] 8021q: adding VLAN 0 to HW filter on device eth3
[  191.235936][T12224] bond6: left promiscuous mode
[  191.250007][T12224] bond7: left promiscuous mode
[  191.250023][T12224] bridge5: left promiscuous mode
[  191.261941][T12224] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  191.276384][T10285] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.276431][T10285] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  191.276483][T10285] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  191.276496][T10285] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  191.413721][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  191.781540][T12260] netlink: 'syz.1.1845': attribute type 15 has an invalid length.
[  191.781559][T12260] __nla_validate_parse: 2 callbacks suppressed
[  191.781566][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'.
[  191.798026][T12260] netlink: 'syz.1.1845': attribute type 15 has an invalid length.
[  191.798038][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'.
[  191.823361][T10285] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  191.823427][T10285] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  191.823450][T10285] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  191.823471][T10285] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  191.889358][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1846'.
[  191.976956][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'.
[  191.976977][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'.
[  192.071930][T12282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.330664][T12234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.348275][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  194.348305][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  194.431626][T12285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1853'.
[  194.431656][T12285] openvswitch: netlink: Missing key (keys=c0, expected=500)
[  194.672113][T12314] x_tables: duplicate underflow at hook 1
[  194.719539][T12320] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1861'.
[  194.838731][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1864'.
[  194.838773][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1864'.
[  197.487640][T12292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  197.489524][T12345] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1868'.
[  197.572615][T12352] netlink: 'syz.2.1870': attribute type 3 has an invalid length.
[  197.572625][T12352] netlink: 'syz.2.1870': attribute type 2 has an invalid length.
[  197.618940][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  197.664899][T12359] bridge0: port 3(syz_tun) entered blocking state
[  197.664941][T12359] bridge0: port 3(syz_tun) entered disabled state
[  197.665099][T12359] syz_tun: entered allmulticast mode
[  197.665810][T12359] syz_tun: entered promiscuous mode
[  197.812941][T12373] xfrm1: entered allmulticast mode
[  197.886356][T12378] x_tables: duplicate underflow at hook 2
[  198.679288][T12401] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  198.974602][T12423] bridge0: port 3(syz_tun) entered blocking state
[  198.978005][T12423] bridge0: port 3(syz_tun) entered disabled state
[  198.982302][T12423] syz_tun: entered promiscuous mode
[  199.178290][T12449] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1903'.
[  199.178450][T12447] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1903'.
[  199.583132][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'.
[  199.905289][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'.
[  200.038377][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  200.124199][T12516] netlink: 6056 bytes leftover after parsing attributes in process `syz.2.1925'.
[  200.258690][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  200.313979][T12544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1929'.
[  200.314465][T12543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1929'.
[  200.314728][T12544] openvswitch: netlink: Unknown key attributes 1
[  200.476182][T12558] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1931'.
[  200.641952][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  200.692165][T12594] netlink: 'syz.0.1937': attribute type 7 has an invalid length.
[  200.937059][T12622] tipc: Enabled bearer <udp:syz0>, priority 10
[  200.978084][T12625] netlink: 'syz.0.1941': attribute type 7 has an invalid length.
[  200.978100][T12625] netlink: 'syz.0.1941': attribute type 5 has an invalid length.
[  200.978108][T12625] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1941'.
[  201.214884][T12643] netlink: 'syz.2.1948': attribute type 15 has an invalid length.
[  202.602775][T12686] syzkaller1: entered promiscuous mode
[  202.602787][T12686] syzkaller1: entered allmulticast mode
[  203.450924][T12693] bridge0: port 3(syz_tun) entered blocking state
[  203.453355][T12693] bridge0: port 3(syz_tun) entered disabled state
[  203.453468][T12693] syz_tun: entered allmulticast mode
[  203.553229][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  203.665351][   T55] Bluetooth: hci2: unexpected event for opcode 0x1003
[  203.750204][T12734] __nla_validate_parse: 2 callbacks suppressed
[  203.750214][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'.
[  203.761190][T12738] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1976'.
[  203.846550][T12745] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1979'.
[  203.964944][T12761] netlink: 'syz.0.1981': attribute type 21 has an invalid length.
[  203.964955][T12761] netlink: 'syz.0.1981': attribute type 22 has an invalid length.
[  203.964960][T12761] netlink: 'syz.0.1981': attribute type 23 has an invalid length.
[  203.964964][T12761] netlink: 'syz.0.1981': attribute type 25 has an invalid length.
[  203.964968][T12761] netlink: 'syz.0.1981': attribute type 26 has an invalid length.
[  203.964973][T12761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1981'.
[  204.064091][T12777] netlink: 'syz.1.1983': attribute type 1 has an invalid length.
[  204.066561][T12785] netlink: 'syz.1.1983': attribute type 1 has an invalid length.
[  204.247544][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'.
[  204.253799][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'.
[  204.309353][T12811] openvswitch: netlink: nsh attribute has 5 unknown bytes.
[  204.369958][T12821] openvswitch: netlink: nsh attribute has 5 unknown bytes.
[  204.427453][T12825] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1992'.
[  204.429049][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1992'.
[  204.701783][T12855] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.875315][T12877] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2009'.
[  204.875588][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2010'.
[  204.990457][T12893] veth0: entered promiscuous mode
[  205.081289][T12900] veth0: left promiscuous mode
[  205.098179][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  205.669112][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  205.673921][T12920] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  206.308757][T12952] netlink: 'syz.2.2033': attribute type 3 has an invalid length.
[  206.343895][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  209.307232][T12952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  209.374903][T12970] __nla_validate_parse: 3 callbacks suppressed
[  209.374915][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'.
[  209.450481][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'.
[  209.450496][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'.
[  209.520467][T12982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2040'.
[  209.520496][T12982] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  209.525708][T12984] bridge4: entered promiscuous mode
[  209.525737][T12984] bridge4: entered allmulticast mode
[  209.545683][T12984] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  209.545712][T12984] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  209.545959][T12984] tipc: Resetting bearer <eth:syzkaller0>
[  209.565191][T12986] openvswitch: netlink: Missing valid actions attribute.
[  209.565221][T12986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.586319][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'.
[  209.730059][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'.
[  209.829128][T13014] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  209.829142][T13014] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  209.829387][T13014] tipc: Resetting bearer <eth:syzkaller0>
[  209.888822][T13022] netlink: 'syz.0.2055': attribute type 2 has an invalid length.
[  209.907959][T13022] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2055'.
[  210.005649][ T5595] Bluetooth: hci1: SCO packet too small
[  210.082247][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'.
[  210.095689][T13036] ovs-dp0: entered promiscuous mode
[  210.711076][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2067'.
[  210.711091][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2067'.
[  210.727053][ T6898] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.727097][ T6898] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.727121][ T6898] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.727149][ T6898] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  211.198059][T13047] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  211.198073][T13047] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  211.493916][T13135] netlink: zone id is out of range
[  211.592350][T13135] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  211.592377][T13135] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  211.592400][T13135] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  211.609451][T13135] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  211.621183][T13135] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  211.720821][T13149] SET target dimension over the limit!
[  211.856666][ T5595] Bluetooth: hci2: command 0x0405 tx timeout
[  211.859889][T13047] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  211.859906][T13047] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  211.944680][T13047] tipc: Resetting bearer <eth:syzkaller0>
[  211.956084][T13047] batman_adv: batadv0: Interface deactivated: syzkaller0
[  212.348863][T13197] netlink: 'syz.0.2102': attribute type 1 has an invalid length.
[  212.969250][T13230] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.989102][T13230] tipc: Resetting bearer <eth:syzkaller0>
[  213.174897][T13251] tipc: Resetting bearer <ib:syz_tun>
[  213.192657][T13251] tipc: Resetting bearer <eth:hsr0>
[  213.193314][T13251] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  213.415801][T13276] Bluetooth: hci0: invalid length 0, exp 2 for type 25
[  213.491475][T13279] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  213.880430][T13294] tun0: tun_chr_ioctl cmd 1074025675
[  213.880444][T13294] tun0: persist enabled
[  213.880602][T13294] tun0: tun_chr_ioctl cmd 1074025675
[  213.880609][T13294] tun0: persist enabled
[  214.056579][ T6897] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.076617][ T5647] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.076651][ T5647] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.076673][ T5647] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.228140][T13314] sctp: [Deprecated]: syz.0.2141 (pid 13314) Use of int in maxseg socket option.
[  214.228140][T13314] Use struct sctp_assoc_value instead
[  214.612781][T13347] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  214.690158][T13352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  214.755086][T13358] tipc: Can't bind to reserved service type 0
[  214.802113][T13360] __nla_validate_parse: 15 callbacks suppressed
[  214.802124][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'.
[  215.082031][T13389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2164'.
[  215.166472][T13397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2166'.
[  215.390258][T13425] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2168'.
[  215.469693][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'.
[  215.469917][T13438] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003
[  215.582074][T13447] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2177'.
[  215.674709][T13454] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  215.728448][T13469] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[  215.728464][T13469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.781761][T13456] syzkaller1: entered promiscuous mode
[  215.781774][T13456] syzkaller1: entered allmulticast mode
[  216.941265][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'.
