last executing test programs:

2.238984157s ago: executing program 0 (id=6060):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x24000045)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000040))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)

1.45972363s ago: executing program 0 (id=6073):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x800}}}, 0x84)

1.358182331s ago: executing program 0 (id=6074):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.160050961s ago: executing program 0 (id=6076):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="9558d3f0", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000005c0)='g', 0x1}], 0x1, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x3f0}}], 0x2, 0x900)

1.11030894s ago: executing program 0 (id=6077):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c)

1.048917413s ago: executing program 0 (id=6078):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5b, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shutdown(r0, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0)

570.815ms ago: executing program 1 (id=6087):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x38}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xef}]}}}]}, 0x40}}, 0x0)

450.892239ms ago: executing program 1 (id=6089):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, 0x1411, 0xf0b6070418eb8a8d, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)

348.104451ms ago: executing program 2 (id=6090):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x6, 0xc, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000000000000000000090000008500000011000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000f1bcd399b81e1011f5aa5e5c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

347.868225ms ago: executing program 1 (id=6091):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)

277.699337ms ago: executing program 2 (id=6092):
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x20, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xd64e, [0x4]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0)

218.021208ms ago: executing program 2 (id=6093):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}}, 0x40010)

217.820805ms ago: executing program 1 (id=6094):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

139.204418ms ago: executing program 2 (id=6095):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x8, 0x2}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480)="121d74", &(0x7f0000000280)=@udp=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20)

139.030477ms ago: executing program 1 (id=6096):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10)

79.672635ms ago: executing program 2 (id=6097):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94)

78.685213ms ago: executing program 1 (id=6098):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)

0s ago: executing program 2 (id=6099):
r0 = socket$netlink(0x10, 0x3, 0x15)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x4b, 0x3, 0x7005132, "8f5151239582"}})

kernel console output (not intermixed with test programs):

