last executing test programs:

2.075241157s ago: executing program 0 (id=1086):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60040800}, 0x40000)

2.074714111s ago: executing program 0 (id=1089):
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$inet(0x2, 0x5, 0x0)
sendmmsg(r1, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x844)

1.755129941s ago: executing program 0 (id=1093):
r0 = socket(0x1e, 0x1, 0x0)
sendto$packet(r0, 0x0, 0xffffffffffffff5a, 0x842, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.754991872s ago: executing program 0 (id=1094):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f00000008c0)='.^', 0x2)
listen(r0, 0x6)
accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x0)

1.050332527s ago: executing program 1 (id=1126):
unshare(0x22020600)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000400), 0x12)

991.170602ms ago: executing program 1 (id=1127):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

990.629203ms ago: executing program 1 (id=1129):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$kcm(0x2d, 0x2, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000)=0x482, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=@delneigh={0x1c, 0x1d, 0x100, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x1, 0x9a, 0x6}}, 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x480, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b70500000000000079ebbb71bf6c60c2ee108e00000000001d0a0000000000009500000000000000b4559d32ca983406f33b5fc8619bf5537fca0bdcff11c57a7f7181ac38c712a1e3bce81ee2c6069079fdb3af74b1d5aec1db2cb6367f8c0e2631a76f5224c85e156b5a2f128b480ff5f6655d69933eb5d31dee4ca930df9d19c414aa9374dff200c31d11500634826b6974b02ce39cc91ef161aaa3f84504e0831d686421c7615b7b40d885090049"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x44000)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r6=>0x0})
r7 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@dellink={0x50, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x1480, 0x2104}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0xd878, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7fff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x7}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x80)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

850.034938ms ago: executing program 0 (id=1130):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004)

849.710655ms ago: executing program 0 (id=1131):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$kcm(0x10, 0x2, 0x0)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))
unshare(0x22020400)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x5, 0x3, 0x8000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

380.939309ms ago: executing program 2 (id=1142):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080d8}, 0x4000080)

380.720741ms ago: executing program 2 (id=1143):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)

350.582007ms ago: executing program 2 (id=1144):
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4000000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x6}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

280.875997ms ago: executing program 2 (id=1145):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001100b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

126.990187ms ago: executing program 1 (id=1146):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x14, 0x4, 0x4, 0x12, 0x804}, 0x50)

60.970986ms ago: executing program 2 (id=1147):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_NAN(r1, 0x0, 0x1)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a090400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0)

60.844556ms ago: executing program 1 (id=1148):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000001080))

128.697µs ago: executing program 2 (id=1149):
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x20}]}, 0x10)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r4, 0x5)
sendmmsg(r4, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x844)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001})
unshare(0x60600)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x9, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, r6}, 0x38)
ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_emit_ethernet(0x2a, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={0x0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