[  216.988357][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'.
[  217.003727][T13515] netlink: 'syz.0.2195': attribute type 4 has an invalid length.
[  217.003739][T13515] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2195'.
[  217.052063][T13527] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20001
[  217.110090][T13533] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2201'.
[  217.161552][T13535] sctp: [Deprecated]: syz.2.2202 (pid 13535) Use of int in max_burst socket option deprecated.
[  217.161552][T13535] Use struct sctp_assoc_value instead
[  217.829350][T13558] netlink: 'syz.0.2210': attribute type 11 has an invalid length.
[  217.935495][T13560] netlink: 'syz.0.2211': attribute type 11 has an invalid length.
[  218.054326][T13565] tipc: Bearer <eth:vlan1>: already 2 bearers with priority 10
[  218.054339][T13565] tipc: Bearer <eth:vlan1>: trying with adjusted priority
[  218.054346][T13565] tipc: Enabling of bearer <eth:vlan1> rejected, max 3 bearers permitted
[  218.479461][T13589] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  219.764963][T13659] netlink: 'syz.0.2245': attribute type 11 has an invalid length.
[  219.943648][T13673] ip6_vti0: entered promiscuous mode
[  219.951398][T13673] __nla_validate_parse: 7 callbacks suppressed
[  219.951408][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'.
[  220.058073][T13683] bridge0: port 3(syz_tun) entered blocking state
[  220.058173][T13683] bridge0: port 3(syz_tun) entered forwarding state
[  220.061087][T13683] 8021q: adding VLAN 0 to HW filter on device team0
[  220.063421][T13683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.091423][T13683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.092866][T13683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.095935][T13683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  220.095946][T13683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  220.110227][T13683] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  220.117908][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.117991][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.120383][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.120440][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.163073][T10286] bond6: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  220.172468][T10286] bond6: (slave veth0_to_bond): making interface the new active one
[  220.182568][T10286] bond6: active interface up!
[  221.340720][T13773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2275'.
[  221.465217][T13783] netlink: 'syz.2.2277': attribute type 11 has an invalid length.
[  221.485668][T13783] openvswitch: netlink: Key type 354 is out of range max 32
[  221.550317][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2280'.
[  221.664608][T13800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2281'.
[  221.878587][T13810] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2284'.
[  222.072575][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'.
[  222.085221][T13832] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  222.092818][T13828] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2289'.
[  222.377972][T13849] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2295'.
[  222.378893][T13849] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2295'.
[  222.384810][T13852] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2296'.
[  222.411029][T13852] syzkaller0: entered promiscuous mode
[  222.411047][T13852] syzkaller0: entered allmulticast mode
[  222.731222][T13871] block nbd0: Unsupported socket: should be TCP or UNIX.
[  222.743156][T13873] netlink: 'syz.0.2304': attribute type 4 has an invalid length.
[  222.757703][T13873] netlink: 'syz.0.2304': attribute type 4 has an invalid length.
[  223.048280][T13895] ipt_ECN: cannot use operation on non-tcp rule
[  223.089210][T13878] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20001
[  224.323778][T13984] netlink: 'syz.1.2323': attribute type 11 has an invalid length.
[  224.429931][T13984] netlink: 'syz.1.2323': attribute type 3 has an invalid length.
[  225.071399][T14058] __nla_validate_parse: 8 callbacks suppressed
[  225.071417][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'.
[  225.071431][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'.
[  225.151748][T14062] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  225.286147][T14075] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2352'.
[  226.135419][T14170] ipt_ah: unknown flags FF
[  227.695239][T14229] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2402'.
[  227.724861][T14237] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2404'.
[  227.748044][T14242] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2406'.
[  227.776104][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'.
[  227.781135][T14242] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2406'.
[  227.882043][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'.
[  227.999494][T14265] xt_CT: You must specify a L4 protocol and not use inversions on it
[  228.061138][T14272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2416'.
[  229.131761][T14365] netlink: 'syz.2.2442': attribute type 10 has an invalid length.
[  229.131782][T14365] netdevsim netdevsim2 netdevsim1: left promiscuous mode
[  229.133698][T14365] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  229.134090][T14365] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  229.135024][T14365] team0: Port device netdevsim1 added
[  229.547148][T14407] xt_CT: You must specify a L4 protocol and not use inversions on it
[  230.382154][T14483] __nla_validate_parse: 6 callbacks suppressed
[  230.382170][T14483] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2464'.
[  230.563120][T14496] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2468'.
[  230.617498][T14500] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2469'.
[  230.775075][T14511] tc action pedit offset must be on 32 bit boundaries
[  231.414778][T14553] lo speed is unknown, defaulting to 1000
[  231.439813][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'.
[  232.084524][T14591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2488'.
[  232.085572][T14591] bridge0: port 3(syz_tun) entered disabled state
[  232.086896][T14591] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.087312][T14591] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.352438][T14606] netlink: 'syz.1.2490': attribute type 8 has an invalid length.
[  232.403829][T14609] netlink: 'syz.1.2491': attribute type 9 has an invalid length.
[  232.523806][T14617] netlink: NAT attribute type 5 has unexpected length (0 != 2)
[  232.523825][T14617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.621553][T14622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.871858][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'.
[  232.894535][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'.
[  233.042427][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'.
[  233.074770][T14649] netlink: 'syz.2.2505': attribute type 1 has an invalid length.
[  233.165489][T14648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2504'.
[  233.236011][T14666] netlink: 'syz.0.2510': attribute type 12 has an invalid length.
[  233.236088][T14666] netlink: 'syz.0.2510': attribute type 29 has an invalid length.
[  233.236098][T14666] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2510'.
[  233.236110][T14666] netlink: 'syz.0.2510': attribute type 1 has an invalid length.
[  233.236118][T14666] netlink: 'syz.0.2510': attribute type 2 has an invalid length.
[  234.061744][T14727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.064880][T14731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.372868][T14760] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  235.295317][T14804] virtio_blk virtio1: 1/0/0 default/read/poll queues
[  235.315260][T14804] virtio_blk virtio1: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  235.648440][T14850] bond0: (slave gretap0): Opening slave failed
[  235.891085][T14870] syzkaller0: entered promiscuous mode
[  235.891166][T14870] syzkaller0: entered allmulticast mode
[  236.074111][T14886] __nla_validate_parse: 9 callbacks suppressed
[  236.074126][T14886] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2561'.
[  236.088223][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'.
[  236.278508][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'.
[  236.301458][T14905] netlink: 'syz.2.2566': attribute type 4 has an invalid length.
[  236.304177][    T9] lo speed is unknown, defaulting to 1000
[  236.304189][    T9] syz0: Port: 1 Link ACTIVE
[  236.304348][    T9] lo speed is unknown, defaulting to 1000
[  236.346008][T14911] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2568'.
[  236.404143][T14915] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2567'.
[  236.529560][T14927] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  236.642244][T14919] tipc: Resetting bearer <ib:syz_tun>
[  236.653999][T14919] bridge0: port 3(syz_tun) entered disabled state
[  236.654974][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2572'.
[  237.099044][T14919] tipc: Resetting bearer <eth:hsr0>
[  237.677019][ T5647] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.677044][ T5647] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  237.677061][ T5647] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  237.677083][ T5647] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.677099][ T5647] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  237.677114][ T5647] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  237.677135][ T5647] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.677151][ T5647] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  237.677165][ T5647] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  237.677188][ T5647] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.677204][ T5647] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  237.677219][ T5647] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  237.955015][T14959] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2576'.
[  238.357624][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2587'.
[  238.359281][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2587'.
[  238.421741][T15007] netlink: 'syz.2.2588': attribute type 10 has an invalid length.
[  238.421770][T15007] dummy0: left promiscuous mode
[  238.424056][T15007] dummy0: entered promiscuous mode
[  238.425146][T15007] team0: Port device dummy0 added
[  238.448832][T15009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2589'.
[  238.603492][T15019] netlink: 'syz.1.2592': attribute type 2 has an invalid length.
[  238.603512][T15019] netlink: 'syz.1.2592': attribute type 2 has an invalid length.
[  238.616152][T15019] syzkaller1: entered promiscuous mode
[  238.616168][T15019] syzkaller1: entered allmulticast mode
[  239.672801][T15083] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available
[  239.720422][T15086] netlink: 'syz.1.2611': attribute type 1 has an invalid length.
[  240.652922][T15103] syzkaller1: entered promiscuous mode
[  240.652942][T15103] syzkaller1: entered allmulticast mode
[  240.785921][T15106] xt_recent: Unsupported userspace flags (000000c5)
[  240.846770][T15109] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  241.991997][T15188] __nla_validate_parse: 22 callbacks suppressed
[  241.992013][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'.
[  241.992025][T15188] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2643'.
[  242.211497][T15196] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2645'.
[  243.053005][T15235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2656'.
[  243.115503][T15237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2657'.
[  243.358276][T15249] bond0: (slave ip6tnl0): refused to change device type
[  243.502857][T15257] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2665'.
[  243.505474][T15257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2665'.
[  243.932621][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'.
[  244.451036][T15316] netlink: Setting conntrack mark requires 'commit' flag.
