last executing test programs:

1.44440463s ago: executing program 0 (id=2510):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x4080)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4)

1.342897043s ago: executing program 0 (id=2514):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

1.266901937s ago: executing program 0 (id=2517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000140)={&(0x7f00000000c0)="6414fc7d671afb086456ad", 0xb}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0xee)

1.162035996s ago: executing program 0 (id=2518):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

1.161206909s ago: executing program 2 (id=2519):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="f78d9ca38fff48fbbe52163448412ba809b150756bfc68992619a82eeea08e7d4118e01c14eca5f4fc45c0fbb8c4fb90f1434e0b81882a3ab12d124e08656c79e8265039f239b3e2f30c94fd41b6db1a3c9b6016ac7bc45db9ab83b74a7f6bbc6e40bc221b51d43fd737364d789acf0bebdaf35119254a69", 0x78}], 0x1}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)

1.09309325s ago: executing program 2 (id=2521):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r1, 0xf03, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)

1.022767606s ago: executing program 2 (id=2524):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
syz_emit_ethernet(0x2dd, &(0x7f00000020c0)={@local, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x2a7, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, [{0xe, 0x1, "00000000000000000800ee00"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x2, 0x4, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b"}, {0x21, 0x7, "fcf98a142ec1876de04ca4682fb87790a7855b4e6fa3b20519bbaa8a029cee00b8d3485efe68a356f542b043059ff05912fb0000000000"}, {0x0, 0xa, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf032"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65e81ed"}]}}}}}}, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r6, 0x0, &(0x7f0000000a80))
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r8, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)

537.043735ms ago: executing program 2 (id=2529):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000001200576326bd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="2000000004210000080029"], 0x2c}, 0x1, 0x0, 0x0, 0x80d0}, 0x20004000)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0)

448.576684ms ago: executing program 2 (id=2530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

353.240393ms ago: executing program 2 (id=2532):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x10000000, 0x0, 0x90}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001200)={0x0, 0x1c, &(0x7f0000001100)=[@in6={0xa, 0x4e24, 0xf7ff, @remote, 0x4}]}, &(0x7f0000001240)=0x10)

352.815148ms ago: executing program 1 (id=2533):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x20, r1, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

288.546557ms ago: executing program 0 (id=2534):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x1254d9, 0x4)
r6 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r7, 0x10c, 0x2, &(0x7f0000002180), &(0x7f00000021c0)=0x4)
sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xffff, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="08001efdff00f180", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x400c880)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000002c0)=0x200, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008000200"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10)
close(0x3)

288.111225ms ago: executing program 1 (id=2535):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10)

232.685323ms ago: executing program 1 (id=2536):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000180)=0x7ffffd, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c)

232.166528ms ago: executing program 1 (id=2537):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x1, 0x80000, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

163.057566ms ago: executing program 1 (id=2538):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)