0s ago: executing program 1 (id=1150):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, 0x0}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20581' (ED25519) to the list of known hosts.
syzkaller login: [   50.699470][ T5820] cgroup: Unknown subsys name 'net'
[   50.844460][ T5820] cgroup: Unknown subsys name 'cpuset'
[   50.851986][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.210768][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.904090][ T5849] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.435196][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.439305][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.443400][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.451908][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.455814][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.481659][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.490980][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.497634][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.502249][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.505818][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.528146][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.531998][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.535569][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.539714][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.549780][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.974230][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   59.979586][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   60.040118][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   60.144356][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.146989][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.149173][ T5869] bridge_slave_0: entered allmulticast mode
[   60.152299][ T5869] bridge_slave_0: entered promiscuous mode
[   60.156165][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.159088][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.162375][ T5863] bridge_slave_0: entered allmulticast mode
[   60.165029][ T5863] bridge_slave_0: entered promiscuous mode
[   60.175815][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.178749][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.182559][ T5869] bridge_slave_1: entered allmulticast mode
[   60.186331][ T5869] bridge_slave_1: entered promiscuous mode
[   60.190524][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.193500][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.196378][ T5863] bridge_slave_1: entered allmulticast mode
[   60.200064][ T5863] bridge_slave_1: entered promiscuous mode
[   60.265516][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.272174][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.304316][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.333669][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.336565][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.339417][ T5862] bridge_slave_0: entered allmulticast mode
[   60.344905][ T5862] bridge_slave_0: entered promiscuous mode
[   60.353188][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.369095][ T5863] team0: Port device team_slave_0 added
[   60.373343][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.376278][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.379378][ T5862] bridge_slave_1: entered allmulticast mode
[   60.385213][ T5862] bridge_slave_1: entered promiscuous mode
[   60.416446][ T5869] team0: Port device team_slave_0 added
[   60.421285][ T5869] team0: Port device team_slave_1 added
[   60.425227][ T5863] team0: Port device team_slave_1 added
[   60.483524][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.488032][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.491566][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.502367][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.507935][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.511505][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.521164][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.527275][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.531590][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.534357][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.544258][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.548759][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.551621][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.560502][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.618434][ T5862] team0: Port device team_slave_0 added
[   60.643267][ T5862] team0: Port device team_slave_1 added
[   60.649517][ T5863] hsr_slave_0: entered promiscuous mode
[   60.652341][ T5863] hsr_slave_1: entered promiscuous mode
[   60.657927][ T5869] hsr_slave_0: entered promiscuous mode
[   60.661265][ T5869] hsr_slave_1: entered promiscuous mode
[   60.663997][ T5869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.666964][ T5869] Cannot create hsr debugfs directory
[   60.712487][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.714878][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.725896][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.742275][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.744747][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.754424][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.828330][ T5862] hsr_slave_0: entered promiscuous mode
[   60.833086][ T5862] hsr_slave_1: entered promiscuous mode
[   60.835853][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.838627][ T5862] Cannot create hsr debugfs directory
