last executing test programs:

2m35.245405769s ago: executing program 1 (id=5188):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r2, 0x0, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, 0x0, 0x4084)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

2m35.170198783s ago: executing program 1 (id=5191):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000000085000000720000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1)

2m34.939289878s ago: executing program 1 (id=5200):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})

2m34.699063889s ago: executing program 1 (id=5207):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newlink={0x64, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}, @IFLA_GTP_LOCAL6={0x14, 0x8, @mcast1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x64}}, 0x0)

2m34.695583052s ago: executing program 1 (id=5210):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m34.53775781s ago: executing program 1 (id=5212):
connect$bt_sco(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='rxrpc_tx_ack\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'hsr0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000002"], 0x48)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4)
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000840)=ANY=[], 0xd8)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x40)
sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40800}, 0x8891)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

2m19.508800967s ago: executing program 32 (id=5212):
connect$bt_sco(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='rxrpc_tx_ack\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'hsr0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000002"], 0x48)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4)
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000840)=ANY=[], 0xd8)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x40)
sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40800}, 0x8891)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

1.028280976s ago: executing program 0 (id=8845):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20)

980.534663ms ago: executing program 0 (id=8848):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff"], 0x90)

958.505942ms ago: executing program 0 (id=8850):
bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x21, 0x1, 0x39, 0x3, 0x30004, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50)

889.654882ms ago: executing program 3 (id=8851):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, 0x0, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}], 0x58}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0)
unshare(0x22020400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

889.317612ms ago: executing program 0 (id=8853):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

829.523389ms ago: executing program 0 (id=8855):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000000340))

768.572421ms ago: executing program 0 (id=8856):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000)
read(r0, &(0x7f0000002340)=""/232, 0xe8)

767.344512ms ago: executing program 3 (id=8858):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

708.667084ms ago: executing program 3 (id=8859):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000f00)={{}, 0x3, 0x858, 0x32a})

708.480575ms ago: executing program 3 (id=8860):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0)

636.123993ms ago: executing program 3 (id=8861):
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}}], 0x1, 0x44000)
socket$isdn(0x22, 0x2, 0x10)
close(0x3)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
accept(r2, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

631.448463ms ago: executing program 3 (id=8862):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x10000000}]}, 0x94)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="8d6e5008", 0x4}], 0x1}, 0x4000)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)
socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080)
r5 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e23, @private=0xa010101}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x4c002)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b70f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900ac9a3acf60ee50b99e1eb37c2f1b208ebda5ff16aa6567c816a99d3386860c07306197c07f1eed4341ef9fb718024006cfeb0c4a748e5e2020302231089c018cd730debf4aba8e211c913dbe78ea4e420190a3ff6feaba8d342bcbf4e240d92120898ba93d733dd15844f90d952dadd105ac5faf57dd"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc014}, 0x80)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmmsg$inet6(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="23e689f0dc211825e7aac360f5fd696d0000e3439e8a479d2c7d8ca5959acbb77a46084c58d1fe", 0x27}, {&(0x7f0000000240)="d648454e1d0f676801181e4308a23f3fbbacc7ae08f055e759cf8df1468b3a5b24a99382d75a946982a693d131c1795aeac79c22673c42e5e0b1c8a514c0fb3608ab237fae578a13a43745816d281dbe3ffd5ffe0b", 0x55}, {&(0x7f00000002c0)="3e5ba1ff30bbec18703966a1694ae4236a1d034ed5bbdb6fa79b408227043a5c7f37d5caf4b981b373706f1558089cb6ff9c136d496ba1eb68875bc614cca7018abfa187", 0x44}], 0x3}}], 0x1, 0x20040804)

270.174196ms ago: executing program 2 (id=8867):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)=ANY=[], 0x310)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000040)=0xffffffff, 0x4)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, 0x140f, 0x200, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xa)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(r6, &(0x7f0000002d00)=[{{&(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000340)="a40c43e534eff505185110073e64e58a7b7627a55ebcaaa2aa6c2b078ef27525ea1f66cd09f498fac4a83bf804b43d726d6bc447352c2a30f05aa467407b9c144aa95e98c8eaebe84bd47e1940a62dc004734404b678e947c15f185a69d2908861f780112b27686a81f7dcc59e901857ba07ee2334297727ae792a2cf5af2059c751358066087bc84581b645b83c4cbdfe41842351adef7e7b", 0x99}, {&(0x7f0000000400)="d4ca33464db36d8ad68029c3391cb833e4546897b6d2b81d618f3b46c4272ee676dbc99b2676af3216bc613258673f58f2b9b43f02ca632a1d69c53182473d8f0fe85db0303f0a9ea672b06d2feaff07dc41104fd5b9ad1ca8a2d848565ff8ac0808d70b00c4a713ab25279213fbdf2fd97df36ec383188ba5a190c648ec7aac817cb45faeb6c7960fd073be1286671c8eec9b6b4a8bf09b1b4ed46f0385071de99bb5a5ac5bd8bdef08", 0xaa}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f00000004c0)="e41092149a5fdb1d4514722a895d06464f680c941c5198f3356c5dac4801ed13a990a99615ca18cb91bd269c1894f36060cf96187e808697a01c937d3dda19a53dbb33c88b3b792eeffedebd64febc6b5920d4a7a0db9483541e3709d008a3c013e4000bb49aeca44da3655ad2ec41d7dcda89404aa508fde5465f40d62109fe5eb35f5a78b5e98f84d5d8ce99bf964a45ea3ac81364111b9a91222bd5d5f86a477b6b9f159f527f838be30864fd6391984f967b4bd09550aff5b16c00d51744d346e25ec347609c9b77885fdc9dc4c1faee8ea0e11163f4e26171e66258ab6bda04340dd460a3e58aca610172e7e59d2fd7cc2bc3d758a527e7514f0a2789", 0xff}, {&(0x7f0000000700)="aecd6d50ca68ba6cc791d70a7b538d0f37fadf092d7a35cb977c74d4d5ec3e252332e2fbcacffda2a7ed22b1c32f71c7125f7cacd90e746ca208fcd4b990375ec5174a913faa5577494e6bc28e31e87a8879641b9d354e6a98359813522312fa2d4ab603633feda077fab573930ab58dd6dc6fb975e4ca12fd82d2c30e31c9ef97846d36303ef7d5b163ee543b7bb6240edc90db06cc04699db3285f5760f0b74205de802fdd5cf2b82fabd3f2999307171ca27bda3e4c05", 0xb8}], 0x5, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}, {{&(0x7f0000000880)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f00000008c0)="5e550e70f7873a8c1a017bf5297b0f81c4f2ff0b121c5be0b2b555e6bc3c955f60ef4faddfc39c863e3cce62f946d22ccb", 0x31}, {&(0x7f0000000900)="ad201034ad04a0d2b7fc21a3d7c6d5b6f6c81880efe0465e4b7dc2e391a7d406ef5568ef14f20486d6346f92b04a1c638748f17ca991fe03b4682d07e4e4355f0c482da2fbdbf17a6a13d2960adb9f2a5f99c19a3538e7c0a47fee24a2102f8d9dffc8e64c48505b7ba4ac094d2c0844b1779b48", 0x74}, {&(0x7f0000000980)="22f409582bf54d0dc53665e74c783634c297113e5489d41be305c959b1fc28c61bf122e2f6981ca502ed26bb0df5b60375eca9977e44f1d84426ded38c5f912319cd74c0f124bba913f2bb91336b0fcb98ae085b589d68e265b928868aac1f2ce27d754743de06f79e74ef28b83d506840", 0x71}], 0x4, &(0x7f0000000a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000000b00)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000000b40)="f82d0f79f2a72b8f8764836ce729887846768735114fbfd418d4acae3cc969", 0x1f}], 0x1}}], 0x3, 0x801)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000100000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x4)

256.060397ms ago: executing program 2 (id=8868):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='syzkaller\x00', 0xd, 0x0, 0x0, 0xc1000, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x8}, 0x94)

160.636033ms ago: executing program 2 (id=8869):
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

86.98108ms ago: executing program 2 (id=8870):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000003a00000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000))

86.705654ms ago: executing program 2 (id=8871):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)

0s ago: executing program 2 (id=8872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xe328, 0x2}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c001}, 0x0)

kernel console output (not intermixed with test programs):

3] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3729'.
[  229.685376][T14509] netlink: 'syz.2.3752': attribute type 9 has an invalid length.
[  229.687852][T14509] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3752'.
[  229.947638][T14526] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.3756'.
[  230.021268][T14528] syzkaller1: entered promiscuous mode
[  230.023509][T14528] syzkaller1: entered allmulticast mode
[  230.556982][T14551] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3768'.
[  230.572792][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'.
[  230.689148][T14555] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  230.866229][T14557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  230.883670][T14570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3774'.
[  230.927278][T14569] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  230.933097][T14569] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  230.944268][T14569] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len
[  231.394086][T14596] siw: device registration error -23
[  231.545487][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3789'.
[  231.774370][T14618] netlink: 'syz.2.3796': attribute type 10 has an invalid length.
[  231.778606][T14618] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  231.820668][T14622] netlink: 'syz.1.3798': attribute type 1 has an invalid length.
[  232.047375][T14640] netlink: 'syz.0.3806': attribute type 15 has an invalid length.
[  232.274485][T14662] __nla_validate_parse: 1 callbacks suppressed
[  232.274506][T14662] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3813'.
[  232.466351][T14675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3819'.
[  232.469936][T14675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3819'.
[  232.477026][T14675] ip6gretap0: entered promiscuous mode
[  232.481405][T14675] syz_tun: entered promiscuous mode
[  232.483583][T14675] debugfs: 'hsr0' already exists in 'hsr'
[  232.485441][T14675] Cannot create hsr debugfs directory
[  232.487532][T14675] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  232.491129][T14675] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  233.627221][T14768] netlink: 'syz.2.3864': attribute type 3 has an invalid length.
[  233.627277][T14766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3863'.
[  233.661652][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3865'.
[  233.668296][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3865'.
[  233.838717][T14786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3873'.
[  234.081137][T14807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.086699][T14807] syzkaller0: entered promiscuous mode
[  234.094190][T14807] syzkaller0: entered allmulticast mode
[  234.114097][T14812] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3886'.
[  234.117725][T14812] netem: invalid attributes len -16
[  234.120216][T14812] netem: change failed
[  234.131342][T14807] tipc: Resetting bearer <eth:syzkaller0>
[  234.202316][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3888'.
[  234.207101][T14816] netlink: 620 bytes leftover after parsing attributes in process `syz.1.3888'.
[  234.486027][T14840] wg1 speed is unknown, defaulting to 1000
[  234.496872][T14840] vxcan1 speed is unknown, defaulting to 1000
[  234.840194][T14867] chnl_net:caif_netlink_parms(): no params data found
[  234.866635][T14866] bond3: (slave erspan0): Releasing active interface
[  234.875424][T14866] ip6gretap1: entered promiscuous mode
[  234.893665][T14866] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  235.032537][T14866] netlink: 'syz.2.3912': attribute type 10 has an invalid length.
[  235.036544][T14866] bond0: (slave wlan1): Opening slave failed
[  235.074709][T14866] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  235.090200][T14866] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  235.147139][ T5314] tipc: Node number set to 396765919
[  236.118877][T14933] syzkaller1: entered promiscuous mode
[  236.121434][T14933] syzkaller1: entered allmulticast mode
[  236.546811][T14958] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.704692][T14966] netlink: 'syz.1.3957': attribute type 15 has an invalid length.
[  236.838585][T14968] nbd1: detected capacity change from 0 to 127
[  236.843891][T12799] block nbd1: Send control failed (result -32)
[  236.845592][   T55] block nbd1: Receive control failed (result -104)
[  236.846834][T12799] block nbd1: Request send failed, requeueing
[  236.865624][T14979] syzkaller1: entered promiscuous mode
[  236.867390][T14979] syzkaller1: entered allmulticast mode
[  236.874095][T14974] syzkaller1: left promiscuous mode
[  236.876170][T14974] syzkaller1: left allmulticast mode
[  236.923019][   T60] block nbd1: Dead connection, failed to find a fallback
[  236.926006][   T60] block nbd1: shutting down sockets
[  236.927720][   T60] blk_print_req_error: 138 callbacks suppressed
[  236.927739][   T60] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  236.935456][   T60] buffer_io_error: 138 callbacks suppressed
[  236.935466][   T60] Buffer I/O error on dev nbd1, logical block 3, async page read
[  236.955900][T14985] team0: Refused to change device type
[  236.961988][T14983] netlink: 'syz.1.3964': attribute type 14 has an invalid length.
[  236.965321][T14983] netlink: 'syz.1.3964': attribute type 13 has an invalid length.
[  237.517711][T15012] netlink: 'syz.1.3977': attribute type 15 has an invalid length.
[  237.736286][T15022] netlink: 'syz.1.3981': attribute type 83 has an invalid length.
[  237.766398][T15022] wg1 speed is unknown, defaulting to 1000
[  237.771630][T15022] vxcan1 speed is unknown, defaulting to 1000
[  238.007725][T15025] netlink: 'syz.2.3982': attribute type 5 has an invalid length.
[  238.259586][T15037] __nla_validate_parse: 12 callbacks suppressed
[  238.259601][T15037] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.3988'.
[  238.773393][    C1] vcan0: j1939_tp_rxtimer: 0xffff888113265400: rx timeout, send abort
[  238.777485][    C1] vcan0: j1939_tp_rxtimer: 0xffff888113265c00: rx timeout, send abort
[  239.276904][    C1] vcan0: j1939_tp_rxtimer: 0xffff888113265400: abort rx timeout. Force session deactivation
[  239.281480][    C1] vcan0: j1939_tp_rxtimer: 0xffff888113265c00: abort rx timeout. Force session deactivation
[  240.143166][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  240.146220][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  240.149592][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  240.151972][   T60] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  240.154878][   T60] Buffer I/O error on dev nbd1, logical block 2, async page read
[  240.157776][   T60] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  240.161405][   T60] Buffer I/O error on dev nbd1, logical block 1, async page read
[  240.164595][   T60] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  240.168857][   T60] Buffer I/O error on dev nbd1, logical block 0, async page read
[  240.171795][T12799] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  240.174968][T12799] Buffer I/O error on dev nbd1, logical block 0, async page read
[  240.179927][T15101] veth5: entered promiscuous mode
[  240.180220][T12799] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  240.185797][T12799] Buffer I/O error on dev nbd1, logical block 1, async page read
[  240.189385][T12799] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  240.192957][T12799] Buffer I/O error on dev nbd1, logical block 2, async page read
[  240.197127][T12799] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  240.200298][T15101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.208221][T12799] Buffer I/O error on dev nbd1, logical block 3, async page read
[  240.214394][T12799] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  240.221342][T12799] Buffer I/O error on dev nbd1, logical block 0, async page read
[  240.230465][T12799] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  240.233850][T12799] Buffer I/O error on dev nbd1, logical block 1, async page read
[  240.244407][T12799] ldm_validate_partition_table(): Disk read failed.
[  240.261422][T12799] Dev nbd1: unable to read RDB block 0
[  240.264886][T12799]  nbd1: unable to read partition table
[  240.297466][T12799] ldm_validate_partition_table(): Disk read failed.
[  240.311697][T12799] Dev nbd1: unable to read RDB block 0
[  240.324050][T12799]  nbd1: unable to read partition table
[  240.383474][T15111] netlink: 'syz.1.4022': attribute type 1 has an invalid length.
[  240.386074][T15111] netlink: 'syz.1.4022': attribute type 2 has an invalid length.
[  240.623966][   T33] audit: type=1804 audit(1758813783.606:5): pid=15120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4025" name="/newroot/1302/cgroup.controllers" dev="tmpfs" ino=6581 res=1 errno=0
[  240.644382][   T33] audit: type=1800 audit(1758813783.606:6): pid=15120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4025" name="cgroup.controllers" dev="tmpfs" ino=6581 res=0 errno=0
[  241.218740][T15138] tipc: Failed to remove unknown binding: 66,1,1/3030991018:2462472296/2462472298
[  241.222560][T15138] tipc: Failed to remove unknown binding: 66,1,1/3030991018:2462472296/2462472298
[  241.348935][T15146] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  241.688875][T15179] netlink: 'syz.1.4053': attribute type 10 has an invalid length.
[  242.055865][T15212] sock: sock_set_timeout: `syz.2.4070' (pid 15212) tries to set negative timeout
[  242.064871][ T5859] Bluetooth: hci2: link tx timeout
[  242.066923][ T5859] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  242.422658][T15236] netlink: 'syz.0.4081': attribute type 23 has an invalid length.
[  242.543644][T15241] xt_socket: unknown flags 0xd0
[  242.676364][T15243] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1802723700)
[  242.685761][T15243] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  243.971107][T15302] syzkaller1: entered promiscuous mode
[  243.973145][T15302] syzkaller1: entered allmulticast mode
[  244.128108][ T5856] Bluetooth: hci2: command 0x0405 tx timeout
[  244.314586][T15329] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4124'.
[  244.620479][T15359] netlink: 'syz.0.4136': attribute type 21 has an invalid length.
[  244.631405][T15359] netlink: 'syz.0.4136': attribute type 22 has an invalid length.
[  244.634604][T15359] netlink: 'syz.0.4136': attribute type 23 has an invalid length.
[  244.637308][T15359] netlink: 'syz.0.4136': attribute type 25 has an invalid length.
[  244.655151][T15359] netlink: 'syz.0.4136': attribute type 26 has an invalid length.
[  244.658708][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4136'.
[  244.820975][T15371] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2)
[  245.956768][T15432] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4164'.
[  246.148664][   T12] ip6gretap1: left promiscuous mode
[  247.227618][T15503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.235428][T15503] syzkaller0: entered promiscuous mode
[  247.237615][T15503] syzkaller0: entered allmulticast mode
[  247.264040][T15503] tipc: Resetting bearer <eth:syzkaller0>
[  247.272513][T15504] netlink: 'syz.2.4198': attribute type 39 has an invalid length.
[  247.277172][T15502] tipc: Resetting bearer <eth:syzkaller0>
[  247.310112][T15502] tipc: Disabling bearer <eth:syzkaller0>
[  247.741126][T15515] netlink: 'syz.0.4204': attribute type 3 has an invalid length.
[  248.132463][T15522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4206'.
[  248.265140][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4210'.
[  248.326837][T15536] netlink: 'syz.2.4213': attribute type 2 has an invalid length.
[  248.483246][T15548] batadv_slave_0: entered promiscuous mode
[  249.643678][T15599] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4241'.
[  249.703089][T15601] syzkaller1: entered promiscuous mode
[  249.705302][T15601] syzkaller1: entered allmulticast mode
[  249.720168][T15603] netlink: 'syz.0.4243': attribute type 1 has an invalid length.
[  250.292864][T15636] bridge_slave_0: Caught tx_queue_len zero misconfig
[  250.357839][T15641] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4261'.
[  250.360869][T15642] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4255'.
[  250.381150][T15641] siw: device registration error -23
[  250.621891][T15654] ip6tnl3: entered promiscuous mode
[  251.315288][T15682] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4280'.
[  251.523597][T15694] IPVS: Scheduler module ip_vs_sip not found
[  251.527643][T15694] IPVS: length: 141 != 8
[  251.596382][T15703] netlink: 'syz.2.4290': attribute type 1 has an invalid length.
[  252.411280][T15760] bond0: Unable to set up delay as MII monitoring is disabled
[  252.674676][T15777] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.288281][T15802] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  253.350300][T15806] netlink: 'syz.2.4334': attribute type 10 has an invalid length.
[  253.354050][T15806] bond0: (slave wlan1): Opening slave failed
[  253.364782][T15806] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  253.369504][T15806] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  253.460033][T15809] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4338'.
[  253.824964][T15844] netlink: 'syz.0.4350': attribute type 10 has an invalid length.
[  253.830827][T15844] veth0_vlan: left promiscuous mode
[  253.833307][T15844] veth0_vlan: entered promiscuous mode
[  253.836571][T15844] team0: Device veth0_vlan failed to register rx_handler
[  253.844670][T15844] tipc: Resetting bearer <eth:ipvlan0>
[  254.046680][T15864] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.4359'.
[  254.079866][T15861] wg1 speed is unknown, defaulting to 1000
[  254.083721][T15861] vxcan1 speed is unknown, defaulting to 1000
[  255.515047][T15924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4386'.
[  255.519239][T15924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4386'.
[  255.705987][T15934] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  255.710072][T15934] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  256.142104][T15959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.147125][T15959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4402'.
[  256.579627][T15974] netlink: 'syz.2.4408': attribute type 13 has an invalid length.
[  256.594868][T15974] netlink: 'syz.2.4408': attribute type 17 has an invalid length.
[  256.616213][T15974] erspan0: left allmulticast mode
[  256.637105][T15974] tipc: Resetting bearer <eth:team0>
[  256.649815][T15974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  256.683646][T15977] wg1 speed is unknown, defaulting to 1000
[  256.692737][T15977] vxcan1 speed is unknown, defaulting to 1000
[  256.706011][T15983] netlink: 'syz.1.4412': attribute type 1 has an invalid length.
[  256.764091][T15983] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  256.771051][T15983] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  256.846326][T15987] gretap1: entered promiscuous mode
[  256.880932][T15987] bond5: (slave gretap1): making interface the new active one
[  256.884753][T15987] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  257.039388][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4418'.
[  257.065402][ T5861] cgroup: fork rejected by pids controller in /syz1
[  257.216482][ T5861] syz_tun (unregistering): left promiscuous mode
[  257.584272][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.591570][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.595362][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.603421][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.611790][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  257.663946][T16013] wg1 speed is unknown, defaulting to 1000
[  257.668771][T16013] vxcan1 speed is unknown, defaulting to 1000
[  258.137352][T16013] chnl_net:caif_netlink_parms(): no params data found
[  258.281347][T16013] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.284216][T16013] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.293168][T16013] bridge_slave_0: entered allmulticast mode
[  258.297526][T16013] bridge_slave_0: entered promiscuous mode
[  258.319318][T16013] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.322180][T16013] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.328796][T16013] bridge_slave_1: entered allmulticast mode
[  258.333318][T16013] bridge_slave_1: entered promiscuous mode
[  258.379446][T16013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.400547][T16013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.473349][T16013] team0: Port device team_slave_0 added
[  258.481318][T16013] team0: Port device team_slave_1 added
[  258.541851][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4442'.
[  258.542782][T16013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.552227][T16013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.563102][T16013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.583348][T16013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.586108][T16013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.597296][T16013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.670114][T16013] hsr_slave_0: entered promiscuous mode
[  258.672616][T16013] hsr_slave_1: entered promiscuous mode
[  258.684760][T16013] debugfs: 'hsr0' already exists in 'hsr'
[  258.687100][T16013] Cannot create hsr debugfs directory
[  258.850409][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4446'.
[  259.102075][T16013] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  259.112875][T16013] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  259.126461][T16013] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  259.134564][T16013] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  259.238284][T16013] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.273932][T16013] 8021q: adding VLAN 0 to HW filter on device team0
[  259.282133][ T2192] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.284707][ T2192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.310460][ T2192] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.313245][ T2192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.366518][T16088] wg1 speed is unknown, defaulting to 1000
[  259.374031][T16088] vxcan1 speed is unknown, defaulting to 1000
[  259.593569][T16013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.648270][ T5859] Bluetooth: hci2: command tx timeout
[  259.675030][T16013] veth0_vlan: entered promiscuous mode
[  259.695161][T16013] veth1_vlan: entered promiscuous mode
[  259.726390][T16013] veth0_macvtap: entered promiscuous mode
[  259.734799][T16013] veth1_macvtap: entered promiscuous mode