83.32941ms ago: executing program 1 (id=2539):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffffa, 0x2, 0xc, 0x4, 0x5, 0x8e, 0xffffffff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 0 (id=2540):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448e1, &(0x7f0000000240)={0x4, 0xffbe, '\x00^F', 0x0, 0x1})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32259' (ED25519) to the list of known hosts.
syzkaller login: [   64.475357][ T5804] cgroup: Unknown subsys name 'net'
[   64.604875][ T5804] cgroup: Unknown subsys name 'cpuset'
[   64.609973][ T5804] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.671506][ T5804] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.654826][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   76.657352][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   76.962656][ T5848] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.251804][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   79.905189][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.931261][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.935863][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.949809][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.956564][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.957307][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.964749][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.967528][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.974211][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.977514][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.995896][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.064534][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.077148][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.091030][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.111177][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.480215][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   80.553702][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   80.729095][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   80.736188][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.741187][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.744219][ T5872] bridge_slave_0: entered allmulticast mode
[   80.748674][ T5872] bridge_slave_0: entered promiscuous mode
[   80.774451][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.777192][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.779871][ T5872] bridge_slave_1: entered allmulticast mode
[   80.783509][ T5872] bridge_slave_1: entered promiscuous mode
[   80.834217][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.837168][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.840259][ T5873] bridge_slave_0: entered allmulticast mode
[   80.844650][ T5873] bridge_slave_0: entered promiscuous mode
[   80.876486][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.882366][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.886182][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.889439][ T5873] bridge_slave_1: entered allmulticast mode
[   80.895456][ T5873] bridge_slave_1: entered promiscuous mode
[   80.909228][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.968735][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.005097][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.024825][ T5872] team0: Port device team_slave_0 added
[   81.027320][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.030174][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.035035][ T5879] bridge_slave_0: entered allmulticast mode
[   81.039288][ T5879] bridge_slave_0: entered promiscuous mode
[   81.059757][ T5872] team0: Port device team_slave_1 added
[   81.063821][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.067451][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.071367][ T5879] bridge_slave_1: entered allmulticast mode
[   81.076124][ T5879] bridge_slave_1: entered promiscuous mode
[   81.149516][ T5873] team0: Port device team_slave_0 added
[   81.155301][ T5873] team0: Port device team_slave_1 added
[   81.172388][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.175532][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.187053][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.196857][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.205651][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.225300][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.228822][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.243611][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.265641][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.268233][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.281716][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.311014][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.314545][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.327418][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.343319][ T5879] team0: Port device team_slave_0 added
[   81.348088][ T5879] team0: Port device team_slave_1 added
[   81.428883][ T5872] hsr_slave_0: entered promiscuous mode
[   81.432751][ T5872] hsr_slave_1: entered promiscuous mode
[   81.453941][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.457225][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.469407][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.498935][ T5873] hsr_slave_0: entered promiscuous mode
[   81.502906][ T5873] hsr_slave_1: entered promiscuous mode
[   81.506235][ T5873] debugfs: 'hsr0' already exists in 'hsr'
[   81.509042][ T5873] Cannot create hsr debugfs directory
[   81.514599][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.517801][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.531857][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.698451][ T5879] hsr_slave_0: entered promiscuous mode
[   81.701736][ T5879] hsr_slave_1: entered promiscuous mode
[   81.704348][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   81.706481][ T5879] Cannot create hsr debugfs directory
[   81.979590][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.010029][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.021336][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.041256][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.088545][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.095780][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.101199][ T5875] Bluetooth: hci1: command tx timeout
[   82.101374][ T5229] Bluetooth: hci0: command tx timeout
[   82.108010][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.129982][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.170765][ T5229] Bluetooth: hci2: command tx timeout
[   82.209169][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.219861][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.227730][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.239740][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.334429][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.400141][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   82.428055][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.442817][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.446324][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.475603][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.479086][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.499237][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   82.513229][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.536931][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.540146][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.563632][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.566637][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.586900][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   82.619278][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.622589][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.648124][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.651740][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.753903][ T5879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.868663][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.937746][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.970077][ T5872] veth0_vlan: entered promiscuous mode
[   82.996866][ T5872] veth1_vlan: entered promiscuous mode
[   83.038189][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.043106][ T5873] veth0_vlan: entered promiscuous mode
[   83.063849][ T5872] veth0_macvtap: entered promiscuous mode
[   83.077769][ T5873] veth1_vlan: entered promiscuous mode
[   83.084838][ T5872] veth1_macvtap: entered promiscuous mode
[   83.123716][ T5879] veth0_vlan: entered promiscuous mode
[   83.135829][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.145693][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.156799][ T5879] veth1_vlan: entered promiscuous mode
[   83.168962][ T5885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.176432][ T5873] veth0_macvtap: entered promiscuous mode
[   83.186232][ T5885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.194411][ T5873] veth1_macvtap: entered promiscuous mode
[   83.199810][ T5670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.204574][ T5670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.246171][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.274631][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.285480][ T5879] veth0_macvtap: entered promiscuous mode
[   83.309791][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.318632][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.327689][ T5879] veth1_macvtap: entered promiscuous mode
[   83.342601][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.346754][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.408470][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.424002][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.424393][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.427053][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.504113][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.509802][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.529403][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.530167][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.533101][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.539442][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.614561][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.618230][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.701909][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.705448][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.772760][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.785259][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.821889][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.824953][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.171419][ T5229] Bluetooth: hci1: command tx timeout