[   61.074313][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.084757][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.105114][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.111766][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.170758][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.182861][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.195354][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.210031][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.283011][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.293664][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.303840][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.309223][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.371026][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.421104][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.434291][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   61.445944][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   61.458982][ T3763] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.461841][ T3763] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.467258][ T3763] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.470092][ T3763] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.476969][ T3763] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.479732][ T3763] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.490997][ T5864] Bluetooth: hci1: command tx timeout
[   61.496025][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.498854][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.513721][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.563196][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   61.570979][ T5864] Bluetooth: hci0: command tx timeout
[   61.573084][ T5864] Bluetooth: hci2: command tx timeout
[   61.585331][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.587962][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.607701][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.610613][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.621707][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.774110][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.815259][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.854793][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.864170][ T5869] veth0_vlan: entered promiscuous mode
[   61.889986][ T5869] veth1_vlan: entered promiscuous mode
[   61.909882][ T5863] veth0_vlan: entered promiscuous mode
[   61.928213][ T5863] veth1_vlan: entered promiscuous mode
[   61.943940][ T5862] veth0_vlan: entered promiscuous mode
[   61.959812][ T5869] veth0_macvtap: entered promiscuous mode
[   61.965550][ T5862] veth1_vlan: entered promiscuous mode
[   61.977151][ T5869] veth1_macvtap: entered promiscuous mode
[   62.002615][ T5863] veth0_macvtap: entered promiscuous mode
[   62.012791][ T5863] veth1_macvtap: entered promiscuous mode
[   62.019361][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.035323][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.039548][ T5862] veth0_macvtap: entered promiscuous mode
[   62.051654][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.055088][ T5862] veth1_macvtap: entered promiscuous mode
[   62.059189][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.063001][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.067054][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.075358][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.088280][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.100424][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.110984][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.122231][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.124811][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.139605][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.144047][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.155956][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.170150][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.192437][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.200746][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.203706][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.208351][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.247154][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.258682][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.270938][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.274189][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.289731][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.294195][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.321573][ T3763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.324331][ T3763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.352048][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.354755][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.368179][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.425995][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'.
[   62.705581][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[   62.836594][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'.
[   63.097163][ T5972] netlink: 'syz.0.35': attribute type 8 has an invalid length.
[   63.217113][ T5978] syz.0.39 uses obsolete (PF_INET,SOCK_PACKET)
[   63.578252][ T5220] Bluetooth: hci1: command tx timeout
[   63.653203][ T5220] Bluetooth: hci2: command tx timeout
[   63.658735][ T5220] Bluetooth: hci0: command tx timeout
[   63.943721][ T6026] netlink: 'syz.1.52': attribute type 10 has an invalid length.
[   63.963392][ T6026] batman_adv: batadv0: Adding interface: team0
[   63.965855][ T6026] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.980749][ T6026] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   63.987966][ T6026] netlink: 'syz.1.52': attribute type 10 has an invalid length.
[   63.993625][ T6026] netlink: 2 bytes leftover after parsing attributes in process `syz.1.52'.
[   63.998146][ T6026] team0: entered promiscuous mode
[   64.000730][ T6026] team_slave_0: entered promiscuous mode
[   64.003558][ T6026] team_slave_1: entered promiscuous mode
[   64.007837][ T6026] 8021q: adding VLAN 0 to HW filter on device team0
[   64.019767][ T6026] batman_adv: batadv0: Interface activated: team0
[   64.026488][ T6026] batman_adv: batadv0: Interface deactivated: team0
[   64.036972][ T6026] batman_adv: batadv0: Removing interface: team0
[   64.046725][ T6026] bridge0: port 3(team0) entered blocking state