[  244.451064][T15316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.678801][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'.
[  244.682636][T15348] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2688'.
[  245.367941][T15389] syzkaller1: entered promiscuous mode
[  245.367960][T15389] syzkaller1: entered allmulticast mode
[  245.743766][T15420] syzkaller1: entered promiscuous mode
[  245.743785][T15420] syzkaller1: entered allmulticast mode
[  245.992329][T15439] ipvlan0: Caught tx_queue_len zero misconfig
[  246.726562][T15478] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  246.764662][T15478] netlink: 'syz.2.2728': attribute type 1 has an invalid length.
[  246.950348][T15489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.158342][T15490] bond10 (unregistering): Released all slaves
[  247.230044][T15501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.349467][T15549] __nla_validate_parse: 8 callbacks suppressed
[  248.349483][T15549] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2744'.
[  248.432975][T15549] syzkaller1: entered promiscuous mode
[  248.432994][T15549] syzkaller1: entered allmulticast mode
[  248.620953][T15565] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2748'.
[  248.842855][T15576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2750'.
[  249.470335][T15610] batadv_slave_0: Caught tx_queue_len zero misconfig
[  249.509832][T15610] netlink: 'syz.0.2759': attribute type 21 has an invalid length.
[  249.509850][T15610] netlink: 'syz.0.2759': attribute type 22 has an invalid length.
[  249.509857][T15610] netlink: 'syz.0.2759': attribute type 23 has an invalid length.
[  249.509867][T15610] netlink: 'syz.0.2759': attribute type 25 has an invalid length.
[  249.509873][T15610] netlink: 'syz.0.2759': attribute type 26 has an invalid length.
[  249.509883][T15610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2759'.
[  249.718904][T15617] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2760'.
[  249.930405][T15622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2762'.
[  249.931925][T15621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2762'.
[  249.995555][T15621] 8021q: adding VLAN 0 to HW filter on device bond10
[  250.331473][T15636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.710778][T15661] tipc: Enabled bearer <udp:syz2>, priority 10
[  250.711088][T15661] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2776'.
[  250.726673][T15654] netlink: 'syz.0.2773': attribute type 12 has an invalid length.
[  250.726686][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'.
[  250.726700][T15654] bond0: option primary_reselect: invalid value (22)
[  251.017815][T15668] syzkaller0: entered promiscuous mode
[  251.017833][T15668] syzkaller0: entered allmulticast mode
[  251.111302][T15670] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2778'.
[  251.725263][T15703] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  251.725277][T15703] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  251.813133][T15709] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  251.813263][T15709] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  251.821860][T15713] bond_slave_1: Caught tx_queue_len zero misconfig
[  251.838194][ T5662] tipc: Node number set to 3273756084
[  252.031089][T15731] netlink: 'syz.0.2801': attribute type 10 has an invalid length.
[  252.041831][T15731] team0: Device wg2 is of different type
[  252.458656][T15744] IPVS: dh: TCP 172.20.20.170:0 - no destination available
[  253.375426][T15757] syzkaller1: entered promiscuous mode
[  253.375438][T15757] syzkaller1: entered allmulticast mode
[  253.568671][T15763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  253.692570][T15766] IPVS: Error connecting to the multicast addr
[  253.701860][T15766] xt_CT: You must specify a L4 protocol and not use inversions on it
[  253.811201][T15771] __nla_validate_parse: 4 callbacks suppressed
[  253.811580][T15771] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2813'.
[  254.819985][T15795] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2821'.
[  255.123532][T15806] tipc: Invalid UDP bearer configuration
[  255.123651][T15806] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  255.162754][T15809] syzkaller1: entered promiscuous mode
[  255.162771][T15809] syzkaller1: entered allmulticast mode
[  255.164941][T15809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2827'.
[  255.165047][T15809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2827'.
[  255.367405][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2828'.
[  255.412025][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2829'.
[  255.661665][T15829] IPVS: set_ctl: invalid protocol: 16 224.0.0.1:20000
[  255.778981][T15837] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  255.779003][T15837] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  255.805964][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  255.855145][T15840] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2836'.
[  255.916671][T15834] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2834'.
[  256.044954][T15853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2839'.
[  256.063736][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'.
[  256.173713][T15862] veth7: entered allmulticast mode
[  256.191577][T15866] batadv_slave_0: Caught tx_queue_len zero misconfig
[  256.733078][T15893] bond8 (unregistering): Released all slaves
[  256.858389][T15895] syzkaller1: entered promiscuous mode
[  256.858452][T15895] syzkaller1: entered allmulticast mode
[  257.145696][T15909] xt_hashlimit: size too large, truncated to 1048576
[  257.779549][T15926] sctp: [Deprecated]: syz.1.2858 (pid 15926) Use of struct sctp_assoc_value in delayed_ack socket option.
[  257.779549][T15926] Use struct sctp_sack_info instead
[  257.902644][T15933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.902977][T15935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.132818][T15948] netlink: 'syz.0.2866': attribute type 6 has an invalid length.
[  258.297858][T15961] xt_hashlimit: size too large, truncated to 1048576
[  258.297870][T15961] xt_hashlimit: max too large, truncated to 1048576
[  258.415592][T15963] syzkaller0: entered promiscuous mode
[  258.415604][T15963] syzkaller0: entered allmulticast mode
[  258.911743][T15974] bond13: entered promiscuous mode
[  258.913730][T15974] 8021q: adding VLAN 0 to HW filter on device bond13
[  259.074273][T15986] __nla_validate_parse: 18 callbacks suppressed
[  259.074290][T15986] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2875'.
[  259.208777][T15989] IPv6: NLM_F_CREATE should be specified when creating new route
[  259.209025][T15989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  259.209045][T15989] IPv6: NLM_F_CREATE should be set when creating new route
[  259.209080][T15989] IPv6: NLM_F_CREATE should be set when creating new route
[  259.209133][T15989] IPv6: NLM_F_CREATE should be set when creating new route
[  259.218039][T15989] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2876'.
[  259.558512][T16009] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2883'.
[  260.087217][T16038] bond0: (slave xfrm0): Error: Device type is different from other slaves
[  260.470563][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2899'.
[  260.512810][T16059] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2899'.
[  260.515013][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2899'.
[  260.520255][T16059] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2899'.
[  260.820046][T16076] geneve4: entered promiscuous mode
[  260.820823][T16076] geneve4: entered allmulticast mode
[  260.980335][T16085] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2905'.
[  260.980362][T16085] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2905'.
[  260.983503][T16081] lo speed is unknown, defaulting to 1000
[  261.287721][T16088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2906'.
[  262.004604][T16112] bond11: entered allmulticast mode
[  262.203696][T16126] netlink: 'syz.1.2919': attribute type 8 has an invalid length.
[  262.447007][T16139] team_slave_1: Caught tx_queue_len zero misconfig
[  262.825795][T16162] ip6tnl0: Caught tx_queue_len zero misconfig
[  263.078816][T16168] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  263.078831][T16168] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  263.614690][T16176] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  263.614895][T16176] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  264.155618][T16200] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  264.471861][T16208] __nla_validate_parse: 4 callbacks suppressed
[  264.471873][T16208] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2943'.
[  264.919742][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2952'.
[  265.056083][T16252] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2957'.
[  265.056097][T16252] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2957'.
[  265.582495][T16287] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2962'.
[  265.839320][T16314] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2971'.
[  266.001317][T16320] block nbd0: Receive control failed (result -32)
[  266.003557][   T57] block nbd0: Receive control failed (result -32)
[  266.234070][T16331] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2976'.
[  266.558346][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'.
[  267.165512][T16367] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2986'.
[  267.192544][T16371] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2986'.
[  267.409709][T16379] tc_dump_action: action bad kind
[  267.512106][T16381] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  267.642500][T16385] netlink: 'syz.1.2990': attribute type 1 has an invalid length.
[  267.869371][T16392] netlink: 'syz.0.2993': attribute type 11 has an invalid length.
[  267.873518][T16392] netlink: 'syz.0.2993': attribute type 10 has an invalid length.
[  267.881639][T16392] team0: Port device dummy0 added
[  268.974729][T16459] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  269.062691][T16468] vlan2: entered allmulticast mode
[  269.062708][T16468] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  269.062932][T16468] bridge0: port 4(vlan2) entered blocking state
[  269.062977][T16468] bridge0: port 4(vlan2) entered disabled state
[  269.065388][T16468] vlan2: entered promiscuous mode
[  269.107891][T16469] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  269.314187][T16490] ip6tnl0: Caught tx_queue_len zero misconfig
[  269.466904][T16508] sctp: [Deprecated]: syz.2.3021 (pid 16508) Use of struct sctp_assoc_value in delayed_ack socket option.
[  269.466904][T16508] Use struct sctp_sack_info instead
[  269.895095][T16533] netlink: 'syz.1.3027': attribute type 1 has an invalid length.
[  269.917432][T16533] 8021q: adding VLAN 0 to HW filter on device bond12
[  269.934659][T16533] bond12: entered promiscuous mode
[  269.934680][T16533] bond12: entered allmulticast mode
[  270.076436][T16546] __nla_validate_parse: 4 callbacks suppressed
[  270.076482][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'.