netdevsim0 (while UP)
[   80.926493][ T6635] ieee802154 phy0 wpan0: encryption failed: -90
[   81.047359][ T6643] syzkaller1: entered promiscuous mode
[   81.049992][ T6643] syzkaller1: entered allmulticast mode
[   81.129905][ T6647] bridge1: entered allmulticast mode
[   81.377352][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.380983][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.508241][ T6661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.518914][ T6661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.604245][ T6661] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0
[   81.610203][ T6661] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.613892][ T6661] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.617485][ T6661] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.689848][ T6661] syz.2.333 (6661) used greatest stack depth: 20728 bytes left
[   82.349119][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'.
[   82.360244][ T6710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.351'.
[   82.758987][ T6728] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   83.132934][ T6755] netlink: 'syz.2.371': attribute type 21 has an invalid length.
[   83.145491][ T6755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.371'.
[   83.254011][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.266081][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.738339][ T6803] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   83.793202][ T6805] netlink: 176956 bytes leftover after parsing attributes in process `syz.0.393'.
[   83.874409][ T6809] netlink: 2 bytes leftover after parsing attributes in process `syz.2.395'.
[   83.896605][ T6811] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.918957][ T5897] IPVS: starting estimator thread 0...
[   84.006856][ T6815] IPVS: using max 62 ests per chain, 148800 per kthread
[   84.149553][ T6833] nbd: must specify at least one socket
[   84.263846][ T5867] IPVS: starting estimator thread 0...
[   84.359824][ T6846] IPVS: using max 51 ests per chain, 122400 per kthread
[   84.590088][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'.
[   84.713712][ T6877] vlan2: entered allmulticast mode
[   84.716399][ T6877] syz_tun: entered allmulticast mode
[   85.324167][ T6905] tipc: Started in network mode
[   85.327687][ T6905] tipc: Node identity 86744ad5f219, cluster identity 4711
[   85.330961][ T6905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.335480][ T6905] syzkaller0: entered promiscuous mode
[   85.340503][ T6905] syzkaller0: entered allmulticast mode
[   85.362086][ T6905] tipc: Resetting bearer <eth:syzkaller0>
[   85.368471][ T6904] tipc: Resetting bearer <eth:syzkaller0>
[   85.377270][ T6904] tipc: Disabling bearer <eth:syzkaller0>
[   85.473396][ T6915] Bluetooth: MGMT ver 1.23
[   85.591046][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'.
[   85.597220][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'.
[   85.692589][ T6925] netlink: 14 bytes leftover after parsing attributes in process `syz.1.442'.
[   85.829802][ T6929] tipc: New replicast peer: 0.0.0.0
[   85.832441][ T6929] tipc: Enabled bearer <udp:syz2>, priority 10
[   85.838532][ T6929] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   85.964310][ T6933] tipc: Started in network mode
[   85.966640][ T6933] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   85.969697][ T6933] tipc: Enabled bearer <eth:team0>, priority 0
[   85.983894][ T6935] vlan2: entered promiscuous mode
[   85.988476][ T6935] bridge0: entered promiscuous mode
[   86.274699][ T6956] openvswitch: netlink: Message has 4 unknown bytes.
[   86.508271][   T24] cfg80211: failed to load regulatory.db
[   86.587232][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'.
[   86.716166][ T6999] sctp: [Deprecated]: syz.1.470 (pid 6999) Use of int in max_burst socket option deprecated.
[   86.716166][ T6999] Use struct sctp_assoc_value instead
[   86.724399][ T6998] bridge1: entered promiscuous mode
[   86.730726][ T6998] bridge1: entered allmulticast mode
[   86.908913][ T7015] warning: `syz.2.480' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.946685][ T5897] tipc: Node number set to 1953319637
[   86.965410][  T971] tipc: Node number set to 11578026
[   87.746610][ T7079] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   87.749738][ T7079] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   88.633869][ T7156] netlink: 160 bytes leftover after parsing attributes in process `syz.2.506'.
[   88.639219][ T7156] NCSI netlink: No device for ifindex 0
[   89.115974][ T7187] netlink: 'syz.1.518': attribute type 1 has an invalid length.
[   89.454047][ T7200] tipc: Started in network mode
[   89.457172][ T7200] tipc: Node identity 56d6ccb2519b, cluster identity 4711
[   89.460170][ T7200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.463191][ T7200] syzkaller0: entered promiscuous mode
[   89.465754][ T7200] syzkaller0: entered allmulticast mode
[   89.474293][ T7198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.523'.
[   89.488343][ T7198] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   89.491943][ T7198] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   89.504698][ T7198] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   89.508236][ T7198] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   89.517932][ T7200] tipc: Resetting bearer <eth:syzkaller0>
[   89.545040][ T7199] tipc: Resetting bearer <eth:syzkaller0>
[   89.568999][ T7199] tipc: Disabling bearer <eth:syzkaller0>
[   89.664243][ T7209] syzkaller1: entered promiscuous mode
[   89.666542][ T7209] syzkaller1: entered allmulticast mode
[   90.052643][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'.
[   90.725293][ T7251] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   90.751557][ T7251] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   91.261353][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'.
[   91.268062][ T7298] veth1_macvtap: left promiscuous mode
[   91.911326][ T7355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'.
[   91.937648][ T7360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.577'.
[   92.445566][ T7404] netlink: 68 bytes leftover after parsing attributes in process `syz.2.596'.
[   92.693041][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'.
[   92.697971][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'.
[   92.702933][ T7426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.605'.
[   92.710071][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'.
[   92.713079][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'.
[   92.963184][ T7447] macsec1: entered promiscuous mode
[   92.965466][ T7447] macvlan1: entered promiscuous mode
[   92.967686][ T7447] macsec1: entered allmulticast mode
[   92.969743][ T7447] macvlan1: entered allmulticast mode
[   92.973510][ T7447] macvlan1: left allmulticast mode
[   92.978689][ T7447] macvlan1: left promiscuous mode
[   93.563167][ T7478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.571442][ T7478] syzkaller0: entered promiscuous mode
[   93.579149][ T7478] syzkaller0: entered allmulticast mode
[   93.605965][ T7478] tipc: Resetting bearer <eth:syzkaller0>
[   93.609136][ T7477] tipc: Resetting bearer <eth:syzkaller0>
[   93.622656][ T7477] tipc: Disabling bearer <eth:syzkaller0>
[   93.992167][ T7499] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[   94.150852][ T7521] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526
[   94.309070][ T7531] netlink: 'syz.1.655': attribute type 4 has an invalid length.
[   94.336678][ T7531] netlink: 'syz.1.655': attribute type 4 has an invalid length.
[   95.917080][ T7582] netlink: 'syz.0.676': attribute type 2 has an invalid length.
[   96.600737][ T7630] __nla_validate_parse: 4 callbacks suppressed
[   96.600748][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.700'.
[   96.607526][ T7630] netlink: 2 bytes leftover after parsing attributes in process `syz.0.700'.
[   96.766309][ T7646] bridge0: entered allmulticast mode
[   96.778197][ T7646] pim6reg: entered allmulticast mode
[   96.786456][ T7647] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.706'.
[   96.797377][ T7642] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.706'.
[   96.821918][ T7649] netlink: 32 bytes leftover after parsing attributes in process `syz.2.709'.
[   96.861986][ T7652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.868530][ T7652] syzkaller0: entered promiscuous mode
[   96.870899][ T7652] syzkaller0: entered allmulticast mode
[   96.900538][ T7652] tipc: Resetting bearer <eth:syzkaller0>
[   96.908042][ T7650] tipc: Resetting bearer <eth:syzkaller0>
[   96.942355][ T7650] tipc: Disabling bearer <eth:syzkaller0>
[   97.150251][ T7677] netlink: 'syz.1.723': attribute type 3 has an invalid length.
[   97.153355][ T7677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.216892][ T7684] netlink: 'syz.1.726': attribute type 1 has an invalid length.
[   97.257549][ T7684] bond1: (slave gretap1): making interface the new active one
[   97.262576][ T7684] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   97.280264][ T7684] vlan3: entered allmulticast mode
[   97.282398][ T7684] bond1: entered allmulticast mode
[   97.284718][ T7684] gretap1: entered allmulticast mode
[   97.288920][ T7684] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   97.311288][ T7689] netlink: 'syz.0.728': attribute type 7 has an invalid length.
[   97.593170][ T7703] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   97.661715][ T7703] bridge_slave_0: left allmulticast mode
[   97.663702][ T7703] bridge_slave_0: left promiscuous mode
[   97.671150][ T7703] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.705994][ T7703] bridge_slave_1: left allmulticast mode
[   97.709060][ T7703] bridge_slave_1: left promiscuous mode
[   97.711399][ T7703] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.724003][ T7703] bond0: (slave bond_slave_0): Releasing backup interface
[   97.733539][ T7703] bond0: (slave bond_slave_1): Releasing backup interface
[   97.766965][ T7703] team0: Port device team_slave_0 removed
[   97.785164][ T7703] team0: Port device team_slave_1 removed
[   97.788477][ T7703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.791659][ T7703] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.797741][ T7703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.800793][ T7703] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.815446][ T7703] bond1: (slave gretap1): Releasing active interface
[   97.818326][ T7703] gretap1: left allmulticast mode
[   97.833498][ T7714] netlink: 'syz.1.733': attribute type 10 has an invalid length.
[   97.854637][ T5897] syz0: Port: 1 Link DOWN
[   97.861337][ T7714] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   97.884332][ T7714] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.902894][ T7714] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   97.955264][ T7703] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   97.959669][ T7703] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   98.757664][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'.
[   98.791629][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'.
[   98.800901][ T7777] bridge2: entered promiscuous mode
[   98.803488][ T7777] macsec1: entered promiscuous mode
[   98.806909][ T7777] macsec1: entered allmulticast mode
[   98.814796][ T7777] bridge2: entered allmulticast mode
[   98.818955][ T7777] bridge2: port 1(macsec1) entered blocking state
[   98.821794][ T7777] bridge2: port 1(macsec1) entered disabled state
[   98.830964][ T7777] bridge2: left allmulticast mode
[   98.833486][ T7777] bridge2: left promiscuous mode
[   99.073546][ T7788] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   99.250772][ T7794] netlink: 32 bytes leftover after parsing attributes in process `syz.2.772'.
[  101.969291][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.815'.
[  101.973101][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.815'.
[  101.995101][ T7893] netlink: 5 bytes leftover after parsing attributes in process `syz.2.815'.
[  102.090523][ T7899] netlink: 96 bytes leftover after parsing attributes in process `syz.0.818'.
[  102.096805][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'.
[  102.100267][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'.
[  102.103728][ T7901] netlink: 'syz.2.819': attribute type 5 has an invalid length.
[  102.409719][ T7921] netlink: 'syz.2.829': attribute type 1 has an invalid length.
[  102.430622][ T7921] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.471109][ T7921] bond2: (slave gretap1): making interface the new active one
[  102.477384][ T7921] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  102.888064][ T7947] lo speed is unknown, defaulting to 1000
[  102.890853][ T7947] lo speed is unknown, defaulting to 1000
[  102.893954][ T7947] lo speed is unknown, defaulting to 1000
[  102.907943][ T7947] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  102.923914][ T7947] lo speed is unknown, defaulting to 1000
[  102.932429][ T7947] lo speed is unknown, defaulting to 1000
[  102.936374][ T7947] lo speed is unknown, defaulting to 1000
[  102.941240][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'.
[  102.957680][ T7947] wg1: entered promiscuous mode
[  102.959347][ T7947] wg1: entered allmulticast mode
[  103.023752][ T7952] netlink: 'syz.2.836': attribute type 1 has an invalid length.
[  103.028221][ T7952] netlink: 228 bytes leftover after parsing attributes in process `syz.2.836'.
[  103.248288][ T7962] lo speed is unknown, defaulting to 1000
[  103.250970][ T7962] lo speed is unknown, defaulting to 1000
[  103.266173][ T7962] lo speed is unknown, defaulting to 1000
[  103.283958][ T7962] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  103.529779][ T7962] lo speed is unknown, defaulting to 1000
[  103.546185][ T7962] lo speed is unknown, defaulting to 1000
[  103.549444][ T7962] lo speed is unknown, defaulting to 1000
[  103.995616][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'.
[  103.999643][ T7983] vxlan0: left allmulticast mode
[  104.001816][ T7983] vxlan0: left promiscuous mode
[  104.004011][ T7983] bridge0: port 3(vxlan0) entered disabled state
[  104.018202][ T7983] bridge_slave_1: left allmulticast mode
[  104.020519][ T7983] bridge_slave_1: left promiscuous mode
[  104.033121][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.052538][ T7983] bridge_slave_0: left allmulticast mode
[  104.055581][ T7983] bridge_slave_0: left promiscuous mode
[  104.058099][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.233308][ T7997] lo speed is unknown, defaulting to 1000
[  104.238652][ T7997] lo speed is unknown, defaulting to 1000
[  104.689345][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.863'.
[  104.782730][ T8023] lo speed is unknown, defaulting to 1000
[  104.787172][ T8023] lo speed is unknown, defaulting to 1000
[  105.632743][ T8063] netlink: 'syz.0.881': attribute type 10 has an invalid length.
[  105.651669][ T8063] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.658033][ T8063] team0: Port device bond0 added
[  105.685057][ T8063] syz.0.881 (8063) used greatest stack depth: 20184 bytes left
[  105.998124][ T8083] netlink: 'syz.0.891': attribute type 1 has an invalid length.
[  107.034387][ T8138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.042470][ T8138] syzkaller0: entered promiscuous mode
[  107.047955][ T8138] syzkaller0: entered allmulticast mode
[  107.068403][ T8138] tipc: Resetting bearer <eth:syzkaller0>
[  107.073797][ T8137] tipc: Resetting bearer <eth:syzkaller0>
[  107.094290][ T8137] tipc: Disabling bearer <eth:syzkaller0>
[  107.202638][ T8145] ieee802154 phy0 wpan0: encryption failed: -22
[  108.885420][ T8167] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  109.239436][ T8201] __nla_validate_parse: 6 callbacks suppressed
[  109.239450][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'.
[  109.273584][ T8204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.948'.
[  109.591988][ T8224] syzkaller0: tun_chr_ioctl cmd 1074025677
[  109.602664][ T8224] syzkaller0: linktype set to 1
[  110.669523][ T8251] lo speed is unknown, defaulting to 1000
[  110.674471][ T8251] lo speed is unknown, defaulting to 1000
[  110.903104][ T8263] lo speed is unknown, defaulting to 1000
[  110.910859][ T8263] lo speed is unknown, defaulting to 1000
[  111.069506][ T8271] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  111.076203][ T8271] macvtap1: entered allmulticast mode
[  111.078379][ T8271] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  111.085145][ T8271] batman_adv: batadv0: Adding interface: macvtap1
[  111.087750][ T8271] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.097830][ T8271] batman_adv: batadv0: Interface activated: macvtap1
[  111.410414][ T8293] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.986'.
[  111.627513][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  111.800594][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'.
[  111.849865][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'.
[  111.851313][ T8325] 8021q: adding VLAN 0 to HW filter on device bond3
[  111.888180][ T8325] macvlan2: entered promiscuous mode
[  111.890392][ T8325] macvlan2: entered allmulticast mode
[  111.900521][ T8325] bond0: entered allmulticast mode
[  111.902621][ T8325] bond_slave_0: entered allmulticast mode
[  111.907720][ T8325] bond_slave_1: entered allmulticast mode
[  111.911527][ T8325] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  111.919484][ T8325] bond3: (slave macvlan2): Enslaving as an active interface with an up link
[  112.040976][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'.
[  112.047405][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'.
[  112.278063][ T8362] batadv_slave_1: entered promiscuous mode
[  112.298215][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'.
[  112.325408][ T8367] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1022'.
[  112.478777][ T8367] team0: Port device bond0 removed
[  112.482622][ T8367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.491967][ T8367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.497804][ T8367] bond0 (unregistering): Released all slaves
[  112.652874][ T8382] bond0: entered promiscuous mode
[  112.655631][ T8382] bond0: entered allmulticast mode
[  112.658056][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.684945][ T8381] bond0: (slave wlan1): Releasing backup interface