[   64.059988][ T6026] bridge0: port 3(team0) entered disabled state
[   64.066982][ T6026] team0: entered allmulticast mode
[   64.071597][ T6026] team_slave_0: entered allmulticast mode
[   64.073521][ T6026] team_slave_1: entered allmulticast mode
[   64.082659][ T6026] bridge0: port 3(team0) entered blocking state
[   64.085465][ T6026] bridge0: port 3(team0) entered forwarding state
[   64.335312][ T6049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.546936][ T6063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.67'.
[   64.554110][ T6063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.67'.
[   64.558043][ T6063] Zero length message leads to an empty skb
[   64.667280][ T6070] netlink: 'syz.2.69': attribute type 10 has an invalid length.
[   64.701276][ T6070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.69'.
[   64.727427][ T6070] dummy0: entered promiscuous mode
[   64.729630][ T6070] dummy0: entered allmulticast mode
[   64.738124][ T6070] bridge0: port 3(dummy0) entered blocking state
[   64.744817][ T6070] bridge0: port 3(dummy0) entered disabled state
[   64.755149][ T6070] bridge0: port 3(dummy0) entered blocking state
[   64.757432][ T6070] bridge0: port 3(dummy0) entered forwarding state
[   65.115068][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'.
[   65.127277][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'.
[   65.531658][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'.
[   65.534917][ T6119] tipc: Started in network mode
[   65.536525][ T6119] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   65.543402][ T6119] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   65.546705][ T6119] tipc: Enabled bearer <udp:syz1>, priority 10
[   65.650865][ T5864] Bluetooth: hci1: command tx timeout
[   65.733089][ T5864] Bluetooth: hci0: command tx timeout
[   65.740287][ T5220] Bluetooth: hci2: command tx timeout
[   66.230674][ T6169] netlink: 'syz.2.112': attribute type 11 has an invalid length.
[   66.352913][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.417908][ T6176] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.424298][ T6176] bond0: (slave bond1): Enslaving as an active interface with an up link
[   66.661356][   T47] tipc: Node number set to 1
[   67.026395][ T6217] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   67.034635][  T791] IPVS: starting estimator thread 0...
[   67.131939][ T6218] IPVS: using max 80 ests per chain, 192000 per kthread
[   67.436775][ T6235] __nla_validate_parse: 7 callbacks suppressed
[   67.436791][ T6235] netlink: 48 bytes leftover after parsing attributes in process `syz.2.138'.
[   67.733551][ T5864] Bluetooth: hci1: command tx timeout
[   67.811985][ T5220] Bluetooth: hci2: command tx timeout
[   67.814437][ T5864] Bluetooth: hci0: command tx timeout
[   68.850640][ T6306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.170'.
[   69.355998][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880302ea400: rx timeout, send abort
[   69.465906][ T6351] Bluetooth: MGMT ver 1.23
[   69.796518][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'.
[   69.804106][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[   69.806536][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   69.809356][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   69.812312][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   69.814998][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   69.817620][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   69.820321][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   69.822989][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   69.825874][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   69.828545][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   69.831749][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   69.834406][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   69.856468][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880302ea800: rx timeout, send abort
[   69.860205][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880302ea400: abort rx timeout. Force session deactivation
[   69.984197][ T6379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   69.987337][ T6379] IPv6: NLM_F_CREATE should be set when creating new route
[   70.314736][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'.
[   70.359395][    C0] vcan0 (unregistering): j1939_tp_rxtimer: 0xffff8880302ea800: abort rx timeout. Force session deactivation
[   70.389657][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.393217][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.505219][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.516809][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.639052][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.650384][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.654095][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.657557][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.714614][ T6399] syz.0.215 (6399) used greatest stack depth: 19832 bytes left
[   70.791784][ T6411] netlink: 'syz.2.220': attribute type 8 has an invalid length.
[   70.825854][ T6417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.952789][ T6429] netlink: 'syz.0.229': attribute type 2 has an invalid length.
[   70.955542][ T6429] netlink: 164 bytes leftover after parsing attributes in process `syz.0.229'.
[   71.026463][ T6433] netlink: 'syz.0.232': attribute type 2 has an invalid length.
[   71.029048][ T6433] netlink: 51 bytes leftover after parsing attributes in process `syz.0.232'.
[   71.098517][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.107026][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.148650][ T6437] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[   71.250067][ T6443] bond1: (slave gretap1): making interface the new active one
[   71.264405][ T6443] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   72.357995][ T6506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.265'.
[   72.579771][ T6514] netlink: 268 bytes leftover after parsing attributes in process `syz.0.270'.