[   84.178363][ T5229] Bluetooth: hci0: command tx timeout
[   84.251572][ T5229] Bluetooth: hci2: command tx timeout
[   84.275301][ T5972] netlink: 'syz.0.26': attribute type 9 has an invalid length.
[   84.351008][ T5976] netlink: 'syz.1.27': attribute type 12 has an invalid length.
[   85.417332][ T6023] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.50'.
[   85.579340][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'.
[   85.586877][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'.
[   85.607498][ T6032] bridge0: port 3(vlan2) entered blocking state
[   85.610304][ T6032] bridge0: port 3(vlan2) entered disabled state
[   85.617761][ T6032] vlan2: entered allmulticast mode
[   85.626966][ T6032] bridge0: entered allmulticast mode
[   85.639551][ T6032] vlan2: left allmulticast mode
[   85.644010][ T6032] bridge0: left allmulticast mode
[   85.654582][ T6037] netlink: 'syz.1.57': attribute type 2 has an invalid length.
[   85.904959][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'.
[   86.029286][ T6054] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   86.215617][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[   86.251697][ T5229] Bluetooth: hci0: command tx timeout
[   86.254578][ T5229] Bluetooth: hci1: command tx timeout
[   86.330831][ T5875] Bluetooth: hci2: command tx timeout
[   86.472529][ T6073] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   86.607011][ T6077] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   86.671475][ T6077] warning: `syz.0.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.693383][ T6083] Zero length message leads to an empty skb
[   86.714309][ T6077] bridge_slave_0: left allmulticast mode
[   86.719123][ T6077] bridge_slave_0: left promiscuous mode
[   86.726651][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.771221][ T6077] bridge_slave_1: left allmulticast mode
[   86.773925][ T6077] bridge_slave_1: left promiscuous mode
[   86.776791][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.786102][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'.
[   86.817228][ T6077] bond0: (slave bond_slave_0): Releasing backup interface
[   86.834765][ T6089] netlink: 'syz.0.76': attribute type 10 has an invalid length.
[   86.873553][ T6077] bond0: (slave bond_slave_1): Releasing backup interface
[   86.881442][ T6092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.83'.
[   86.921477][ T6077] team0: Port device team_slave_0 removed
[   86.948261][ T6077] team0: Port device team_slave_1 removed
[   86.964973][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.970837][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.977620][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.984650][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.008284][ T6089] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   87.018606][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.029177][ T6089] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   87.046493][ T6077] syz.0.76 (6077) used greatest stack depth: 19864 bytes left
[   87.050277][ T6093] bridge0: entered promiscuous mode
[   87.054382][ T6093] macvtap1: entered allmulticast mode
[   87.057026][ T6093] bridge0: entered allmulticast mode
[   87.065376][ T6093] bridge0: port 3(macvtap1) entered blocking state
[   87.068753][ T6093] bridge0: port 3(macvtap1) entered disabled state
[   87.087561][ T6093] bridge0: left allmulticast mode
[   87.090262][ T6093] bridge0: left promiscuous mode
[   87.619004][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'.
[   87.632072][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'.
[   88.119855][ T6147] netlink: 'syz.2.109': attribute type 6 has an invalid length.
[   88.124056][ T6147] netlink: 176 bytes leftover after parsing attributes in process `syz.2.109'.
[   88.336239][ T5875] Bluetooth: hci1: command tx timeout
[   88.338981][ T5875] Bluetooth: hci0: command tx timeout
[   88.411495][ T5229] Bluetooth: hci2: command tx timeout
[   88.995646][ T6195] syz.0.132 uses obsolete (PF_INET,SOCK_PACKET)
[   88.999733][ T6195] syzkaller1: entered promiscuous mode
[   89.003852][ T6195] syzkaller1: entered allmulticast mode
[   89.416010][ T6208] "syz.1.138" (6208) uses obsolete ecb(arc4) skcipher
[   91.245544][ T6273] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.604411][ T6284] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   91.607429][ T5871] IPVS: starting estimator thread 0...
[   91.693399][ T6293] IPVS: using max 27 ests per chain, 64800 per kthread
[   91.753823][ T6302] Bluetooth: MGMT ver 1.23
[   92.025926][   T24] cfg80211: failed to load regulatory.db
[   92.086458][ T6325] __nla_validate_parse: 1 callbacks suppressed
[   92.086514][ T6325] netlink: 3 bytes leftover after parsing attributes in process `syz.1.187'.
[   92.100046][ T6325] batadv1: entered promiscuous mode
[   92.106653][ T6325] batadv1: entered allmulticast mode
[   92.288841][ T6325] netlink: 48 bytes leftover after parsing attributes in process `syz.1.187'.
[   93.431545][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[   93.436987][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[   93.461018][ T6368] ip6tnl1: entered promiscuous mode
[   93.464062][ T6368] ip6tnl1: entered allmulticast mode
[   93.853049][ T6378] netlink: 'syz.0.210': attribute type 1 has an invalid length.
[   94.030187][ T6386] tipc: Started in network mode
[   94.036048][ T6386] tipc: Node identity 5e396890beed, cluster identity 4711
[   94.051233][ T6386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.056090][ T6386] syzkaller0: entered promiscuous mode
[   94.059914][ T6386] syzkaller0: entered allmulticast mode
[   94.116131][ T6386] tipc: Resetting bearer <eth:syzkaller0>
[   94.141810][ T6385] tipc: Resetting bearer <eth:syzkaller0>
[   94.180098][ T6385] tipc: Disabling bearer <eth:syzkaller0>
[   94.356844][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'.
[   94.384781][ T6406] netlink: 92 bytes leftover after parsing attributes in process `syz.1.221'.
[   94.811193][ T6425] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   95.068099][ T6442] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   95.285719][ T6458] tipc: Started in network mode
[   95.287641][ T6458] tipc: Node identity 864a55b8c48a, cluster identity 4711
[   95.291844][ T6458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.295945][ T6458] syzkaller0: entered promiscuous mode
[   95.298558][ T6458] syzkaller0: entered allmulticast mode
[   95.323919][ T6458] tipc: Resetting bearer <eth:syzkaller0>
[   95.332876][ T6457] tipc: Resetting bearer <eth:syzkaller0>
[   95.341435][ T6457] tipc: Disabling bearer <eth:syzkaller0>
[   95.376219][ T6464] netlink: 'syz.0.250': attribute type 2 has an invalid length.
[   95.450090][ T6468] netlink: 'syz.2.254': attribute type 4 has an invalid length.
[   95.456616][ T6468] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.254'.
[   95.668352][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'.
[   95.806407][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'.
[   95.866933][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'.
[   96.019631][ T6503] netlink: 'syz.1.266': attribute type 19 has an invalid length.
[   96.103867][ T5922] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.108455][ T5922] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.113295][ T6503] netlink: 'syz.1.266': attribute type 19 has an invalid length.
[   96.121256][ T5922] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.137147][ T5922] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.207330][ T6512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.223180][ T6512] syzkaller0: entered promiscuous mode
[   96.225955][ T6512] syzkaller0: entered allmulticast mode
[   96.263765][ T6512] tipc: Resetting bearer <eth:syzkaller0>
[   96.272831][ T6511] tipc: Resetting bearer <eth:syzkaller0>
[   96.304391][ T6511] tipc: Disabling bearer <eth:syzkaller0>
[   96.962867][ T6561] netlink: 'syz.0.292': attribute type 1 has an invalid length.
[   97.018059][ T6561] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.066044][ T6561] bond1: (slave gretap1): making interface the new active one
[   97.080396][ T6561] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   97.240311][ T6578] geneve2: entered promiscuous mode
[   97.243160][ T6578] geneve2: entered allmulticast mode
[   97.444404][ T6561] syz.0.292 (6561) used greatest stack depth: 19848 bytes left
[   97.737511][ T6594] __nla_validate_parse: 6 callbacks suppressed
[   97.737531][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.306'.
[   97.751956][ T6594] netlink: 2 bytes leftover after parsing attributes in process `syz.2.306'.
[   97.903225][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'.
[   98.210790][ T6601] bridge_slave_1: left allmulticast mode
[   98.213539][ T6601] bridge_slave_1: left promiscuous mode
[   98.216511][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.230306][ T6601] bridge_slave_0: left allmulticast mode
[   98.240601][ T6601] bridge_slave_0: left promiscuous mode
[   98.243057][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.680968][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'.
[   98.685132][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'.
[   99.129815][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.319'.
[   99.244712][ T6633] delete_channel: no stack
[   99.878557][ T6665] netlink: 'syz.2.330': attribute type 9 has an invalid length.
[   99.974426][ T6669] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.332'.
[  100.118392][ T6673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.334'.
[  100.192130][ T6676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.212240][ T6676] batadv_slave_0: entered promiscuous mode
[  100.411350][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'.
[  100.439551][ T6685] team1: entered promiscuous mode
[  100.442704][ T6685] team1: entered allmulticast mode
[  101.051794][ T6719] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.079188][ T6721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.083452][ T6721] syzkaller0: entered promiscuous mode
[  101.085604][ T6721] syzkaller0: entered allmulticast mode
[  101.106905][ T6721] tipc: Resetting bearer <eth:syzkaller0>
[  101.112601][ T6720] tipc: Resetting bearer <eth:syzkaller0>
[  101.128994][ T6720] tipc: Disabling bearer <eth:syzkaller0>
[  101.152455][ T6719] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.237544][ T6719] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.322934][ T6719] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.430893][ T5670] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.446021][ T5670] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.485609][ T5670] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.491135][ T6739] netlink: 'syz.0.364': attribute type 3 has an invalid length.