[  112.755824][ T8381] netlink: 'syz.1.1029': attribute type 10 has an invalid length.
[  112.761939][ T8381] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  112.771324][ T8381] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  112.775569][ T8381] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  112.912610][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'.
[  112.925537][ T8402] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  113.148786][ T8417] syzkaller1: entered promiscuous mode
[  113.150809][ T8417] syzkaller1: entered allmulticast mode
[  113.230611][ T8421] netlink: 'syz.2.1046': attribute type 1 has an invalid length.
[  113.272834][ T8421] 8021q: adding VLAN 0 to HW filter on device bond4
[  113.290065][ T8421] bond4: (slave gretap2): making interface the new active one
[  113.293191][ T8424] netlink: 'syz.0.1047': attribute type 1 has an invalid length.
[  113.297271][ T8421] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  113.320975][ T8421] syz.2.1046 (8421) used greatest stack depth: 19304 bytes left
[  113.392436][ T8428] lo speed is unknown, defaulting to 1000
[  113.398123][ T8428] lo speed is unknown, defaulting to 1000
[  113.681075][ T8438] lo speed is unknown, defaulting to 1000
[  113.689134][ T8438] lo speed is unknown, defaulting to 1000
[  114.354450][ T8463] netlink: 'syz.2.1061': attribute type 1 has an invalid length.
[  114.573717][ T8476] __nla_validate_parse: 2 callbacks suppressed
[  114.573737][ T8476] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1065'.
[  114.671435][   T26] wlan1: Trigger new scan to find an IBSS to join
[  114.748558][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1071'.
[  115.243081][ T8514] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  115.518176][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1102'.
[  115.717657][ T8565] lo speed is unknown, defaulting to 1000
[  115.720613][ T8565] lo speed is unknown, defaulting to 1000
[  116.340383][ T8571] netlink: 'syz.1.1110': attribute type 32 has an invalid length.
[  116.649070][ T8589] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1114'.
[  116.839587][ T8594] openvswitch: netlink: IP tunnel dst address not specified
[  116.861984][ T8597] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  117.329752][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'.
[  117.360832][ T8638] tipc: Failed to remove unknown binding: 66,1,1/0:269019064/269019066
[  117.364390][ T8638] tipc: Failed to remove unknown binding: 66,1,1/0:269019064/269019066
[  117.463699][ T8642] lo speed is unknown, defaulting to 1000
[  117.627518][ T7111] wlan1: Creating new IBSS network, BSSID a6:18:dc:3a:89:4d
[  118.012380][ T8664] netlink: 'syz.0.1150': attribute type 1 has an invalid length.
[  118.016713][ T8664] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1150'.
[  118.019547][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1150'.
[  118.149019][ T8672] lo speed is unknown, defaulting to 1000
[  118.290721][ T8687] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1158'.
[  118.298386][ T8686] lo speed is unknown, defaulting to 1000
[  118.403672][ T8693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.407979][ T8693] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  118.411329][ T8693] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  118.432756][ T8693] tipc: Resetting bearer <eth:syzkaller0>
[  119.350728][ T8720] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  119.414943][ T5867] tipc: Node number set to 122539186
[  120.342030][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'.
[  120.968451][ T8797] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  121.088859][ T8806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.132783][ T8806] syzkaller0: entered promiscuous mode
[  121.135802][ T8806] syzkaller0: entered allmulticast mode
[  121.139158][ T8806] tipc: Resetting bearer <eth:syzkaller0>
[  121.144461][ T8804] tipc: Resetting bearer <eth:syzkaller0>
[  121.606869][   T54] Bluetooth: hci2: link tx timeout
[  121.614828][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  122.691477][ T8804] tipc: Disabling bearer <eth:syzkaller0>
[  122.972849][ T8861] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1230'.
[  122.978911][ T8865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.982228][ T8865] IPv6: NLM_F_CREATE should be set when creating new route
[  122.985167][ T8865] IPv6: NLM_F_CREATE should be set when creating new route
[  123.636107][ T5833] Bluetooth: hci2: command 0x0406 tx timeout
[  124.215847][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'.
[  124.667962][ T8940] lo speed is unknown, defaulting to 1000
[  125.636966][ T8966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1263'.
[  125.982965][ T8984] netlink: 'syz.2.1272': attribute type 27 has an invalid length.
[  126.071069][ T8988] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1274'.
[  126.296126][ T9001] ieee802154 phy0 wpan0: encryption failed: -90
[  126.623444][ T9034] lo speed is unknown, defaulting to 1000
[  126.661503][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'.
[  126.683797][ T9038] 8021q: adding VLAN 0 to HW filter on device bond5
[  126.704796][ T9034] 8021q: adding VLAN 0 to HW filter on device bond5
[  126.707569][ T9034] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  126.712583][ T9034] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  127.208705][ T9008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.408247][ T9057] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.411939][ T9057] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.416270][ T9057] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.420075][ T9057] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.516411][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'.
[  127.520034][ T9061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.523201][ T9061] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.532593][ T9061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.536318][ T9061] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.556077][ T9061] batman_adv: batadv0: Interface deactivated: macvtap1
[  127.558920][ T9061] batman_adv: batadv0: Removing interface: macvtap1
[  127.610208][ T9066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1305'.
[  127.727827][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1308'.
[  128.427538][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'.
[  128.760872][ T9124] infiniband syz1: set down
[  128.763052][ T9124] infiniband syz1: added veth1_vlan
[  128.820251][ T9124] RDS/IB: syz1: added
[  128.825945][ T9124] smc: adding ib device syz1 with port count 1
[  128.838322][ T9124] smc:    ib device syz1 port 1 has pnetid 
[  129.378162][ T9157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1348'.
[  129.630256][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1352'.
[  129.634117][ T9165] netlink: 'syz.2.1352': attribute type 1 has an invalid length.
[  129.638680][ T9165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1352'.
[  130.116278][ T9191] ieee802154 phy0 wpan0: encryption failed: -22
[  130.859324][ T9226] __nla_validate_parse: 4 callbacks suppressed
[  130.859347][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'.
[  131.084069][ T9244] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1387'.
[  131.685818][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1408'.
[  131.956209][ T9308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1419'.
[  132.588028][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  133.374940][ T9389] netlink: 'syz.0.1454': attribute type 21 has an invalid length.
[  133.377969][ T9389] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1454'.
[  133.381130][ T9389] netlink: 'syz.0.1454': attribute type 5 has an invalid length.
[  133.383856][ T9389] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1454'.
[  135.158911][ T9466] bond0: Device is already in use.
[  135.207678][ T9471] netlink: 'syz.1.1492': attribute type 2 has an invalid length.
[  135.330159][ T9484] netlink: 'syz.1.1498': attribute type 1 has an invalid length.
[  135.468223][ T9494] macsec1: entered promiscuous mode
[  135.474645][ T9494] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  135.480589][ T9494] macsec1: entered allmulticast mode
[  135.484179][ T9494] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  135.506797][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1504'.
[  135.561747][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1506'.
[  135.568347][ T9506] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  135.611645][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'.
[  135.730755][ T9523] netlink: 'syz.1.1515': attribute type 1 has an invalid length.
[  135.762098][ T9525] trusted_key: syz.2.1516 sent an empty control message without MSG_MORE.
[  135.780259][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'.
[  136.102966][ T9552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1524'.
[  136.212626][ T9557] lo speed is unknown, defaulting to 1000
[  136.354334][ T9562] lo speed is unknown, defaulting to 1000
[  136.547824][ T9571] syz_tun: entered allmulticast mode
[  136.576737][ T9571] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  136.658841][ T9577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1528'.
[  137.235967][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'.
[  137.909944][ T9667] batadv_slave_0: entered promiscuous mode
[  138.256930][ T9682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  138.259604][ T9682] IPv6: NLM_F_CREATE should be set when creating new route
[  138.418990][ T9696] tipc: Can't bind to reserved service type 0
[  138.521561][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'.
[  138.525804][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'.
[  138.528990][ T9705] netlink: 'syz.0.1577': attribute type 1 has an invalid length.
[  138.531766][ T9705] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1577'.
[  138.898457][ T9705] nbd: socks must be embedded in a SOCK_ITEM attr
[  138.901403][ T9705] block nbd0: shutting down sockets
[  139.002860][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'.
[  139.029347][ T9714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1581'.
[  139.642945][ T9746] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.181932][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'.
[  141.398359][ T9904] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1665'.
[  141.404704][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1665'.
[  141.929078][ T9938] netlink: 'syz.1.1680': attribute type 1 has an invalid length.
[  141.932531][ T9938] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1680'.
[  141.939032][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'.
[  142.819448][ T9992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1703'.
[  143.756617][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1728'.
[  143.886954][T10052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.204104][T10076] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.219031][T10076] 8021q: adding VLAN 0 to HW filter on device team0
[  144.249066][T10076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.288794][T10082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1746'.
[  144.292952][T10082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1746'.
[  144.298337][T10082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1746'.
[  144.899346][T10131] netlink: 'syz.0.1768': attribute type 8 has an invalid length.
[  145.221414][T10151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.264074][T10156] netlink: 'syz.0.1778': attribute type 1 has an invalid length.
[  146.214748][T10178] syzkaller1: entered promiscuous mode
[  146.217301][T10178] syzkaller1: entered allmulticast mode
[  146.254226][T10181] __nla_validate_parse: 31 callbacks suppressed
[  146.254248][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'.
[  146.858616][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'.
[  146.869165][T10201] macvtap1: entered promiscuous mode
[  146.871025][T10201] erspan0: entered promiscuous mode
[  146.872978][T10201] macvtap1: entered allmulticast mode
[  146.877915][T10201] erspan0: entered allmulticast mode
[  146.885493][T10201] erspan0: left allmulticast mode
[  146.887265][T10201] erspan0: left promiscuous mode
[  146.932651][T10203] ieee802154 phy0 wpan0: encryption failed: -22
[  146.937647][T10203] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1799'.
[  147.026045][T10203] batadv_slave_1: left promiscuous mode
[  147.113392][T10203] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.119593][T10203] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.123326][T10203] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.127529][T10203] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.161604][T10203] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.165971][T10203] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.169542][T10203] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.173090][T10203] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.183007][T10203] vlan2: left promiscuous mode
[  147.185587][T10203] bridge0: left promiscuous mode
[  147.188572][T10203] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  147.192249][T10203] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  147.197284][T10203] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  147.200844][T10203] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  147.275365][T10203] macvtap1: left promiscuous mode
[  147.549043][T10227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1809'.
[  147.552344][T10227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1809'.
[  147.560545][T10227] netlink: 'syz.0.1809': attribute type 4 has an invalid length.
[  147.594972][T10227] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1809'.
[  147.806910][T10235] netlink: del zone limit has 4 unknown bytes
[  148.033302][T10246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'.
[  148.402872][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'.
[  148.406270][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'.
[  148.412978][T10263] bridge0: port 1(vlan3) entered blocking state
[  148.416442][T10263] bridge0: port 1(vlan3) entered disabled state
[  148.419905][T10263] vlan3: entered allmulticast mode
[  148.422813][T10263] vlan3: left allmulticast mode
[  148.527217][T10269] bond0: (slave wlan1): Releasing backup interface
[  148.531113][T10269] bond0: Destroying bond
[  148.687196][T10269] bond0 (unregistering): Released all slaves
[  148.704255][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'.
[  149.084284][T10307] netlink: 'syz.1.1844': attribute type 1 has an invalid length.
[  149.089656][T10307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.152179][T10312] lo speed is unknown, defaulting to 1000
[  149.339731][T10324] netlink: 'syz.0.1850': attribute type 1 has an invalid length.
[  149.393276][T10324] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  149.486068][T10333] netlink: 'syz.1.1854': attribute type 9 has an invalid length.
[  149.488899][T10333] netlink: 'syz.1.1854': attribute type 6 has an invalid length.
[  149.550844][T10337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.865302][  T989] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  150.632458][T10428] lo speed is unknown, defaulting to 1000
[  150.791906][T10441] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  150.805018][T10441] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  151.033357][T10444] tipc: Enabled bearer <udp:syz2>, priority 10
[  151.512865][T10461] __nla_validate_parse: 7 callbacks suppressed
[  151.512881][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[  151.519693][T10461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.552773][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'.
[  151.702136][T10477] netlink: 'syz.2.1914': attribute type 1 has an invalid length.
[  151.707675][T10477] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1914'.
[  151.787389][T10480] lo speed is unknown, defaulting to 1000
[  152.000931][T10498] netlink: 'syz.0.1921': attribute type 1 has an invalid length.
[  152.760414][T10518] netlink: 'syz.2.1930': attribute type 2 has an invalid length.
[  152.875842][T10522] netlink: 'syz.2.1932': attribute type 21 has an invalid length.
[  152.878525][T10522] netlink: 'syz.2.1932': attribute type 1 has an invalid length.
[  152.881013][T10522] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1932'.
[  154.662734][T10627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1970'.
[  154.668177][T10627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1970'.
[  154.689751][T10622] lo speed is unknown, defaulting to 1000
[  154.690922][  T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.695297][  T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.706791][T10627] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1970'.
[  154.731693][T10626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.760719][T10696] netlink: 'syz.1.2001': attribute type 3 has an invalid length.
[  155.837365][T10696] 8021q: adding VLAN 0 to HW filter on device team0
[  155.856298][T10696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.879518][    T9] lo speed is unknown, defaulting to 1000
[  155.882188][    T9] syz2: Port: 1 Link ACTIVE
[  156.158415][T10718] netlink: 'syz.0.2011': attribute type 21 has an invalid length.
[  156.161081][T10718] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2011'.
[  156.164445][T10718] netlink: 'syz.0.2011': attribute type 4 has an invalid length.
[  156.168510][T10718] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2011'.
[  156.319440][T10731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2014'.
[  156.323201][T10731] netlink: 'syz.1.2014': attribute type 32 has an invalid length.
[  156.745281][T10767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2033'.
[  156.748945][T10767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2033'.
[  156.851967][T10771] syzkaller1: entered promiscuous mode
[  156.854302][T10771] syzkaller1: entered allmulticast mode
[  156.855341][T10775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2036'.
[  156.979837][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2040'.