[  270.083392][T16536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3029'.
[  270.195855][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3028'.
[  270.490135][T16561] --map-set only usable from mangle table
[  270.539086][T16565] netlink: 'syz.2.3033': attribute type 1 has an invalid length.
[  270.552037][T16565] bond14: entered promiscuous mode
[  270.552068][T16565] bond14: entered allmulticast mode
[  270.552244][T16565] 8021q: adding VLAN 0 to HW filter on device bond14
[  270.554003][T16565] netlink: 'syz.2.3033': attribute type 5 has an invalid length.
[  270.710910][T16575] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3037'.
[  270.883460][T16589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3039'.
[  271.032835][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'.
[  271.033180][T16598] netlink: 'syz.0.3040': attribute type 1 has an invalid length.
[  271.033189][T16598] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3040'.
[  271.033196][T16598] netlink: 'syz.0.3040': attribute type 1 has an invalid length.
[  271.040405][T16599] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3043'.
[  271.040441][T16599] netlink: 'syz.1.3043': attribute type 9 has an invalid length.
[  271.040449][T16599] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3043'.
[  271.040458][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'.
[  273.229847][T16691] dummy0 (unregistering): left promiscuous mode
[  273.240227][T16691] team0: Port device dummy0 removed
[  273.318539][T16691] netlink: 'syz.2.3069': attribute type 23 has an invalid length.
[  273.318558][T16691] netlink: 'syz.2.3069': attribute type 21 has an invalid length.
[  273.318569][T16691] IPv6: NLM_F_CREATE should be specified when creating new route
[  273.531915][T16695] 0: renamed from hsr0
[  273.543531][T16695] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  273.543772][T16695] 0: left promiscuous mode
[  273.543810][T16695] 0: entered allmulticast mode
[  273.543820][T16695] hsr_slave_0: entered allmulticast mode
[  273.545617][T16695] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  273.697424][T16700] netlink: 'syz.2.3072': attribute type 1 has an invalid length.
[  273.803468][T16707] xt_ecn: cannot match TCP bits for non-tcp packets
[  274.006840][T16712] netlink: 'syz.2.3077': attribute type 1 has an invalid length.
[  274.189549][T16712] xt_CT: You must specify a L4 protocol and not use inversions on it
[  274.253223][T16721] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[  275.664005][T16774] __nla_validate_parse: 11 callbacks suppressed
[  275.664019][T16774] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3090'.
[  275.745359][T16783] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3090'.
[  276.025388][T16815] bond0: Error: Cannot enslave bond to itself.
[  276.157421][T16823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3098'.
[  276.161066][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'.
[  276.161194][T16821] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3097'.
[  276.324057][T16827] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3098'.
[  276.686509][T16861] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3106'.
[  276.686522][T16861] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  276.689784][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3105'.
[  276.765060][T16863] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  276.827170][T16870] syzkaller0: entered promiscuous mode
[  276.827185][T16870] syzkaller0: entered allmulticast mode
[  279.692964][T16923] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  279.692984][T16923] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  280.130493][T16959] tunl0: Caught tx_queue_len zero misconfig
[  280.152088][T16960] netlink: 'syz.0.3134': attribute type 8 has an invalid length.
[  280.428744][T16980] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3142'.
[  280.487743][T16985] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3145'.
[  280.491827][T16985] syzkaller1: entered promiscuous mode
[  280.491838][T16985] syzkaller1: entered allmulticast mode
[  281.068876][T17017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3156'.
[  281.068891][T17017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3156'.
[  281.068898][T17017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3156'.
[  281.068975][T17017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3156'.
[  281.469119][T17039] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3165'.
[  281.516114][T17047] syzkaller1: entered promiscuous mode
[  281.516127][T17047] syzkaller1: entered allmulticast mode
[  281.675284][T17049] netlink: 'syz.1.3167': attribute type 5 has an invalid length.
[  281.675447][T17049] sctp: [Deprecated]: syz.1.3167 (pid 17049) Use of int in max_burst socket option.
[  281.675447][T17049] Use struct sctp_assoc_value instead
[  281.854416][T17057] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  281.854602][T17057] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  282.167602][T17079] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3172'.
[  282.174526][T17071] xt_HMARK: spi-set and port-set can't be combined
[  282.342834][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3177'.
[  282.463625][T17088] tun0: tun_chr_ioctl cmd 1074025675
[  282.463645][T17088] tun0: persist enabled
[  282.464238][T17088] tun0: tun_chr_ioctl cmd 1074025675
[  282.464249][T17088] tun0: persist enabled
[  282.922156][T17099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3181'.
[  283.757105][T17110] netlink: 'syz.2.3185': attribute type 2 has an invalid length.
[  283.957274][T17115] netlink: 'syz.1.3187': attribute type 1 has an invalid length.
[  284.260486][T17125] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3190'.
[  284.534687][T17152] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3196'.
[  284.813426][T17164] netlink: 'syz.2.3199': attribute type 4 has an invalid length.
[  284.880275][T17167] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  285.604927][T17196] ip_tables: iptables: counters copy to user failed while replacing table
[  285.651301][T17196] syzkaller1: entered promiscuous mode
[  285.651315][T17196] syzkaller1: entered allmulticast mode
[  286.083980][T17215] __nla_validate_parse: 3 callbacks suppressed
[  286.083997][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3211'.
[  286.396858][T17227] openvswitch: netlink: Unknown key attributes 1
[  286.943454][T17212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.981207][T17212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.293122][T17232] netlink: 'syz.2.3215': attribute type 13 has an invalid length.
[  287.293210][T17232] netlink: 'syz.2.3215': attribute type 12 has an invalid length.
[  287.396487][T10287] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  287.396522][T10287] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  287.396546][T10287] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  287.396568][T10287] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[  287.548141][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3218'.
[  288.247543][T17275] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3225'.
[  289.017345][T17307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3232'.
[  289.135539][T17311] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3234'.
[  289.534943][T17326] syzkaller1: entered promiscuous mode
[  289.534965][T17326] syzkaller1: entered allmulticast mode
[  289.577083][T17329] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  289.620283][T17329] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3241'.
[  289.894495][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3245'.
[  290.309932][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'.
[  290.310029][T17373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3254'.
[  290.523215][T17382] xt_l2tp: invalid flags combination: 8
[  291.049372][T17391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3261'.
[  291.066157][T17391] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  291.066170][T17391] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  291.265742][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3264'.
[  291.376645][T17412] netlink: 3660 bytes leftover after parsing attributes in process `syz.2.3262'.
[  291.376692][T17412] lo: Caught tx_queue_len zero misconfig
[  291.464014][T17418] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3267'.
[  292.622685][T17448] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3276'.
[  292.759919][T17458] bond13: Removing last ns target with arp_interval on
[  292.794535][T17461] xt_l2tp: invalid flags combination: 8
[  292.847922][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'.
[  293.151957][T17470] netlink: 'syz.0.3284': attribute type 10 has an invalid length.
[  293.220066][T17474] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3283'.
[  293.758825][T17488] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.3289'.
[  294.004825][T17494] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3291'.
[  294.093268][T17499] ip6_vti0: left promiscuous mode
[  294.105574][T17499] tipc: Resetting bearer <ib:syz_tun>
[  294.122007][T17499] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.123057][T17499] 8021q: adding VLAN 0 to HW filter on device team0
[  294.301525][T17499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  294.301546][T17499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  294.306030][T17499] tipc: Resetting bearer <eth:hsr0>
[  294.319352][T17499] tipc: Resetting bearer <eth:hsr0>
[  294.323530][T17499] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  294.349287][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.349366][ T1113] bridge0: port 1(bridge_slave_0) entered listening state
[  294.360451][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.360525][ T1113] bridge0: port 2(bridge_slave_1) entered listening state
[  294.490073][T17505] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3294'.
[  294.695341][T17524] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3295'.
[  295.470039][T17552] netlink: 'syz.0.3305': attribute type 15 has an invalid length.
[  295.630738][T17565] syzkaller1: entered promiscuous mode
[  295.630758][T17565] syzkaller1: entered allmulticast mode
[  295.633759][T17565] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  295.707481][T17566] netlink: 'syz.1.3308': attribute type 1 has an invalid length.
[  295.871920][T17576] syzkaller1: entered promiscuous mode
[  295.871983][T17576] syzkaller1: entered allmulticast mode
[  296.379013][T17602] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  296.382455][T17602] bond8 (unregistering): Released all slaves
[  296.614789][T17616] __nla_validate_parse: 5 callbacks suppressed
[  296.614805][T17616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3321'.
[  296.618476][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3319'.
[  296.618678][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3319'.
[  296.697360][T17626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3319'.
[  296.759259][T17626] netlink: 'syz.2.3319': attribute type 1 has an invalid length.
[  297.068004][T17648] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3326'.
[  297.082814][T17648] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3326'.
[  297.237724][T17658] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3329'.
[  297.284954][T17667] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3330'.
[  297.291110][T17653] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3328'.
[  298.450707][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3344'.
[  298.508799][T17712] ip_tables: iptables: counters copy to user failed while replacing table
[  298.512393][T17712] netlink: 'syz.1.3343': attribute type 1 has an invalid length.