[  259.753270][T16013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.764582][T16013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.791143][ T5750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.794336][ T5750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.825402][ T5750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.832905][ T5750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.922189][T16090] netlink: 'syz.0.4451': attribute type 2 has an invalid length.
[  260.061441][ T2192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.064713][ T2192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.184561][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.194623][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.595257][T16127] batadv_slave_0: left promiscuous mode
[  260.607484][T16127] geneve2: left promiscuous mode
[  260.616998][T16135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4465'.
[  260.624345][T16127] macsec2: left promiscuous mode
[  260.626244][T16127] macsec2: left allmulticast mode
[  260.630200][T16127] veth5: left promiscuous mode
[  260.632153][T16127] ip6tnl3: left promiscuous mode
[  260.680618][T16131] netlink: 412 bytes leftover after parsing attributes in process `syz.1.4466'.
[  260.859499][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  260.892984][T16153] tc_dump_action: action bad kind
[  261.027326][T16165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4480'.
[  261.138985][T16172] netlink: 788 bytes leftover after parsing attributes in process `syz.1.4483'.
[  261.584659][T16188] netlink: 'syz.0.4490': attribute type 1 has an invalid length.
[  261.636224][T16188] 8021q: adding VLAN 0 to HW filter on device bond2
[  261.669820][T16191] bond2: (slave geneve3): making interface the new active one
[  261.680053][T16191] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  261.683541][ T5887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.690425][ T5887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.693433][ T5887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.696827][ T5887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.710114][T16188] bond2: entered promiscuous mode
[  261.712063][T16188] geneve3: entered promiscuous mode
[  261.738380][ T5859] Bluetooth: hci2: command tx timeout
[  261.914921][T16199] team_slave_1: Caught tx_queue_len zero misconfig
[  262.025186][T16201] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4495'.
[  262.075079][T16205] netlink: 'syz.0.4497': attribute type 1 has an invalid length.
[  262.254772][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4504'.
[  262.415078][T16232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4510'.
[  262.500747][T16236] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.4512'.
[  262.885844][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4522'.
[  262.966082][T16263] netem: incorrect ge model size
[  262.969163][T16263] netem: change failed
[  263.413474][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4531'.
[  263.818253][ T5859] Bluetooth: hci2: command tx timeout
[  264.182962][T16313] syzkaller1: entered promiscuous mode
[  264.198506][T16313] syzkaller1: entered allmulticast mode
[  265.055803][T16371] netlink: 'syz.2.4573': attribute type 21 has an invalid length.
[  265.135458][T16376] tipc: New replicast peer: 0.0.0.0
[  265.137692][T16376] tipc: Enabled bearer <udp:syz2>, priority 10
[  265.142380][T16376] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  265.530996][T16401] macsec1: entered promiscuous mode
[  265.533248][T16401] macvlan0: entered promiscuous mode
[  265.541682][T16401] macvlan0: left promiscuous mode
[  265.898305][ T5859] Bluetooth: hci2: command tx timeout
[  266.290057][T16446] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  266.392365][T16454] wg1 speed is unknown, defaulting to 1000
[  266.396133][T16454] vxcan1 speed is unknown, defaulting to 1000
[  266.515949][T16465] sch_tbf: burst 5 is lower than device lo mtu (230) !
[  266.835237][T16483] rdma_op ffff8881106261f0 conn xmit_rdma 0000000000000000
[  266.841944][T16480] netlink: 'syz.1.4621': attribute type 12 has an invalid length.
[  266.923379][T16488] __nla_validate_parse: 5 callbacks suppressed
[  266.923396][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4625'.
[  266.943982][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4625'.
[  267.245638][T16502] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  267.250206][T16502] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  267.345758][ T5887] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  267.404866][T16512] wg1 speed is unknown, defaulting to 1000
[  267.410861][T16512] vxcan1 speed is unknown, defaulting to 1000
[  267.452526][T16513] netlink: 'syz.0.4632': attribute type 10 has an invalid length.
[  267.457310][T16513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4632'.
[  267.463853][T16513] batman_adv: batadv0: Adding interface: virt_wifi0
[  267.466163][T16513] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.480512][T16513] batman_adv: batadv0: Interface activated: virt_wifi0
[  268.144385][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4638'.
[  268.909107][T16552] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  269.394099][T16574] tipc: Failed to remove unknown binding: 66,1,1/0:4224903423/4224903425
[  269.405386][T16574] tipc: Failed to remove unknown binding: 66,1,1/0:4224903423/4224903425
[  269.772245][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4663'.
[  269.919245][T16593] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  269.930390][T16593] netlink: 'syz.1.4667': attribute type 4 has an invalid length.
[  270.121400][T16593] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.124829][T16593] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.402345][T16593] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.422611][T16593] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.675279][T16617] netlink: 'syz.2.4677': attribute type 4 has an invalid length.
[  270.679823][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  270.684721][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  270.708752][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  270.712382][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  270.870821][T16630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4683'.
[  270.875812][T16630] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4683'.
[  270.947683][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4684'.
[  271.113049][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4690'.
[  271.267267][T16648] wg1 speed is unknown, defaulting to 1000
[  271.279587][T16648] vxcan1 speed is unknown, defaulting to 1000
[  271.957340][T16664] bridge6: entered promiscuous mode
[  271.959802][T16664] bridge6: entered allmulticast mode
[  272.167305][T16674] syzkaller1: entered promiscuous mode
[  272.170044][T16674] syzkaller1: entered allmulticast mode
[  272.947535][T16734] netlink: 'syz.2.4732': attribute type 21 has an invalid length.
[  272.951177][T16734] netlink: 'syz.2.4732': attribute type 1 has an invalid length.
[  272.954301][T16734] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4732'.
[  273.011685][T16737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4731'.
[  273.014804][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4731'.
[  273.061761][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4731'.
[  273.177651][T16752] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  273.180857][T16752] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  273.829064][T16761] netlink: 'syz.1.4742': attribute type 10 has an invalid length.
[  273.832703][T16761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4742'.
[  273.837002][T16761] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  273.841513][T16761] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  273.848920][T16761] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  274.136070][T16777] netlink: 'syz.1.4750': attribute type 1 has an invalid length.
[  274.252748][T16786] netlink: 'syz.2.4752': attribute type 13 has an invalid length.
[  274.255874][T16786] netlink: 'syz.2.4752': attribute type 17 has an invalid length.
[  274.271213][T16786] tipc: Resetting bearer <eth:team0>
[  274.277149][T16786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  274.342830][T16786] wg1 speed is unknown, defaulting to 1000
[  274.346597][T16786] vxcan1 speed is unknown, defaulting to 1000
[  274.379906][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4752'.
[  274.415693][T16798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4758'.
[  275.017524][T16822] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  275.339203][T16838] tipc: New replicast peer: 255.255.255.255
[  275.342210][T16838] tipc: Enabled bearer <udp:syz2>, priority 10
[  276.115419][T16882] wg1 speed is unknown, defaulting to 1000
[  276.121452][T16882] vxcan1 speed is unknown, defaulting to 1000
[  276.170956][T16887] IPv6: Can't replace route, no match found
[  276.331255][T16897] netlink: 'syz.0.4806': attribute type 12 has an invalid length.
[  276.335100][T16897] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4806'.
[  276.834562][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4816'.
[  277.182230][T16947] netlink: 'syz.2.4830': attribute type 1 has an invalid length.
[  277.221585][T16947] bond4 (unregistering): Released all slaves
[  277.511427][T16966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4835'.
[  278.699798][T17029] IPv6: sit3: Disabled Multicast RS
[  279.222810][T17044] delete_channel: no stack
[  279.466532][T17058] __nla_validate_parse: 1 callbacks suppressed
[  279.466553][T17058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4881'.
[  279.506516][T17058] bridge7: entered promiscuous mode
[  279.517853][T17058] bridge7: entered allmulticast mode
[  279.727002][T17072] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4889'.
[  279.736517][T17072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4889'.
[  279.856167][T17088] xt_HMARK: spi-set and port-set can't be combined
[  279.966714][T17095] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4897'.
[  279.976283][T17095] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4897'.
[  280.047701][T17104] netem: change failed
[  280.156905][T17107] wg1 speed is unknown, defaulting to 1000
[  280.169601][T17107] vxcan1 speed is unknown, defaulting to 1000
[  280.223396][T17115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4906'.
[  280.469066][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4912'.
[  280.472746][T17127] bridge_slave_1: left allmulticast mode
[  280.475039][T17127] bridge_slave_1: left promiscuous mode
[  280.477513][T17127] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.497203][T17127] bridge_slave_0: left allmulticast mode
[  280.499424][T17127] bridge_slave_0: left promiscuous mode
[  280.501469][T17127] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.740548][T17145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4918'.
[  280.890609][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4924'.
[  281.153149][T17177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4933'.
[  281.211267][T17180] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  281.230525][T17180] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  281.254681][T17180] bond2: left promiscuous mode
[  281.256637][T17180] geneve3: left promiscuous mode
[  281.265344][T17180] bridge6: left promiscuous mode
[  281.267173][T17180] bridge6: left allmulticast mode
[  281.283910][T17180] bridge7: left promiscuous mode
[  281.286178][T17180] bridge7: left allmulticast mode
[  281.296327][ T5750] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.316892][ T5750] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.328777][ T5750] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.332336][ T5750] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.869983][T17236] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  282.053697][T17246] netlink: 'syz.0.4966': attribute type 1 has an invalid length.
[  282.465759][T17256] netlink: 'syz.1.4970': attribute type 13 has an invalid length.
[  282.473534][T17256] netlink: 'syz.1.4970': attribute type 17 has an invalid length.
[  282.562587][T17256] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.567777][T17256] 8021q: adding VLAN 0 to HW filter on device team0
[  282.577564][T17256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.097546][T17273] netlink: 'syz.0.4977': attribute type 3 has an invalid length.
[  283.164400][T17276] netlink: 'syz.0.4978': attribute type 1 has an invalid length.
[  283.226779][T17279] netlink: 'syz.0.4979': attribute type 1 has an invalid length.
[  283.300928][T17283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  283.584037][T17305] syz_tun: entered promiscuous mode
[  283.590546][T17305] syz_tun: left promiscuous mode
[  284.076185][T17323] tipc: Failed to remove unknown binding: 66,1,1/3030991018:3928465757/3928465759
[  284.136137][T17328] tipc: Failed to remove unknown binding: 66,1,1/3030991018:3928465757/3928465759
[  284.143991][T17328] tipc: Failed to remove unknown binding: 66,1,1/3030991018:3928465757/3928465759
[  284.528118][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.565938][T17349] __nla_validate_parse: 16 callbacks suppressed
[  284.565958][T17349] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5012'.
[  284.877534][T17368] netlink: 'syz.1.5019': attribute type 10 has an invalid length.
[  284.885201][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5019'.
[  285.095397][T17381] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5026'.
[  285.211745][T17389] netlink: 'syz.0.5030': attribute type 13 has an invalid length.
[  285.214941][T17389] netlink: 'syz.0.5030': attribute type 17 has an invalid length.
[  285.241343][T17389] gretap0: refused to change device tx_queue_len
[  285.244378][T17389] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  285.407228][T17401] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  285.669514][T17418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5044'.
[  286.216523][T17444] netlink: 'syz.0.5056': attribute type 4 has an invalid length.
[  286.317420][T17457] syzkaller1: entered promiscuous mode
[  286.320749][T17457] syzkaller1: entered allmulticast mode
[  286.674820][T17492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5078'.
[  286.695925][T17492] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  287.554745][T17549] tipc: Resetting bearer <eth:team0>
[  287.564454][T17549] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  287.566740][T17549] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  287.575767][T17549] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  287.581809][T17549] geneve2: left promiscuous mode
[  287.584216][T17549] gtp0: left promiscuous mode
[  287.586477][T17549] gtp0: left allmulticast mode
[  287.588828][T17549] sit1: left allmulticast mode
[  287.591845][T17549] bridge2: left allmulticast mode
[  287.594080][T17549] bridge4: left promiscuous mode
[  287.595913][T17549] bridge4: left allmulticast mode
[  287.601193][T17549] ip6gre1: left promiscuous mode
[  287.603897][T17549] vlan0: left promiscuous mode
[  287.605960][T17549] geneve1: left promiscuous mode
[  287.610739][T17549] vlan0: left allmulticast mode
[  287.613229][T17549] geneve1: left allmulticast mode
[  287.615299][T17549] hsr1: left promiscuous mode
[  287.616989][T17549] vlan1: left promiscuous mode
[  287.619315][T17549] bond1: left promiscuous mode
[  287.621162][T17549] gretap1: left promiscuous mode
[  287.623192][T17549] vlan1: left allmulticast mode
[  287.624767][T17549] bond1: left allmulticast mode
[  287.626449][T17549] gretap1: left allmulticast mode
[  287.630974][T17549] bridge7: left promiscuous mode
[  287.632871][T17549] bridge7: left allmulticast mode
[  287.647751][T17549] veth5: left promiscuous mode
[  287.913074][T17573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5115'.
[  287.916179][T17573] bond0: ARP target 170.170.170.170 is already present
[  287.922786][T17573] bond0: option arp_ip_target: invalid value (2863311530)
[  287.971089][T17574] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.974389][T17574] 8021q: adding VLAN 0 to HW filter on device team0
[  287.985449][T17574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  288.998678][T17616] validate_nla: 3 callbacks suppressed
[  288.998716][T17616] netlink: 'syz.0.5133': attribute type 1 has an invalid length.
[  289.336041][T17638] : entered promiscuous mode
[  289.577251][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5147'.
[  289.588444][T17646] IPVS: Unknown mcast interface: vcan0
[  289.727771][T17658] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5153'.
[  290.049116][T17686] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  290.130944][T17694] netlink: 'syz.0.5169': attribute type 1 has an invalid length.
[  290.143364][T17695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.153662][T17695] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  290.156695][T17695] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  290.645909][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5193'.
[  290.894035][T17757] pim6reg1: entered promiscuous mode
[  290.896228][T17757] pim6reg1: entered allmulticast mode
[  290.941461][T17761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.944843][T17761] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  290.947328][T17761] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  290.951169][T17761] tipc: Resetting bearer <eth:syzkaller0>
[  290.957473][T17761] tipc: Resetting bearer <eth:syzkaller0>
[  291.102432][T17775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5208'.
[  291.269185][T17782] siw: device registration error -23
[  291.307731][T17786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5214'.
[  291.344637][T17784] netlink: 'syz.0.5213': attribute type 8 has an invalid length.
[  291.436568][T17794] netlink: 'syz.2.5217': attribute type 4 has an invalid length.
[  291.491680][ T1092] tipc: Resetting bearer <eth:syzkaller0>
[  291.582028][T17805] syzkaller1: entered promiscuous mode
[  291.584401][T17805] syzkaller1: entered allmulticast mode
[  291.741339][T17812] wg1 speed is unknown, defaulting to 1000
[  291.744418][T17812] vxcan1 speed is unknown, defaulting to 1000
[  292.140345][T17821] syzkaller1: entered promiscuous mode
[  292.142411][T17821] syzkaller1: entered allmulticast mode
[  293.042226][T17865] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  293.383520][T17895] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5262'.
[  293.791781][T17923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5276'.
[  293.853606][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'.