[  157.015683][T10783] bond0: (slave rose0): Enslaving as an active interface with an up link
[  158.255452][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'.
[  158.360473][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'.
[  158.368871][T10835] bridge0: entered promiscuous mode
[  158.370966][T10835] macvtap1: entered promiscuous mode
[  158.372811][T10835] macvtap1: entered allmulticast mode
[  158.375006][T10835] bridge0: entered allmulticast mode
[  158.379891][T10835] bridge0: left allmulticast mode
[  158.381659][T10835] bridge0: left promiscuous mode
[  158.406718][T10836] netlink: 'syz.0.2059': attribute type 39 has an invalid length.
[  158.417654][T10836] veth0_macvtap: left promiscuous mode
[  159.686145][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'.
[  159.689909][T10904] netlink: 'syz.0.2092': attribute type 18 has an invalid length.
[  159.705161][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'.
[  159.711787][T10904] netlink: 'syz.0.2092': attribute type 18 has an invalid length.
[  159.749909][T10906] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.753338][T10906] syzkaller0: entered promiscuous mode
[  159.755718][T10906] syzkaller0: entered allmulticast mode
[  159.779361][T10906] tipc: Resetting bearer <eth:syzkaller0>
[  159.787515][T10905] tipc: Resetting bearer <eth:syzkaller0>
[  159.841285][T10905] tipc: Disabling bearer <eth:syzkaller0>
[  159.941090][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2098'.
[  159.992085][T10920] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2099'.
[  160.227172][T10943] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.517643][T10963] gtp0: entered promiscuous mode
[  160.782388][   T33] audit: type=1800 audit(1753962099.012:2): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2121" name="memory.events" dev="tmpfs" ino=3651 res=0 errno=0
[  161.600375][T11019] netlink: 'syz.0.2138': attribute type 1 has an invalid length.
[  161.623536][T11019] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.712793][T11029] sctp: [Deprecated]: syz.0.2143 (pid 11029) Use of int in max_burst socket option deprecated.
[  161.712793][T11029] Use struct sctp_assoc_value instead
[  161.855611][T11039] __nla_validate_parse: 8 callbacks suppressed
[  161.855629][T11039] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2148'.
[  162.057847][T11050] bridge2: entered allmulticast mode
[  162.334013][T11073] netlink: 'syz.1.2165': attribute type 1 has an invalid length.
[  162.378313][T11076] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  162.501157][T11085] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2171'.
[  162.626334][T11100] sctp: [Deprecated]: syz.2.2178 (pid 11100) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.626334][T11100] Use struct sctp_sack_info instead
[  163.288626][T11135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  164.571878][T11219] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.578119][T11219] team0: Port device bond0 added
[  164.627463][T11222] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  165.206812][T11266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.264372][T11269] netlink: 704 bytes leftover after parsing attributes in process `syz.2.2247'.
[  165.448601][T11285] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2254'.
[  165.456038][T11285] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2254'.
[  166.008367][T11338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2280'.
[  166.012043][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'.
[  166.504010][T11377] bridge0: port 1(macvlan4) entered blocking state
[  166.511577][T11377] bridge0: port 1(macvlan4) entered disabled state
[  166.515329][T11377] macvlan4: entered allmulticast mode
[  166.517700][T11377] bridge0: entered allmulticast mode
[  166.522541][T11377] macvlan4: left allmulticast mode
[  166.525752][T11377] bridge0: left allmulticast mode
[  166.579263][T11374] lo speed is unknown, defaulting to 1000
[  166.962038][T11400] openvswitch: netlink: IP tunnel dst address not specified
[  168.431135][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2328'.
[  168.619346][T11462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.120214][T11476] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2337'.
[  170.136512][T11499] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  170.283283][T11505] tipc: Resetting bearer <eth:team0>
[  170.487211][T11505] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.490061][T11505] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.492924][T11505] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.497007][T11505] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.538779][T11505] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  170.545679][T11505] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.548713][T11505] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.551610][T11505] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.554316][T11505] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.679303][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2352'.
[  170.823241][T11522] gretap0: entered promiscuous mode
[  170.828817][T11522] vlan3: entered promiscuous mode
[  171.007135][T11532] sctp: [Deprecated]: syz.2.2360 (pid 11532) Use of struct sctp_assoc_value in delayed_ack socket option.
[  171.007135][T11532] Use struct sctp_sack_info instead
[  171.281983][T11542] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.2364'.
[  171.291501][T11549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2366'.
[  171.318299][ T5833] Bluetooth: hci2: command 0x0406 tx timeout
[  171.788528][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2378'.
[  171.802600][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'.
[  172.159233][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'.
[  172.793653][T11643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2406'.
[  173.829896][T11703] ip6erspan0: entered allmulticast mode
[  174.071417][T11712] openvswitch: netlink: nsh attribute has 124 unknown bytes.
[  174.080433][T11712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.396485][T11721] nbd0: detected capacity change from 0 to 127
[  174.401937][   T56] block nbd0: Receive control failed (result -104)
[  174.477821][T11728] bridge4: entered promiscuous mode
[  174.626970][T11742] syzkaller1: entered promiscuous mode
[  174.628980][T11742] syzkaller1: entered allmulticast mode
[  175.092184][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'.
[  175.129731][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'.
[  175.149292][T11762] bridge0 (unregistering): left allmulticast mode
[  175.368154][T11772] netlink: 'syz.1.2454': attribute type 6 has an invalid length.
[  175.372061][T11772] netlink: 'syz.1.2454': attribute type 6 has an invalid length.
[  175.613313][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'.
[  175.782670][T11796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.789216][T11796] syzkaller0: entered promiscuous mode
[  175.791631][T11796] syzkaller0: entered allmulticast mode
[  175.799783][T11796] syzkaller0: left promiscuous mode
[  175.802026][T11796] syzkaller0: left allmulticast mode
[  175.810444][T11796] tipc: Resetting bearer <eth:syzkaller0>
[  175.814121][T11795] tipc: Resetting bearer <eth:syzkaller0>
[  175.846847][T11795] tipc: Disabling bearer <eth:syzkaller0>
[  176.346455][T11833] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2482'.
[  176.393186][T11837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2485'.
[  177.564279][T11878] netlink: 516 bytes leftover after parsing attributes in process `syz.0.2505'.
[  177.883195][T11898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2513'.
[  177.950037][T11902] netlink: del zone limit has 8 unknown bytes
[  178.551504][T11909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2517'.
[  178.684362][T11914] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  180.163889][T11948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.169049][T11948] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  180.172078][T11948] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  180.198681][T11948] tipc: Resetting bearer <eth:syzkaller0>
[  180.987750][T12000] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2558'.
[  181.071212][T12006] netlink: 'syz.0.2561': attribute type 32 has an invalid length.
[  181.228087][T12021] netlink: 'syz.2.2568': attribute type 1 has an invalid length.
[  181.231139][T12021] netlink: 'syz.2.2568': attribute type 2 has an invalid length.
[  181.300399][T12026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2570'.
[  181.595858][T12052] netlink: 'syz.1.2579': attribute type 4 has an invalid length.
[  181.609478][ T5897] lo speed is unknown, defaulting to 1000
[  181.611900][ T5897] syz2: Port: 1 Link DOWN
[  182.136473][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'.
[  182.140928][T12062] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  182.146157][T12062] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  182.731940][T12082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2595'.
[  182.924841][T12089] pimreg: entered allmulticast mode
[  183.280641][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2603'.
[  183.291956][T12100] pim6reg: entered allmulticast mode
[  183.299241][T12100] pim6reg: left allmulticast mode
[  183.465429][ T5833] Bluetooth: hci2: command 0x0406 tx timeout
[  183.768465][T12122] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.023191][T12140] netlink: 'syz.1.2622': attribute type 1 has an invalid length.
[  184.184487][T12149] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  184.422972][T12162] erspan1: entered promiscuous mode
[  184.425775][T12162] erspan1: entered allmulticast mode
[  184.831914][T12186] bridge0: port 1(syz_tun) entered blocking state
[  184.837709][T12186] bridge0: port 1(syz_tun) entered disabled state
[  184.840964][T12186] syz_tun: entered promiscuous mode
[  184.977408][T12197] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  184.991826][T12200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2648'.
[  186.697573][T12253] lo speed is unknown, defaulting to 1000
[  187.123337][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2671'.
[  187.460577][T12268] lo speed is unknown, defaulting to 1000
[  189.079333][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2696'.
[  189.412408][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2699'.
[  190.791979][T12362] netlink: 'syz.0.2711': attribute type 3 has an invalid length.
[  190.897444][T12368] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  190.990667][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  191.119080][T12378] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2718'.
[  191.373855][T12389] netlink: 'syz.0.2723': attribute type 1 has an invalid length.
[  191.491159][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'.
[  191.508736][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'.
[  191.542685][T12395] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2725'.
[  191.609236][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2726'.
[  192.714447][T12422] : entered promiscuous mode
[  192.812276][T12426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.911562][T12433] netlink: 'syz.1.2740': attribute type 14 has an invalid length.
[  192.915165][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'.
[  193.444155][T12452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2748'.
[  193.533673][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2747'.
[  193.540180][T12459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2747'.
[  193.543557][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2747'.
[  193.548601][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2747'.
[  193.604774][T12457] lo speed is unknown, defaulting to 1000
[  194.031012][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.337355][T12494] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2766'.
[  194.439741][T12498] lo speed is unknown, defaulting to 1000
[  195.340473][T12557] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2791'.
[  195.351587][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'.
[  195.457899][T12565] netlink: 'syz.0.2796': attribute type 4 has an invalid length.
[  195.468431][T12565] netlink: 'syz.0.2796': attribute type 4 has an invalid length.
[  196.349642][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2799'.
[  196.352468][T12574] netlink: 'syz.2.2799': attribute type 20 has an invalid length.
[  196.359735][T12574] netlink: 'syz.2.2799': attribute type 21 has an invalid length.
[  196.900854][T12622] veth1_to_bond: entered allmulticast mode
[  196.936129][T12622] bond0: (slave bond_slave_1): Releasing backup interface
[  196.938995][T12622] bond_slave_1 (unregistering): left promiscuous mode
[  196.941244][T12622] bond_slave_1 (unregistering): left allmulticast mode
[  196.991362][T12622] veth1_to_bond (unregistering): left allmulticast mode
[  197.027824][T12631] vti0: entered promiscuous mode
[  197.029845][T12631] vti0: entered allmulticast mode
[  197.190123][T12645] netlink: 'syz.0.2832': attribute type 29 has an invalid length.
[  197.197479][T12645] netlink: 'syz.0.2832': attribute type 29 has an invalid length.
[  197.329814][T12657] netlink: 'syz.1.2836': attribute type 39 has an invalid length.
[  197.399826][T12661] vxcan0: entered promiscuous mode
[  197.751995][T12677] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  198.553401][T12705] lo speed is unknown, defaulting to 1000
[  198.647556][T12709] netlink: 'syz.0.2856': attribute type 1 has an invalid length.
[  198.688859][T12709] bond2: entered promiscuous mode
[  198.691495][T12709] bond2: entered allmulticast mode
[  198.699284][T12709] 8021q: adding VLAN 0 to HW filter on device bond2
[  198.888302][T12721] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  198.890616][T12721] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  199.479160][T12738] pim6reg: entered allmulticast mode
[  199.487218][T12738] pim6reg: left allmulticast mode
[  199.666451][T12741] IPVS: Scheduler module ip_vs_sip not found
[  200.768345][T12774] __nla_validate_parse: 3 callbacks suppressed
[  200.768356][T12774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2885'.
[  200.842141][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2887'.
[  200.857591][T12778] veth1: entered promiscuous mode
[  200.875307][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2887'.
[  200.886421][T12778] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  201.060719][T12800] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  201.096601][T12802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2894'.
[  201.578624][T12841] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2910'.
[  201.619817][T12843] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.2911'.
[  201.799939][T12849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  202.031060][T12873] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2922'.
[  202.043186][T12872] syz.1.2921 (12872) used obsolete PPPIOCDETACH ioctl
[  202.046040][T12873] netlink: 'syz.2.2922': attribute type 1 has an invalid length.
[  202.099097][T12877] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2924'.
[  202.557098][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2936'.
[  202.572145][T12906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2936'.
[  202.606790][T12906] bridge0: port 2(vlan2) entered blocking state
[  202.609706][T12906] bridge0: port 2(vlan2) entered disabled state
[  202.645232][T12906] vlan2: entered allmulticast mode
[  202.647272][T12906] bridge0: entered allmulticast mode
[  202.650995][T12906] vlan2: left allmulticast mode
[  202.652835][T12906] bridge0: left allmulticast mode
[  203.375092][   T33] audit: type=1800 audit(1753962141.592:3): pid=12929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2943" name=14 dev="tmpfs" ino=4883 res=0 errno=0
[  203.423726][T12933] vlan2: entered promiscuous mode
[  203.431340][T12933] team0: entered promiscuous mode
[  203.433552][T12933] team_slave_0: entered promiscuous mode
[  203.438028][T12933] team_slave_1: entered promiscuous mode
[  203.510529][T12939] tap0: tun_chr_ioctl cmd 35108
[  203.880827][T12965] netlink: 'syz.0.2953': attribute type 1 has an invalid length.
[  203.883906][T12965] netlink: 'syz.0.2953': attribute type 3 has an invalid length.
[  203.891254][T12965] NCSI netlink: No device for ifindex 246
[  204.217767][   T54] Bluetooth: hci2: link tx timeout
[  204.219866][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  204.230510][T12981] netlink: zone id is out of range
[  204.233250][T12981] netlink: zone id is out of range
[  204.235636][T12981] netlink: zone id is out of range
[  204.333756][T12981] netlink: zone id is out of range
[  204.355370][T12981] netlink: zone id is out of range
[  204.365151][T12981] netlink: zone id is out of range
[  204.378262][T12981] netlink: zone id is out of range
[  204.385007][T12981] netlink: zone id is out of range
[  204.394866][T12981] netlink: zone id is out of range
[  204.655830][T12996] lo speed is unknown, defaulting to 1000
[  204.723098][T13006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.729393][T13006] syzkaller0: entered promiscuous mode
[  204.731632][T13006] syzkaller0: entered allmulticast mode
[  204.858031][T13006] tipc: Resetting bearer <eth:syzkaller0>
[  204.872023][T13005] tipc: Resetting bearer <eth:syzkaller0>
[  204.894800][T13005] tipc: Disabling bearer <eth:syzkaller0>
[  204.947479][   T60] block nbd0: Possible stuck request ffff888020480000: control (read@0,1024B). Runtime 30 seconds
[  204.952567][   T60] block nbd0: Possible stuck request ffff888020480200: control (read@1024,1024B). Runtime 30 seconds
[  204.958904][   T60] block nbd0: Possible stuck request ffff888020480400: control (read@2048,1024B). Runtime 30 seconds
[  204.963230][   T60] block nbd0: Possible stuck request ffff888020480600: control (read@3072,1024B). Runtime 30 seconds
[  205.863957][T13064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  205.951494][   T54] Bluetooth: hci2: link tx timeout
[  205.953663][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  206.270163][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  207.122107][T13146] netlink: 'syz.0.3027': attribute type 4 has an invalid length.
[  207.501979][T13177] lo speed is unknown, defaulting to 1000