[  298.512403][T17712] netlink: 'syz.1.3343': attribute type 4 has an invalid length.
[  298.676478][ T5647] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  298.676500][ T5647] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  298.676513][ T5647] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  298.676524][ T5647] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  299.083621][T17748] netlink: Unknown NAT attribute (type=1234, max=9)
[  299.083652][T17748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.292316][T17754] unsupported nlmsg_type 40
[  300.558592][T17780] lo speed is unknown, defaulting to 1000
[  301.383167][T17833] bridge0: port 3(syz_tun) entered blocking state
[  301.383219][T17833] bridge0: port 3(syz_tun) entered listening state
[  301.409181][T17833] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.424352][T17833] 8021q: adding VLAN 0 to HW filter on device team0
[  301.436142][T17833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.498939][T17833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.500318][T17833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.503281][T17833] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  301.599908][T17839] netlink: 'syz.0.3373': attribute type 3 has an invalid length.
[  302.215095][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.215186][ T1116] bridge0: port 1(bridge_slave_0) entered listening state
[  302.228919][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.229021][ T1116] bridge0: port 2(bridge_slave_1) entered listening state
[  302.538254][T17866] openvswitch: netlink: Message has 16 unknown bytes.
[  302.543597][T17867] openvswitch: netlink: Message has 16 unknown bytes.
[  303.003330][T17884] __nla_validate_parse: 10 callbacks suppressed
[  303.003348][T17884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3382'.
[  303.003361][T17884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3382'.
[  303.003372][T17884] netlink: 'syz.1.3382': attribute type 4 has an invalid length.
[  303.030776][T17887] ip_tables: iptables: counters copy to user failed while replacing table
[  303.324462][T17900] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  303.764935][T17930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3395'.
[  303.821955][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3395'.
[  303.843122][T17930] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3395'.
[  303.879602][T17934] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3400'.
[  303.893316][T17939] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3400'.
[  303.943164][T17943] netlink: 'syz.1.3401': attribute type 1 has an invalid length.
[  303.943211][T17943] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3401'.
[  303.943273][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'.
[  304.613877][T17982] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  304.665702][T17983] geneve0: Caught tx_queue_len zero misconfig
[  304.874055][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'.
[  305.001289][T18000] netlink: 'syz.2.3416': attribute type 1 has an invalid length.
[  305.411941][T18017] block nbd1: shutting down sockets
[  305.549773][T18026] block nbd1: shutting down sockets
[  305.568577][T18029] tipc: Resetting bearer <ib:syz_tun>
[  305.841947][T18040] atomic_op ffff8881befb31e0 conn xmit_atomic 0000000000000000
[  306.414525][T18050] Bluetooth: hci0: unsupported parameter 5135
[  306.414547][T18050] Bluetooth: hci0: unsupported parameter 8192
[  306.414555][T18050] Bluetooth: hci0: unsupported parameter 5135
[  306.414562][T18050] Bluetooth: hci0: unsupported parameter 8192
[  306.785028][T18078] ip6t_REJECT: ECHOREPLY is not supported
[  306.785123][T18078] ip6t_REJECT: ECHOREPLY is not supported
[  306.785205][T18078] ip6t_REJECT: ECHOREPLY is not supported
[  306.785281][T18078] ip6t_REJECT: ECHOREPLY is not supported
[  306.785355][T18078] ip6t_REJECT: ECHOREPLY is not supported
[  306.785430][T18078] ip6t_REJECT: ECHOREPLY is not supported
[  306.785504][T18078] ip6t_REJECT: ECHOREPLY is not supported
[  306.785670][T18078] ip6t_REJECT: ECHOREPLY is not supported
[  306.785747][T18078] ip6t_REJECT: ECHOREPLY is not supported
[  306.785822][T18078] ip6t_REJECT: ECHOREPLY is not supported
[  307.560288][T18109] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  308.045377][T18134] __nla_validate_parse: 9 callbacks suppressed
[  308.045394][T18134] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3445'.
[  308.068060][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'.
[  308.107975][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'.
[  308.491024][T18158] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  308.526128][T18145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3450'.
[  308.526152][T18145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3450'.
[  308.930168][T18176] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3457'.
[  308.930514][T18179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3458'.
[  309.025763][T18182] netlink: 'syz.0.3461': attribute type 3 has an invalid length.
[  309.025922][T18182] netlink: 'syz.0.3461': attribute type 3 has an invalid length.
[  309.274071][T18195] lo: Caught tx_queue_len zero misconfig
[  309.274355][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'.
[  309.537130][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  309.537665][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  309.754354][T18206] 8021q: adding VLAN 0 to HW filter on device team0
[  309.889691][T18206] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  309.910202][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.910282][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.930096][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.930177][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.394341][T18236] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig
[  310.418135][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'.
[  310.458995][T18239] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3476'.
[  311.215363][T18278] tunl0: Caught tx_queue_len zero misconfig
[  312.053950][T18322] ieee802154 phy0 wpan0: encryption failed: -22
[  312.215647][T18322] xt_l2tp: v2 sid > 0xffff: 33554432
[  312.494719][T18342] syzkaller1: entered promiscuous mode
[  312.494738][T18342] syzkaller1: entered allmulticast mode
[  312.883973][T18353] netlink: 'syz.0.3503': attribute type 8 has an invalid length.
[  312.907614][T18353] netlink: 'syz.0.3503': attribute type 8 has an invalid length.
[  313.534053][T18395] block nbd1: shutting down sockets
[  313.903364][T18411] __nla_validate_parse: 1 callbacks suppressed
[  313.903375][T18411] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3518'.
[  314.262957][T18439] syzkaller0: entered promiscuous mode
[  314.262972][T18439] syzkaller0: entered allmulticast mode
[  314.573737][T18455] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3529'.
[  314.771743][T18459] syzkaller0: entered promiscuous mode
[  314.771755][T18459] syzkaller0: entered allmulticast mode
[  315.141438][T18481] ip6gre0: Caught tx_queue_len zero misconfig
[  315.141477][T18481] sch_tbf: burst 4363 is lower than device ip6gre0 mtu (32769) !
[  315.172733][T18483] wlan1: mtu greater than device maximum
[  315.629373][T18502] bridge: RTM_NEWNEIGH with invalid ether address
[  316.018373][T18534] bond0: Caught tx_queue_len zero misconfig
[  316.044389][T18534] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3551'.
[  316.178830][T18538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3552'.
[  316.224448][T18538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3552'.
[  316.703165][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'.
[  316.715082][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'.
[  317.207940][T18664] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3563'.
[  317.232750][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  317.894852][T18710] No such timeout policy "s"
[  317.894863][T18710] netlink: Failed to associated timeout policy 's'
[  317.984013][T18713] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3572'.
[  318.591076][T18730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3576'.
[  318.625587][T18729] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003
[  319.118274][T18745] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  319.210346][T18743] netlink: ct family unspecified
[  319.211801][T18743] openvswitch: netlink: Actions may not be safe on all matching packets
[  319.487559][T18763] netlink: 'syz.1.3583': attribute type 46 has an invalid length.
[  319.523486][T18762] __nla_validate_parse: 1 callbacks suppressed
[  319.523499][T18762] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3586'.
[  319.820802][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3589'.
[  319.844873][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'.
[  320.298908][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3593'.
[  320.329905][T18795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3594'.
[  320.553439][T18803] lo speed is unknown, defaulting to 1000
[  320.795418][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3603'.
[  321.118936][T18845] xt_hashlimit: size too large, truncated to 1048576
[  321.216523][T18816] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  321.315822][T18839] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.361965][T18839] bridge_slave_0 (unregistering): left allmulticast mode
[  321.362031][T18839] bridge_slave_0 (unregistering): left promiscuous mode
[  321.362225][T18839] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.709788][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3610'.
[  322.210484][T18886] bond0: Caught tx_queue_len zero misconfig
[  322.231839][T18886] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3617'.
[  322.554316][T18898] ip_tables: iptables: counters copy to user failed while replacing table
[  322.920151][T18922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3628'.
[  323.220987][T18927] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3629'.
[  323.240559][T18929] netlink: 'syz.1.3632': attribute type 9 has an invalid length.
[  323.325671][T18939] vcan0: tx address claim with dest, not broadcast
[  323.938086][T18991] syz_tun: left promiscuous mode
[  323.938186][T18991] bridge0: port 3(syz_tun) entered disabled state
[  323.944163][T18991] bridge_slave_0: left allmulticast mode
[  323.944177][T18991] bridge_slave_0: left promiscuous mode
[  323.944266][T18991] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.141693][T18991] bridge_slave_1: left allmulticast mode
[  324.141706][T18991] bridge_slave_1: left promiscuous mode
[  324.141782][T18991] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.156479][T18991] bond6: (slave veth0_to_bond): Releasing active interface
[  324.170793][T18991] bond0: (slave bond_slave_0): Releasing backup interface
[  324.195851][T18991] bond0: (slave bond_slave_1): Releasing backup interface
[  324.213041][T18991] team0: Port device team_slave_0 removed
[  324.233870][T18991] team0: Port device team_slave_1 removed
[  324.234231][T18991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.234240][T18991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.248020][T18991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.248032][T18991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.250671][T18991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  324.351287][T18999] xt_CT: You must specify a L4 protocol and not use inversions on it
[  324.534264][T19015] ip_tables: iptables: counters copy to user failed while replacing table
[  324.896349][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.896368][    C1] bridge0: topology change detected, propagating
[  324.896632][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.896644][    C1] bridge0: topology change detected, propagating
[  324.919993][T19026] nbd1: detected capacity change from 0 to 63
[  324.932452][T19026] block nbd1: NBD_DISCONNECT
[  324.934081][T19026] block nbd1: Disconnected due to user request.