[  294.004265][T17932] netlink: 'syz.0.5280': attribute type 1 has an invalid length.
[  294.126497][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5283'.
[  296.251667][T18027] : renamed from wg2
[  296.452159][T18045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.875559][T18056] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5331'.
[  296.881714][T18056] ksmbd: Unknown IPC event: 0, ignore.
[  296.932547][T18058] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5332'.
[  297.134631][T18068] netlink: 'syz.2.5337': attribute type 1 has an invalid length.
[  297.175378][T18068] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  297.181945][T18068] bond4: (slave vxcan5): Error -95 calling set_mac_address
[  297.226154][T18070] bond4: (slave bridge8): Enslaving as an active interface with a down link
[  297.243723][T18070] macvlan0: entered promiscuous mode
[  297.245443][T18070] macvlan0: entered allmulticast mode
[  297.247770][T18070] bond4: entered promiscuous mode
[  297.251916][T18070] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  297.257188][T18070] bond4: left promiscuous mode
[  297.728408][T18087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5345'.
[  297.731221][T18087] netlink: 'syz.2.5345': attribute type 30 has an invalid length.
[  297.733666][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5345'.
[  298.654647][T18114] netlink: 'syz.2.5357': attribute type 1 has an invalid length.
[  298.657765][T18114] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5357'.
[  298.929514][T18124] 8021q: adding VLAN 0 to HW filter on device bond5
[  299.754408][T18160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5379'.
[  299.758300][T18160] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  299.763127][T18160] A link change request failed with some changes committed already. Interface netdevsim2 may have been left with an inconsistent configuration, please check.
[  299.803616][T18164] netlink: 'syz.0.5381': attribute type 3 has an invalid length.
[  299.806238][T18164] netlink: 'syz.0.5381': attribute type 1 has an invalid length.
[  299.810242][T18164] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5381'.
[  300.071983][T18181] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5387'.
[  300.264779][T18187] wg1 speed is unknown, defaulting to 1000
[  300.269357][T18187] vxcan1 speed is unknown, defaulting to 1000
[  300.890334][T18191] netlink: 'syz.2.5390': attribute type 29 has an invalid length.
[  300.895175][T18191] netlink: 'syz.2.5390': attribute type 29 has an invalid length.
[  300.903813][T18191] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5390'.
[  300.977227][T18200] netlink: 'syz.0.5393': attribute type 1 has an invalid length.
[  300.980698][T18200] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5393'.
[  302.385047][T18251] __nla_validate_parse: 1 callbacks suppressed
[  302.385068][T18251] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5415'.
[  303.002442][T18282] netlink: 'syz.0.5430': attribute type 3 has an invalid length.
[  303.143675][T18293] netlink: 'syz.0.5435': attribute type 16 has an invalid length.
[  303.146833][T18293] netlink: 'syz.0.5435': attribute type 17 has an invalid length.
[  303.162764][T18293] tipc: Resetting bearer <eth:syzkaller0>
[  303.183819][T18293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5435'.
[  303.189160][T18293] IPv6: NLM_F_REPLACE set, but no existing node found!
[  303.276658][T18299] syzkaller1: entered promiscuous mode
[  303.280466][T18299] syzkaller1: entered allmulticast mode
[  303.459518][T18301] syzkaller1: entered promiscuous mode
[  303.461977][T18301] syzkaller1: entered allmulticast mode
[  304.607296][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5463'.
[  304.797556][T18374] netlink: 'syz.0.5468': attribute type 24 has an invalid length.
[  304.801898][T18374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5468'.
[  304.805810][T18374] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  304.809864][T18374] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  304.913752][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5472'.
[  304.917361][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5472'.
[  304.917471][T18383] netlink: 'syz.0.5471': attribute type 1 has an invalid length.
[  304.925104][T18383] netlink: 'syz.0.5471': attribute type 1 has an invalid length.
[  305.177797][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5480'.
[  305.304011][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5483'.
[  305.953763][T18431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5492'.
[  306.591118][T18455] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5504'.
[  306.660991][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  306.665566][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  306.671254][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  306.679851][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  306.685565][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  306.753124][T18459] wg1 speed is unknown, defaulting to 1000
[  306.756253][T18459] vxcan1 speed is unknown, defaulting to 1000
[  307.070483][T18473] netlink: 'syz.0.5512': attribute type 1 has an invalid length.
[  307.073537][T18473] netlink: 'syz.0.5512': attribute type 4 has an invalid length.
[  307.077459][T18473] netlink: 'syz.0.5512': attribute type 1 has an invalid length.
[  307.082463][T18473] netlink: 'syz.0.5512': attribute type 4 has an invalid length.
[  307.155901][T18459] chnl_net:caif_netlink_parms(): no params data found
[  307.348986][T18459] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.352061][T18459] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.355119][T18459] bridge_slave_0: entered allmulticast mode
[  307.361037][T18459] bridge_slave_0: entered promiscuous mode
[  307.375659][T18459] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.379476][T18459] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.382503][T18459] bridge_slave_1: entered allmulticast mode
[  307.386579][T18459] bridge_slave_1: entered promiscuous mode
[  307.472671][T18459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.483296][T18459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.547567][T18459] team0: Port device team_slave_0 added
[  307.555078][T18459] team0: Port device team_slave_1 added
[  307.671485][T18459] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.674326][T18459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.689688][T18459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.719280][T18459] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.722131][T18459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.735334][T18459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.804534][T18459] hsr_slave_0: entered promiscuous mode
[  307.807699][T18459] hsr_slave_1: entered promiscuous mode
[  307.814171][T18459] debugfs: 'hsr0' already exists in 'hsr'
[  307.815989][T18459] Cannot create hsr debugfs directory
[  307.948340][T18524] __nla_validate_parse: 7 callbacks suppressed
[  307.948352][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5533'.
[  308.045363][T18459] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  308.070836][T18459] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  308.077463][T18459] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  308.094017][T18459] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  308.197308][T18459] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.223143][T18459] 8021q: adding VLAN 0 to HW filter on device team0
[  308.231937][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.235805][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.250144][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.252819][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.431138][T18459] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.470906][T18459] veth0_vlan: entered promiscuous mode
[  308.481554][T18459] veth1_vlan: entered promiscuous mode
[  308.507181][T18459] veth0_macvtap: entered promiscuous mode
[  308.515327][T18459] veth1_macvtap: entered promiscuous mode
[  308.531703][T18459] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.543368][T18459] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.555824][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.571571][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.579274][ T5887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.590599][ T5887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.721143][ T2192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.723702][ T2192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.745716][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5540'.
[  308.763165][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.766055][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.768930][ T5859] Bluetooth: hci3: command tx timeout
[  308.854253][T18571] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.5498'.
[  309.136929][T18599] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5553'.
[  309.297096][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5562'.
[  309.492241][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5568'.
[  309.675054][T18639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5573'.
[  309.703138][T18637] wg1 speed is unknown, defaulting to 1000
[  309.719625][T18637] vxcan1 speed is unknown, defaulting to 1000
[  309.767570][T18641] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5573'.
[  309.794308][T18641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.492121][T18667] xt_HMARK: proto mask must be zero with L3 mode
[  310.850450][ T5856] Bluetooth: hci3: command tx timeout
[  310.893306][T18685] netlink: 'syz.3.5593': attribute type 64 has an invalid length.
[  311.701313][T18722] wg1 speed is unknown, defaulting to 1000
[  311.707253][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5611'.
[  311.715318][T18722] vxcan1 speed is unknown, defaulting to 1000
[  311.719017][T18724] veth1_macvtap: left promiscuous mode
[  311.891168][T18733] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  312.192216][T18752] siw: device registration error -23
[  312.417530][T18764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5628'.
[  312.589153][T18778] netlink: 'syz.0.5634': attribute type 6 has an invalid length.
[  312.824110][T18796] netlink: 'syz.0.5644': attribute type 31 has an invalid length.
[  312.931255][ T5856] Bluetooth: hci3: command 0x040f tx timeout
[  313.247124][T18821] __nla_validate_parse: 6 callbacks suppressed
[  313.247141][T18821] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5656'.
[  313.352470][T18824] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5657'.
[  313.392727][T18827] ip6gre2: entered promiscuous mode
[  313.532009][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5666'.
[  313.534752][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5666'.
[  313.539910][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5666'.
[  313.543438][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5666'.
[  313.547384][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5666'.
[  313.556741][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5666'.
[  313.630934][T18843] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5667'.
[  313.734314][T18857] dvmrp1: tun_chr_ioctl cmd 1074025677
[  313.736329][T18857] dvmrp1: linktype set to 773
[  313.824986][T18866] sctp: [Deprecated]: syz.2.5679 (pid 18866) Use of int in max_burst socket option.
[  313.824986][T18866] Use struct sctp_assoc_value instead
[  313.872648][T18869] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  313.875491][T18869] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  314.637819][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5691'.
[  314.681769][T18916] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  314.700581][T18916] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  314.737164][T18916] tipc: Resetting bearer <eth:syzkaller0>
[  315.019067][ T5859] Bluetooth: hci3: command 0x040f tx timeout
[  315.931231][ T5887] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  316.472052][T18980] syzkaller1: entered promiscuous mode
[  316.474321][T18980] syzkaller1: entered allmulticast mode
[  316.836885][T19009] netlink: 'syz.2.5734': attribute type 10 has an invalid length.
[  316.846398][T19009] bond0: (slave wlan1): Opening slave failed
[  316.874006][T19009] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  316.877546][T19009] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  316.907639][T19015] netlink: 'syz.3.5736': attribute type 3 has an invalid length.
[  316.918779][T19015] netlink: 'syz.3.5736': attribute type 2 has an invalid length.
[  316.925674][T19015] netlink: 'syz.3.5736': attribute type 2 has an invalid length.
[  317.089656][ T5859] Bluetooth: hci3: command 0x040f tx timeout
[  317.232236][  T793] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  317.235374][  T793] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  317.253659][  T793] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  318.022759][T19069] wg1 speed is unknown, defaulting to 1000
[  318.026922][T19069] vxcan1 speed is unknown, defaulting to 1000
[  319.478816][T19114] syz.3.5772 uses old SIOCAX25GETINFO
[  319.858573][T19136] netlink: 'syz.0.5783': attribute type 12 has an invalid length.
[  320.022756][T19147] __nla_validate_parse: 7 callbacks suppressed
[  320.022773][T19147] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5786'.
[  320.039652][T19149] netlink: 'syz.0.5788': attribute type 9 has an invalid length.
[  320.049157][T19149] netlink: 'syz.0.5788': attribute type 6 has an invalid length.
[  320.052441][T19149] netlink: 'syz.0.5788': attribute type 7 has an invalid length.
[  320.061432][T19149] netlink: 'syz.0.5788': attribute type 8 has an invalid length.
[  320.081578][T19151] netlink: 'syz.2.5789': attribute type 178 has an invalid length.
[  320.281119][T19161] wg1 speed is unknown, defaulting to 1000
[  320.301712][T19161] vxcan1 speed is unknown, defaulting to 1000
[  320.473140][T19181] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5801'.
[  320.783417][T19202] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.790452][T19202] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  321.322066][T19239] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5829'.
[  321.661582][T19270] wg1 speed is unknown, defaulting to 1000
[  321.666789][T19270] vxcan1 speed is unknown, defaulting to 1000
[  321.675814][   T33] audit: type=1804 audit(1758813864.656:7): pid=19275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5846" name="/newroot/1977/cgroup.controllers" dev="tmpfs" ino=9993 res=1 errno=0
[  321.688477][   T33] audit: type=1800 audit(1758813864.656:8): pid=19275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5846" name="cgroup.controllers" dev="tmpfs" ino=9993 res=0 errno=0
[  321.941093][T19285] block nbd2: server does not support multiple connections per device.
[  321.949330][T19285] block nbd2: shutting down sockets
[  322.389673][T19322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  322.392266][T19322] IPv6: NLM_F_CREATE should be set when creating new route
[  322.395029][T19322] IPv6: NLM_F_CREATE should be set when creating new route
[  322.397983][T19322] IPv6: NLM_F_CREATE should be set when creating new route
[  322.402913][T19322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  322.454951][T19319] wg1 speed is unknown, defaulting to 1000
[  322.461524][T19319] vxcan1 speed is unknown, defaulting to 1000
[  323.360894][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5885'.
[  323.738782][T19392] xt_policy: neither incoming nor outgoing policy selected
[  323.804173][T19396] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  323.845819][T17991] udevd[17991]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory
[  324.374493][T19429] validate_nla: 1 callbacks suppressed
[  324.374509][T19429] netlink: 'syz.2.5911': attribute type 1 has an invalid length.
[  324.405841][T19429] netlink: 'syz.2.5911': attribute type 1 has an invalid length.
[  324.428972][T19429] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5911'.
[  324.842712][T19467] netlink: 'syz.3.5927': attribute type 1 has an invalid length.
[  324.890969][T19467] bond3: entered promiscuous mode
[  324.899291][T19467] 8021q: adding VLAN 0 to HW filter on device bond3
[  324.911244][T19473] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  324.950134][T19467] bond3: (slave bridge1): making interface the new active one
[  324.957149][T19467] bridge1: entered promiscuous mode
[  324.967105][T19467] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  325.024833][T19479] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5930'.
[  325.042895][T19479] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5930'.
[  326.012957][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5957'.
[  326.042612][T19537] macvtap1: entered promiscuous mode
[  326.044478][T19537] team0: entered promiscuous mode
[  326.046298][T19537] macvtap1: entered allmulticast mode
[  326.050545][T19537] team0: entered allmulticast mode
[  326.053685][T19537] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  326.062312][T19537] macvtap1: left promiscuous mode
[  326.064000][T19537] team0: left promiscuous mode
[  326.065779][T19537] macvtap1: left allmulticast mode
[  326.067497][T19537] team0: left allmulticast mode
[  326.496543][T19579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5974'.
[  326.506071][T19579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5974'.
[  326.549650][T19579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5974'.
[  326.997298][T19610] bridge: RTM_NEWNEIGH with invalid ether address
[  327.018591][T19612] netlink: 'syz.0.5990': attribute type 13 has an invalid length.
[  327.021736][T19612] netlink: 'syz.0.5990': attribute type 17 has an invalid length.
[  327.085793][T19612] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.089449][T19612] 8021q: adding VLAN 0 to HW filter on device team0
[  327.096397][T19612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  327.171104][T19612] wg1 speed is unknown, defaulting to 1000
[  327.182149][T19612] vxcan1 speed is unknown, defaulting to 1000
[  327.531091][T19642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6002'.
[  327.863305][T19662] xt_limit: Overflow, try lower: 271964/0
[  327.957058][T19668] netlink: 'syz.3.6016': attribute type 2 has an invalid length.
[  328.101531][T19675] netlink: 'syz.0.6019': attribute type 303 has an invalid length.
[  328.193413][T19678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6020'.
[  329.085106][T19714] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6037'.