[  207.634026][T13189] __nla_validate_parse: 1 callbacks suppressed
[  207.634041][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'.
[  207.641119][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'.
[  207.660555][T13189] ip6tnl2: entered promiscuous mode
[  207.662793][T13189] ip6tnl2: entered allmulticast mode
[  207.763879][T13192] lo speed is unknown, defaulting to 1000
[  208.726747][T13227] lo speed is unknown, defaulting to 1000
[  208.825098][T13231] lo speed is unknown, defaulting to 1000
[  209.476536][T13245] netem: incorrect gi model size
[  209.479360][T13245] netem: change failed
[  209.581591][T13249] bridge1: left promiscuous mode
[  209.583381][T13249] bridge1: left allmulticast mode
[  209.587850][T13249] macvtap1: left allmulticast mode
[  209.589819][T13249] bond0: left promiscuous mode
[  209.591671][T13249] bond0: left allmulticast mode
[  209.596952][T13249] tipc: Resetting bearer <eth:syzkaller0>
[  209.610553][T13249] bridge2: left allmulticast mode
[  209.612692][T13249] bridge4: left promiscuous mode
[  209.617892][T13249] vti0: left promiscuous mode
[  209.620912][T13249] vti0: left allmulticast mode
[  209.670506][T13249] bond2: left promiscuous mode
[  209.676412][T13249] bond2: left allmulticast mode
[  209.688004][T13249] ip6tnl2: left promiscuous mode
[  209.692409][T13249] ip6tnl2: left allmulticast mode
[  209.948989][T13264] netlink: 'syz.0.3074': attribute type 1 has an invalid length.
[  209.994086][T13264] 8021q: adding VLAN 0 to HW filter on device bond3
[  210.015164][T13264] vlan2: entered allmulticast mode
[  210.017392][T13264] veth1: entered allmulticast mode
[  210.021549][T13264] bond3: (slave vlan2): Opening slave failed
[  210.752284][T13309] netlink: 'syz.2.3094': attribute type 1 has an invalid length.
[  210.755697][T13309] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3094'.
[  210.950465][T13321] lo speed is unknown, defaulting to 1000
[  211.951575][T13383] wireguard0: entered promiscuous mode
[  211.953418][T13383] wireguard0: entered allmulticast mode
[  212.107523][T13395] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3129'.
[  212.114727][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'.
[  212.121312][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'.
[  212.123212][T13396] dummy0: entered promiscuous mode
[  212.130798][T13396] dummy0: left promiscuous mode
[  212.263111][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3134'.
[  212.269037][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'.
[  212.272119][T13404] netlink: 'syz.0.3134': attribute type 18 has an invalid length.
[  212.312660][T13408] netlink: 'syz.0.3136': attribute type 7 has an invalid length.
[  212.315968][T13408] netlink: 'syz.0.3136': attribute type 8 has an invalid length.
[  212.912909][T13439] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  214.059541][T13458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.181121][T13469] veth1: left promiscuous mode
[  214.198801][T13469] bridge1: left allmulticast mode
[  214.202124][T13469] macvtap1: left allmulticast mode
[  214.210111][T13469] erspan1: left promiscuous mode
[  214.212275][T13469] erspan1: left allmulticast mode
[  214.741049][T13490] : renamed from bond_slave_0
[  215.166257][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3177'.
[  215.379392][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3182'.
[  215.590790][T13536] lo speed is unknown, defaulting to 1000
[  215.681242][T13545] netlink: 'syz.1.3191': attribute type 2 has an invalid length.
[  215.683991][T13545] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3191'.
[  216.441159][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3208'.
[  216.466073][T13583] netlink: 'syz.0.3209': attribute type 1 has an invalid length.
[  216.518037][T13583] 8021q: adding VLAN 0 to HW filter on device bond4
[  216.648175][T13587] 8021q: adding VLAN 0 to HW filter on device bond4
[  216.651664][T13587] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  216.662825][T13587] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  217.319947][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'.
[  217.601262][T13651] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.693187][T13654] lo speed is unknown, defaulting to 1000
[  217.704112][T13660] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3237'.
[  218.184437][T13687] net_ratelimit: 7 callbacks suppressed
[  218.184481][T13687] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  218.223919][T13689] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  218.377046][T13697] netlink: 'syz.0.3251': attribute type 1 has an invalid length.
[  218.381567][T13697] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3251'.
[  218.388025][T13697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3251'.
[  218.393493][T13699] rdma_op ffff8881068c69f0 conn xmit_rdma 0000000000000000
[  218.430211][T13701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3253'.
[  218.497771][T13709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3257'.
[  218.501566][T13710] netlink: zone id is out of range
[  218.726355][T13732] macvlan1: entered promiscuous mode
[  218.729285][T13732] ipvlan0: entered promiscuous mode
[  218.732124][T13732] ipvlan0: left promiscuous mode
[  218.737563][T13732] macvlan1: left promiscuous mode
[  218.747694][T13730] syzkaller1: entered promiscuous mode
[  218.749546][T13730] syzkaller1: entered allmulticast mode
[  219.030931][T13754] x9: renamed from bridge_slave_0
[  219.393778][T13778] netlink: 'syz.0.3288': attribute type 3 has an invalid length.
[  219.427045][T13781] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  219.429746][T13781] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  220.233113][T13831] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3313'.
[  220.241469][T13831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3313'.
[  220.560841][T13863] sock: sock_timestamping_bind_phc: sock not bind to device
[  220.598926][T13867] netlink: 'syz.1.3328': attribute type 5 has an invalid length.
[  220.943770][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3339'.
[  220.987556][T13894] macvlan4: entered allmulticast mode
[  220.989404][T13894] veth1_vlan: entered allmulticast mode
[  220.992618][T13894] veth1_vlan: left allmulticast mode
[  221.070544][T13902] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3344'.
[  221.182697][T13912] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  221.208358][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'.
[  221.323853][T13928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3357'.
[  221.985598][T13981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3371'.
[  221.988419][T13981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3371'.
[  222.002333][T13981] erspan0: entered promiscuous mode
[  222.017390][T13981] erspan0: left promiscuous mode
[  222.092911][T13993] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  222.099752][ T7114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.102318][ T7114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.273014][T14012] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3384'.
[  222.289590][T14011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3385'.
[  222.553477][T14041] pimreg: left allmulticast mode
[  223.408594][T14111] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  223.411749][T14111] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  223.499663][T14115] syzkaller1: entered promiscuous mode
[  223.501845][T14115] syzkaller1: entered allmulticast mode
[  223.928488][T14139] netlink: 'syz.1.3442': attribute type 4 has an invalid length.
[  223.939211][T14139] netlink: 'syz.1.3442': attribute type 4 has an invalid length.
[  223.952063][   T24] lo speed is unknown, defaulting to 1000
[  223.957458][   T24] syz2: Port: 1 Link ACTIVE
[  224.193402][T14159] netlink: 'syz.0.3452': attribute type 28 has an invalid length.
[  224.627507][T14184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.630836][T14184] syzkaller0: entered promiscuous mode
[  224.633014][T14184] syzkaller0: entered allmulticast mode
[  224.659885][T14184] tipc: Resetting bearer <eth:syzkaller0>
[  224.679402][T14183] tipc: Resetting bearer <eth:syzkaller0>
[  224.690880][T14183] tipc: Disabling bearer <eth:syzkaller0>
[  224.709399][T14188] netlink: 'syz.0.3465': attribute type 7 has an invalid length.
[  224.713035][T14188] netlink: 'syz.0.3465': attribute type 8 has an invalid length.
[  224.718229][T14188] netlink: 'syz.0.3465': attribute type 15 has an invalid length.
[  224.789665][T14191] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  224.990613][T14205] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  225.023470][T14206] macvlan4: entered allmulticast mode
[  225.026636][T14206] veth1_vlan: entered allmulticast mode
[  225.031056][T14206] veth1_vlan: left allmulticast mode
[  225.627403][T14262] __nla_validate_parse: 2 callbacks suppressed
[  225.627415][T14262] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3498'.
[  225.658651][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3500'.
[  225.662292][T14265] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3500'.
[  225.751757][T14269] lo speed is unknown, defaulting to 1000
[  225.796905][T14280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3506'.
[  225.799666][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3506'.
[  226.120531][T14299] smc: net device bond0 applied user defined pnetid SYZ2
[  226.135473][T14299] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2
[  227.178677][T14338] bond0: Device is already in use.
[  227.298261][T14350] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3539'.
[  228.183211][T14432] lo speed is unknown, defaulting to 1000
[  228.403112][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3584'.
[  228.443109][T14454] bridge6: entered allmulticast mode
[  228.855190][T14475] tipc: Resetting bearer <eth:syzkaller0>
[  228.880913][T14475] bond0: left allmulticast mode
[  228.885358][T14475] : left allmulticast mode
[  228.902818][T14475] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  228.905190][T14475] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  229.434224][T14522] netlink: 'syz.1.3612': attribute type 83 has an invalid length.
[  229.686037][T14548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3619'.
[  229.690046][T14536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.937468][T14557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3623'.
[  230.299473][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3632'.
[  230.665390][T14599] netlink: 'syz.1.3641': attribute type 12 has an invalid length.
[  230.668520][T14599] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3641'.
[  230.771789][T14603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3644'.
[  230.977978][T14615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3649'.
[  230.981378][T14615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3649'.
[  231.037639][T14620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3649'.
[  231.043222][T14620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3649'.
[  231.264892][T14628] nbd1: detected capacity change from 0 to 127
[  231.269041][T12904] block nbd1: Send control failed (result -32)
[  231.272353][   T55] block nbd1: Receive control failed (result -104)
[  231.275107][T12904] block nbd1: Request send failed, requeueing
[  231.283214][T12904] block nbd1: Dead connection, failed to find a fallback
[  231.291998][   T60] block nbd1: Dead connection, failed to find a fallback
[  231.295239][   T60] block nbd1: shutting down sockets
[  231.297972][   T60] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  231.301847][   T60] Buffer I/O error on dev nbd1, logical block 2, async page read
[  231.306991][T12904] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  231.310718][T12904] Buffer I/O error on dev nbd1, logical block 3, async page read
[  231.319676][T14636] netlink: 'syz.1.3658': attribute type 6 has an invalid length.
[  231.402927][T14640] lo speed is unknown, defaulting to 1000
[  231.519686][T14656] netlink: 'syz.1.3667': attribute type 1 has an invalid length.
[  231.569233][T14656] 8021q: adding VLAN 0 to HW filter on device bond2
[  231.587971][T14656] bond2: (slave gretap3): making interface the new active one
[  231.591002][T14656] bond2: (slave gretap3): Enslaving as an active interface with an up link
[  231.627773][T14661] vlan2: entered allmulticast mode
[  232.381458][T14716] netlink: 'syz.2.3696': attribute type 21 has an invalid length.
[  232.388354][T14716] netlink: 'syz.2.3696': attribute type 6 has an invalid length.
[  232.391614][T14716] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3696'.
[  233.012363][T14744] sit0: entered promiscuous mode
[  233.014467][T14744] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3707'.
[  233.699102][T14789] sctp: [Deprecated]: syz.2.3729 (pid 14789) Use of struct sctp_assoc_value in delayed_ack socket option.
[  233.699102][T14789] Use struct sctp_sack_info instead
[  233.919170][T14802] IPVS: persistence engine module ip_vs_pe_ not found
[  234.293499][T14829] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3747'.
[  234.299510][T14829] unsupported nlmsg_type 40
[  234.361047][T14834] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.366217][T14834] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  234.370571][T14834] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  234.534063][T14844] netlink: 'syz.0.3754': attribute type 2 has an invalid length.
[  234.623203][T14854] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3758'.
[  234.986770][   T60] block nbd0: Possible stuck request ffff888020480000: control (read@0,1024B). Runtime 60 seconds
[  234.991926][   T60] block nbd0: Possible stuck request ffff888020480200: control (read@1024,1024B). Runtime 60 seconds
[  234.996821][   T60] block nbd0: Possible stuck request ffff888020480400: control (read@2048,1024B). Runtime 60 seconds
[  235.001273][   T60] block nbd0: Possible stuck request ffff888020480600: control (read@3072,1024B). Runtime 60 seconds
[  235.046069][T14881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.048832][T14881] syzkaller0: entered promiscuous mode
[  235.050788][T14881] syzkaller0: entered allmulticast mode
[  235.075092][T14881] tipc: Resetting bearer <eth:syzkaller0>
[  235.081960][T14880] tipc: Resetting bearer <eth:syzkaller0>
[  235.105554][T14880] tipc: Disabling bearer <eth:syzkaller0>
[  235.636778][T14925] lo speed is unknown, defaulting to 1000
[  235.926982][T14942] __nla_validate_parse: 4 callbacks suppressed
[  235.926994][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3795'.
[  235.935399][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3795'.
[  235.938642][T14942] netlink: 'syz.0.3795': attribute type 14 has an invalid length.
[  236.006977][T14946] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  236.372220][T14970] : left promiscuous mode
[  237.273847][T15022] netlink: 212280 bytes leftover after parsing attributes in process `syz.0.3830'.
[  237.370388][T15034] : entered promiscuous mode
[  237.414340][T15037] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.420704][T15037] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  237.425119][T15037] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  237.430176][T15037] tipc: Resetting bearer <eth:syzkaller0>
[  237.942061][T15074] netlink: 'syz.0.3855': attribute type 1 has an invalid length.
[  237.945446][T15074] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3855'.
[  238.061139][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3865'.
[  238.205872][T15114] lo speed is unknown, defaulting to 1000
[  238.308161][T15125] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  238.310937][T15125] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  238.699016][T15155] netlink: 'syz.0.3886': attribute type 4 has an invalid length.
[  238.702047][T15155] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3886'.
[  239.899263][T15192] netlink: 'syz.1.3906': attribute type 1 has an invalid length.
[  239.901901][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3905'.
[  239.902026][T15192] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3906'.
[  241.141972][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3918'.
[  241.495725][T15242] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  241.749347][T15259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3933'.
[  242.250237][T15281] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3941'.
[  242.254487][T15281] netlink: 'syz.1.3941': attribute type 1 has an invalid length.
[  242.719202][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'.
[  242.813015][T15322] netlink: 'syz.2.3958': attribute type 11 has an invalid length.
[  242.820298][T15322] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.3958'.
[  242.841128][T15321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.959621][T15335] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  243.157683][T15351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  243.207319][T15353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3973'.
[  243.292268][T15360] netlink: 'syz.2.3976': attribute type 5 has an invalid length.
[  243.310537][T15357] lo speed is unknown, defaulting to 1000
[  243.439761][T15370] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  243.546810][T15378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.550550][T15378] syzkaller0: entered promiscuous mode
[  243.552831][T15378] syzkaller0: entered allmulticast mode
[  243.577561][T15378] tipc: Resetting bearer <eth:syzkaller0>
[  243.582540][T15377] tipc: Resetting bearer <eth:syzkaller0>
[  243.596481][T15377] tipc: Disabling bearer <eth:syzkaller0>
[  243.909374][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3995'.
[  245.256761][T15434] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.266770][T15434] syzkaller0: entered promiscuous mode
[  245.268540][T15434] syzkaller0: entered allmulticast mode
[  245.308464][T15434] tipc: Resetting bearer <eth:syzkaller0>
[  245.312736][T15433] tipc: Resetting bearer <eth:syzkaller0>
[  245.332623][T15433] tipc: Disabling bearer <eth:syzkaller0>
[  245.491477][T15441] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  245.504702][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4011'.
[  246.601530][T15465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4020'.