[  101.495302][ T6739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.519302][ T5670] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.666201][ T6747] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.368'.
[  101.975553][ T6762] pim6reg: entered allmulticast mode
[  101.986100][ T6762] pim6reg: left allmulticast mode
[  102.823072][ T6803] __nla_validate_parse: 1 callbacks suppressed
[  102.823091][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'.
[  103.413968][ T6813] syz.0.392 (6813) used greatest stack depth: 18392 bytes left
[  103.779206][ T6836] netlink: 'syz.2.403': attribute type 10 has an invalid length.
[  103.783225][ T6836] netlink: 2 bytes leftover after parsing attributes in process `syz.2.403'.
[  103.787655][ T6836] team0: entered promiscuous mode
[  103.790293][ T6836] team_slave_0: entered promiscuous mode
[  103.798412][ T6836] team_slave_1: entered promiscuous mode
[  104.042874][ T6850] netlink: 'syz.2.409': attribute type 13 has an invalid length.
[  104.657508][ T6870] Bluetooth: MGMT ver 1.23
[  104.785742][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'.
[  104.807513][ T6859] Set syz1 is full, maxelem 6117 reached
[  104.941304][ T6880] netlink: 'syz.2.422': attribute type 10 has an invalid length.
[  104.953343][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'.
[  105.014102][ T6886] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.426'.
[  105.015533][ T6890] netlink: 'syz.1.427': attribute type 12 has an invalid length.
[  105.394493][ T6917] raw_sendmsg: syz.0.440 forgot to set AF_INET. Fix it!
[  105.450006][ T6925] vxcan1: entered allmulticast mode
[  106.073899][ T6954] netlink: 'syz.1.458': attribute type 1 has an invalid length.
[  106.077903][ T6954] netlink: 236 bytes leftover after parsing attributes in process `syz.1.458'.
[  106.229682][ T6962] netlink: 'syz.2.462': attribute type 1 has an invalid length.
[  106.305435][ T6962] bond1: (slave gretap1): making interface the new active one
[  106.312684][ T6962] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  106.689934][ T6990] netlink: 'syz.0.475': attribute type 3 has an invalid length.
[  107.104489][ T7023] netlink: 'syz.1.491': attribute type 1 has an invalid length.
[  107.400128][ T7041] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.413290][ T7041] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  107.567322][ T7046] tipc: Started in network mode
[  107.569421][ T7046] tipc: Node identity 62c3a9607483, cluster identity 4711
[  107.572744][ T7046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.576521][ T7046] syzkaller0: entered promiscuous mode
[  107.578635][ T7046] syzkaller0: entered allmulticast mode
[  107.584877][ T7046] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  107.596041][ T7046] tipc: Resetting bearer <eth:syzkaller0>
[  107.603694][ T7045] tipc: Resetting bearer <eth:syzkaller0>
[  107.617046][ T7045] tipc: Disabling bearer <eth:syzkaller0>
[  107.801015][ T7053] xt_policy: neither incoming nor outgoing policy selected
[  107.909621][ T7059] netlink: 48 bytes leftover after parsing attributes in process `syz.2.505'.
[  108.806289][ T7083] pimreg3: entered allmulticast mode
[  109.342276][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'.
[  109.385183][ T7111] netlink: 'syz.0.530': attribute type 2 has an invalid length.
[  110.504941][ T7131] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[  110.508860][ T7131] netlink: 224 bytes leftover after parsing attributes in process `syz.1.538'.
[  110.684513][ T7147] netlink: 176 bytes leftover after parsing attributes in process `syz.1.546'.
[  110.796405][ T7159] netlink: 2 bytes leftover after parsing attributes in process `syz.0.553'.
[  110.978183][ T7174] Illegal XDP return value 4294967274 on prog  (id 78) dev N/A, expect packet loss!
[  111.094715][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'.
[  111.098481][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'.
[  111.273651][ T7183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.561'.
[  112.599216][ T7264] ieee802154 phy0 wpan0: encryption failed: -22
[  112.784162][ T7272] netlink: 'syz.0.598': attribute type 1 has an invalid length.
[  113.872345][ T7352] netlink: 'syz.0.635': attribute type 4 has an invalid length.
[  113.959735][ T7358] netlink: 'syz.0.639': attribute type 4 has an invalid length.
[  114.019192][ T7361] netlink: 'syz.1.640': attribute type 1 has an invalid length.
[  114.081672][ T7364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.642'.
[  114.188683][ T7370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'.
[  114.209312][ T7370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'.
[  114.325286][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'.
[  114.431316][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'.
[  114.453332][ T7385] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.477742][ T7385] bond0: (slave rose0): Enslaving as an active interface with an up link
[  114.602478][ T7398] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.656'.
[  115.777787][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.669'.
[  115.784666][ T7442] netlink: 64 bytes leftover after parsing attributes in process `syz.2.668'.
[  115.830134][ T7446] netlink: 'syz.1.667': attribute type 1 has an invalid length.
[  115.835699][ T7446] netlink: 224 bytes leftover after parsing attributes in process `syz.1.667'.
[  117.074239][ T7502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.182427][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'.
[  117.862388][ T7543] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  118.484260][ T7581] netlink: 'syz.0.717': attribute type 1 has an invalid length.
[  119.916276][ T7635] netlink: 'syz.2.738': attribute type 1 has an invalid length.
[  119.920240][ T7635] __nla_validate_parse: 4 callbacks suppressed
[  119.920257][ T7635] netlink: 144 bytes leftover after parsing attributes in process `syz.2.738'.
[  119.930078][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'.
[  120.220073][ T7656] IPVS: stopping backup sync thread 7658 ...
[  120.223092][ T7658] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  120.387532][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'.
[  120.584394][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'.
[  120.716421][ T7702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.722592][ T7702] syzkaller0: entered promiscuous mode
[  120.724782][ T7702] syzkaller0: entered allmulticast mode
[  120.739817][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'.
[  120.773277][ T7702] tipc: Resetting bearer <eth:syzkaller0>
[  120.779011][ T7699] tipc: Resetting bearer <eth:syzkaller0>
[  120.790066][ T7699] tipc: Disabling bearer <eth:syzkaller0>
[  121.010273][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[  121.775385][ T7738] netlink: 'syz.1.772': attribute type 10 has an invalid length.
[  121.782406][ T7738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.772'.
[  121.786989][ T7738] dummy0: entered promiscuous mode
[  121.794882][ T7738] bridge0: port 3(dummy0) entered blocking state
[  121.799212][ T7738] bridge0: port 3(dummy0) entered disabled state
[  121.805048][ T7738] dummy0: entered allmulticast mode
[  121.810861][ T7738] bridge0: port 3(dummy0) entered blocking state
[  121.814142][ T7738] bridge0: port 3(dummy0) entered forwarding state
[  122.139216][ T7759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'.
[  122.153754][ T7759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'.
[  122.206880][ T7758] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  122.210363][   T24] IPVS: starting estimator thread 0...
[  122.302220][ T7764] IPVS: using max 52 ests per chain, 124800 per kthread
[  122.555095][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'.
[  123.863136][ T7843] tap0: tun_chr_ioctl cmd 2148553947
[  123.882314][ T7845] netlink: 'syz.2.816': attribute type 4 has an invalid length.
[  123.905349][ T7845] block nbd0: not configured, cannot reconfigure
[  125.029945][ T7898] bond0: (slave wlan1): Releasing backup interface
[  125.056969][ T7898] bond1: (slave gretap1): Releasing active interface
[  125.085637][ T7901] bridge0: entered promiscuous mode
[  125.711924][ T7937] syz_tun: entered promiscuous mode
[  125.714987][ T7937] vlan2: entered promiscuous mode
[  125.984455][ T7957] openvswitch: netlink: Multiple metadata blocks provided
[  126.110244][ T7968] netlink: 'syz.1.868': attribute type 13 has an invalid length.
[  126.117520][ T7968] netlink: 'syz.1.868': attribute type 17 has an invalid length.
[  126.228925][ T7968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.415346][ T7984] lo speed is unknown, defaulting to 1000
[  126.419781][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.433592][ T7984] lo speed is unknown, defaulting to 1000
[  126.438612][ T7984] lo speed is unknown, defaulting to 1000
[  126.462514][ T7984] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  126.489109][ T7984] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  126.491614][ T7987] __nla_validate_parse: 10 callbacks suppressed
[  126.491628][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'.
[  126.552787][ T7984] lo speed is unknown, defaulting to 1000
[  126.556324][ T7984] lo speed is unknown, defaulting to 1000
[  126.574005][ T7984] lo speed is unknown, defaulting to 1000
[  126.585834][ T7984] lo speed is unknown, defaulting to 1000
[  126.907940][ T8010] lo speed is unknown, defaulting to 1000
[  126.941715][ T8014] netlink: 192 bytes leftover after parsing attributes in process `syz.0.887'.
[  128.443776][ T8047] lo speed is unknown, defaulting to 1000
[  129.118692][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.2.925'.
[  129.250974][ T8103] netlink: 32 bytes leftover after parsing attributes in process `syz.2.925'.
[  129.506845][ T8127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  129.694641][ T8138] netlink: 76 bytes leftover after parsing attributes in process `syz.0.937'.
[  129.880292][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'.
[  129.972392][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'.
[  130.047251][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'.
[  131.115939][ T8209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.346349][ T8223] netlink: 96 bytes leftover after parsing attributes in process `syz.0.976'.
[  131.457101][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[  131.597437][ T8239] __nla_validate_parse: 1 callbacks suppressed
[  131.597456][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  131.643772][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.986'.
[  131.657852][ T8243] IPv6: Can't replace route, no match found
[  131.994543][ T8261] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  132.178169][ T8272] netlink: 80 bytes leftover after parsing attributes in process `syz.1.999'.