[  329.092320][T19714] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6037'.
[  329.130768][T19715] openvswitch: netlink: Message has 8 unknown bytes.
[  329.379064][T19737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6046'.
[  330.205656][T19797] __nla_validate_parse: 1 callbacks suppressed
[  330.205675][T19797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6072'.
[  330.239739][T19797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6072'.
[  330.310706][T19800] netlink: 'syz.3.6073': attribute type 30 has an invalid length.
[  330.314457][T19800] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  330.322888][T19800] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  331.854122][T19884] netlink: 'syz.3.6113': attribute type 5 has an invalid length.
[  331.856937][T19884] netlink: 'syz.3.6113': attribute type 5 has an invalid length.
[  332.084350][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6119'.
[  332.096457][ T5885] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.101685][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.101802][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6119'.
[  332.105271][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.105306][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.605881][T19935] netlink: 'syz.0.6137': attribute type 2 has an invalid length.
[  332.661007][ T5887] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.664374][ T5887] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.667352][ T5887] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.688415][ T5856] Bluetooth: hci3: command 0x040f tx timeout
[  332.703734][ T5887] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.734289][T19942] delete_channel: no stack
[  332.914419][T19957] netlink: 'syz.0.6147': attribute type 1 has an invalid length.
[  332.918803][T19957] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6147'.
[  332.977763][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6151'.
[  332.983870][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6151'.
[  332.990491][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6151'.
[  332.993962][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6151'.
[  332.999024][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6151'.
[  333.018544][T19963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  333.400128][T19984] netlink: zone id is out of range
[  333.401871][T19984] netlink: zone id is out of range
[  333.403554][T19984] netlink: zone id is out of range
[  333.405267][T19984] netlink: zone id is out of range
[  333.406863][T19984] netlink: zone id is out of range
[  333.409182][T19984] netlink: zone id is out of range
[  333.410869][T19984] netlink: zone id is out of range
[  333.412915][T19984] netlink: zone id is out of range
[  333.415188][T19984] netlink: zone id is out of range
[  333.540998][T19988] erspan0: entered promiscuous mode
[  333.726166][T19996] tipc: Started in network mode
[  333.728742][T19996] tipc: Node identity 0276f0996f54, cluster identity 4711
[  333.731792][T19996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.740323][T19996] syzkaller0: entered promiscuous mode
[  333.748036][T19996] syzkaller0: entered allmulticast mode
[  333.780982][T19996] tipc: Resetting bearer <eth:syzkaller0>
[  333.793142][T19995] tipc: Resetting bearer <eth:syzkaller0>
[  333.826255][T19995] tipc: Disabling bearer <eth:syzkaller0>
[  333.846533][T20002] netlink: 'syz.2.6168': attribute type 4 has an invalid length.
[  334.950926][T20074] syz_tun: entered allmulticast mode
[  334.964767][T20074] dvmrp8: entered allmulticast mode
[  334.991028][T20074] wg1 speed is unknown, defaulting to 1000
[  334.995146][T20074] vxcan1 speed is unknown, defaulting to 1000
[  335.047745][T20076] netlink: 'syz.2.6201': attribute type 23 has an invalid length.
[  335.283644][T20084] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.286951][T20084] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.370221][T20072] syz_tun: left allmulticast mode
[  335.373477][T20072] dvmrp8: left allmulticast mode
[  335.426503][T20089] __nla_validate_parse: 17 callbacks suppressed
[  335.426516][T20089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6208'.
[  335.483757][T20091] netdevsim netdevsim3: Direct firmware load for .
[  335.483757][T20091]  failed with error -2
[  335.491594][T20091] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  335.491594][T20091] 
[  335.689287][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6216'.
[  335.741400][T20106] macvlan4: entered promiscuous mode
[  335.743531][T20106] macvlan4: entered allmulticast mode
[  335.747009][T20106] bond3: (slave macvlan4): Opening slave failed
[  335.761646][T20109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6217'.
[  335.863872][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6218'.
[  336.041789][T20126] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  336.225986][T20139] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6230'.
[  336.831913][T20168] netlink: 'syz.3.6243': attribute type 11 has an invalid length.
[  337.087015][T20181] vlan2: entered allmulticast mode
[  337.281378][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6250'.
[  337.831307][T20203] netlink: 'syz.3.6259': attribute type 11 has an invalid length.
[  337.947316][T20212] block nbd0: NBD_DISCONNECT
[  337.954486][T20212] block nbd0: Send disconnect failed -32
[  338.018990][T20217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6265'.
[  338.622054][T20253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6283'.
[  338.627109][T20253] netlink: 'syz.3.6283': attribute type 4 has an invalid length.
[  339.189860][T20284] C: renamed from team_slave_0 (while UP)
[  339.195198][T20284] netlink: 'syz.3.6297': attribute type 3 has an invalid length.
[  339.212229][T20284] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6297'.
[  339.216864][T20284] net_ratelimit: 12 callbacks suppressed
[  339.216901][T20284] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  339.316119][T20290] tipc: Enabling <ib:lo> not permitted
[  339.321574][T20290] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  339.410024][T20295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6300'.
[  339.582310][T20303] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  341.877415][T20391] pim6reg99999999: entered allmulticast mode
[  342.114512][T20402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.118588][T20402] syzkaller0: entered promiscuous mode
[  342.120608][T20402] syzkaller0: entered allmulticast mode
[  342.137644][T20402] tipc: Resetting bearer <eth:syzkaller0>
[  342.145349][T20401] tipc: Resetting bearer <eth:syzkaller0>
[  342.165720][T20401] tipc: Disabling bearer <eth:syzkaller0>
[  343.202139][T20452] __nla_validate_parse: 3 callbacks suppressed
[  343.202164][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6361'.
[  343.379478][T20464] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  343.808772][T20490] netlink: 'syz.3.6380': attribute type 14 has an invalid length.
[  343.855164][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6381'.
[  343.911440][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6382'.
[  344.003225][T20370] Set syz1 is full, maxelem 65536 reached
[  344.582493][T20520] wg1 speed is unknown, defaulting to 1000
[  344.596159][T20520] vxcan1 speed is unknown, defaulting to 1000
[  344.837009][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6398'.
[  345.025259][T20542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6402'.
[  345.033950][T20542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6402'.
[  346.227007][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6422'.
[  346.549789][T20601] netlink: 'syz.3.6428': attribute type 1 has an invalid length.
[  346.552371][T20601] netlink: 'syz.3.6428': attribute type 3 has an invalid length.
[  346.555429][T20601] netlink: 'syz.3.6428': attribute type 1 has an invalid length.
[  346.561048][T20601] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6428'.
[  346.564727][T20601] NCSI netlink: No device for ifindex 0
[  346.794767][T20611] wg1 speed is unknown, defaulting to 1000
[  346.797449][T20611] vxcan1 speed is unknown, defaulting to 1000
[  346.814973][T20613] netlink: 22 bytes leftover after parsing attributes in process `syz.3.6434'.
[  346.963878][T20617] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  347.180937][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6440'.
[  347.865507][T20670] wg1 speed is unknown, defaulting to 1000
[  347.901793][T20670] vxcan1 speed is unknown, defaulting to 1000
[  348.442285][T20710] wg1 speed is unknown, defaulting to 1000
[  348.445971][T20710] vxcan1 speed is unknown, defaulting to 1000
[  348.483532][T20711] vlan0: entered promiscuous mode
[  348.673550][T20716] sctp: [Deprecated]: syz.2.6477 (pid 20716) Use of struct sctp_assoc_value in delayed_ack socket option.
[  348.673550][T20716] Use struct sctp_sack_info instead
[  348.723552][T20725] __nla_validate_parse: 4 callbacks suppressed
[  348.723574][T20725] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.6479'.
[  348.982718][T20735] netlink: 'syz.3.6483': attribute type 3 has an invalid length.
[  349.337832][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6491'.
[  350.104166][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6508'.
[  350.114042][T20796] bond0: (slave rose0): Error: Device can not be enslaved while up
[  350.374189][T20810] batadv1: entered promiscuous mode
[  350.376044][T20810] batadv1: entered allmulticast mode
[  350.596907][T20823] netlink: 'syz.0.6518': attribute type 1 has an invalid length.
[  350.607317][T20823] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6518'.
[  350.799457][T20831] netlink: 34 bytes leftover after parsing attributes in process `syz.3.6521'.
[  350.826281][T20835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6523'.
[  351.022164][T20856] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6534'.
[  351.315582][T20884] syz_tun: entered allmulticast mode
[  351.337595][T20884] syz_tun: left allmulticast mode
[  351.461069][T20895] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6550'.
[  351.464642][T20895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6550'.
[  351.469839][T20895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6550'.
[  351.588332][T20901] bond0: (slave erspan0): Opening slave failed
[  352.157834][T20945] syzkaller1: entered promiscuous mode
[  352.163046][T20945] syzkaller1: entered allmulticast mode
[  352.567820][T20965] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  352.925887][T20998] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  354.610325][ T5859] Bluetooth: hci0: command tx timeout
[  354.927551][T21095] dummy0: Device is already in use.
[  355.865195][T21146] __nla_validate_parse: 4 callbacks suppressed
[  355.865216][T21146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6656'.
[  355.868246][T21148] netlink: 'syz.2.6657': attribute type 11 has an invalid length.
[  356.053395][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6664'.
[  356.065807][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6664'.
[  356.303472][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6676'.
[  356.309217][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6676'.
[  356.350116][ T5885] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  356.519311][T21203] netlink: 'syz.3.6681': attribute type 10 has an invalid length.
[  356.522251][T21203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6681'.
[  356.528910][T21203] batman_adv: batadv0: Adding interface: virt_wifi0
[  356.531728][T21203] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.543732][T21203] batman_adv: batadv0: Interface activated: virt_wifi0
[  356.692466][T21211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6685'.
[  356.730196][T21211] netlink: 'syz.3.6685': attribute type 1 has an invalid length.
[  356.735083][T21211] netlink: 'syz.3.6685': attribute type 1 has an invalid length.
[  357.450227][T21239] netlink: 'syz.2.6697': attribute type 3 has an invalid length.
[  357.453743][T21239] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6697'.
[  357.532418][T21245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6701'.
[  357.599374][T21249] netlink: 'syz.2.6703': attribute type 2 has an invalid length.
[  357.701527][T21260] wg1 speed is unknown, defaulting to 1000
[  357.703872][T21260] wg1 speed is unknown, defaulting to 1000
[  357.712190][T21260] wg1 speed is unknown, defaulting to 1000
[  357.725698][T21260] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  357.744077][T21260] wg1 speed is unknown, defaulting to 1000
[  357.747048][T21260] wg1 speed is unknown, defaulting to 1000
[  357.752609][T21260] wg1 speed is unknown, defaulting to 1000
[  357.755665][T21260] wg1 speed is unknown, defaulting to 1000
[  357.763451][T21260] wg1 speed is unknown, defaulting to 1000
[  357.766464][T21260] wg1 speed is unknown, defaulting to 1000
[  357.776424][T21260] wg1 speed is unknown, defaulting to 1000
[  357.791451][T21260] wg1 speed is unknown, defaulting to 1000
[  357.808286][T21260] wg1 speed is unknown, defaulting to 1000
[  357.816599][T21260] wg1 speed is unknown, defaulting to 1000
[  357.822617][T21260] wg1 speed is unknown, defaulting to 1000
[  357.825942][T21260] wg1 speed is unknown, defaulting to 1000
[  357.830680][T21260] wg1 speed is unknown, defaulting to 1000
[  357.835300][T21260] wg1 speed is unknown, defaulting to 1000
[  357.839078][T21260] wg1 speed is unknown, defaulting to 1000
[  357.844245][T21260] wg1 speed is unknown, defaulting to 1000
[  357.851657][T21260] wg1 speed is unknown, defaulting to 1000
[  357.863329][T21260] wg1 speed is unknown, defaulting to 1000
[  357.993748][T21285] netlink: 'syz.3.6717': attribute type 1 has an invalid length.
[  358.281166][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6726'.
[  358.566734][T21315] vxcan1 speed is unknown, defaulting to 1000
[  358.693225][T21315] wg1 speed is unknown, defaulting to 1000
[  358.914896][T21328] tipc: Enabling of bearer <et:g> rejected, media not registered
[  360.125717][T21416] vxcan1 speed is unknown, defaulting to 1000
[  360.380945][T21416] wg1 speed is unknown, defaulting to 1000
[  360.757010][T21446] syzkaller1: entered promiscuous mode
[  360.762048][T21446] syzkaller1: entered allmulticast mode
[  360.912432][T21455] __nla_validate_parse: 2 callbacks suppressed
[  360.912449][T21455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6793'.
[  360.916114][T21453] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[  360.950067][T21453] bridge_slave_0: left promiscuous mode
[  360.953016][T21453] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.960778][T21453] bridge_slave_1: left allmulticast mode
[  360.965597][T21453] bridge_slave_1: left promiscuous mode
[  360.972533][T21453] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.976638][T21457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'.
[  360.981824][T21453] bond0: (slave bond_slave_0): Releasing backup interface
[  360.997219][T21453] bond0: (slave bond_slave_1): Releasing backup interface
[  361.019655][T21453] team0: Port device C removed
[  361.024639][T21453] team0: Port device team_slave_1 removed
[  361.028429][T21453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.030696][T21453] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.034218][T21453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.036618][T21453] batman_adv: batadv0: Removing interface: batadv_slave_1
[  361.043018][T21453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  361.063396][T21453] netlink: 'syz.3.6792': attribute type 10 has an invalid length.
[  361.068744][T21453] mac80211_hwsim hwsim24 wlan1: left allmulticast mode
[  361.077165][T21453] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.082188][T21453] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  361.087956][T21453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6792'.
[  361.091250][T21453] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  361.094387][T21453] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  361.586814][T21478] netlink: 156260 bytes leftover after parsing attributes in process `syz.0.6803'.
[  361.818084][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6806'.
[  361.890713][T21495] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  361.933204][T21490] team0: Device macvtap0 is already an upper device of the team interface
[  361.995547][T21503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6811'.
[  362.140802][T21515] unknown channel width for channel at 909000KHz?
[  362.371484][T21529] syzkaller1: entered promiscuous mode
[  362.373414][T21529] syzkaller1: entered allmulticast mode
[  362.376864][T21531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6825'.
[  362.382054][T21531] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6825'.
[  362.386063][T21531] netlink: 'syz.0.6825': attribute type 5 has an invalid length.
[  362.389592][T21531] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6825'.
[  362.436658][T21533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6826'.
[  362.601997][T21541] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  363.108613][T21578] batman_adv: batadv0: Adding interface: vlan3
[  363.111310][T21578] batman_adv: batadv0: The MTU of interface vlan3 is too small (216) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.122120][T21578] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  363.494238][T21596] netlink: 'syz.0.6855': attribute type 8 has an invalid length.
[  363.578319][T21602] netlink: 'syz.0.6857': attribute type 4 has an invalid length.
[  364.429832][T21615] vxcan1 speed is unknown, defaulting to 1000
[  364.445407][T21618] netlink: 'syz.2.6864': attribute type 1 has an invalid length.
[  364.463842][T21618] bond6: entered promiscuous mode
[  364.466244][T21618] bond6: entered allmulticast mode
[  364.479885][T21618] bridge9: entered promiscuous mode
[  364.481828][T21618] bridge9: entered allmulticast mode
[  364.486401][T21618] bond6: (slave bridge9): making interface the new active one
[  364.491809][T21618] bond6: (slave bridge9): Enslaving as an active interface with an up link
[  364.601444][T21615] wg1 speed is unknown, defaulting to 1000
[  364.928353][ T5856] Bluetooth: hci3: command 0x040f tx timeout
[  364.953103][T21654] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  365.100170][T21662] vxcan1 speed is unknown, defaulting to 1000
[  365.255896][T21662] wg1 speed is unknown, defaulting to 1000
[  365.871142][T21713] netlink: 'syz.2.6907': attribute type 4 has an invalid length.
[  366.602260][T21738] netlink: 'syz.3.6916': attribute type 101 has an invalid length.
[  366.604830][T21738] netlink: 'syz.3.6916': attribute type 7 has an invalid length.