[  246.805462][T15476] netlink: 'syz.2.4025': attribute type 25 has an invalid length.
[  247.630243][T15528] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4050'.
[  248.044412][T15558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4066'.
[  248.053342][T15560] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  248.248792][T15575] bridge_slave_1: default FDB implementation only supports local addresses
[  248.393058][T15587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4078'.
[  249.537438][T15620] netlink: 'syz.0.4091': attribute type 29 has an invalid length.
[  249.541892][T15620] netlink: 'syz.0.4091': attribute type 29 has an invalid length.
[  249.548807][T15620] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4091'.
[  249.552778][T15620] unsupported nla_type 58
[  250.529594][T15647] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4103'.
[  250.780171][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4115'.
[  251.042479][T15692] lo speed is unknown, defaulting to 1000
[  251.052054][T15699] syzkaller1: entered promiscuous mode
[  251.053842][T15699] syzkaller1: entered allmulticast mode
[  254.175578][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4156'.
[  254.201919][T15774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  254.204911][T15774] IPv6: NLM_F_CREATE should be set when creating new route
[  254.207715][T15774] IPv6: NLM_F_CREATE should be set when creating new route
[  254.309412][T15775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4156'.
[  254.352134][T15781] rdma_rxe: rxe_newlink: failed to add lo
[  254.617185][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4169'.
[  254.641587][T15806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.210422][T15850] lo speed is unknown, defaulting to 1000
[  255.470449][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.492087][T15867] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  255.749918][T15872] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  255.791484][T15872] syzkaller0: entered promiscuous mode
[  255.800853][T15872] syzkaller0: entered allmulticast mode
[  257.890108][T15887] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  257.894089][T15887] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  260.319145][T16054] batadv_slave_0: entered promiscuous mode
[  260.321743][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4271'.
[  260.349291][T16054] batadv_slave_0 (unregistering): left promiscuous mode
[  260.489237][T16062] netlink: 'syz.1.4273': attribute type 1 has an invalid length.
[  260.501166][T16062] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4273'.
[  260.513910][T16062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4273'.
[  260.658013][T16072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4276'.
[  261.118606][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4293'.
[  261.613477][T16159] batadv_slave_1: entered promiscuous mode
[  261.638301][T16161] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4314'.
[  261.640504][T16158] batadv_slave_1: left promiscuous mode
[  261.768320][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4319'.
[  261.814092][T16171] hsr_slave_1 (unregistering): left promiscuous mode
[  261.885377][   T60] block nbd1: Possible stuck request ffff8880204e0000: control (read@0,1024B). Runtime 30 seconds
[  261.889570][   T60] block nbd1: Possible stuck request ffff8880204e0200: control (read@1024,1024B). Runtime 30 seconds
[  262.093794][T16190] netlink: 'syz.1.4328': attribute type 3 has an invalid length.
[  262.375947][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4330'.
[  262.379870][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4330'.
[  262.383626][T16194] netlink: 'syz.1.4330': attribute type 12 has an invalid length.
[  262.668369][T16209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4337'.
[  262.956226][T16224] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  263.005967][T16223] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  263.167304][T16239] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  263.172333][T16239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.199623][T16236] lo speed is unknown, defaulting to 1000
[  263.553160][T16250] netlink: 'syz.0.4354': attribute type 3 has an invalid length.
[  265.088613][   T60] block nbd0: Possible stuck request ffff888020480000: control (read@0,1024B). Runtime 90 seconds
[  265.092922][   T60] block nbd0: Possible stuck request ffff888020480200: control (read@1024,1024B). Runtime 90 seconds
[  265.098182][   T60] block nbd0: Possible stuck request ffff888020480400: control (read@2048,1024B). Runtime 90 seconds
[  265.102523][   T60] block nbd0: Possible stuck request ffff888020480600: control (read@3072,1024B). Runtime 90 seconds
[  265.218982][T16346] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  265.241735][T16343] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  265.432363][T16368] netlink: 'syz.2.4406': attribute type 21 has an invalid length.
[  265.436183][T16368] __nla_validate_parse: 7 callbacks suppressed
[  265.436194][T16368] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4406'.
[  265.441214][T16368] netlink: 'syz.2.4406': attribute type 4 has an invalid length.
[  265.443609][T16368] netlink: 'syz.2.4406': attribute type 5 has an invalid length.
[  265.449240][T16368] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4406'.
[  265.812592][T16401] lo speed is unknown, defaulting to 1000
[  267.087579][T16496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4463'.
[  267.091695][T16496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4463'.
[  267.484390][T16527] netlink: 'syz.2.4475': attribute type 21 has an invalid length.
[  267.507091][T16527] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4475'.
[  267.510877][T16527] netlink: 'syz.2.4475': attribute type 5 has an invalid length.
[  267.513919][T16527] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4475'.
[  267.898882][T16551] rdma_rxe: rxe_newlink: failed to add macvlan1
[  268.041685][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4490'.
[  268.069431][T16563] syz_tun: entered promiscuous mode
[  268.083378][T16563] syz_tun: left promiscuous mode
[  268.142060][T16565] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  268.148102][T16565] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  269.129504][T16626] team0: Device vti0 is of different type
[  269.186778][T16629] lo speed is unknown, defaulting to 1000
[  269.702166][T16670] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4527'.
[  269.994156][T16688] lo speed is unknown, defaulting to 1000
[  270.970824][T16733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4554'.
[  271.177959][T16741] macsec1: entered promiscuous mode
[  271.180262][T16741] bridge0: entered promiscuous mode
[  271.182767][T16741] bridge0: port 2(macsec1) entered blocking state
[  271.187811][T16741] bridge0: port 2(macsec1) entered disabled state
[  271.190452][T16741] macsec1: entered allmulticast mode
[  271.192487][T16741] bridge0: entered allmulticast mode
[  271.198065][T16741] macsec1: left allmulticast mode
[  271.200083][T16741] bridge0: left allmulticast mode
[  271.203601][T16741] bridge0: left promiscuous mode
[  271.332926][T16748] lo speed is unknown, defaulting to 1000
[  272.053209][T16779] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  272.284885][T16790] Bluetooth: MGMT ver 1.23
[  272.348978][T16792] bond0: Device is already in use.
[  273.199712][T16843] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  274.556837][T16894] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  274.559857][T16894] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  275.128947][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4632'.
[  276.053349][T16989] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4667'.
[  276.329970][T17008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.333738][T17008] team0: Failed to send port change of device batadv0 via netlink (err -105)
[  276.338469][T17008] team0: Failed to send options change via netlink (err -105)
[  276.341033][T17008] team0: Port device batadv0 added
[  276.487869][T17011] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  277.928657][T17066] IPv6: NLM_F_REPLACE set, but no existing node found!
[  278.200379][   T33] audit: type=1800 audit(1753962216.432:4): pid=17074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4700" name="memory.events" dev="tmpfs" ino=8294 res=0 errno=0
[  278.208355][   T33] audit: type=1804 audit(1753962216.442:5): pid=17074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4700" name="memory.events" dev="tmpfs" ino=8294 res=1 errno=0
[  278.321580][T17082] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4704'.
[  278.376791][T17085] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4705'.
[  278.522254][T17095] netlink: 'syz.2.4711': attribute type 3 has an invalid length.
[  278.692417][T17113] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  278.702963][T17113] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  278.707452][T17113] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  278.710372][T17115] debugfs: Directory 'netdev:nicvf0' with parent 'phy7' already present!
[  278.839843][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4724'.
[  278.843445][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4724'.
[  278.853805][T17123] netlink: 'syz.1.4724': attribute type 20 has an invalid length.
[  278.922997][T17130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4727'.
[  278.926728][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4727'.
[  278.942007][T17130] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  278.990838][T17136] vlan2: entered promiscuous mode
[  278.992452][T17136] dummy0: entered promiscuous mode
[  279.660448][T17188] v: renamed from ip6_vti0
[  280.066772][T17212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  280.069732][T17212] IPv6: NLM_F_CREATE should be set when creating new route
[  280.072690][T17212] IPv6: NLM_F_CREATE should be set when creating new route
[  280.076572][T17212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  280.123851][T17214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4762'.
[  280.194273][T17214] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  280.299505][T17221] lo speed is unknown, defaulting to 1000
[  280.360352][T17230] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4768'.
[  280.904608][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  281.265220][T17285] block nbd2: server does not support multiple connections per device.
[  281.268513][T17285] block nbd2: shutting down sockets
[  281.598729][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4801'.
[  281.694443][T17316] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.699186][T17316] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  281.702188][T17316] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  281.787346][T17320] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4805'.
[  281.944634][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  282.555032][T17364] veth9: entered promiscuous mode
[  282.559439][T17364] bond0: (slave veth9): Enslaving as an active interface with an up link
[  282.609116][T17367] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4826'.
[  282.619794][T17362] sctp: [Deprecated]: syz.1.4824 (pid 17362) Use of struct sctp_assoc_value in delayed_ack socket option.
[  282.619794][T17362] Use struct sctp_sack_info instead
[  282.834029][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4830'.
[  282.984609][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  284.024630][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  284.100714][T17463] GUP no longer grows the stack in syz.1.4858 (17463): 200000006000-20000000a000 (200000005000)
[  284.106555][T17463] CPU: 1 UID: 0 PID: 17463 Comm: syz.1.4858 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  284.106578][T17463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.106588][T17463] Call Trace:
[  284.106595][T17463]  <TASK>
[  284.106626][T17463]  dump_stack_lvl+0x189/0x250
[  284.106656][T17463]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.106674][T17463]  ? __pfx__printk+0x10/0x10
[  284.106692][T17463]  ? find_vma+0xe7/0x160
[  284.106724][T17463]  __get_user_pages+0x2a60/0x30b0
[  284.106768][T17463]  ? __pfx___get_user_pages+0x10/0x10
[  284.106785][T17463]  ? __gup_longterm_locked+0xbf7/0x15b0
[  284.106804][T17463]  ? down_read_killable+0x1d1/0x350
[  284.106822][T17463]  ? try_get_folio+0x633/0x660
[  284.106844][T17463]  __gup_longterm_locked+0xd66/0x15b0
[  284.106868][T17463]  ? try_grab_folio_fast+0x1be/0x4f0
[  284.106898][T17463]  ? gup_fast_fallback+0x1afc/0x2260
[  284.106920][T17463]  gup_fast_fallback+0x1cd4/0x2260
[  284.106968][T17463]  ? __pfx_gup_fast_fallback+0x10/0x10
[  284.106984][T17463]  ? trace_contention_end+0x39/0x120
[  284.107005][T17463]  ? __mutex_lock+0x330/0xe80
[  284.107025][T17463]  ? is_valid_gup_args+0x11f/0x200
[  284.107044][T17463]  ? get_user_pages_fast+0x4d/0xb0
[  284.107065][T17463]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  284.107093][T17463]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  284.107105][T17463]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  284.107126][T17463]  ? wait_for_space+0x24d/0x2d0
[  284.107150][T17463]  iov_iter_get_pages2+0x5e/0xa0
[  284.107173][T17463]  __se_sys_vmsplice+0x548/0x10d0
[  284.107205][T17463]  ? wake_up_q+0xca/0x110
[  284.107225][T17463]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  284.107250][T17463]  ? __pfx_futex_wake+0x10/0x10
[  284.107280][T17463]  ? __lock_acquire+0xab9/0xd20
[  284.107325][T17463]  ? do_pipe2+0xf7/0x170
[  284.107349][T17463]  ? rcu_is_watching+0x15/0xb0
[  284.107371][T17463]  ? do_syscall_64+0xbe/0x3b0
[  284.107391][T17463]  do_syscall_64+0xfa/0x3b0
[  284.107403][T17463]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.107452][T17463]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.107466][T17463]  ? exc_page_fault+0x9f/0xf0
[  284.107481][T17463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.107495][T17463] RIP: 0033:0x7fe300f8e9a9
[  284.107515][T17463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.107527][T17463] RSP: 002b:00007fe301dc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  284.107544][T17463] RAX: ffffffffffffffda RBX: 00007fe3011b5fa0 RCX: 00007fe300f8e9a9
[  284.107554][T17463] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  284.107563][T17463] RBP: 00007fe301010d69 R08: 0000000000000000 R09: 0000000000000000
[  284.107571][T17463] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  284.107578][T17463] R13: 0000000000000000 R14: 00007fe3011b5fa0 R15: 00007fff9013eff8
[  284.107600][T17463]  </TASK>
[  284.450202][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4864'.
[  285.064636][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  285.411588][T17506] lo speed is unknown, defaulting to 1000
[  286.104715][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  286.610476][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4915'.
[  286.739834][T17610] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  286.742592][T17610] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  286.800287][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4923'.
[  286.803351][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4923'.
[  286.815533][T17616] netlink: 'syz.1.4923': attribute type 18 has an invalid length.
[  286.818421][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4923'.
[  286.821444][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4923'.
[  286.824337][T17616] netlink: 'syz.1.4923': attribute type 18 has an invalid length.
[  287.144613][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  287.267168][T17642] lo speed is unknown, defaulting to 1000
[  287.711545][T17660] netlink: 'syz.2.4940': attribute type 4 has an invalid length.
[  287.718229][T17660] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4940'.
[  287.983000][T17673] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4948'.
[  288.184715][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  288.622455][T17703] netlink: 'syz.1.4960': attribute type 4 has an invalid length.
[  288.642517][   T24] lo speed is unknown, defaulting to 1000
[  288.652982][   T24] syz2: Port: 1 Link DOWN
[  288.698514][T17707] netlink: 'syz.2.4961': attribute type 1 has an invalid length.
[  289.224703][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  289.369647][T17762] ipvlan2: entered promiscuous mode
[  289.371785][T17762] bridge0: port 2(ipvlan2) entered blocking state
[  289.373926][T17762] bridge0: port 2(ipvlan2) entered disabled state
[  289.376917][T17762] ipvlan2: entered allmulticast mode
[  289.379436][T17762] bridge0: entered allmulticast mode
[  289.382391][T17762] ipvlan2: left allmulticast mode
[  289.383895][T17762] bridge0: left allmulticast mode
[  289.522630][T17776] batadv_slave_0: entered promiscuous mode
[  289.534936][T17776] batadv_slave_0: entered allmulticast mode
[  289.598571][T17781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4993'.
[  289.601768][T17781] netlink: 'syz.0.4993': attribute type 32 has an invalid length.
[  289.604403][T17781] bond0: option coupled_control: mode dependency failed, not supported in mode balance-alb(6)
[  289.699865][T17793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.878395][T17805] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.952335][T17809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5005'.
[  289.955717][T17809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5005'.
[  290.060262][T17815] netlink: 'syz.0.5008': attribute type 12 has an invalid length.
[  290.264713][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  290.504150][T17833] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  290.534137][T17832] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  291.304871][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  291.824239][T17881] netlink: 'syz.1.5038': attribute type 11 has an invalid length.
[  291.828004][T17881] netlink: 'syz.1.5038': attribute type 11 has an invalid length.
[  291.831525][T17881] __nla_validate_parse: 3 callbacks suppressed
[  291.831539][T17881] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5038'.
[  291.890384][T17883] vlan2: entered promiscuous mode