[  132.353009][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  132.359820][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  132.402476][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  132.526625][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'.
[  132.848612][ T8309] sctp: [Deprecated]: syz.1.1011 (pid 8309) Use of int in maxseg socket option.
[  132.848612][ T8309] Use struct sctp_assoc_value instead
[  133.065458][ T8313] netlink: 'syz.1.1014': attribute type 1 has an invalid length.
[  133.068663][ T8313] netlink: 'syz.1.1014': attribute type 2 has an invalid length.
[  133.074058][ T8313] netlink: 'syz.1.1014': attribute type 1 has an invalid length.
[  133.077894][ T8313] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.1014'.
[  133.896119][ T8359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.906241][ T8359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.909825][ T8373] netlink: 'syz.0.1039': attribute type 11 has an invalid length.
[  133.917132][ T8359] bond0 (unregistering): Released all slaves
[  133.969443][ T8375] bridge0: port 1(bridge_slave_1) entered blocking state
[  133.976107][ T8375] bridge0: port 1(bridge_slave_1) entered disabled state
[  133.980032][ T8375] bridge_slave_1: entered allmulticast mode
[  133.994850][ T8375] bridge_slave_1: entered promiscuous mode
[  133.999930][ T8375] bridge0: port 1(bridge_slave_1) entered blocking state
[  134.003295][ T8375] bridge0: port 1(bridge_slave_1) entered forwarding state
[  134.083034][ T8380] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  134.728129][ T8417] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1057'.
[  135.120123][ T8435] netlink: 'syz.0.1060': attribute type 21 has an invalid length.
[  135.130613][ T8435] netlink: 'syz.0.1060': attribute type 4 has an invalid length.
[  135.134416][ T8435] netlink: 14453 bytes leftover after parsing attributes in process `syz.0.1060'.
[  135.930313][ T8466] ip6gretap0: entered promiscuous mode
[  135.937342][ T8466] macsec1: entered allmulticast mode
[  135.939981][ T8466] ip6gretap0: entered allmulticast mode
[  135.954448][ T8466] ip6gretap0: left allmulticast mode
[  135.957061][ T8466] ip6gretap0: left promiscuous mode
[  136.447247][ T8491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.458355][ T8491] syzkaller0: entered promiscuous mode
[  136.467736][ T8491] syzkaller0: entered allmulticast mode
[  136.485396][ T8497] netlink: 'syz.0.1081': attribute type 2 has an invalid length.
[  136.527493][ T8491] tipc: Resetting bearer <eth:syzkaller0>
[  136.540129][ T8490] tipc: Resetting bearer <eth:syzkaller0>
[  136.593277][ T8490] tipc: Disabling bearer <eth:syzkaller0>
[  137.245157][ T8531] IPVS: persistence engine module ip_vs_pe_ not found
[  138.096251][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  138.099359][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  138.381186][ T8587] syzkaller1: entered promiscuous mode
[  138.383878][ T8587] syzkaller1: entered allmulticast mode
[  138.416666][ T8589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1121'.
[  138.864006][ T8626] netlink: 'syz.0.1136': attribute type 10 has an invalid length.
[  138.874156][ T8626] team0: Cannot enslave team device to itself
[  138.905496][ T8625] lo speed is unknown, defaulting to 1000
[  139.090214][ T8633] lo speed is unknown, defaulting to 1000
[  139.398353][ T8648] netlink: 'syz.0.1144': attribute type 7 has an invalid length.
[  139.417950][ T5923] IPVS: starting estimator thread 0...
[  139.520121][ T8654] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.530418][ T8650] IPVS: using max 52 ests per chain, 124800 per kthread
[  139.570166][ T8656] netlink: 'syz.1.1145': attribute type 10 has an invalid length.
[  139.598270][ T8656] 8021q: adding VLAN 0 to HW filter on device team0
[  139.614172][ T8656] bond0: (slave team0): Enslaving as an active interface with an up link
[  139.703130][ T8659] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1148'.
[  139.708502][ T8659] ip6gretap0: entered promiscuous mode
[  139.714396][ T8659] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1148'.
[  139.768525][ T8666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1150'.
[  139.833797][ T8663] syzkaller0: entered promiscuous mode
[  139.836651][ T8663] syzkaller0: entered allmulticast mode
[  141.784615][ T5922] IPVS: stop unused estimator thread 0...
[  141.909745][ T8695] netlink: 'syz.2.1162': attribute type 1 has an invalid length.
[  141.966856][ T8695] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.989706][ T8701] netlink: 'syz.1.1163': attribute type 13 has an invalid length.
[  141.992721][ T8700] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.993827][ T8701] netlink: 'syz.1.1163': attribute type 17 has an invalid length.
[  141.996736][ T8700] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  142.006275][ T8700] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  142.032899][ T8701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.069084][ T8695] veth5: entered promiscuous mode
[  142.081371][ T8695] bond2: (slave veth5): Enslaving as an active interface with a down link
[  142.109739][ T8701] lo speed is unknown, defaulting to 1000
[  142.148415][ T8695] erspan0: entered allmulticast mode
[  142.163869][ T8695] bond2: (slave erspan0): making interface the new active one
[  142.168933][ T8695] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  142.225649][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.373943][ T8701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.433095][ T8711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1165'.
[  142.896506][ T8733] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1175'.
[  142.946002][ T8737] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1177'.
[  143.568962][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1187'.
[  143.864103][ T8764] bond0: (slave team0): Releasing backup interface
[  143.937742][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1191'.
[  143.959818][ T8764] team0 (unregistering): Port device team_slave_0 removed
[  144.022908][ T8764] team0 (unregistering): Port device team_slave_1 removed
[  144.256400][ T8787] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1194'.
[  144.481817][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'.
[  144.626487][ T8809] netlink: 'syz.2.1201': attribute type 10 has an invalid length.
[  144.645099][ T8809] dummy0: entered promiscuous mode
[  144.648591][ T8809] team0: Port device dummy0 added
[  145.601338][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'.
[  145.621431][ T8872] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  145.668046][ T8872] team1: entered promiscuous mode
[  145.681945][ T8872] team1: entered allmulticast mode
[  145.705380][ T8875] lo speed is unknown, defaulting to 1000
[  145.934580][ T8888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1231'.
[  146.126990][ T8905] netlink: 'syz.2.1238': attribute type 5 has an invalid length.
[  146.504754][ T8922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.596931][ T8926] netlink: 'syz.0.1248': attribute type 1 has an invalid length.
[  146.602984][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'.
[  146.697561][ T8930] netlink: 'syz.0.1250': attribute type 21 has an invalid length.
[  146.701753][ T8930] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1250'.
[  146.753061][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'.
[  146.773951][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.774100][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'.
[  146.778942][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.787800][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.793022][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  147.629771][ T8991] bridge0: entered promiscuous mode
[  147.635804][ T8991] bridge0: left promiscuous mode
[  147.967264][ T9008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.975351][ T9008] syzkaller0: entered promiscuous mode
[  147.978282][ T9008] syzkaller0: entered allmulticast mode
[  148.001535][ T9008] tipc: Resetting bearer <eth:syzkaller0>
[  148.008359][ T9007] tipc: Resetting bearer <eth:syzkaller0>
[  148.026483][ T9007] tipc: Disabling bearer <eth:syzkaller0>
[  148.114787][ T9010] delete_channel: no stack
[  148.901405][ T9047] __nla_validate_parse: 4 callbacks suppressed
[  148.901425][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'.
[  149.923593][ T9091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.928430][ T9091] syzkaller0: entered promiscuous mode
[  149.932079][ T9091] syzkaller0: entered allmulticast mode
[  149.954790][ T9091] tipc: Resetting bearer <eth:syzkaller0>
[  149.963462][ T9087] tipc: Resetting bearer <eth:syzkaller0>
[  149.977584][ T9087] tipc: Disabling bearer <eth:syzkaller0>
[  150.124481][ T9101] pim6reg1: entered promiscuous mode
[  150.127163][ T9101] pim6reg1: entered allmulticast mode
[  150.373324][ T9112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.377471][ T9112] syzkaller0: entered promiscuous mode
[  150.380111][ T9112] syzkaller0: entered allmulticast mode
[  150.396792][ T9112] tipc: Resetting bearer <eth:syzkaller0>
[  150.405540][ T9110] tipc: Resetting bearer <eth:syzkaller0>
[  150.420746][ T9110] tipc: Disabling bearer <eth:syzkaller0>
[  151.325680][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1366'.
[  151.334671][ T9174] bridge0: port 1(bridge_slave_1) entered disabled state
[  151.683802][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'.
[  151.806462][ T9199] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  152.033444][ T9215] netlink: 'syz.2.1380': attribute type 29 has an invalid length.
[  152.044301][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'.
[  152.958064][ T9276] netlink: 'syz.0.1400': attribute type 30 has an invalid length.
[  152.963730][ T9276] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  152.968736][ T9276] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  153.219756][ T9295] netlink: 'syz.2.1406': attribute type 1 has an invalid length.
[  153.798829][ T9293] team1: left promiscuous mode
[  153.807417][ T9293] team1: left allmulticast mode
[  153.854590][ T5885] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.871035][ T5885] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.882658][ T5885] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.895797][ T5885] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.923767][ T5885] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.928306][ T5885] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.943235][ T5885] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.954335][ T5885] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.250826][ T9322] nbd0: detected capacity change from 0 to 875674160
[  154.259650][   T57] block nbd0: Receive control failed (result -32)