[  366.653533][T21741] netlink: 'syz.0.6918': attribute type 4 has an invalid length.
[  366.797309][T21750] vxcan1 speed is unknown, defaulting to 1000
[  367.003525][T21750] wg1 speed is unknown, defaulting to 1000
[  367.270608][T21775] __nla_validate_parse: 4 callbacks suppressed
[  367.270625][T21775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6934'.
[  367.813303][T21823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6957'.
[  368.128030][T21847] netlink: 'syz.2.6969': attribute type 2 has an invalid length.
[  368.249114][T21849] vxcan1 speed is unknown, defaulting to 1000
[  368.509410][T21849] wg1 speed is unknown, defaulting to 1000
[  369.853556][T21954] tipc: Enabling of bearer <eth:gre0> rejected, max 3 bearers permitted
[  370.777809][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7047'.
[  370.783608][T22021] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  370.787648][T22021] batman_adv: batadv0: Removing interface: virt_wifi0
[  370.961526][T22029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7051'.
[  371.060935][T22038] netlink: 308 bytes leftover after parsing attributes in process `syz.3.7055'.
[  371.064465][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7055'.
[  371.074299][T22038] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  371.242433][T22047] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.7059'.
[  371.567489][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7071'.
[  371.723699][T22081] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  371.737670][T22083] netlink: 'syz.2.7077': attribute type 1 has an invalid length.
[  371.744237][T22083] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7077'.
[  372.104319][T22103] vxcan1 speed is unknown, defaulting to 1000
[  372.330083][T22103] wg1 speed is unknown, defaulting to 1000
[  372.711255][T22134] siw: device registration error -23
[  373.051740][T22147] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7102'.
[  373.978920][T22093] Bluetooth: hci3: command 0x040f tx timeout
[  374.205323][T22205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7129'.
[  374.209201][T22205] netlink: 'syz.3.7129': attribute type 30 has an invalid length.
[  374.259239][T22205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7129'.
[  374.262482][T22205] netlink: 'syz.3.7129': attribute type 30 has an invalid length.
[  374.463164][T22209] vxcan1 speed is unknown, defaulting to 1000
[  374.636335][T22209] wg1 speed is unknown, defaulting to 1000
[  375.054508][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7141'.
[  375.064679][T22233] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  375.132018][T22237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7143'.
[  375.135869][T22237] netlink: 'syz.0.7143': attribute type 7 has an invalid length.
[  375.140032][T22237] netlink: 'syz.0.7143': attribute type 8 has an invalid length.
[  375.143144][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7143'.
[  375.209414][T22245] netlink: 'syz.3.7147': attribute type 1 has an invalid length.
[  375.212444][T22245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7147'.
[  375.217730][T22245] netlink: 45 bytes leftover after parsing attributes in process `syz.3.7147'.
[  375.386069][T22261] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  375.698285][T22279] netlink: 'syz.2.7162': attribute type 1 has an invalid length.
[  375.701419][T22279] netlink: 'syz.2.7162': attribute type 1 has an invalid length.
[  375.704506][T22279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7162'.
[  375.711030][T22279] block nbd0: shutting down sockets
[  376.316072][T22314] vxcan1 speed is unknown, defaulting to 1000
[  376.344039][T22322] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7182'.
[  376.468799][T22314] wg1 speed is unknown, defaulting to 1000
[  376.886479][T22356] vxcan1 speed is unknown, defaulting to 1000
[  377.292381][T22356] wg1 speed is unknown, defaulting to 1000
[  377.475137][T22377] TCP: TCP_TX_DELAY enabled
[  377.692434][T22390] netlink: 'syz.0.7211': attribute type 5 has an invalid length.
[  377.904335][T22404] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  377.911508][T22402] netlink: zone id is out of range
[  377.913332][T22402] netlink: zone id is out of range
[  377.915359][T22402] netlink: zone id is out of range
[  377.918524][T22402] netlink: zone id is out of range
[  377.920839][T22402] netlink: zone id is out of range
[  377.922555][T22402] netlink: zone id is out of range
[  377.924531][T22402] netlink: zone id is out of range
[  377.926330][T22402] netlink: zone id is out of range
[  377.929412][T22402] netlink: zone id is out of range
[  377.931285][T22402] netlink: zone id is out of range
[  378.579864][T22442] __nla_validate_parse: 3 callbacks suppressed
[  378.579876][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7236'.
[  378.872516][T22451] netlink: 'syz.2.7240': attribute type 1 has an invalid length.
[  378.875007][T22451] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7240'.
[  379.029170][T22457] netlink: 360 bytes leftover after parsing attributes in process `syz.3.7243'.
[  379.085476][T22459] xt_l2tp: missing protocol rule (udp|l2tpip)
[  380.664672][T22574] vxcan1 speed is unknown, defaulting to 1000
[  380.707476][T22580] netlink: 'syz.3.7299': attribute type 11 has an invalid length.
[  380.712780][T22580] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7299'.
[  380.810247][T22583] netlink: 'syz.3.7301': attribute type 11 has an invalid length.
[  381.105088][T22597] bridge4: entered allmulticast mode
[  381.126158][T22574] wg1 speed is unknown, defaulting to 1000
[  381.624357][T22625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7317'.
[  381.813137][T22640] netlink: 'syz.2.7323': attribute type 1 has an invalid length.
[  381.816174][T22640] netlink: 'syz.2.7323': attribute type 11 has an invalid length.
[  381.823148][T22640] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7323'.
[  381.836924][T22643] netlink: 'syz.3.7325': attribute type 1 has an invalid length.
[  381.850980][T22643] netlink: 'syz.3.7325': attribute type 4 has an invalid length.
[  381.854370][T22643] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7325'.
[  381.965001][T22647] 8021q: adding VLAN 0 to HW filter on device bond7
[  382.182340][T22671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7336'.
[  382.226114][T22674] netlink: 'syz.0.7337': attribute type 1 has an invalid length.
[  382.231235][T22674] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7337'.
[  382.234565][T22674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7337'.
[  383.241235][T22707] lo: entered promiscuous mode
[  383.251409][T22707] net_ratelimit: 7 callbacks suppressed
[  383.251421][T22707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  383.750046][T22740] block nbd0: Unsupported socket: shutdown callout must be supported.
[  384.133296][T22761] netlink: 'syz.2.7374': attribute type 83 has an invalid length.
[  384.489956][T22772] tun0: tun_chr_ioctl cmd 2148045848
[  384.493398][T22772] tun0: tun_chr_ioctl cmd 21731
[  385.085039][T22813] netlink: 'syz.0.7399': attribute type 32 has an invalid length.
[  385.087480][T22813] __nla_validate_parse: 2 callbacks suppressed
[  385.087489][T22813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7399'.
[  385.097211][T22813] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  385.361868][T22832] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  385.367859][T22832] macsec1: entered promiscuous mode
[  385.371130][T22832] macsec1: entered allmulticast mode
[  385.373388][T22832] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  386.045838][T22838] netlink: 'syz.2.7409': attribute type 1 has an invalid length.
[  386.077732][T22838] 8021q: adding VLAN 0 to HW filter on device bond8
[  386.117373][T22838] bond8: (slave geneve3): making interface the new active one
[  386.127713][T22838] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  386.135699][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.168513][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.171970][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.196676][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.355523][T22860] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.359586][T22860] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  386.362354][T22860] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  386.371861][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7420'.
[  386.382812][T22862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7420'.
[  386.413621][T22862] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7420'.
[  386.563613][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  387.767541][T22918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7442'.
[  388.110284][T22944] delete_channel: no stack
[  388.180268][T22948] pim6reg1: entered allmulticast mode
[  388.435223][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7467'.
[  388.468947][T22968] batman_adv: batadv0: Removing interface: virt_wifi0
[  388.787150][T23002] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  388.936930][T23008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.955510][T23005] tipc: Resetting bearer <eth:syzkaller0>
[  389.928324][ T5921] tipc: Node number set to 1831006361
[  391.346924][T23005] tipc: Disabling bearer <eth:syzkaller0>
[  392.225360][T23095] tap0: tun_chr_ioctl cmd 1074025680
[  392.231320][T23095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.236123][T23095] D: renamed from syzkaller0
[  392.241926][T23095] tipc: Disabling bearer <eth:syzkaller0>
[  392.533774][T23111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7528'.
[  392.680545][T23103] tipc: Disabling bearer <eth:team0>
[  392.710711][T23103] team0 (unregistering): Port device team_slave_1 removed
[  392.730660][T23103] team0 (unregistering): Port device bridge4 removed
[  392.756559][T23107] syzkaller1: entered promiscuous mode
[  392.764086][T23107] syzkaller1: entered allmulticast mode
[  393.011664][T23137] tipc: Invalid UDP bearer configuration
[  393.011723][T23137] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  393.388503][T23167] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7551'.
[  393.431093][T23169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7552'.
[  393.949846][T23199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7566'.
[  394.085753][T23204] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  394.090274][T23204] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  394.397669][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7574'.
[  394.547790][T23225] tc_dump_action: action bad kind
[  394.727147][T23238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7585'.
[  395.130906][T23261] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7595'.
[  395.161940][T23261] vlan3: entered allmulticast mode
[  395.163881][T23261] gretap0: entered allmulticast mode
[  395.975539][T23301] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  396.056607][T23305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7613'.
[  396.432738][T23336] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7624'.
[  396.549839][T23344] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7633'.
[  397.064776][T23368] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  397.519174][T23401] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.539333][T23433] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  398.676363][T23439] bridge0: port 1(veth0_to_bridge) entered blocking state
[  398.683963][T23439] bridge0: port 1(veth0_to_bridge) entered disabled state
[  398.687367][T23439] veth0_to_bridge: entered allmulticast mode
[  398.693113][T23439] veth0_to_bridge: entered promiscuous mode
[  399.172206][T23456] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  399.187073][T23456] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  399.666072][T23486] netlink: 'syz.3.7698': attribute type 1 has an invalid length.
[  399.669299][T23486] netlink: 'syz.3.7698': attribute type 2 has an invalid length.
[  400.585786][T23512] mac80211_hwsim hwsim23 wlan0: left allmulticast mode
[  400.628701][ T5885] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.632360][ T5885] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  400.636231][ T5885] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.643553][ T5885] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  400.647092][ T5885] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.658812][ T5885] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  400.662396][ T5885] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.665896][ T5885] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  401.168394][ T5856] Bluetooth: hci2: command 0x0406 tx timeout
[  401.181279][T23554] __nla_validate_parse: 6 callbacks suppressed
[  401.181298][T23554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7729'.
[  401.203454][T23558] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7731'.
[  401.402407][T23573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7738'.
[  401.406280][T23573] netlink: 560 bytes leftover after parsing attributes in process `syz.0.7738'.
[  401.561141][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7746'.
[  401.564682][T23589] netlink: 'syz.2.7746': attribute type 5 has an invalid length.
[  401.567764][T23589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7746'.
[  401.727185][  T793] IPVS: starting estimator thread 0...
[  401.733143][T23604] tipc: Enabled bearer <udp:s>, priority 6
[  401.734567][T23607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7754'.
[  401.752150][T22847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.754831][T22847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.760526][T22847] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.763843][T22847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.818500][T23606] IPVS: using max 62 ests per chain, 148800 per kthread
[  402.041404][T23633] pim6reg1: entered promiscuous mode
[  402.043395][T23633] pim6reg1: entered allmulticast mode
[  402.146783][T23641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7767'.
[  402.166226][T23638] vxcan1 speed is unknown, defaulting to 1000
[  402.374231][T23638] wg1 speed is unknown, defaulting to 1000
[  402.618703][T22093] Bluetooth: hci3: link tx timeout
[  402.621097][T22093] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  402.626581][T22093] Bluetooth: hci3: link tx timeout
[  402.629726][T22093] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  402.636408][T22093] Bluetooth: hci3: link tx timeout
[  402.638711][T22093] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  402.641745][T22093] Bluetooth: hci3: link tx timeout
[  402.643655][T22093] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  402.766743][T22093] Bluetooth: hci3: link tx timeout
[  402.769482][T22093] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  402.772625][T22093] Bluetooth: hci3: link tx timeout
[  402.774789][T22093] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  402.790720][T22093] Bluetooth: hci3: link tx timeout
[  402.793645][T22093] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  402.796647][T22093] Bluetooth: hci3: link tx timeout
[  402.798887][T22093] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  402.816652][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7782'.
[  402.828953][T22093] Bluetooth: hci3: link tx timeout
[  402.831103][T22093] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  402.834190][T22093] Bluetooth: hci3: link tx timeout
[  402.836965][T22093] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  402.932798][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7785'.
[  402.936340][T23691] netlink: 'syz.3.7785': attribute type 13 has an invalid length.
[  402.958155][T23691] netlink: 'syz.3.7785': attribute type 12 has an invalid length.
[  403.321939][T23721] netlink: 'syz.2.7797': attribute type 1 has an invalid length.
[  403.369967][T23721] 8021q: adding VLAN 0 to HW filter on device bond9
[  403.500174][T22093] Bluetooth: hci3: link tx timeout
[  403.502331][T22093] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  403.505376][T22093] Bluetooth: hci3: link tx timeout
[  403.507582][T22093] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  403.892358][T22093] Bluetooth: hci3: link tx timeout
[  403.894188][T22093] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  403.897142][T22093] Bluetooth: hci3: link tx timeout
[  403.899395][T22093] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  403.931095][T22093] Bluetooth: hci3: link tx timeout
[  403.933268][T22093] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  403.936264][T22093] Bluetooth: hci3: link tx timeout
[  403.939077][T22093] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  404.400345][T22093] Bluetooth: hci3: link tx timeout
[  404.402502][T22093] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  404.406083][T22093] Bluetooth: hci3: link tx timeout
[  404.407741][T22093] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  404.688889][T22093] Bluetooth: hci3: command 0x040f tx timeout
[  404.951948][T23805] netlink: 'syz.3.7823': attribute type 2 has an invalid length.
[  405.504427][T23845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.508108][T23845] syzkaller0: entered promiscuous mode
[  405.510312][T23845] syzkaller0: entered allmulticast mode
[  405.527680][T23845] tipc: Resetting bearer <eth:syzkaller0>
[  405.533089][T23844] tipc: Resetting bearer <eth:syzkaller0>
[  405.585071][T23844] tipc: Disabling bearer <eth:syzkaller0>
[  406.501421][T23905] __nla_validate_parse: 6 callbacks suppressed
[  406.501434][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7855'.
[  406.649637][T23910] vxcan1 speed is unknown, defaulting to 1000
[  406.768421][T22093] Bluetooth: hci3: command 0x040f tx timeout
[  406.781355][T23910] wg1 speed is unknown, defaulting to 1000
[  407.036681][T23928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7864'.
[  407.060082][T23929] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  407.065761][T23929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7866'.
[  407.461472][T23957] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  407.465100][T23957] tipc: New replicast peer: 255.255.255.255
[  407.870371][T23992] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7891'.
[  407.979890][T23992] batadv1: entered promiscuous mode
[  407.983605][T23992] batadv1: entered allmulticast mode
[  408.549060][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7905'.
[  408.552862][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7905'.
[  408.664086][T24033] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  408.724459][T24036] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7907'.