[  324.941879][T19026] block nbd1: shutting down sockets
[  324.955077][T19031] __nla_validate_parse: 8 callbacks suppressed
[  324.955087][T19031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3661'.
[  324.964555][   T34] audit: type=1107 audit(1791193553.586:8): pid=19025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  325.089805][T19034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3663'.
[  325.363981][T19057] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3669'.
[  326.068122][T19103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3676'.
[  326.178667][T19106] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  326.208986][T19108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3677'.
[  326.244851][T19110] openvswitch: netlink: Flow key attr not present in new flow.
[  326.262288][T19108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3677'.
[  326.403258][T19115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3677'.
[  326.701355][T19132] sctp: [Deprecated]: syz.0.3681 (pid 19132) Use of int in max_burst socket option.
[  326.701355][T19132] Use struct sctp_assoc_value instead
[  326.701874][T19132] sctp: [Deprecated]: syz.0.3681 (pid 19132) Use of struct sctp_assoc_value in delayed_ack socket option.
[  326.701874][T19132] Use struct sctp_sack_info instead
[  326.704886][T19132] sctp: [Deprecated]: syz.0.3681 (pid 19132) Use of int in max_burst socket option.
[  326.704886][T19132] Use struct sctp_assoc_value instead
[  327.208519][T19152] sctp: [Deprecated]: syz.0.3686 (pid 19152) Use of struct sctp_assoc_value in delayed_ack socket option.
[  327.208519][T19152] Use struct sctp_sack_info instead
[  327.208690][T19152] sctp: [Deprecated]: syz.0.3686 (pid 19152) Use of int in max_burst socket option deprecated.
[  327.208690][T19152] Use struct sctp_assoc_value instead
[  327.705681][T19180] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3691'.
[  328.373841][T19197] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3695'.
[  328.373987][T19197] 0: renamed from hsr0
[  328.393828][T19197] 0: entered allmulticast mode
[  328.393847][T19197] hsr_slave_0: entered allmulticast mode
[  328.393861][T19197] hsr_slave_1: entered allmulticast mode
[  328.410076][T19197] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  328.541208][T19205] nbd: must specify at least one socket
[  328.649534][T19210] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3699'.
[  330.000825][T19278] __nla_validate_parse: 6 callbacks suppressed
[  330.000845][T19278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3723'.
[  330.335691][T19290] netlink: 'syz.1.3724': attribute type 1 has an invalid length.
[  330.464173][T19290] bond14: entered promiscuous mode
[  330.466865][T19290] 8021q: adding VLAN 0 to HW filter on device bond14
[  330.474528][T19301] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0
[  330.842423][T19310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3732'.
[  330.944837][T19319] xt_hashlimit: overflow, rate too high: 0
[  331.018572][T19324] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3736'.
[  331.162815][T19332] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3735'.
[  331.390849][T19347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3740'.
[  331.482678][T19353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3741'.
[  331.677385][T19359] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3743'.
[  332.402446][T19373] sctp: [Deprecated]: syz.2.3749 (pid 19373) Use of struct sctp_assoc_value in delayed_ack socket option.
[  332.402446][T19373] Use struct sctp_sack_info instead
[  332.934236][T19381] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  332.947769][T19381] netlink: 'syz.1.3751': attribute type 1 has an invalid length.
[  332.975205][T19381] 8021q: adding VLAN 0 to HW filter on device bond15
[  332.997910][T19381] bond15: entered promiscuous mode
[  332.997933][T19381] bond15: entered allmulticast mode
[  333.695421][T19409] netlink: 'syz.1.3761': attribute type 2 has an invalid length.
[  333.739534][T19407] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3758'.
[  334.087152][T19429] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  334.087174][T19429] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  334.169126][T19433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3769'.
[  334.314861][T19439] dummy0: Caught tx_queue_len zero misconfig
[  334.400726][T19444] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3772'.
[  334.576719][T19451] netlink: 'syz.1.3775': attribute type 1 has an invalid length.
[  334.630924][T19451] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  335.234872][T19475] netlink: 'syz.0.3781': attribute type 3 has an invalid length.
[  335.986978][T19503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.468676][T19507] macvtap0: entered promiscuous mode
[  336.553014][T19509] __nla_validate_parse: 1 callbacks suppressed
[  336.553074][T19509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3790'.
[  336.608829][T19515] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3792'.
[  336.960757][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3796'.
[  336.998248][T19533] bond15: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  336.998539][T19533] bond15: (slave ip6tnl1): Error -95 calling set_mac_address
[  337.048964][T19533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3796'.
[  337.048980][T19533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3796'.
[  337.693494][T19560] erspan0: entered promiscuous mode
[  337.762996][T19554] erspan0: left promiscuous mode
[  338.204297][T19568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3803'.
[  338.204324][T19568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3803'.
[  338.299872][T19573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3804'.
[  338.424360][T19580] bridge0: port 1(vlan3) entered blocking state
[  338.424498][T19580] bridge0: port 1(vlan3) entered disabled state
[  338.424591][T19580] vlan3: entered allmulticast mode
[  338.424610][T19580] geneve0: entered allmulticast mode
[  338.451465][T19580] vlan3: entered promiscuous mode
[  338.451483][T19580] geneve0: entered promiscuous mode
[  338.575620][T19586] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3808'.
[  338.672440][T19594] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  338.752509][T19597] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3812'.
[  342.448539][T19725] syzkaller1: entered promiscuous mode
[  342.448557][T19725] syzkaller1: entered allmulticast mode
[  343.284791][T19735] __nla_validate_parse: 9 callbacks suppressed
[  343.284915][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3856'.
[  343.655182][T19755] syzkaller0: tun_chr_ioctl cmd 1074025673
[  343.915474][T19766] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3864'.
[  344.705414][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3869'.
[  344.883888][T19783] wg2: Caught tx_queue_len zero misconfig
[  344.946174][T19786] netlink: 440 bytes leftover after parsing attributes in process `syz.2.3869'.
[  345.041033][T19795] netlink: 'syz.0.3873': attribute type 21 has an invalid length.
[  345.253008][T19811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3879'.
[  345.268821][T19811] netlink: 'syz.2.3879': attribute type 5 has an invalid length.
[  345.268832][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3879'.
[  345.441425][T19825] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3883'.
[  345.697512][T19839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3886'.
[  345.736897][T19839] bond17: invalid NS target :: specified for addition
[  345.736915][T19839] bond17: option ns_ip6_target: invalid value (18446744073709551615)
[  345.739921][T19839] bond17 (unregistering): Released all slaves
[  346.148128][T19854] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3890'.
[  346.225816][T19864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3892'.
[  346.568570][T19883] netlink: 'syz.0.3898': attribute type 4 has an invalid length.
[  347.010516][T19895] xt_CT: No such helper "netbios-ns"
[  348.701678][T19970] syzkaller1: entered promiscuous mode
[  348.701696][T19970] syzkaller1: entered allmulticast mode
[  348.974881][T19979] __nla_validate_parse: 1 callbacks suppressed
[  348.974892][T19979] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3922'.
[  349.040038][T19993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3924'.
[  349.091185][T19997] netlink: 'syz.1.3925': attribute type 11 has an invalid length.
[  349.184598][T20002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3927'.
[  349.272833][T20012] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3926'.
[  349.306114][T20016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.389323][T20023] netlink: 'syz.1.3933': attribute type 2 has an invalid length.
[  349.791308][T20043] xt_CT: No such helper "netbios-ns"
[  350.192226][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3942'.
[  350.435298][T20074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3944'.
[  350.435348][T20074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3944'.
[  351.038585][T20107] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3951'.
[  351.247493][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3953'.
[  351.247786][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3953'.
[  351.903483][T20137] tipc: Resetting bearer <ib:syz_tun>
[  351.927596][T20137] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  351.933490][T20138] netlink: 'syz.1.3959': attribute type 1 has an invalid length.
[  351.990496][T20138] veth11: entered allmulticast mode
[  352.001903][T20138] bond17: (slave veth11): Enslaving as an active interface with a down link
[  352.012301][T20138] bond16: (slave veth0_to_bond): Releasing active interface
[  352.024560][T20138] bond17: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  352.494081][T20149] debugfs: '!' already exists in 'ieee80211'
[  353.012574][T20178] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  354.114262][T20235] netlink: 'syz.0.3983': attribute type 4 has an invalid length.