[  154.265641][ T9193] block nbd0: Send control failed (result -32)
[  154.268901][ T9193] block nbd0: Request send failed, requeueing
[  154.280327][   T61] block nbd0: Dead connection, failed to find a fallback
[  154.286461][   T61] block nbd0: shutting down sockets
[  154.286799][ T9331] netlink: 'syz.1.1417': attribute type 12 has an invalid length.
[  154.289522][   T61] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.299405][   T61] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.305009][ T9193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.311693][ T9193] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.317538][ T9193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.322641][ T9193] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.326995][ T9193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.333169][ T9193] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.337093][ T9193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.342540][ T9193] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.346685][ T9193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.351562][ T9193] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.355437][ T9193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.362104][ T9193] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.366621][ T9193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.371988][ T9193] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.375864][ T9193] ldm_validate_partition_table(): Disk read failed.
[  154.379285][ T9193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.384156][ T9193] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.388028][ T9193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.397101][ T9193] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.403025][ T9193] Dev nbd0: unable to read RDB block 0
[  154.406669][ T9193]  nbd0: unable to read partition table
[  154.417308][ T9193] ldm_validate_partition_table(): Disk read failed.
[  154.423721][ T9193] Dev nbd0: unable to read RDB block 0
[  154.430305][ T9193]  nbd0: unable to read partition table
[  154.534037][ T9337] syz_tun: entered allmulticast mode
[  154.549236][ T9339] netlink: 'syz.2.1424': attribute type 1 has an invalid length.
[  154.553357][ T9339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1424'.
[  154.558035][ T9337] dvmrp1: entered allmulticast mode
[  154.570333][ T9334] syz_tun: left allmulticast mode
[  154.704523][ T9349] GUP no longer grows the stack in syz.2.1428 (9349): 200000006000-20000000a000 (200000005000)
[  154.709139][ T9349] CPU: 0 UID: 0 PID: 9349 Comm: syz.2.1428 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  154.709156][ T9349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.709162][ T9349] Call Trace:
[  154.709177][ T9349]  <TASK>
[  154.709217][ T9349]  dump_stack_lvl+0x189/0x250
[  154.709239][ T9349]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.709251][ T9349]  ? __pfx__printk+0x10/0x10
[  154.709264][ T9349]  ? find_vma+0xe7/0x160
[  154.709287][ T9349]  __get_user_pages+0x24d0/0x2ce0
[  154.709297][ T9349]  ? __lock_acquire+0xab9/0xd20
[  154.709328][ T9349]  ? __gup_longterm_locked+0xc68/0x1660
[  154.709343][ T9349]  __gup_longterm_locked+0xde9/0x1660
[  154.709358][ T9349]  ? try_grab_folio_fast+0x1be/0x4f0
[  154.709376][ T9349]  ? gup_fast_fallback+0x195f/0x2010
[  154.709395][ T9349]  gup_fast_fallback+0x1e6a/0x2010
[  154.709426][ T9349]  ? __pfx_gup_fast_fallback+0x10/0x10
[  154.709437][ T9349]  ? __mutex_lock+0x335/0x1360
[  154.709454][ T9349]  ? futex_unqueue+0x22/0x240
[  154.709466][ T9349]  ? futex_unqueue+0x22/0x240
[  154.709475][ T9349]  ? futex_unqueue+0x22/0x240
[  154.709484][ T9349]  ? is_valid_gup_args+0x11f/0x200
[  154.709496][ T9349]  ? get_user_pages_fast+0x4d/0xb0
[  154.709509][ T9349]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  154.709525][ T9349]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  154.709539][ T9349]  ? wait_for_space+0x24d/0x2d0
[  154.709554][ T9349]  iov_iter_get_pages2+0x5e/0xa0
[  154.709567][ T9349]  __se_sys_vmsplice+0x548/0x10d0
[  154.709592][ T9349]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  154.709606][ T9349]  ? __pfx_futex_wait+0x10/0x10
[  154.709626][ T9349]  ? __lock_acquire+0xab9/0xd20
[  154.709659][ T9349]  ? do_pipe2+0xf7/0x170
[  154.709675][ T9349]  ? rcu_is_watching+0x15/0xb0
[  154.709688][ T9349]  ? do_syscall_64+0xbe/0x3b0
[  154.709704][ T9349]  do_syscall_64+0xfa/0x3b0
[  154.709716][ T9349]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.709728][ T9349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.709737][ T9349]  ? exc_page_fault+0x9f/0xf0
[  154.709750][ T9349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.709759][ T9349] RIP: 0033:0x7f7a8558ebe9
[  154.709769][ T9349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.709777][ T9349] RSP: 002b:00007f7a864b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  154.709789][ T9349] RAX: ffffffffffffffda RBX: 00007f7a857b5fa0 RCX: 00007f7a8558ebe9
[  154.709795][ T9349] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  154.709801][ T9349] RBP: 00007f7a85611e19 R08: 0000000000000000 R09: 0000000000000000
[  154.709807][ T9349] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  154.709813][ T9349] R13: 00007f7a857b6038 R14: 00007f7a857b5fa0 R15: 00007ffecbbbf558
[  154.709830][ T9349]  </TASK>
[  155.095338][ T9366] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.098639][ T9366] syzkaller0: entered promiscuous mode
[  155.105204][ T9366] syzkaller0: entered allmulticast mode
[  155.114310][ T9366] tipc: Resetting bearer <eth:syzkaller0>
[  155.116909][ T9366] syzkaller0: tun_net_xmit 90
[  155.121982][ T9365] tipc: Resetting bearer <eth:syzkaller0>
[  155.136175][ T9365] tipc: Disabling bearer <eth:syzkaller0>
[  155.285489][ T9371] lo speed is unknown, defaulting to 1000
[  155.430276][   T33] audit: type=1107 audit(1755370687.173:2): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  155.823230][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'.
[  155.867563][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'.
[  156.507650][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  156.516184][ T9436] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1464'.
[  156.521509][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  156.795011][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'.
[  156.799571][ T9454] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  156.805168][ T9454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.868072][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'.
[  157.540039][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'.
[  157.880246][ T9503] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  158.533793][ T9524] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  158.662748][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1509'.
[  159.044303][ T9557] tipc: Failed to remove unknown binding: 66,1,1/0:1427131368/1427131370
[  159.047991][ T9557] tipc: Failed to remove unknown binding: 66,1,1/0:1427131368/1427131370
[  159.826307][ T9601] bridge3: the hash_elasticity option has been deprecated and is always 16
[  159.832935][ T9601] bridge3: entered allmulticast mode
[  159.968173][ T9615] netlink: 'syz.2.1544': attribute type 5 has an invalid length.
[  160.109584][ T9623] __nla_validate_parse: 2 callbacks suppressed
[  160.109604][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'.
[  160.466434][ T9639] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  161.348681][ T9676] netlink: 'syz.1.1574': attribute type 1 has an invalid length.
[  161.430486][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1576'.
[  161.439956][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1576'.
[  161.487386][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1576'.
[  161.491190][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1576'.
[  161.592380][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1576'.
[  161.596590][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1576'.
[  161.673880][ T9701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.676748][ T9703] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1586'.
[  161.743394][ T9707] sch_fq: defrate 0 ignored.
[  161.920327][ T9727] netlink: 'syz.2.1598': attribute type 1 has an invalid length.
[  161.923813][ T9727] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1598'.
[  161.931568][ T9727] netlink: 'syz.2.1598': attribute type 1 has an invalid length.
[  161.936851][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'.
[  161.940888][ T9727] netlink: 'syz.2.1598': attribute type 2 has an invalid length.
[  164.109209][ T9804] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  164.537834][ T9828] sctp: [Deprecated]: syz.2.1644 (pid 9828) Use of int in max_burst socket option.
[  164.537834][ T9828] Use struct sctp_assoc_value instead
[  164.754566][ T9840] netlink: 'syz.0.1650': attribute type 3 has an invalid length.
[  165.451034][ T5229] Bluetooth: hci2: command tx timeout
[  165.526492][ T9887] __nla_validate_parse: 6 callbacks suppressed
[  165.526505][ T9887] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1673'.
[  165.776738][ T9895] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  166.260886][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'.
[  166.273310][ T9910] geneve2: entered promiscuous mode
[  166.498431][ T9926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1691'.
[  166.573971][ T9934] netlink: 4492 bytes leftover after parsing attributes in process `syz.0.1694'.
[  166.621848][ T5922] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  166.888694][ T9957] netlink: 'syz.0.1705': attribute type 30 has an invalid length.
[  167.032710][ T9962] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  167.137283][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'.
[  167.142225][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'.
[  167.146384][ T9966] netlink: 'syz.2.1709': attribute type 18 has an invalid length.
[  167.286338][ T9974] netlink: 'syz.1.1713': attribute type 3 has an invalid length.
[  167.294875][ T9974] netlink: 'syz.1.1713': attribute type 3 has an invalid length.
[  167.346980][ T9975] syzkaller0: entered promiscuous mode
[  167.349718][ T9975] syzkaller0: entered allmulticast mode
[  167.413072][ T9964] netlink: 'syz.0.1708': attribute type 1 has an invalid length.
[  167.416975][ T9964] netlink: 'syz.0.1708': attribute type 4 has an invalid length.
[  167.422139][ T9964] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1708'.
[  167.427683][ T9964] netlink: 'syz.0.1708': attribute type 1 has an invalid length.
[  167.435044][ T9964] netlink: 'syz.0.1708': attribute type 4 has an invalid length.
[  167.438630][ T9964] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1708'.
[  167.578054][ T9986] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1718'.