[  408.733578][T24036] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7907'.
[  408.737637][T24036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7907'.
[  408.848264][ T5856] Bluetooth: hci3: command 0x040f tx timeout
[  408.901890][T24049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7912'.
[  408.997319][T24058] veth0: entered promiscuous mode
[  409.051749][T24058] veth0 (unregistering): left promiscuous mode
[  409.304009][T24083] netlink: 'syz.3.7924': attribute type 62 has an invalid length.
[  409.351458][T24088] netlink: 'syz.3.7927': attribute type 1 has an invalid length.
[  409.592287][T24112] netlink: 'syz.0.7939': attribute type 27 has an invalid length.
[  410.325418][T24171] netlink: 'syz.0.7966': attribute type 10 has an invalid length.
[  410.839341][T24206] tap0: tun_chr_ioctl cmd 1074025677
[  410.841877][T24206] tap0: linktype set to 776
[  410.936015][T24209] netlink: 'syz.3.7978': attribute type 2 has an invalid length.
[  410.944463][T24209] netlink: 'syz.3.7978': attribute type 2 has an invalid length.
[  411.728205][T24240] netlink: 'syz.0.7992': attribute type 32 has an invalid length.
[  412.265331][T24284] __nla_validate_parse: 9 callbacks suppressed
[  412.265353][T24284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8010'.
[  412.607327][T24293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  412.971292][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8019'.
[  413.108558][T24313] Bluetooth: MGMT ver 1.23
[  413.121889][T24313] netlink: 'syz.0.8021': attribute type 4 has an invalid length.
[  413.202279][T24316] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  413.205088][T24316] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  413.208513][T24316] tipc: Resetting bearer <eth:syzkaller0>
[  413.212521][T24316] tipc: Resetting bearer <eth:syzkaller0>
[  413.276791][T24320] bond0: Error: Cannot enslave bond to itself.
[  413.285200][T24322] netlink: 'syz.0.8025': attribute type 2 has an invalid length.
[  413.291529][T24322] netlink: 'syz.0.8025': attribute type 1 has an invalid length.
[  413.773440][T24361] netlink: 'syz.3.8044': attribute type 5 has an invalid length.
[  413.907250][T24373] sctp: [Deprecated]: syz.3.8050 (pid 24373) Use of struct sctp_assoc_value in delayed_ack socket option.
[  413.907250][T24373] Use struct sctp_sack_info instead
[  414.039504][T24388] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  414.042595][T24388] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  414.418973][T24420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8070'.
[  415.168730][T22093] Bluetooth: hci3: command 0x040f tx timeout
[  415.250867][T24471] netlink: 296 bytes leftover after parsing attributes in process `syz.3.8095'.
[  415.306842][T24473] Unsupported ieee802154 address type: 0
[  415.424272][ T5885] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  415.720364][T24505] delete_channel: no stack
[  415.807451][T24512] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8107'.
[  416.135775][T24533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8120'.
[  416.791369][T24565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8136'.
[  416.934965][T24575] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8141'.
[  417.114007][T24590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8147'.
[  417.354716][T24615] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8157'.
[  417.366199][T24615] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8157'.
[  417.373587][T24615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8157'.
[  417.535139][T24628] vxcan1 speed is unknown, defaulting to 1000
[  417.700874][T24628] wg1 speed is unknown, defaulting to 1000
[  417.750476][T24640] tipc: Resetting bearer <eth:syzkaller0>
[  418.015320][T24648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8167'.
[  418.024893][T24648] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8167'.
[  418.292100][ T5885] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  418.630764][T24686] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  418.636547][T24686] batman_adv: batadv0: Adding interface: gretap3
[  418.641266][T24686] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.656295][T24686] batman_adv: batadv0: Interface activated: gretap3
[  418.764646][T24697] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.8179'.
[  418.900939][T24703] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  419.093536][T24720] syzkaller1: entered promiscuous mode
[  419.096050][T24720] syzkaller1: entered allmulticast mode
[  419.155293][T24723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8189'.
[  419.602619][T24738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8199'.
[  420.519893][T24768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8212'.
[  420.524626][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8212'.
[  420.584666][   T33] audit: type=1804 audit(1758813963.566:9): pid=24770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8213" name="cgroup.controllers" dev="tmpfs" ino=4440 res=1 errno=0
[  420.603761][   T33] audit: type=1800 audit(1758813963.586:10): pid=24770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8213" name="cgroup.controllers" dev="tmpfs" ino=4440 res=0 errno=0
[  420.687272][T24776] netlink: 'syz.0.8216': attribute type 1 has an invalid length.
[  420.693280][T24776] netlink: 'syz.0.8216': attribute type 1 has an invalid length.
[  421.115084][T24806] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  421.143900][T24806] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  421.210201][T24808] vxcan1 speed is unknown, defaulting to 1000
[  421.743527][T24808] wg1 speed is unknown, defaulting to 1000
[  421.955094][T24830] openvswitch: netlink: Flow key attribute not present in set flow.
[  422.269454][T24847] netlink: 'syz.2.8250': attribute type 6 has an invalid length.
[  422.273669][T24847] netlink: 'syz.2.8250': attribute type 6 has an invalid length.
[  422.443542][T24854] delete_channel: no stack
[  422.470331][T24857] netlink: 'syz.2.8254': attribute type 1 has an invalid length.
[  422.481699][T24857] __nla_validate_parse: 3 callbacks suppressed
[  422.481718][T24857] netlink: 236 bytes leftover after parsing attributes in process `syz.2.8254'.
[  422.547802][T24859] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8255'.
[  422.558403][T24859] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8255'.
[  422.877387][T24877] netlink: 'syz.2.8265': attribute type 4 has an invalid length.
[  422.995452][T24889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8270'.
[  423.001087][T24889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8270'.
[  423.173240][T24901] netlink: 'syz.3.8276': attribute type 10 has an invalid length.
[  423.353208][T24918] netlink: 'syz.3.8282': attribute type 9 has an invalid length.
[  423.484477][T24926] bridge0: port 1(erspan0) entered blocking state
[  423.489879][T24926] bridge0: port 1(erspan0) entered disabled state
[  423.494034][T24926] erspan0: entered allmulticast mode
[  423.500332][T24926] erspan0: entered promiscuous mode
[  423.566001][T24927] erspan0: left allmulticast mode
[  423.577999][T24927] erspan0: left promiscuous mode
[  423.580447][T24927] bridge0: port 1(erspan0) entered disabled state
[  423.877291][T24955] netlink: 'syz.0.8302': attribute type 1 has an invalid length.
[  423.885056][T24955] netlink: 'syz.0.8302': attribute type 2 has an invalid length.
[  423.917491][T24957] vxcan1 speed is unknown, defaulting to 1000
[  424.026750][T24957] wg1 speed is unknown, defaulting to 1000
[  424.544420][T24985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8314'.
[  424.549250][T24985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8314'.
[  424.650146][T24987] vxcan1 speed is unknown, defaulting to 1000
[  424.788256][T24987] wg1 speed is unknown, defaulting to 1000
[  425.152082][T25018] vxcan1 speed is unknown, defaulting to 1000
[  425.325716][T25018] wg1 speed is unknown, defaulting to 1000
[  425.435920][T25034] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8334'.
[  425.486724][T25038] netlink: 360 bytes leftover after parsing attributes in process `syz.2.8337'.
[  425.785632][T25057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8344'.
[  426.051930][T25077] nbd: illegal input index 65508
[  426.245299][T25091] xt_limit: Overflow, try lower: 604147548/4200216962
[  427.239401][T25169] validate_nla: 4 callbacks suppressed
[  427.239419][T25169] netlink: 'syz.3.8399': attribute type 1 has an invalid length.
[  427.273800][T25169] bond4: entered promiscuous mode
[  427.275767][T25169] 8021q: adding VLAN 0 to HW filter on device bond4
[  427.292433][T25169] bond4: (slave bridge7): making interface the new active one
[  427.294923][T25169] bridge7: entered promiscuous mode
[  427.297471][T25169] bond4: (slave bridge7): Enslaving as an active interface with an up link
[  427.503278][T25194] netlink: 'syz.3.8411': attribute type 1 has an invalid length.
[  427.641235][T25208] __nla_validate_parse: 14 callbacks suppressed
[  427.641261][T25208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8417'.
[  427.648983][T25208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8417'.
[  427.952472][T25231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8426'.
[  429.253275][T25279] vxcan1 speed is unknown, defaulting to 1000
[  429.274743][T25286] netlink: 'syz.0.8450': attribute type 10 has an invalid length.
[  429.298175][T25286] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.302070][T25286] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  429.336862][T25286] netlink: 'syz.0.8450': attribute type 10 has an invalid length.
[  429.341352][T25286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8450'.
[  429.345683][T25286] batadv0: entered promiscuous mode
[  429.347798][T25286] batadv0: entered allmulticast mode
[  429.373795][T25286] bond0: (slave batadv0): Releasing backup interface
[  429.382331][T25286] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  429.412194][T25290] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  429.467731][T25279] wg1 speed is unknown, defaulting to 1000
[  429.662815][T25306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8462'.
[  429.665903][T25306] vlan0: entered promiscuous mode
[  429.668573][T25306] geneve1: entered promiscuous mode
[  429.980015][T25331] netlink: 'syz.2.8474': attribute type 10 has an invalid length.
[  429.983251][T25331] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  430.085853][T25339] vxcan1 speed is unknown, defaulting to 1000
[  430.150415][T25342] veth0: entered promiscuous mode
[  430.239930][T25339] wg1 speed is unknown, defaulting to 1000
[  430.270319][T25347] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  430.296505][T25342] netlink: 'syz.2.8478': attribute type 16 has an invalid length.
[  430.300577][T25342] netlink: 'syz.2.8478': attribute type 17 has an invalid length.
[  430.339366][T25342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  430.400628][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  430.416938][T25342] veth0: left promiscuous mode
[  430.479213][T25359] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8485'.
[  430.928213][ T5921] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  431.168982][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  431.973693][T25420] netlink: zone id is out of range
[  431.976826][T25420] netlink: zone id is out of range
[  431.981536][T25420] netlink: zone id is out of range
[  431.984334][T25420] netlink: zone id is out of range
[  432.069383][T25420] netlink: set zone limit has 4 unknown bytes
[  432.081405][T25424] netlink: del zone limit has 4 unknown bytes
[  432.218829][ T5885] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  432.228440][ T5885] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  432.259017][ T5921] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  432.716849][T25469] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  432.746789][T25469] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  432.749383][T25469] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  432.752208][T25469] tipc: Resetting bearer <eth:syzkaller0>
[  432.775663][T25469] tipc: Resetting bearer <eth:syzkaller0>
[  432.919034][T25479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8535'.
[  432.956692][T25486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8538'.
[  432.962184][T25471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8532'.
[  433.214870][T25507] netlink: 'syz.3.8547': attribute type 5 has an invalid length.
[  433.693402][T25538] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  434.298213][T25568] IPVS: Scheduler module ip_vs_ not found
[  434.595557][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8579'.
[  434.646012][T25594] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8583'.
[  434.659988][T25594] netlink: 'syz.2.8583': attribute type 1 has an invalid length.
[  434.675461][T25597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8584'.
[  434.679352][T25594] 8021q: adding VLAN 0 to HW filter on device bond10
[  434.700952][T25594] bond10: (slave gretap4): making interface the new active one
[  434.704645][T25594] bond10: (slave gretap4): Enslaving as an active interface with an up link
[  434.709659][T25597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8584'.
[  435.102736][T25627] netlink: 'syz.3.8599': attribute type 2 has an invalid length.
[  435.646153][T25669] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8619'.
[  435.651800][T25669] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8619'.
[  435.728151][T22093] Bluetooth: hci0: command tx timeout
[  435.970827][T25687] netlink: 'syz.3.8628': attribute type 2 has an invalid length.
[  435.986958][T25687] : entered promiscuous mode
[  436.213839][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  436.272979][T25707] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  436.325118][T25709] netlink: 'syz.2.8638': attribute type 21 has an invalid length.
[  436.328647][T25709] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8638'.
[  436.467471][T25721] netlink: 'syz.0.8644': attribute type 11 has an invalid length.
[  436.739327][T25739] vlan4: entered allmulticast mode
[  436.741783][T25739] bridge_slave_0: entered allmulticast mode
[  436.929541][T25751] netlink: 'syz.2.8659': attribute type 1 has an invalid length.
[  436.974057][T25751] bond11: (slave bridge14): making interface the new active one
[  436.976864][T25751] bond11: (slave bridge14): Enslaving as an active interface with an up link
[  437.029449][T25756] nbd: couldn't find a device at index 0
[  437.205346][   T33] audit: type=1800 audit(1758813980.186:11): pid=25766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8666" name="@" dev="tmpfs" ino=5145 res=0 errno=0
[  437.876679][T25826] pim6reg1: entered promiscuous mode
[  437.880262][T25826] pim6reg1: entered allmulticast mode
[  437.979961][T25828] tipc: New replicast peer: 255.255.255.255
[  437.982554][T25828] tipc: Enabled bearer <udp:syz2>, priority 6
[  438.112043][T25834] __nla_validate_parse: 1 callbacks suppressed
[  438.112059][T25834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8697'.
[  438.259315][T25844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8700'.
[  438.275327][T25844] 8021q: adding VLAN 0 to HW filter on device bond5
[  438.289291][T25844] bond5: entered promiscuous mode
[  438.459704][T25856] vxcan1 speed is unknown, defaulting to 1000
[  438.533311][T25859] netlink: 248 bytes leftover after parsing attributes in process `syz.0.8706'.
[  438.681998][T25856] wg1 speed is unknown, defaulting to 1000
[  438.742093][ T5885] nci: nci_rx_work: unknown MT 0x1
[  439.155535][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8722'.
[  439.673465][T25929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8730'.
[  439.881238][T25949] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8738'.
[  440.227444][T25972] netlink: 'syz.0.8747': attribute type 1 has an invalid length.
[  440.242122][T25972] netlink: 'syz.0.8747': attribute type 4 has an invalid length.
[  440.244737][T25972] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8747'.
[  440.252817][T25972] netlink: 'syz.0.8747': attribute type 1 has an invalid length.
[  440.255459][T25972] netlink: 'syz.0.8747': attribute type 4 has an invalid length.
[  440.260843][T25972] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8747'.
[  441.168493][T26044] IPv6: Can't replace route, no match found
[  441.293439][T26052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8784'.
[  441.296961][T26052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8784'.
[  441.935685][T26082] netlink: 'syz.3.8798': attribute type 1 has an invalid length.
[  441.942304][T26082] netlink: 'syz.3.8798': attribute type 4 has an invalid length.
[  442.331454][T26109] netlink: 'syz.3.8812': attribute type 2 has an invalid length.
[  443.897315][T26130] __nla_validate_parse: 1 callbacks suppressed
[  443.897329][T26130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8820'.
[  443.905382][T26130] tipc: Enabled bearer <eth:vlan0>, priority 18
[  444.043056][T26143] netlink: 'syz.2.8826': attribute type 2 has an invalid length.
[  444.045801][T26143] netlink: 'syz.2.8826': attribute type 1 has an invalid length.
[  444.164829][T26156] netlink: 'syz.3.8832': attribute type 39 has an invalid length.
[  444.216077][T26161] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8832'.
[  444.223542][T26161] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8832'.
[  444.227209][T26161] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8832'.
[  444.254434][T26161] vlan3: entered allmulticast mode
[  444.539355][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  444.588800][T26179] pim6reg1: entered promiscuous mode
[  444.591202][T26179] pim6reg1: entered allmulticast mode
[  444.860897][T26201] delete_channel: no stack
[  445.116420][T26223] delete_channel: no stack
[  445.347478][T26233] validate_nla: 1 callbacks suppressed
[  445.347500][T26233] netlink: 'syz.3.8862': attribute type 1 has an invalid length.
[  445.353793][T26233] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8862'.
[  445.423493][T26237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  445.448775][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  445.485847][T26239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8867'.
[  445.746511][T26251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  445.808880][   T34] INFO: task kworker/u8:2:5750 blocked for more than 143 seconds.
[  445.813294][   T34]       Not tainted syzkaller #0