[  291.892789][T17883] vlan2: entered allmulticast mode
[  291.898361][T17883] hsr_slave_1: entered allmulticast mode
[  291.955389][   T60] block nbd1: Possible stuck request ffff8880204e0000: control (read@0,1024B). Runtime 60 seconds
[  291.959483][   T60] block nbd1: Possible stuck request ffff8880204e0200: control (read@1024,1024B). Runtime 60 seconds
[  292.076910][T17885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.080328][T17885] syzkaller0: entered promiscuous mode
[  292.082595][T17885] syzkaller0: entered allmulticast mode
[  292.115032][T17885] tipc: Resetting bearer <eth:syzkaller0>
[  292.118698][T17884] tipc: Resetting bearer <eth:syzkaller0>
[  292.137271][T17884] tipc: Disabling bearer <eth:syzkaller0>
[  292.245402][T17896] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5045'.
[  292.293417][T17899] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  292.324110][T17899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  292.344631][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  292.711778][T17926] team0: Port device bond0 removed
[  292.731402][T17926] bond2: (slave gretap3): Releasing active interface
[  292.998904][T17944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5067'.
[  293.160674][T17952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.175176][T17952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5071'.
[  293.258497][T17960] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5074'.
[  293.302838][T17963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.384611][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  293.770426][T17998] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  293.921674][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5095'.
[  294.052708][T18022] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5101'.
[  294.369873][T18048] netlink: 'syz.2.5115': attribute type 4 has an invalid length.
[  294.379759][T18048] netlink: 'syz.2.5115': attribute type 4 has an invalid length.
[  294.424698][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  294.467699][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5119'.
[  294.879646][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5131'.
[  295.033466][T18094] sctp: [Deprecated]: syz.1.5134 (pid 18094) Use of struct sctp_assoc_value in delayed_ack socket option.
[  295.033466][T18094] Use struct sctp_sack_info instead
[  295.145722][   T60] block nbd0: Possible stuck request ffff888020480000: control (read@0,1024B). Runtime 120 seconds
[  295.150022][   T60] block nbd0: Possible stuck request ffff888020480200: control (read@1024,1024B). Runtime 120 seconds
[  295.154128][   T60] block nbd0: Possible stuck request ffff888020480400: control (read@2048,1024B). Runtime 120 seconds
[  295.159457][   T60] block nbd0: Possible stuck request ffff888020480600: control (read@3072,1024B). Runtime 120 seconds
[  295.252900][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5139'.
[  295.464662][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  296.416080][T18207] openvswitch: netlink: Missing valid actions attribute.
[  296.419246][T18207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.504626][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  297.188421][T18243] IPv6: Can't replace route, no match found
[  297.398631][T18247] lo speed is unknown, defaulting to 1000
[  297.401481][T18257] __nla_validate_parse: 3 callbacks suppressed
[  297.401495][T18257] netlink: 704 bytes leftover after parsing attributes in process `syz.2.5210'.
[  297.544644][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  297.902061][T18284] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5221'.
[  298.207767][ T5833] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  298.584669][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  298.680775][T18312] lo speed is unknown, defaulting to 1000
[  298.830949][T18329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.432709][T18358] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5254'.
[  299.488532][T18360] netlink: 'syz.1.5256': attribute type 1 has an invalid length.
[  299.491667][T18360] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5256'.
[  299.500563][T18360] netlink: 'syz.1.5256': attribute type 2 has an invalid length.
[  299.503605][T18360] netlink: 'syz.1.5256': attribute type 1 has an invalid length.
[  299.624866][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  300.544004][T18412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5281'.
[  300.664620][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  300.793176][T18433] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5290'.
[  300.861171][T18437] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  300.885629][T18437] bridge_slave_0: left allmulticast mode
[  300.888676][T18437] bridge_slave_0: left promiscuous mode
[  300.891814][T18437] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.900727][T18437] bridge_slave_1: left allmulticast mode
[  300.903018][T18437] bridge_slave_1: left promiscuous mode
[  300.906711][T18437] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.914018][T18437] bond0: (slave 77): Releasing backup interface
[  300.918722][T18437] : left promiscuous mode
[  300.921522][T18437] team_slave_0: left promiscuous mode
[  300.929894][T18437] team0: Port device team_slave_0 removed
[  300.932773][T18437] team_slave_1: left promiscuous mode
[  300.944369][T18437] team0: Port device team_slave_1 removed
[  300.947849][T18437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.952010][T18437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.961895][T18437] bond2: (slave gretap1): Releasing active interface
[  300.970846][T18437] bond3: (slave macvlan2): Releasing backup interface
[  300.976745][T18437] bond4: (slave gretap2): Releasing active interface
[  300.982010][T18437] bond0: (slave veth9): Releasing backup interface
[  300.995355][T18437] netlink: 'syz.2.5292': attribute type 10 has an invalid length.
[  300.998853][T18437] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  301.007190][T18437] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  301.012112][T18437] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  301.023113][T18437] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  301.027787][T18437] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  301.105793][T18450] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5298'.
[  301.187347][T18454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5300'.
[  301.190407][T18454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5300'.
[  301.651849][T18477] netlink: 'syz.1.5311': attribute type 8 has an invalid length.
[  301.704706][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  301.718944][T18481] netlink: 'syz.1.5312': attribute type 6 has an invalid length.
[  301.747775][T18483] netlink: 'syz.2.5314': attribute type 1 has an invalid length.
[  302.671656][T18504] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5324'.
[  302.744838][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  302.755216][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5324'.
[  302.758712][T18504] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  302.762413][T18504] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  303.359330][T18544] pim6reg1: entered promiscuous mode
[  303.361505][T18544] pim6reg1: entered allmulticast mode
[  303.540657][T18548] netlink: 'syz.2.5345': attribute type 6 has an invalid length.
[  303.543543][T18548] IPv6: NLM_F_CREATE should be specified when creating new route
[  303.784703][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  304.130576][T18584] syzkaller1: entered promiscuous mode
[  304.138955][T18584] syzkaller1: entered allmulticast mode
[  304.656864][T18615] openvswitch: netlink: nsh attribute has 124 unknown bytes.
[  304.660132][T18615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.824725][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  305.069344][T18642] tipc: Resetting bearer <eth:syzkaller0>
[  305.489136][T18663] syz_tun: left promiscuous mode
[  305.492646][T18663] bridge0: port 1(syz_tun) entered disabled state
[  305.837459][T18675] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  305.864721][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  306.079884][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5400'.
[  306.088281][T18687] netlink: 'syz.1.5400': attribute type 10 has an invalid length.
[  306.232190][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5407'.
[  306.235882][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5407'.
[  306.253293][T18703] netlink: zone id is out of range
[  306.265572][T18703] netlink: zone id is out of range
[  306.286831][T18703] netlink: set zone limit has 4 unknown bytes
[  306.330128][T18709] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  306.362267][T18708] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  306.904664][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  306.992067][T18732] sctp: [Deprecated]: syz.2.5422 (pid 18732) Use of struct sctp_assoc_value in delayed_ack socket option.
[  306.992067][T18732] Use struct sctp_sack_info instead
[  307.894190][T18770] vlan0: entered promiscuous mode
[  307.944780][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  308.484315][T18816] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5460'.
[  308.984770][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  309.119496][ T5279] udevd[5279]: worker [12904] /devices/virtual/block/nbd1 is taking a long time
[  309.123188][ T5279] udevd[5279]: worker [11678] /devices/virtual/block/nbd0 is taking a long time
[  309.736137][   T33] audit: type=1800 audit(1753962247.972:6): pid=18869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5484" name="cgroup.controllers" dev="tmpfs" ino=9580 res=0 errno=0
[  309.750048][T18873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5486'.
[  309.883212][T18877] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  310.024639][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  310.092507][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5494'.
[  310.099880][T18889] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5494'.
[  310.352668][T18903] netlink: 516 bytes leftover after parsing attributes in process `syz.1.5500'.
[  310.472955][T18909] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  310.500300][T18908] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  310.946970][T18920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5507'.
[  310.950659][T18920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5507'.
[  310.954060][T18920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5507'.
[  311.057088][T18926] netlink: 'syz.2.5510': attribute type 6 has an invalid length.
[  311.064687][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  311.449176][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5515'.
[  311.452855][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5515'.
[  312.106402][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  312.378104][T18994] vlan3: entered promiscuous mode
[  312.379749][T18994] bond0: entered promiscuous mode
[  312.383081][T18994] vlan3: entered allmulticast mode
[  312.387120][T18994] bond0: entered allmulticast mode
[  312.750491][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  312.776880][T19008] netlink: 'syz.2.5547': attribute type 15 has an invalid length.
[  313.144629][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  313.582710][T19062] netlink: 'syz.1.5573': attribute type 29 has an invalid length.
[  313.588818][T19062] netlink: 'syz.1.5573': attribute type 29 has an invalid length.
[  313.788986][T19084] netlink: 'syz.2.5579': attribute type 1 has an invalid length.
[  313.801174][T19084] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  314.049812][T19101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.184661][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  314.221651][T19109] __nla_validate_parse: 7 callbacks suppressed
[  314.221674][T19109] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5593'.
[  314.958739][T19136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5605'.
[  315.210551][T19156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.224690][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  315.283285][T19162] netlink: 'syz.2.5618': attribute type 3 has an invalid length.
[  315.291630][T19162] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5618'.
[  315.402679][T19170] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  315.781064][T19200] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5634'.
[  315.851854][T19204] netlink: 'syz.0.5636': attribute type 32 has an invalid length.
[  316.249968][T19170] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  316.264682][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  316.386316][T19233] tipc: Failed to remove unknown binding: 66,1,1/122539186:1367535304/1367535305
[  316.390719][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5649'.
[  316.426380][T19235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5650'.
[  316.917210][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.949447][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5664'.
[  317.191569][T19293] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[  317.258916][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5678'.
[  317.263676][T19296] netlink: 'syz.0.5678': attribute type 10 has an invalid length.
[  317.304591][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  317.441079][T19310] netlink: 'syz.0.5685': attribute type 3 has an invalid length.
[  317.449426][T19310] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5685'.
[  317.567614][T19316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5688'.
[  317.738873][T19325] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  317.953682][T19335] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  318.344723][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  318.745156][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  319.296592][T19392] netlink: 'syz.1.5722': attribute type 1 has an invalid length.
[  319.299084][T19392] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5722'.
[  319.384689][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  319.421077][T19401] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  319.879643][T19444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5745'.
[  320.065342][T19459] pimreg: entered allmulticast mode
[  320.092491][T19461] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5753'.
[  320.232302][T19467] IPVS: length: 8 != 446622349272
[  320.424685][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  320.566999][T19488] tipc: Invalid UDP bearer configuration
[  320.567033][T19488] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  320.921945][T19512] netlink: 'syz.1.5776': attribute type 1 has an invalid length.
[  321.017449][T19523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.071283][T19527] sock: sock_set_timeout: `syz.0.5784' (pid 19527) tries to set negative timeout
[  321.389591][T19553] bridge_slave_1: default FDB implementation only supports local addresses
[  321.464601][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  321.642280][T19568] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.650748][T19568] tipc: Resetting bearer <eth:syzkaller0>
[  321.716470][T19572] netlink: 'syz.0.5804': attribute type 1 has an invalid length.
[  321.717956][T19573] netlink: 'syz.1.5803': attribute type 1 has an invalid length.
[  321.719057][T19572] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5804'.
[  321.784029][T19573] 8021q: adding VLAN 0 to HW filter on device bond5
[  321.790646][T19573] bond4: (slave bond5): making interface the new active one
[  321.793853][T19573] bond4: (slave bond5): Enslaving as an active interface with an up link
[  322.029463][   T60] block nbd1: Possible stuck request ffff8880204e0000: control (read@0,1024B). Runtime 90 seconds
[  322.033861][   T60] block nbd1: Possible stuck request ffff8880204e0200: control (read@1024,1024B). Runtime 90 seconds
[  322.084169][T19606] sit0: left promiscuous mode
[  322.088153][T19606] wg1: left promiscuous mode
[  322.089937][T19606] wg1: left allmulticast mode
[  322.095852][T19606] batadv_slave_0: left promiscuous mode
[  322.098861][T19606] vlan0: left promiscuous mode
[  322.115024][T19606] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  322.504733][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  323.149326][T19699] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.358266][T19725] netlink: 724 bytes leftover after parsing attributes in process `syz.1.5874'.
[  323.364629][T19725] netlink: 724 bytes leftover after parsing attributes in process `syz.1.5874'.
[  323.403346][T19730] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5876'.
[  323.458119][T19736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5879'.
[  323.460994][T19736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5879'.
[  323.544602][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  324.334653][T19738] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  324.584643][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  324.700381][T19759] pim6reg0: tun_chr_ioctl cmd 1074025677
[  324.703052][T19759] pim6reg0: linktype set to 768
[  325.135134][T19779] !: renamed from dummy0
[  325.245227][   T60] block nbd0: Possible stuck request ffff888020480000: control (read@0,1024B). Runtime 150 seconds
[  325.248542][   T60] block nbd0: Possible stuck request ffff888020480200: control (read@1024,1024B). Runtime 150 seconds
[  325.253313][   T60] block nbd0: Possible stuck request ffff888020480400: control (read@2048,1024B). Runtime 150 seconds
[  325.258448][   T60] block nbd0: Possible stuck request ffff888020480600: control (read@3072,1024B). Runtime 150 seconds
[  325.358259][T19786] lo speed is unknown, defaulting to 1000
[  325.624697][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  325.679504][T19822] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.299789][T19858] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  326.333136][T19857] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  326.520346][T19864] netlink: 'syz.1.5929': attribute type 1 has an invalid length.
[  326.523103][T19864] netlink: 600 bytes leftover after parsing attributes in process `syz.1.5929'.