[  167.582366][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1718'.
[  167.948728][T10012] lo speed is unknown, defaulting to 1000
[  168.009434][T10017] netlink: 'syz.0.1733': attribute type 74 has an invalid length.
[  168.337017][T10032] vlan0: entered promiscuous mode
[  168.770878][T10067] netlink: 'syz.0.1756': attribute type 4 has an invalid length.
[  170.698828][T10183] __nla_validate_parse: 5 callbacks suppressed
[  170.698846][T10183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1801'.
[  170.706738][T10183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1801'.
[  170.718742][T10183] gretap0: entered promiscuous mode
[  170.724312][T10183] gretap0: left promiscuous mode
[  171.217381][T10220] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1815'.
[  171.361105][T10225] block nbd1: server does not support multiple connections per device.
[  171.366739][T10225] block nbd1: shutting down sockets
[  171.440451][T10236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1823'.
[  171.445828][T10236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1823'.
[  171.449284][T10236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1823'.
[  171.457424][T10236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1823'.
[  172.163081][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'.
[  172.240536][T10311] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1860'.
[  172.256361][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'.
[  172.347975][T10320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.353970][T10318] syzkaller1: entered promiscuous mode
[  172.356731][T10318] syzkaller1: entered allmulticast mode
[  172.558153][T10338] validate_nla: 1 callbacks suppressed
[  172.558184][T10338] netlink: 'syz.2.1872': attribute type 29 has an invalid length.
[  173.606115][T10363] lo speed is unknown, defaulting to 1000
[  174.870972][T10447] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  174.875556][T10447] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  175.087559][T10407] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  175.096314][T10407] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  175.129759][T10407] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  175.136605][T10407] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  175.441980][T10480] syzkaller1: entered promiscuous mode
[  175.444749][T10480] syzkaller1: entered allmulticast mode
[  176.106844][T10521] Unsupported ieee802154 address type: 0
[  176.127018][T10524] __nla_validate_parse: 6 callbacks suppressed
[  176.127068][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'.
[  176.135288][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'.
[  176.758436][T10578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1964'.
[  176.802594][T10584] netlink: 'syz.1.1967': attribute type 7 has an invalid length.
[  176.805662][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'.
[  176.855436][T10590] netlink: 'syz.1.1970': attribute type 1 has an invalid length.
[  176.859255][T10590] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1970'.
[  176.864926][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'.
[  177.110204][T10612] netlink: 'syz.2.1980': attribute type 2 has an invalid length.
[  177.542846][T10615] erspan0: left allmulticast mode
[  177.664683][T10639] syzkaller1: entered promiscuous mode
[  177.667660][T10639] syzkaller1: entered allmulticast mode
[  177.839302][T10644] lo speed is unknown, defaulting to 1000
[  178.147681][T10664] netlink: 'syz.0.2003': attribute type 1 has an invalid length.
[  178.436736][T10677] netlink: 'syz.0.2009': attribute type 1 has an invalid length.
[  178.585425][T10679] syzkaller0: entered promiscuous mode
[  178.587859][T10679] syzkaller0: entered allmulticast mode
[  179.994527][T10687] smc: net device bond0 applied user defined pnetid SYZ2
[  180.232350][T10709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.241985][T10709] syzkaller0: entered promiscuous mode
[  180.244700][T10709] syzkaller0: entered allmulticast mode
[  180.278837][T10709] tipc: Resetting bearer <eth:syzkaller0>
[  180.287292][T10706] tipc: Resetting bearer <eth:syzkaller0>
[  180.375245][T10706] tipc: Disabling bearer <eth:syzkaller0>
[  180.840153][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'.
[  181.433926][T10737] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2033'.
[  181.438336][T10737] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2033'.
[  181.444663][T10737] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2033'.
[  181.523972][T10738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2033'.
[  182.449093][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'.
[  182.459239][T10749] netlink: 'syz.1.2037': attribute type 7 has an invalid length.
[  182.468193][T10749] netlink: 'syz.1.2037': attribute type 8 has an invalid length.
[  182.475893][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'.
[  182.904071][T10785] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  182.912867][T10785] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  183.048781][T10799] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  183.173458][T10808] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2060'.
[  183.215635][T10807] netlink: del zone limit has 4 unknown bytes
[  183.323557][T10819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2065'.
[  183.545596][T10844] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  183.619199][T10852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2078'.
[  183.866817][T10876] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2088'.
[  184.167095][T10891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.882222][T10919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.887422][T10919] syzkaller0: MTU too low for tipc bearer
[  184.889906][T10919] tipc: Disabling bearer <eth:syzkaller0>
[  185.456720][T10943] netlink: 'syz.1.2118': attribute type 15 has an invalid length.
[  185.529432][T10950] netlink: del zone limit has 4 unknown bytes
[  185.686431][T10967] openvswitch: netlink: IP tunnel dst address not specified
[  186.110352][T10992] netlink: 'syz.1.2139': attribute type 1 has an invalid length.
[  186.198342][T11005] bond0: (slave gretap0): Error: Device type is different from other slaves
[  186.284302][T11011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.288296][T11011] syzkaller0: entered promiscuous mode
[  186.293533][T11011] syzkaller0: entered allmulticast mode
[  186.312702][T11011] tipc: Resetting bearer <eth:syzkaller0>
[  186.327396][T11011] tipc: Resetting bearer <eth:syzkaller0>
[  186.344289][T11011] tipc: Disabling bearer <eth:syzkaller0>
[  186.580965][T11038] __nla_validate_parse: 6 callbacks suppressed
[  186.581018][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'.
[  186.642109][T11042] ip6gre1: entered allmulticast mode
[  186.647449][T11044] netlink: 'syz.1.2163': attribute type 15 has an invalid length.
[  186.987795][T11057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.255126][T11070] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2175'.
[  187.258729][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2175'.
[  187.262585][T11070] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2175'.
[  187.266035][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2175'.
[  187.269799][T11070] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2175'.
[  187.713581][T11096] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2188'.
[  187.968734][T11112] sctp: [Deprecated]: syz.0.2195 (pid 11112) Use of int in maxseg socket option.
[  187.968734][T11112] Use struct sctp_assoc_value instead
[  187.984356][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2196'.
[  188.127380][T11124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2201'.
[  188.331617][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2201'.
[  188.342650][T11130] veth1_macvtap: left promiscuous mode
[  188.695009][T11161] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  188.698911][T11161] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  188.717571][T11161] ip6gre1: left allmulticast mode
[  188.958439][T11173] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  189.784159][T11216] ieee802154 phy0 wpan0: encryption failed: -22
[  190.270340][T11242] tipc: Enabled bearer <udp:syz0>, priority 10
[  191.082669][T11297] netlink: 'syz.2.2274': attribute type 10 has an invalid length.
[  191.383447][   T10] tipc: Node number set to 373336416
[  191.945049][T11347] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  192.556319][T11387] netlink: 'syz.1.2303': attribute type 1 has an invalid length.
[  192.617573][T11387] bond1: entered promiscuous mode
[  192.623350][T11387] 8021q: adding VLAN 0 to HW filter on device bond1
[  192.658509][T11394] bond1: (slave bridge5): making interface the new active one
[  192.671520][T11394] bridge5: entered promiscuous mode
[  192.676570][T11394] bond1: (slave bridge5): Enslaving as an active interface with an up link
[  192.736233][T11397] nbd2: detected capacity change from 0 to 63
[  192.747003][T11401] block nbd2: NBD_DISCONNECT
[  192.749869][T11401] block nbd2: Disconnected due to user request.
[  192.768341][T11403] blk_print_req_error: 24 callbacks suppressed
[  192.768405][T11403] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.775268][T11401] block nbd2: shutting down sockets
[  192.777731][T11403] buffer_io_error: 23 callbacks suppressed
[  192.777746][T11403] Buffer I/O error on dev nbd2, logical block 1, async page read
[  192.788289][T11403] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.793453][T11403] Buffer I/O error on dev nbd2, logical block 2, async page read
[  192.798393][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.798668][ T5306] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.802137][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  192.812036][ T5306] Buffer I/O error on dev nbd2, logical block 3, async page read
[  192.818494][T11403] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.839232][T11403] Buffer I/O error on dev nbd2, logical block 0, async page read
[  192.846793][T11403] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.858974][T11403] Buffer I/O error on dev nbd2, logical block 1, async page read
[  192.870914][T11409] __nla_validate_parse: 12 callbacks suppressed
[  192.870930][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2311'.
[  192.876966][T11403] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.888936][T11403] Buffer I/O error on dev nbd2, logical block 2, async page read
[  192.897909][T11403] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.902679][T11403] Buffer I/O error on dev nbd2, logical block 3, async page read
[  192.906463][T11403] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.912849][T11403] Buffer I/O error on dev nbd2, logical block 0, async page read