[  445.815255][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  445.821587][   T34] task:kworker/u8:2    state:D stack:22296 pid:5750  tgid:5750  ppid:2      task_flags:0x4208160 flags:0x00004000
[  445.830634][   T34] Workqueue: netns cleanup_net
[  445.832728][   T34] Call Trace:
[  445.834205][   T34]  <TASK>
[  445.835508][   T34]  __schedule+0x1798/0x4cc0
[  445.837469][   T34]  ? __lock_acquire+0xab9/0xd20
[  445.840782][   T34]  ? __lock_acquire+0xab9/0xd20
[  445.842713][   T34]  ? __pfx___schedule+0x10/0x10
[  445.844680][   T34]  ? schedule+0x91/0x360
[  445.846302][   T34]  schedule+0x165/0x360
[  445.847650][   T34]  schedule_preempt_disabled+0x13/0x30
[  445.853043][   T34]  __mutex_lock+0x7e6/0x1350
[  445.855115][   T34]  ? __mutex_lock+0x5bb/0x1350
[  445.857153][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  445.860410][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  445.863398][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  445.865864][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  445.871565][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  445.877262][   T34]  ? _raw_spin_unlock+0x28/0x50
[  445.884131][   T34]  rdma_dev_change_netns+0x39/0x300
[  445.891053][   T34]  rdma_dev_exit_net+0x203/0x340
[  445.904400][   T34]  ? __pfx___might_resched+0x10/0x10
[  445.910816][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  445.918528][   T34]  ? net_generic+0x1e/0x240
[  445.922828][   T34]  ? mutex_is_locked+0x17/0x50
[  445.927163][   T34]  ? rtnl_is_locked+0x15/0x20
[  445.933852][   T34]  ops_undo_list+0x49a/0x990
[  445.938438][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  445.942931][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  445.947442][   T34]  cleanup_net+0x4c5/0x800
[  445.951829][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  445.959143][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  445.961028][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  445.963075][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  445.965053][   T34]  process_scheduled_works+0xae1/0x17b0
[  445.966874][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  445.991344][   T34]  worker_thread+0x8a0/0xda0
[  445.993083][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  445.995306][   T34]  ? __kthread_parkme+0x7b/0x200
[  445.996842][   T34]  kthread+0x711/0x8a0
[  446.007978][   T34]  ? __pfx_worker_thread+0x10/0x10
[  446.009635][   T34]  ? __pfx_kthread+0x10/0x10
[  446.011115][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  446.012955][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  446.014956][   T34]  ? __pfx_kthread+0x10/0x10
[  446.016753][   T34]  ret_from_fork+0x439/0x7d0
[  446.018754][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  446.020608][   T34]  ? __switch_to_asm+0x39/0x70
[  446.022164][   T34]  ? __switch_to_asm+0x33/0x70
[  446.023618][   T34]  ? __pfx_kthread+0x10/0x10
[  446.025055][   T34]  ret_from_fork_asm+0x1a/0x30
[  446.026557][   T34]  </TASK>
[  446.027642][   T34] INFO: task syz.1.5212:17782 blocked for more than 143 seconds.
[  446.030559][   T34]       Not tainted syzkaller #0
[  446.032061][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  446.035297][   T34] task:syz.1.5212      state:D stack:23576 pid:17782 tgid:17781 ppid:16013  task_flags:0x400140 flags:0x00004004
[  446.039869][   T34] Call Trace:
[  446.040948][   T34]  <TASK>
[  446.041888][   T34]  __schedule+0x1798/0x4cc0
[  446.043373][   T34]  ? validate_chain+0x897/0x2140
[  446.044932][   T34]  ? __lock_acquire+0xab9/0xd20
[  446.046423][   T34]  ? __pfx___schedule+0x10/0x10
[  446.051344][   T34]  ? schedule+0x91/0x360
[  446.052787][   T34]  schedule+0x165/0x360
[  446.054049][   T34]  schedule_timeout+0x9a/0x270
[  446.056112][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  446.057784][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  446.059834][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  446.061523][   T34]  ? wait_for_completion+0x267/0x5d0
[  446.063256][   T34]  wait_for_completion+0x2bf/0x5d0
[  446.065139][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  446.066828][   T34]  ? up_write+0x1c4/0x420
[  446.068571][   T34]  ? remove_client_context+0xc0/0x1e0
[  446.070635][   T34]  disable_device+0x1c6/0x320
[  446.072238][   T34]  ? __pfx_disable_device+0x10/0x10
[  446.074094][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  446.075838][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  446.077748][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  446.080289][   T34]  nldev_dellink+0x2d1/0x320
[  446.081938][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  446.083840][   T34]  ? apparmor_capable+0x137/0x1b0
[  446.085408][   T34]  ? bpf_lsm_capable+0x9/0x20
[  446.087124][   T34]  ? security_capable+0x7e/0x2e0
[  446.089355][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  446.090987][   T34]  rdma_nl_rcv+0x6ae/0x980
[  446.092386][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  446.093865][   T34]  ? __lock_acquire+0xab9/0xd20
[  446.095406][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  446.097034][   T34]  netlink_unicast+0x82f/0x9e0
[  446.098999][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  446.101045][   T34]  ? netlink_sendmsg+0x642/0xb30
[  446.102867][   T34]  ? skb_put+0x11b/0x210
[  446.104174][   T34]  netlink_sendmsg+0x805/0xb30
[  446.105794][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.107482][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  446.109660][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.111385][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.113149][   T34]  __sock_sendmsg+0x21c/0x270
[  446.114705][   T34]  ____sys_sendmsg+0x505/0x830
[  446.116456][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.118945][   T34]  ? import_iovec+0x74/0xa0
[  446.120282][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  446.121715][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.123309][   T34]  ? __fget_files+0x2a/0x420
[  446.124946][   T34]  ? __fget_files+0x3a0/0x420
[  446.126428][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  446.128578][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  446.130600][   T34]  ? rcu_is_watching+0x15/0xb0
[  446.132121][   T34]  ? do_syscall_64+0xbe/0x3b0
[  446.133841][   T34]  do_syscall_64+0xfa/0x3b0
[  446.135398][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  446.137234][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.139723][   T34]  ? exc_page_fault+0x9f/0xf0
[  446.141246][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.143234][   T34] RIP: 0033:0x7fe677b8ec29
[  446.145032][   T34] RSP: 002b:00007fe678aac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.149381][   T34] RAX: ffffffffffffffda RBX: 00007fe677dd5fa0 RCX: 00007fe677b8ec29
[  446.152760][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004
[  446.155748][   T34] RBP: 00007fe677c11e41 R08: 0000000000000000 R09: 0000000000000000
[  446.159487][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  446.162651][   T34] R13: 00007fe677dd6038 R14: 00007fe677dd5fa0 R15: 00007ffd8da19198
[  446.166036][   T34]  </TASK>
[  446.167542][   T34] 
[  446.167542][   T34] Showing all locks held in the system:
[  446.171258][   T34] 5 locks held by kworker/0:0/9:
[  446.173395][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  446.177109][   T34]  #1: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  446.181387][   T34]  #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390
[  446.185128][   T34]  #3: ffff88804b033cc8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x110/0x410
[  446.189146][   T34]  #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: list_lru_del_obj+0xbe/0x270
[  446.192907][   T34] 1 lock held by khungtaskd/34:
[  446.194965][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  446.198877][   T34] 2 locks held by kworker/0:2/793:
[  446.200838][   T34]  #0: ffff888020f06948 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  446.204541][   T34]  #1: ffffc9000499fbc0 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  446.209520][   T34] 2 locks held by getty/5682:
[  446.210994][   T34]  #0: ffff888021dfb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  446.214051][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  446.217457][   T34] 4 locks held by kworker/u8:2/5750:
[  446.219953][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  446.223452][   T34]  #1: ffffc90002e0fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  446.226817][   T34]  #2: ffffffff8f52d430 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  446.231051][   T34]  #3: ffff88811249c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  446.234912][   T34] 1 lock held by syz-executor/5854:
[  446.236512][   T34] 5 locks held by syz-executor/5858:
[  446.256774][   T34]  #0: ffff8881105b8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  446.262904][   T34]  #1: ffff8881105b80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  446.266144][   T34]  #2: ffffffff8f69ec28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  446.280604][   T34]  #3: ffff888020dd8338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  446.283711][   T34]  #4: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  446.287200][   T34] 2 locks held by syz.1.5212/17782:
[  446.308110][   T34]  #0: ffffffff99e6f8f8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  446.312085][   T34]  #1: ffff88811249c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  446.316507][   T34] 1 lock held by syz.3.8862/26225:
[  446.328812][   T34] 
[  446.329866][   T34] =============================================
[  446.329866][   T34] 
[  446.333046][   T34] NMI backtrace for cpu 1
[  446.333079][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  446.333096][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  446.333105][   T34] Call Trace:
[  446.333114][   T34]  <TASK>
[  446.333123][   T34]  dump_stack_lvl+0x189/0x250
[  446.333150][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  446.333168][   T34]  ? __pfx__printk+0x10/0x10
[  446.333198][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  446.333224][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  446.333246][   T34]  ? __pfx__printk+0x10/0x10
[  446.333269][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  446.333295][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  446.333319][   T34]  watchdog+0xf93/0xfe0
[  446.333343][   T34]  ? watchdog+0x1de/0xfe0
[  446.333367][   T34]  kthread+0x711/0x8a0
[  446.333387][   T34]  ? __pfx_watchdog+0x10/0x10
[  446.333405][   T34]  ? __pfx_kthread+0x10/0x10
[  446.333423][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  446.333439][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  446.333454][   T34]  ? __pfx_kthread+0x10/0x10
[  446.333472][   T34]  ret_from_fork+0x439/0x7d0
[  446.333489][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  446.333507][   T34]  ? __switch_to_asm+0x39/0x70
[  446.333525][   T34]  ? __switch_to_asm+0x33/0x70
[  446.333541][   T34]  ? __pfx_kthread+0x10/0x10
[  446.333559][   T34]  ret_from_fork_asm+0x1a/0x30
[  446.333589][   T34]  </TASK>
[  446.333595][   T34] Sending NMI from CPU 1 to CPUs 0:
[  446.392518][    C0] NMI backtrace for cpu 0
[  446.392542][    C0] CPU: 0 UID: 0 PID: 5854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  446.392558][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  446.392566][    C0] RIP: 0010:__rcu_read_unlock+0x6d/0xe0
[  446.392593][    C0] Code: 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 43 0f b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c <41> 5d 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb eb e8 6c 00 00
[  446.392605][    C0] RSP: 0018:ffffc90003bef758 EFLAGS: 00000287
[  446.392618][    C0] RAX: 0000000000000000 RBX: 00007fd666613401 RCX: 5f47f02b9d15a600
[  446.392627][    C0] RDX: 0000000000000000 RSI: ffffffff8dba9ab8 RDI: ffff88810a2f5640
[  446.392636][    C0] RBP: dffffc0000000000 R08: 0000000000000022 R09: ffffffff8172d195
[  446.392645][    C0] R10: ffffc90003bef898 R11: ffffffff81ac4b00 R12: 00007ffdba4f63b8
[  446.392680][    C0] R13: ffffc90003be8000 R14: ffff88810a2f5a88 R15: dffffc0000000000
[  446.392690][    C0] FS:  000055556e85f500(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  446.392701][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  446.392709][    C0] CR2: 00007fc636887e20 CR3: 00000001110e2000 CR4: 00000000000006f0
[  446.392743][    C0] Call Trace:
[  446.392750][    C0]  <TASK>
[  446.392756][    C0]  ? unwind_next_frame+0xa5/0x2390
[  446.392773][    C0]  unwind_next_frame+0x19ae/0x2390
[  446.392789][    C0]  ? unwind_next_frame+0xa5/0x2390
[  446.392803][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.392818][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  446.392836][    C0]  arch_stack_walk+0x11c/0x150
[  446.392854][    C0]  stack_trace_save+0x9c/0xe0
[  446.392866][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  446.392881][    C0]  save_stack+0xf5/0x1f0
[  446.392899][    C0]  ? __pfx_save_stack+0x10/0x10
[  446.392912][    C0]  ? __free_frozen_pages+0xbc4/0xd30
[  446.392933][    C0]  ? vfree+0x25a/0x400
[  446.392947][    C0]  ? kcov_close+0x28/0x50
[  446.392963][    C0]  ? __fput+0x44c/0xa70
[  446.392975][    C0]  ? task_work_run+0x1d4/0x260
[  446.392992][    C0]  ? do_exit+0x6b5/0x2300
[  446.393007][    C0]  ? do_group_exit+0x21c/0x2d0
[  446.393022][    C0]  ? __x64_sys_exit_group+0x3f/0x40
[  446.393036][    C0]  ? x64_sys_call+0x21f7/0x2200
[  446.393054][    C0]  ? do_syscall_64+0xfa/0x3b0
[  446.393076][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.393095][    C0]  __reset_page_owner+0x71/0x1f0
[  446.393112][    C0]  __free_frozen_pages+0xbc4/0xd30
[  446.393133][    C0]  vfree+0x25a/0x400
[  446.393150][    C0]  ? __pfx_kcov_close+0x10/0x10
[  446.393165][    C0]  kcov_close+0x28/0x50
[  446.393181][    C0]  __fput+0x44c/0xa70
[  446.393198][    C0]  task_work_run+0x1d4/0x260
[  446.393215][    C0]  ? __pfx_task_work_run+0x10/0x10
[  446.393232][    C0]  ? kmem_cache_free+0x18f/0x400
[  446.393253][    C0]  do_exit+0x6b5/0x2300
[  446.393270][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  446.393287][    C0]  ? __pfx_do_exit+0x10/0x10
[  446.393305][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  446.393319][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  446.393335][    C0]  do_group_exit+0x21c/0x2d0
[  446.393353][    C0]  __x64_sys_exit_group+0x3f/0x40
[  446.393367][    C0]  x64_sys_call+0x21f7/0x2200
[  446.393383][    C0]  do_syscall_64+0xfa/0x3b0
[  446.393397][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  446.393411][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.393422][    C0]  ? exc_page_fault+0x9f/0xf0
[  446.393437][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.393449][    C0] RIP: 0033:0x7fd66658ec29
[  446.393460][    C0] Code: Unable to access opcode bytes at 0x7fd66658ebff.
[  446.393466][    C0] RSP: 002b:00007ffdba4f63b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  446.393480][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd66658ec29
[  446.393489][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  446.393497][    C0] RBP: 00007fd666613437 R08: 00007ffdba4f4156 R09: 00000000000927c0
[  446.393505][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020
[  446.393512][    C0] R13: 00000000000927c0 R14: 000000000006cd18 R15: 00007ffdba4f6570
[  446.393526][    C0]  </TASK>
[  446.398461][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  446.398482][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  446.398497][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  446.398507][   T34] Call Trace:
[  446.398517][   T34]  <TASK>
[  446.398525][   T34]  dump_stack_lvl+0x99/0x250
[  446.398548][   T34]  ? __asan_memcpy+0x40/0x70
[  446.398567][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  446.398584][   T34]  ? __pfx__printk+0x10/0x10
[  446.398613][   T34]  vpanic+0x281/0x750
[  446.398632][   T34]  ? __pfx_vpanic+0x10/0x10
[  446.398646][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  446.398704][   T34]  ? preempt_schedule+0xae/0xc0
[  446.398721][   T34]  ? preempt_schedule_common+0x83/0xd0
[  446.398740][   T34]  panic+0xb9/0xc0
[  446.398756][   T34]  ? __pfx_panic+0x10/0x10
[  446.398772][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  446.398790][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  446.398814][   T34]  watchdog+0xfd2/0xfe0
[  446.398836][   T34]  ? watchdog+0x1de/0xfe0
[  446.398858][   T34]  kthread+0x711/0x8a0
[  446.398888][   T34]  ? __pfx_watchdog+0x10/0x10
[  446.398907][   T34]  ? __pfx_kthread+0x10/0x10
[  446.398924][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  446.398939][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  446.398954][   T34]  ? __pfx_kthread+0x10/0x10
[  446.398972][   T34]  ret_from_fork+0x439/0x7d0
[  446.398991][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  446.399010][   T34]  ? __switch_to_asm+0x39/0x70
[  446.399027][   T34]  ? __switch_to_asm+0x33/0x70
[  446.399043][   T34]  ? __pfx_kthread+0x10/0x10
[  446.399061][   T34]  ret_from_fork_asm+0x1a/0x30
[  446.399091][   T34]  </TASK>
[  446.591786][   T34] Kernel Offset: disabled
[  446.593196][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:26:28  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820959bc RBX=0000000000000002 RCX=ffff8881138b1cc0 RDX=0000000000000000
RSI=8000000021506007 RDI=0000000000000000 RBP=ffffc90004fe7650 RSP=ffffc90004fe73a0
R8 =ffffea0000854173 R9 =1ffffd400010a82e R10=dffffc0000000000 R11=fffff9400010a82f
R12=00007fdd5ddff000 R13=00007fdd5ddfd000 R14=ffff88803df7cfe8 R15=8000000021506007
RIP=ffffffff820959c8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdd5edf26c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555af3579000 CR3=00000001291f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f185fa12e7b
XMM06=0000000000000000 00007f185fa12e75 XMM07=0000000000000000 00007f185fa12e89
XMM08=0000000000000000 00007f185fa12f0f XMM09=0000000000000000 00007f185fa12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888020698237 R9 =1ffff110040d3046 R10=dffffc0000000000 R11=ffffffff854f95c0
R12=dffffc0000000000 R13=ffffffff99b028f2 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f963c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32f20ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c59e ffffffff8133c59e
XMM02=00007fdd5e1a7498 ffffffff8133c59e XMM03=00007fdd5e1a74a8 00007fdd5e1a74a0
XMM04=00007fdd5ed0d100 00007fdd5e1a7460 XMM05=00007fdd5e1a7478 00007fdd5e1a74c0
XMM06=00007fdd5e1a74b8 00007fdd5e1a74b0 XMM07=00007fdd5e1a74a8 00007fdd5e1a74a0
XMM08=0000000000000000 00007fdd5e012f0f XMM09=0000000000000000 00007fdd5e012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