[  354.150785][T20235] pim6reg1: entered promiscuous mode
[  354.150804][T20235] pim6reg1: entered allmulticast mode
[  356.197015][T20315] __nla_validate_parse: 7 callbacks suppressed
[  356.197026][T20315] netlink: 83 bytes leftover after parsing attributes in process `syz.2.4005'.
[  356.346986][T20326] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4007'.
[  356.347137][T20325] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4007'.
[  356.601318][T20348] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4013'.
[  356.688157][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4014'.
[  356.874008][T20372] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4019'.
[  356.874102][T20372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4019'.
[  356.971482][T20376] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4021'.
[  356.972038][T20376] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4021'.
[  357.134144][T20383] netlink: NAT attribute has 8 unknown bytes
[  357.134213][T20383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.204208][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4024'.
[  358.352625][T20407] netlink: 'syz.0.4029': attribute type 5 has an invalid length.
[  358.584659][T20415] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  358.594848][T20415] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  359.203710][T20436] bond10 (unregistering): Released all slaves
[  359.596667][T20449] netlink: 'syz.0.4041': attribute type 6 has an invalid length.
[  360.210010][T20485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.190392][T20547] ip_tables: iptables: counters copy to user failed while replacing table
[  361.326752][T20556] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  361.730436][T20575] nbd: must specify at least one socket
[  361.861588][T20585] __nla_validate_parse: 15 callbacks suppressed
[  361.861604][T20585] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4086'.
[  361.862412][T20583] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4086'.
[  362.292877][T20597] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4093'.
[  362.340103][T20596] macvtap0: entered allmulticast mode
[  362.340120][T20596] veth0_macvtap: entered allmulticast mode
[  362.565668][T20607] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4097'.
[  362.589921][T20607] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4097'.
[  362.616895][T20607] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4097'.
[  362.620953][T20607] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4097'.
[  362.622580][T20607] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4097'.
[  362.623106][T20607] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4097'.
[  362.623849][T20607] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4097'.
[  362.730675][T20611] bond17: (slave veth0_to_bond): Releasing active interface
[  362.761723][T20611] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  363.764768][T20670] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  363.868952][T20676] bridge_slave_0: left allmulticast mode
[  363.868991][T20676] bridge_slave_0: left promiscuous mode
[  363.870548][T20676] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.431276][T20706] block nbd0: reconnected socket
[  364.431293][T20706] nbd: socks must be embedded in a SOCK_ITEM attr
[  364.489972][T16320] block nbd0: Receive control failed (result -32)
[  365.161327][T20724] openvswitch: netlink: Message has 8 unknown bytes.
[  365.162586][T20725] ip_tables: iptables: counters copy to user failed while replacing table
[  365.162714][T20724] ip_tables: iptables: counters copy to user failed while replacing table
[  365.528484][T20740] smc: removing ib device syz0
[  365.592408][T20740] smbdirect: ib_dev[syz0] removed
[  365.932319][T20747] syzkaller0: entered promiscuous mode
[  365.932337][T20747] syzkaller0: entered allmulticast mode
[  365.953121][T20747] TC_ACT_REPEAT abuse ?
[  367.282705][T20784] __nla_validate_parse: 17 callbacks suppressed
[  367.282721][T20784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4146'.
[  367.305429][T20781] netlink: 460 bytes leftover after parsing attributes in process `syz.0.4144'.
[  367.305449][T20781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4144'.
[  367.353375][T20787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4147'.
[  368.449407][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4154'.
[  368.607587][T20836] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4156'.
[  368.629824][T20823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4154'.
[  368.995267][T20849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.181380][T20855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.241096][T20854] tipc: Disabling bearer <eth:syzkaller0>
[  369.718724][T20861] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4161'.
[  369.740470][T20861] xt_l2tp: invalid flags combination: 0
[  369.904816][T20864] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4161'.
[  370.303410][T20882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4170'.
[  371.421897][T20907] nbd1: detected capacity change from 0 to 63
[  371.450945][T20907] block nbd0: NBD_DISCONNECT
[  371.450968][T20907] block nbd0: Send disconnect failed -32
[  371.450980][T20907] block nbd0: Send disconnect failed -32
[  371.450993][T20907] block nbd0: shutting down sockets
[  371.555361][T20908] rdma_rxe: rxe_newlink: failed to add netdevsim0
[  371.770652][T16320] block nbd1: Receive control failed (result -104)
[  372.214534][T20946] bridge7: entered promiscuous mode
[  372.214552][T20946] bridge7: entered allmulticast mode
[  372.520060][T20952] netlink: 'syz.0.4188': attribute type 2 has an invalid length.
[  372.520078][T20952] __nla_validate_parse: 93 callbacks suppressed
[  372.520086][T20952] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4188'.
[  372.708214][T20964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4192'.
[  373.072739][T20977] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4196'.
[  373.681672][T21011] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4202'.
[  373.991478][T21029] syzkaller0: entered promiscuous mode
[  373.991489][T21029] syzkaller0: entered allmulticast mode
[  374.520115][T21060] 
[  374.521184][T21060] ======================================================
[  374.523942][T21060] WARNING: possible circular locking dependency detected
[  374.526629][T21060] syzkaller #0 Not tainted
[  374.529076][T21060] ------------------------------------------------------
[  374.531774][T21060] syz.2.4217/21060 is trying to acquire lock:
[  374.534163][T21060] ffffffff8ed9cad0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x574/0x900
[  374.538301][T21060] 
[  374.538301][T21060] but task is already holding lock:
[  374.541107][T21060] ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x568/0x900
[  374.545149][T21060] 
[  374.545149][T21060] which lock already depends on the new lock.
[  374.545149][T21060] 
[  374.549130][T21060] 
[  374.549130][T21060] the existing dependency chain (in reverse order) is:
[  374.551803][T21060] 
[  374.551803][T21060] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  374.554679][T21060]        cpus_read_lock+0x42/0x160
[  374.556746][T21060]        static_key_slow_inc+0x12/0x30
[  374.558814][T21060]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  374.560949][T21060]        nbd_genl_foreach_sock+0x265/0x450
[  374.563210][T21060]        nbd_genl_reconfigure+0xbbb/0x1040
[  374.565305][T21060]        genl_family_rcv_msg_doit+0x233/0x340
[  374.567715][T21060]        genl_rcv_msg+0x614/0x7a0
[  374.569516][T21060]        netlink_rcv_skb+0x226/0x4a0
[  374.571356][T21060]        genl_rcv+0x28/0x40
[  374.573156][T21060]        netlink_unicast+0x7bd/0x940
[  374.574882][T21060]        netlink_sendmsg+0x813/0xb40
[  374.576778][T21060]        sock_sendmsg_nosec+0x13a/0x180
[  374.579124][T21060]        ____sys_sendmsg+0x54e/0x850
[  374.581161][T21060]        ___sys_sendmsg+0x2a5/0x360
[  374.582669][T21060]        __x64_sys_sendmsg+0x1b1/0x290
[  374.584375][T21060]        do_syscall_64+0x166/0x520
[  374.585967][T21060]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.587907][T21060] 
[  374.587907][T21060] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  374.590561][T21060]        __mutex_lock+0x19d/0x1550
[  374.592650][T21060]        nbd_queue_rq+0x373/0xff0
[  374.594678][T21060]        blk_mq_dispatch_rq_list+0x499/0x1990
[  374.597119][T21060]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  374.599873][T21060]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  374.602358][T21060]        blk_mq_run_work_fn+0x16c/0x300
[  374.604302][T21060]        process_scheduled_works+0xc3d/0x1630
[  374.606395][T21060]        worker_thread+0xa47/0xfb0
[  374.608455][T21060]        kthread+0x38b/0x480
[  374.610327][T21060]        ret_from_fork+0x514/0xb70
[  374.612276][T21060]        ret_from_fork_asm+0x1a/0x30
[  374.613984][T21060] 