[  192.918211][T11403] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.922389][T11403] Buffer I/O error on dev nbd2, logical block 1, async page read
[  192.933429][T11403] ldm_validate_partition_table(): Disk read failed.
[  192.937093][T11403] Dev nbd2: unable to read RDB block 0
[  192.939847][T11413] vxcan2: entered promiscuous mode
[  192.947825][T11403]  nbd2: unable to read partition table
[  192.958151][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'.
[  192.963017][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'.
[  192.977987][T11403] ldm_validate_partition_table(): Disk read failed.
[  192.996702][T11403] Dev nbd2: unable to read RDB block 0
[  193.016881][T11403]  nbd2: unable to read partition table
[  193.030318][T11420] pimreg: entered allmulticast mode
[  193.067182][T11420] pimreg: left allmulticast mode
[  193.332302][T11430] IPVS: Scheduler module ip_vs_sip not found
[  193.425333][T11437] vlan3: entered promiscuous mode
[  193.428094][T11437] vlan3: entered allmulticast mode
[  193.431329][T11437] hsr_slave_1: entered allmulticast mode
[  193.464328][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2323'.
[  193.791094][T11454] netlink: 'syz.1.2331': attribute type 1 has an invalid length.
[  193.798846][T11454] netlink: 'syz.1.2331': attribute type 4 has an invalid length.
[  193.814380][T11454] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2331'.
[  193.879028][T11460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2334'.
[  193.885658][T11460] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  194.156933][T11478] netlink: 'syz.0.2342': attribute type 1 has an invalid length.
[  194.211982][T11478] bond3: (slave bridge3): making interface the new active one
[  194.216448][T11478] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  194.772746][T11515] syzkaller1: entered promiscuous mode
[  194.775841][T11515] syzkaller1: entered allmulticast mode
[  194.908505][T11525] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2366'.
[  195.134778][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2377'.
[  195.235165][T11559] netlink: 'syz.0.2379': attribute type 7 has an invalid length.
[  196.015083][T11600] netlink: 'syz.1.2383': attribute type 29 has an invalid length.
[  196.018940][T11600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2383'.
[  196.023409][T11600] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  196.126967][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2386'.
[  196.818183][T11658] : renamed from bond_slave_0 (while UP)
[  196.848695][T11660] netlink: 'syz.0.2406': attribute type 1 has an invalid length.
[  196.855035][T11660] netlink: 'syz.0.2406': attribute type 1 has an invalid length.
[  196.998995][T11668] netlink: 'syz.2.2409': attribute type 6 has an invalid length.
[  197.002732][T11668] IPv6: NLM_F_CREATE should be specified when creating new route
[  197.113728][T11677] netlink: 'syz.2.2413': attribute type 21 has an invalid length.
[  197.132144][T11677] netlink: 'syz.2.2413': attribute type 4 has an invalid length.
[  197.138179][T11677] netlink: 'syz.2.2413': attribute type 3 has an invalid length.
[  197.184804][T11682] netlink: 'syz.2.2416': attribute type 3 has an invalid length.
[  197.287080][T11689] siw: device registration error -23
[  197.879480][T11721] vlan0: entered allmulticast mode
[  197.885902][T11721] bridge0: entered allmulticast mode
[  197.888900][T11721] bridge6: port 1(vlan0) entered blocking state
[  197.892920][T11721] bridge6: port 1(vlan0) entered disabled state
[  197.898232][T11721] vlan0: entered promiscuous mode
[  197.940387][T11721] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  198.447667][T11740] __nla_validate_parse: 9 callbacks suppressed
[  198.447685][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'.
[  198.456699][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2442'.
[  198.483349][T11740] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2442'.
[  198.833264][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'.
[  198.858922][T11764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.864698][T11764] syzkaller0: entered promiscuous mode
[  198.867501][T11764] syzkaller0: entered allmulticast mode
[  198.889964][T11764] tipc: Resetting bearer <eth:syzkaller0>
[  198.900275][T11763] tipc: Resetting bearer <eth:syzkaller0>
[  198.916585][T11763] tipc: Disabling bearer <eth:syzkaller0>
[  199.505244][T11788] tipc: Cannot configure node identity twice
[  199.543511][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  199.667914][T11794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2467'.
[  199.791166][T11796] bridge0: port 3(dummy0) entered disabled state
[  199.811754][T11796] dummy0 (unregistering): left allmulticast mode
[  199.814916][T11796] dummy0 (unregistering): left promiscuous mode
[  199.818060][T11796] bridge0: port 3(dummy0) entered disabled state
[  199.877535][T11800] bridge_slave_1: left allmulticast mode
[  199.881015][T11800] bridge_slave_1: left promiscuous mode
[  199.891356][T11800] bridge0: port 1(bridge_slave_1) entered disabled state
[  199.899983][T11800] bond3: (slave bridge3): Releasing active interface
[  199.926923][T11800] vlan0: left promiscuous mode
[  199.933323][T11800] bridge6: port 1(vlan0) entered disabled state
[  199.972528][T11802] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  200.097697][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'.
[  200.243916][T11823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2480'.
[  200.317719][T11826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.330341][T11826] tipc: Resetting bearer <eth:syzkaller0>
[  200.341513][T11825] tipc: Disabling bearer <eth:syzkaller0>
[  200.639293][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'.
[  200.956982][T11851] bond2: (slave erspan0): Releasing active interface
[  200.973887][T11851] dummy0: left promiscuous mode
[  200.987827][T11851] team0: Port device dummy0 removed
[  201.001835][T11851] team_slave_0: left promiscuous mode
[  201.021675][T11851] team0: Port device team_slave_0 removed
[  201.027276][T11851] team_slave_1: left promiscuous mode
[  201.050215][T11851] team0: Port device team_slave_1 removed
[  201.056935][T11851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.060425][T11851] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.067466][T11851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.072435][T11851] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.082492][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2489'.
[  201.095163][T11851] bond1: (slave gretap1): Releasing active interface
[  201.106753][T11851] bond2: (slave veth5): Releasing active interface
[  201.207867][T11859] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  201.245321][T11859] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  201.326367][T11865] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2499'.
[  202.134860][T11914] netlink: 'syz.1.2523': attribute type 32 has an invalid length.
[  202.721765][T11934] netlink: 'syz.2.2530': attribute type 11 has an invalid length.
[  202.965076][T11951] openvswitch: netlink: IP tunnel dst address not specified
[  203.081007][T11955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.084307][T11955] syzkaller0: entered promiscuous mode
[  203.086467][T11955] syzkaller0: entered allmulticast mode
[  203.117285][T11955] tipc: Resetting bearer <eth:syzkaller0>
[  203.122404][T11954] tipc: Resetting bearer <eth:syzkaller0>
[  203.141432][T11954] tipc: Disabling bearer <eth:syzkaller0>
Connection to localhost closed by remote host.
[  210.440251][ T5885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.445234][ T5885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.509406][ T5885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.514135][ T5885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.591408][ T5885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.596073][ T5885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.657266][ T5885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.662045][ T5885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.817837][ T5885] bridge_slave_1: left allmulticast mode
[  210.830925][ T5885] bridge_slave_1: left promiscuous mode
[  210.834905][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.853391][ T5885] bridge_slave_0: left allmulticast mode
[  210.855986][ T5885] bridge_slave_0: left promiscuous mode
[  210.858729][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.584765][ T5885] bond1 (unregistering): (slave bridge5): Releasing backup interface
[  211.588828][ T5885] bridge5 (unregistering): left promiscuous mode
[  211.787141][ T5885] bond0 (unregistering): (slave 77): Releasing backup interface
[  211.796843][ T5885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.802013][ T5885] bond0 (unregistering): Released all slaves
[  211.929661][ T5885] bond1 (unregistering): Released all slaves
[  212.024799][ T5885] tipc: Left network mode
[  212.295203][ T5885] hsr_slave_0: left promiscuous mode
[  212.298749][ T5885] hsr_slave_1: left promiscuous mode
[  212.306098][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.310885][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.314480][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.322230][ T5885] veth1_macvtap: left promiscuous mode
[  212.325508][ T5885] veth0_macvtap: left promiscuous mode
[  212.328350][ T5885] veth1_vlan: left promiscuous mode
[  212.333328][ T5885] veth0_vlan: left promiscuous mode
[  213.480016][ T5885] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
18:59:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffc90003f27101 RCX=09f515bd2eeff900 RDX=ffffffff90408501
RSI=ffffffff8172c195 RDI=ffffffff8e139ee0 RBP=dffffc0000000000 RSP=ffffc90003f27010
R8 =ffffc90003f271a7 R9 =0000000000000000 R10=ffffc90003f27198 R11=fffff520007e4e35
R12=ffffc90003f274d8 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffffffff8172c195
RIP=ffffffff819d6c34 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffca57b4e68 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=73616c632f737973 2f002f74656e2f73 XMM03=0000000000000000 0000000000000073
XMM04=7373616c632f7379 732f002f74656e2f XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffffffffffff RCX=ffff88811d1d9cc0 RDX=ffff888112fa3640
RSI=ffffffffffffffff RDI=ffffffffffffffff RBP=ffffc90003f572f0 RSP=ffffc90003f57120
R8 =ffff88811d1d9cc0 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000
R12=0000000000000001 R13=dffffc0000000000 R14=ffffffffffffffff R15=0000000000000003
RIP=ffffffff8b721c64 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00100
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00100
FS =0000 0000000000000000 ffffffff 00c00100
GS =0000 ffff8881a3c1c000 ffffffff 00c00100
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f475527e108 CR3=00000001084e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