[  326.664695][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  326.726907][T19873] netlink: 'syz.2.5933': attribute type 5 has an invalid length.
[  326.882244][T19877] lo speed is unknown, defaulting to 1000
[  327.571840][T19896] netlink: 'syz.1.5943': attribute type 10 has an invalid length.
[  327.576508][T19896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5943'.
[  327.602918][T19898] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5944'.
[  327.609983][T19900] netlink: 'syz.2.5945': attribute type 2 has an invalid length.
[  327.619083][T19896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.626552][T19896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.630666][T19896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.634466][T19896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.651350][T19896] team0: Port device geneve0 added
[  327.681708][T19900] k*]: entered promiscuous mode
[  327.704616][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  327.713065][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5944'.
[  327.725325][T19905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  327.742718][T19900] veth0_to_team: entered promiscuous mode
[  327.753376][T19900] veth0_to_team: entered allmulticast mode
[  328.431680][T19946] rdma_op ffff888122dc51f0 conn xmit_rdma 0000000000000000
[  328.744682][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  328.869195][T19963] Bluetooth: hci1: Opcode 0x080f failed: -4
[  329.784691][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  330.574794][T20027] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5997'.
[  330.824639][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  330.879255][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6004'.
[  330.904947][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  331.249507][T20075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6021'.
[  331.360384][T20086] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  331.744047][T20115] netlink: 'syz.2.6040': attribute type 11 has an invalid length.
[  331.864641][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  331.978961][T20128] netlink: 'syz.2.6046': attribute type 1 has an invalid length.
[  332.496563][T20157] lo speed is unknown, defaulting to 1000
[  332.553062][T20163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.904754][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  333.217956][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6072'.
[  333.405720][T20195] vlan3: entered allmulticast mode
[  333.407979][T20195] dummy0: entered allmulticast mode
[  333.512353][T20198] netlink: 'syz.2.6075': attribute type 13 has an invalid length.
[  333.527154][T20198] netlink: 'syz.2.6075': attribute type 17 has an invalid length.
[  333.633368][T20198] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.640827][T20198] 8021q: adding VLAN 0 to HW filter on device team0
[  333.649935][T20198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  333.807686][T20214] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  333.946309][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  334.679595][ T7111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.685688][ T7111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.705769][T20252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  334.728445][    C1] ------------[ cut here ]------------
[  334.730662][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  334.735189][    C1] WARNING: CPU: 1 PID: 20253 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  334.739260][    C1] Modules linked in:
[  334.741145][    C1] CPU: 1 UID: 0 PID: 20253 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  334.747201][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.751111][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  334.753608][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 b2 74 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  334.761089][    C1] RSP: 0000:ffffc900001e0758 EFLAGS: 00010246
[  334.763490][    C1] RAX: f0283fb0fd867b00 RBX: 000000000000000c RCX: ffff88803caa0000
[  334.766746][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  334.769846][    C1] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[  334.772886][    C1] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff88810fc9b6a8
[  334.776103][    C1] R13: 0000000000000000 R14: ffff888033be0e40 R15: ffff888033be30d8
[  334.779171][    C1] FS:  0000555574e4d500(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  334.782543][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  334.785307][    C1] CR2: 00007fa1365a96b0 CR3: 000000010ecba000 CR4: 00000000000006f0
[  334.788500][    C1] Call Trace:
[  334.789841][    C1]  <IRQ>
[  334.791007][    C1]  rate_control_send_low+0x194/0x7a0
[  334.793117][    C1]  rate_control_get_rate+0x20b/0x5d0
[  334.795349][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  334.797659][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  334.800168][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  334.802399][    C1]  ? __alloc_frozen_pages_noprof+0x123/0x370
[  334.804999][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  334.807231][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  334.809425][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  334.811631][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  334.813813][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  334.816119][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  334.818260][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  334.820807][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  334.822966][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  334.825952][    C1]  __iterate_interfaces+0x2ab/0x590
[  334.828054][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  334.830530][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  334.833347][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  334.835838][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  334.838553][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  334.840648][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  334.842966][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  334.845227][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  334.847505][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  334.849795][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  334.851850][    C1]  handle_softirqs+0x286/0x870
[  334.853793][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  334.855886][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  334.857995][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  334.860134][    C1]  __irq_exit_rcu+0xca/0x1f0
[  334.861989][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  334.864100][    C1]  irq_exit_rcu+0x9/0x30
[  334.865992][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  334.868232][    C1]  </IRQ>
[  334.869561][    C1]  <TASK>
[  334.870777][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  334.873167][    C1] RIP: 0010:lock_acquire+0x7d/0x360
[  334.875418][    C1] Code: 05 88 9b 03 0e 73 16 e8 f1 f0 08 00 84 c0 75 0d f6 05 67 7f ed 0d 01 0f 84 d7 01 00 00 83 3d a9 cc 03 0e 00 0f 84 f0 00 00 00 <48> 8b b4 24 90 00 00 00 4c 89 ef e8 a3 d4 83 00 83 3d 8c cc 03 0e
[  334.882931][    C1] RSP: 0000:ffffc90007347860 EFLAGS: 00000202
[  334.885551][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f0283fb0fd867b00
[  334.888669][    C1] RDX: 0000000000000000 RSI: ffffffff8be28be0 RDI: ffffffff8be28ba0
[  334.891834][    C1] RBP: ffffffff822d71ea R08: 0000000000000000 R09: 0000000000000000
[  334.895085][    C1] R10: dffffc0000000000 R11: fffff9400015d759 R12: 0000000000000002
[  334.898222][    C1] R13: ffffffff8e13f1a0 R14: 0000000000000000 R15: 0000000000000000
[  334.901338][    C1]  ? pfn_valid+0xba/0x490
[  334.903121][    C1]  ? folio_try_get+0x1c/0x340
[  334.905165][    C1]  ? pfn_valid+0xba/0x490
[  334.906947][    C1]  pfn_valid+0xd6/0x490
[  334.908646][    C1]  ? pfn_valid+0xba/0x490
[  334.910381][    C1]  page_table_check_set+0x25/0x730
[  334.912429][    C1]  ? __page_table_check_ptes_set+0x2e5/0x2f0
[  334.914915][    C1]  set_pte_range+0x6a5/0x700
[  334.916830][    C1]  ? next_uptodate_folio+0x543/0x5d0
[  334.918927][    C1]  filemap_map_pages+0xf29/0x1740
[  334.920980][    C1]  ? filemap_map_pages+0x14b/0x1740
[  334.923111][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  334.925432][    C1]  ? __handle_mm_fault+0x296f/0x5620
[  334.927522][    C1]  ? __handle_mm_fault+0x296f/0x5620
[  334.929660][    C1]  __handle_mm_fault+0x368a/0x5620
[  334.931730][    C1]  ? __lock_acquire+0xab9/0xd20
[  334.933716][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  334.936024][    C1]  ? lock_vma_under_rcu+0xf8/0x710
[  334.938073][    C1]  ? lock_vma_under_rcu+0xf8/0x710
[  334.940121][    C1]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  334.942341][    C1]  handle_mm_fault+0x40a/0x8e0
[  334.944343][    C1]  do_user_addr_fault+0xa81/0x1390
[  334.946550][    C1]  ? rcu_is_watching+0x15/0xb0
[  334.948495][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  334.950651][    C1]  exc_page_fault+0x76/0xf0
[  334.952505][    C1]  asm_exc_page_fault+0x26/0x30
[  334.954458][    C1] RIP: 0033:0x7fa1365a96b0
[  334.956357][    C1] Code: Unable to access opcode bytes at 0x7fa1365a9686.
[  334.959106][    C1] RSP: 002b:00007ffe77ad27d8 EFLAGS: 00010216
[  334.961508][    C1] RAX: 0000000000000020 RBX: 00007ffe77ad2d40 RCX: 0000000000000000
[  334.964675][    C1] RDX: 000000000000000a RSI: 00007ffe77ad2ce8 RDI: 0000000000000002
[  334.967755][    C1] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000000
[  334.970835][    C1] R10: 00000000ffffffff R11: 0000000000000001 R12: 0000000000000075
[  334.973845][    C1] R13: 00007ffe77ad2ec0 R14: 00007ffe77ad2ce8 R15: 0000000000000002
[  334.977078][    C1]  </TASK>
[  334.978349][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  334.981157][    C1] CPU: 1 UID: 0 PID: 20253 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  334.986034][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.989916][    C1] Call Trace:
[  334.991232][    C1]  <IRQ>
[  334.992395][    C1]  dump_stack_lvl+0x99/0x250
[  334.994219][    C1]  ? __asan_memcpy+0x40/0x70
[  334.996067][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.998130][    C1]  ? __pfx__printk+0x10/0x10
[  335.000004][    C1]  panic+0x2db/0x790
[  335.001580][    C1]  ? __pfx_panic+0x10/0x10
[  335.003361][    C1]  __warn+0x31b/0x4b0
[  335.004937][    C1]  ? __rate_control_send_low+0x5df/0x820
[  335.007168][    C1]  ? __rate_control_send_low+0x5df/0x820
[  335.009396][    C1]  report_bug+0x2be/0x4f0
[  335.011086][    C1]  ? __rate_control_send_low+0x5df/0x820
[  335.013283][    C1]  ? __rate_control_send_low+0x5df/0x820
[  335.015509][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  335.017683][    C1]  handle_bug+0x84/0x160
[  335.019377][    C1]  exc_invalid_op+0x1a/0x50
[  335.021253][    C1]  asm_exc_invalid_op+0x1a/0x20
[  335.023156][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  335.025633][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 b2 74 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  335.032971][    C1] RSP: 0000:ffffc900001e0758 EFLAGS: 00010246
[  335.035418][    C1] RAX: f0283fb0fd867b00 RBX: 000000000000000c RCX: ffff88803caa0000
[  335.038465][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  335.041569][    C1] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[  335.044604][    C1] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff88810fc9b6a8
[  335.047759][    C1] R13: 0000000000000000 R14: ffff888033be0e40 R15: ffff888033be30d8
[  335.050901][    C1]  ? __rate_control_send_low+0x5de/0x820
[  335.053186][    C1]  rate_control_send_low+0x194/0x7a0
[  335.055334][    C1]  rate_control_get_rate+0x20b/0x5d0
[  335.057445][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  335.059735][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  335.062191][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  335.064424][    C1]  ? __alloc_frozen_pages_noprof+0x123/0x370
[  335.066778][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  335.068938][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  335.071075][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  335.073278][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  335.075457][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  335.077637][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  335.079807][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  335.082220][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  335.084456][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  335.087355][    C1]  __iterate_interfaces+0x2ab/0x590
[  335.089429][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  335.091831][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  335.094693][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  335.097110][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  335.099839][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  335.101872][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  335.104145][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  335.106228][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  335.108454][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  335.110767][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  335.112779][    C1]  handle_softirqs+0x286/0x870
[  335.114695][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  335.116574][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  335.118659][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  335.120753][    C1]  __irq_exit_rcu+0xca/0x1f0
[  335.122610][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  335.124680][    C1]  irq_exit_rcu+0x9/0x30
[  335.126440][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  335.128651][    C1]  </IRQ>
[  335.129834][    C1]  <TASK>
[  335.130995][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  335.133448][    C1] RIP: 0010:lock_acquire+0x7d/0x360
[  335.135518][    C1] Code: 05 88 9b 03 0e 73 16 e8 f1 f0 08 00 84 c0 75 0d f6 05 67 7f ed 0d 01 0f 84 d7 01 00 00 83 3d a9 cc 03 0e 00 0f 84 f0 00 00 00 <48> 8b b4 24 90 00 00 00 4c 89 ef e8 a3 d4 83 00 83 3d 8c cc 03 0e
[  335.142868][    C1] RSP: 0000:ffffc90007347860 EFLAGS: 00000202
[  335.145270][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f0283fb0fd867b00
[  335.148339][    C1] RDX: 0000000000000000 RSI: ffffffff8be28be0 RDI: ffffffff8be28ba0
[  335.151413][    C1] RBP: ffffffff822d71ea R08: 0000000000000000 R09: 0000000000000000
[  335.154457][    C1] R10: dffffc0000000000 R11: fffff9400015d759 R12: 0000000000000002
[  335.157538][    C1] R13: ffffffff8e13f1a0 R14: 0000000000000000 R15: 0000000000000000
[  335.160615][    C1]  ? pfn_valid+0xba/0x490
[  335.162420][    C1]  ? folio_try_get+0x1c/0x340
[  335.164339][    C1]  ? pfn_valid+0xba/0x490
[  335.166101][    C1]  pfn_valid+0xd6/0x490
[  335.167819][    C1]  ? pfn_valid+0xba/0x490
[  335.169610][    C1]  page_table_check_set+0x25/0x730
[  335.171693][    C1]  ? __page_table_check_ptes_set+0x2e5/0x2f0
[  335.174137][    C1]  set_pte_range+0x6a5/0x700
[  335.175994][    C1]  ? next_uptodate_folio+0x543/0x5d0
[  335.178101][    C1]  filemap_map_pages+0xf29/0x1740
[  335.180107][    C1]  ? filemap_map_pages+0x14b/0x1740
[  335.182240][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  335.184480][    C1]  ? __handle_mm_fault+0x296f/0x5620
[  335.186646][    C1]  ? __handle_mm_fault+0x296f/0x5620
[  335.188809][    C1]  __handle_mm_fault+0x368a/0x5620
[  335.190912][    C1]  ? __lock_acquire+0xab9/0xd20
[  335.192927][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  335.195151][    C1]  ? lock_vma_under_rcu+0xf8/0x710
[  335.197225][    C1]  ? lock_vma_under_rcu+0xf8/0x710
[  335.199368][    C1]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  335.201666][    C1]  handle_mm_fault+0x40a/0x8e0
[  335.203661][    C1]  do_user_addr_fault+0xa81/0x1390
[  335.205756][    C1]  ? rcu_is_watching+0x15/0xb0
[  335.207715][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  335.209880][    C1]  exc_page_fault+0x76/0xf0
[  335.211750][    C1]  asm_exc_page_fault+0x26/0x30
[  335.213669][    C1] RIP: 0033:0x7fa1365a96b0
[  335.215456][    C1] Code: Unable to access opcode bytes at 0x7fa1365a9686.
[  335.218169][    C1] RSP: 002b:00007ffe77ad27d8 EFLAGS: 00010216
[  335.220592][    C1] RAX: 0000000000000020 RBX: 00007ffe77ad2d40 RCX: 0000000000000000
[  335.223700][    C1] RDX: 000000000000000a RSI: 00007ffe77ad2ce8 RDI: 0000000000000002
[  335.226820][    C1] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000000
[  335.229938][    C1] R10: 00000000ffffffff R11: 0000000000000001 R12: 0000000000000075
[  335.233056][    C1] R13: 00007ffe77ad2ec0 R14: 00007ffe77ad2ce8 R15: 0000000000000002
[  335.236197][    C1]  </TASK>
[  335.238161][    C1] Kernel Offset: disabled
[  335.239884][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:44:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff8881076d9cc0 RCX=03b49a1c45f38400 RDX=0000000000000000
RSI=ffffffff8d9a9a37 RDI=ffffffff8be28c00 RBP=ffffc900076ef728 RSP=ffffc900076ef640
R8 =ffffffff8fa1d6f7 R9 =1ffffffff1f43ade R10=dffffc0000000000 R11=fffffbfff1f43adf
R12=ffffffff8ab108e5 R13=ffff8880322e5200 R14=dffffc0000000000 R15=1ffff92000edded4
RIP=ffffffff8b6da265 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f45312916c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3041fffc CR3=0000000033200000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4530411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bec60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df6590 RSP=ffffc900001dfe90
R8 =ffff888108a90237 R9 =1ffff11021152046 R10=dffffc0000000000 R11=ffffffff85461c50
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461cc7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555574e4d500 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa1365a96b0 CR3=000000010ecba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=6966696e752f7075 6f7267637a79732f XMM01=7a79732f64656966 696e752f70756f72
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=0000000000000000 00ff000000000000
XMM04=0000000000000000 00ff000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa136611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