[  374.613984][T21060] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  374.616249][T21060]        __mutex_lock+0x19d/0x1550
[  374.617799][T21060]        nbd_queue_rq+0xc1/0xff0
[  374.619382][T21060]        blk_mq_dispatch_rq_list+0x499/0x1990
[  374.621655][T21060]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  374.624344][T21060]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  374.626820][T21060]        blk_mq_run_work_fn+0x16c/0x300
[  374.628990][T21060]        process_scheduled_works+0xc3d/0x1630
[  374.631340][T21060]        worker_thread+0xa47/0xfb0
[  374.633324][T21060]        kthread+0x38b/0x480
[  374.635143][T21060]        ret_from_fork+0x514/0xb70
[  374.637147][T21060]        ret_from_fork_asm+0x1a/0x30
[  374.639223][T21060] 
[  374.639223][T21060] -> #4 (set->srcu){.+.+}-{0:0}:
[  374.641962][T21060]        __synchronize_srcu+0xc9/0x2f0
[  374.644072][T21060]        elevator_switch+0x1e8/0x7b0
[  374.646111][T21060]        elevator_change+0x2fa/0x480
[  374.648021][T21060]        elevator_set_default+0x375/0x440
[  374.649833][T21060]        blk_register_queue+0x3f3/0x4e0
[  374.651587][T21060]        __add_disk+0x6b8/0xdb0
[  374.653164][T21060]        add_disk_fwnode+0x100/0x3a0
[  374.654859][T21060]        nbd_dev_add+0x733/0xb60
[  374.656447][T21060]        nbd_init+0x168/0x1f0
[  374.657969][T21060]        do_one_initcall+0x250/0x870
[  374.659854][T21060]        do_initcall_level+0x10a/0x1a0
[  374.661594][T21060]        do_initcalls+0x59/0xa0
[  374.663109][T21060]        kernel_init_freeable+0x29d/0x3e0
[  374.664906][T21060]        kernel_init+0x22/0x1d0
[  374.666449][T21060]        ret_from_fork+0x514/0xb70
[  374.668100][T21060]        ret_from_fork_asm+0x1a/0x30
[  374.669769][T21060] 
[  374.669769][T21060] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  374.672225][T21060]        __mutex_lock+0x19d/0x1550
[  374.673837][T21060]        elevator_change+0x1af/0x480
[  374.675513][T21060]        elevator_set_none+0xb5/0x140
[  374.677174][T21060]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  374.679557][T21060]        nbd_start_device+0x189/0xb30
[  374.681571][T21060]        nbd_genl_connect+0x167d/0x1cd0
[  374.683769][T21060]        genl_family_rcv_msg_doit+0x233/0x340
[  374.686173][T21060]        genl_rcv_msg+0x614/0x7a0
[  374.687846][T21060]        netlink_rcv_skb+0x226/0x4a0
[  374.689546][T21060]        genl_rcv+0x28/0x40
[  374.690997][T21060]        netlink_unicast+0x7bd/0x940
[  374.692649][T21060]        netlink_sendmsg+0x813/0xb40
[  374.694326][T21060]        sock_sendmsg_nosec+0x13a/0x180
[  374.696085][T21060]        ____sys_sendmsg+0x54e/0x850
[  374.697755][T21060]        ___sys_sendmsg+0x2a5/0x360
[  374.699424][T21060]        __x64_sys_sendmsg+0x1b1/0x290
[  374.701142][T21060]        do_syscall_64+0x166/0x520
[  374.702772][T21060]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.704778][T21060] 
[  374.704778][T21060] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  374.707471][T21060]        blk_alloc_queue+0x544/0x690
[  374.709148][T21060]        __blk_mq_alloc_disk+0x194/0x390
[  374.710907][T21060]        nbd_dev_add+0x494/0xb60
[  374.712478][T21060]        nbd_init+0x168/0x1f0
[  374.713972][T21060]        do_one_initcall+0x250/0x870
[  374.715628][T21060]        do_initcall_level+0x10a/0x1a0
[  374.717350][T21060]        do_initcalls+0x59/0xa0
[  374.718904][T21060]        kernel_init_freeable+0x29d/0x3e0
[  374.720693][T21060]        kernel_init+0x22/0x1d0
[  374.722234][T21060]        ret_from_fork+0x514/0xb70
[  374.723851][T21060]        ret_from_fork_asm+0x1a/0x30
[  374.725725][T21060] 
[  374.725725][T21060] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  374.728291][T21060]        fs_reclaim_acquire+0x71/0x100
[  374.730412][T21060]        __kvmalloc_node_noprof+0x134/0x820
[  374.732685][T21060]        futex_hash_allocate+0x48f/0xe70
[  374.734851][T21060]        copy_process+0x2923/0x43e0
[  374.736876][T21060]        kernel_clone+0x2d7/0x940
[  374.738851][T21060]        __se_sys_clone3+0x33c/0x360
[  374.740920][T21060]        do_syscall_64+0x166/0x520
[  374.742916][T21060]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.745389][T21060] 
[  374.745389][T21060] -> #0 (cgroup_threadgroup_rwsem){++++}-{0:0}:
[  374.748575][T21060]        __lock_acquire+0x164c/0x2de0
[  374.750599][T21060]        lock_acquire+0x115/0x350
[  374.752559][T21060]        percpu_down_write+0x54/0x330
[  374.754641][T21060]        cgroup_procs_write_start+0x574/0x900
[  374.757009][T21060]        __cgroup1_procs_write+0xd8/0x3d0
[  374.759143][T21060]        cgroup_file_write+0x331/0x8f0
[  374.761249][T21060]        kernfs_fop_write_iter+0x3a4/0x540
[  374.763449][T21060]        vfs_write+0x612/0xba0
[  374.765308][T21060]        ksys_write+0x150/0x270
[  374.767228][T21060]        do_syscall_64+0x166/0x520
[  374.769199][T21060]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.771599][T21060] 
[  374.771599][T21060] other info that might help us debug this:
[  374.771599][T21060] 
[  374.775339][T21060] Chain exists of:
[  374.775339][T21060]   cgroup_threadgroup_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock
[  374.775339][T21060] 
[  374.780478][T21060]  Possible unsafe locking scenario:
[  374.780478][T21060] 
[  374.783134][T21060]        CPU0                    CPU1
[  374.784820][T21060]        ----                    ----
[  374.786529][T21060]   rlock(cpu_hotplug_lock);
[  374.788001][T21060]                                lock(&nsock->tx_lock);
[  374.790172][T21060]                                lock(cpu_hotplug_lock);
[  374.792389][T21060]   lock(cgroup_threadgroup_rwsem);
[  374.794060][T21060] 
[  374.794060][T21060]  *** DEADLOCK ***
[  374.794060][T21060] 
[  374.797045][T21060] locks held by syz.2.4217/21060: 5, last CPU#1:
[  374.799587][T21060]  #0: ffff88816d97e0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  374.803139][T21060]  #1: ffff888118818460 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  374.806590][T21060]  #2: ffff8881a8104880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  374.810311][T21060]  #3: ffffffff8ed9c760 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  374.814040][T21060]  #4: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x568/0x900
[  374.818080][T21060] 
[  374.818080][T21060] stack backtrace:
[  374.820372][T21060] CPU: 1 UID: 0 PID: 21060 Comm: syz.2.4217 Not tainted syzkaller #0 PREEMPT(full) 
[  374.824053][T21060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  374.827873][T21060] Call Trace:
[  374.829021][T21060]  <TASK>
[  374.830125][T21060]  dump_stack_lvl+0xe8/0x150
[  374.831638][T21060]  print_circular_bug+0x2e2/0x300
[  374.833291][T21060]  check_noncircular+0x12f/0x150
[  374.834866][T21060]  __lock_acquire+0x164c/0x2de0
[  374.836425][T21060]  ? __lock_acquire+0x747/0x2de0
[  374.838078][T21060]  ? __pfx___mutex_trylock_common+0x10/0x10
[  374.840458][T21060]  lock_acquire+0x115/0x350
[  374.842271][T21060]  ? cgroup_procs_write_start+0x574/0x900
[  374.844110][T21060]  percpu_down_write+0x54/0x330
[  374.845659][T21060]  ? cgroup_procs_write_start+0x574/0x900
[  374.847452][T21060]  cgroup_procs_write_start+0x574/0x900
[  374.849211][T21060]  ? __pfx_cgroup_procs_write_start+0x10/0x10
[  374.851143][T21060]  __cgroup1_procs_write+0xd8/0x3d0
[  374.852812][T21060]  ? __pfx___cgroup1_procs_write+0x10/0x10
[  374.854675][T21060]  ? kernfs_root+0x1c/0x230
[  374.856126][T21060]  ? kernfs_root+0x1c/0x230
[  374.857579][T21060]  ? kernfs_root+0x1ea/0x230
[  374.859063][T21060]  ? __pfx_cgroup1_procs_write+0x10/0x10
[  374.860845][T21060]  cgroup_file_write+0x331/0x8f0
[  374.862440][T21060]  ? __pfx_cgroup_file_write+0x10/0x10
[  374.864173][T21060]  ? __kmalloc_noprof+0x38c/0x720
[  374.866068][T21060]  ? __pfx_cgroup_file_write+0x10/0x10
[  374.867839][T21060]  kernfs_fop_write_iter+0x3a4/0x540
[  374.869543][T21060]  vfs_write+0x612/0xba0
[  374.870940][T21060]  ? __pfx_vfs_write+0x10/0x10
[  374.872495][T21060]  ? __fget_files+0x2a/0x420
[  374.874375][T21060]  ksys_write+0x150/0x270
[  374.876122][T21060]  ? __pfx_ksys_write+0x10/0x10
[  374.878093][T21060]  do_syscall_64+0x166/0x520
[  374.879965][T21060]  ? trace_irq_disable+0x3b/0x140
[  374.881611][T21060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.883478][T21060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.885303][T21060] RIP: 0033:0x7f22c5d9e159
[  374.886667][T21060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  374.892414][T21060] RSP: 002b:00007f22c6be4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  374.895074][T21060] RAX: ffffffffffffffda RBX: 00007f22c6025fa0 RCX: 00007f22c5d9e159
[  374.897577][T21060] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000003
[  374.900084][T21060] RBP: 00007f22c5e3506b R08: 0000000000000000 R09: 0000000000000000
[  374.902555][T21060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.905089][T21060] R13: 00007f22c6026038 R14: 00007f22c6025fa0 R15: 00007fff2d7ec518
[  374.907574][T21060]  </TASK>
[  378.659805][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