[   72.878915][ T6533] netlink: 'syz.1.277': attribute type 10 has an invalid length.
[   72.884362][ T6533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.277'.
[   72.906825][ T6533] geneve0: entered promiscuous mode
[   72.909291][ T6533] geneve0: entered allmulticast mode
[   72.914156][ T6526] "syz.0.274" (6526) uses obsolete ecb(arc4) skcipher
[   72.917914][ T6533] team0: Port device geneve0 added
[   73.025331][ T6538] geneve2: entered promiscuous mode
[   73.042162][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.049404][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.076501][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.101010][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.119685][ T6542] syzkaller1: entered promiscuous mode
[   73.129364][ T6542] syzkaller1: entered allmulticast mode
[   73.143554][ T6542] netlink: 'syz.2.282': attribute type 15 has an invalid length.
[   73.467746][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'.
[   73.471048][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'.
[   73.539700][ T6572] Illegal XDP return value 4294967294 on prog  (id 41) dev N/A, expect packet loss!
[   73.662990][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'.
[   73.667410][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'.
[   73.987974][ T6607] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   74.061399][ T6609] block nbd0: server does not support multiple connections per device.
[   74.067949][ T6609] block nbd0: shutting down sockets
[   74.381519][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'.
[   74.409355][ T6630] IPVS: persistence engine module ip_vs_pe_ not found
[   74.414534][   T47] IPVS: starting estimator thread 0...
[   74.499188][ T6649] netlink: 'syz.1.329': attribute type 1 has an invalid length.
[   74.500641][ T6642] IPVS: using max 73 ests per chain, 175200 per kthread
[   74.504180][ T6649] netlink: 224 bytes leftover after parsing attributes in process `syz.1.329'.
[   74.592298][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'.
[   74.620039][ T6659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   74.725157][ T6669] netlink: 'syz.1.338': attribute type 11 has an invalid length.
[   74.728473][ T6669] netlink: 140 bytes leftover after parsing attributes in process `syz.1.338'.
[   75.057654][ T6683] batadv_slave_0: entered promiscuous mode
[   75.061484][ T6683] batadv_slave_0: entered allmulticast mode
[   75.355872][ T6709] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   75.396128][ T6711] bridge0: port 3(team0) entered disabled state
[   75.492506][ T6711] team0 (unregistering): left allmulticast mode
[   75.494571][ T6711] team_slave_0: left allmulticast mode
[   75.498797][ T6711] team_slave_1: left allmulticast mode
[   75.500892][ T6711] geneve0: left allmulticast mode
[   75.502692][ T6711] bridge0: port 3(team0) entered disabled state
[   75.507056][ T6711] team_slave_0: left promiscuous mode
[   75.514565][ T6711] team0 (unregistering): Port device team_slave_0 removed
[   75.517629][ T6711] team_slave_1: left promiscuous mode
[   75.522279][ T6711] team0 (unregistering): Port device team_slave_1 removed
[   75.524769][ T6711] geneve0: left promiscuous mode
[   75.528788][ T6711] team0 (unregistering): Port device geneve0 removed
[   75.573687][ T6716] TCP: TCP_TX_DELAY enabled
[   76.138542][ T6742] bridge0: entered allmulticast mode
[   76.151454][ T6742] pim6reg: entered allmulticast mode
[   76.496869][ T6764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.369640][ T6794] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   77.522433][ T6804] tipc: Started in network mode
[   77.524577][ T6804] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   77.530624][ T6804] tipc: Enabled bearer <eth:vlan0>, priority 18
[   77.625042][ T6812] netlink: 'syz.0.401': attribute type 1 has an invalid length.
[   77.638578][ T6812] __nla_validate_parse: 5 callbacks suppressed
[   77.638591][ T6812] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.401'.
[   78.353857][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'.
[   78.601706][ T6860] tun0: tun_chr_ioctl cmd 1074025681
[   78.640335][   T10] tipc: Node number set to 10005162
[   78.712661][ T6864] tipc: Started in network mode
[   78.714775][ T6864] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[   78.718525][ T6864] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   80.343704][ T6878] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.427'.
[   80.375056][ T6825] Set syz1 is full, maxelem 65536 reached
[   80.460139][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[   80.579927][ T6892] veth0_to_team: entered promiscuous mode
[   80.585796][ T6892] veth0_to_team: entered allmulticast mode
[   80.593953][ T6894] warning: `syz.1.434' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.737696][ T6903] netlink: 'syz.2.438': attribute type 12 has an invalid length.
[   80.902836][ T6910] netlink: 'syz.2.441': attribute type 21 has an invalid length.
[   80.906442][ T6910] netlink: 152 bytes leftover after parsing attributes in process `syz.2.441'.
[   81.354195][   T96] cfg80211: failed to load regulatory.db
[   81.403288][ T6924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.625769][ T6924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.709765][ T6937] netlink: 204 bytes leftover after parsing attributes in process `syz.2.453'.
[   81.722689][ T6924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.723082][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'.
[   81.794450][ T6924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.877939][ T5874] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.907018][ T5874] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.915406][ T6949] netlink: 'syz.2.459': attribute type 3 has an invalid length.
[   81.935981][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.942429][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'.
[   81.970907][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.349478][ T6979] netlink: 'syz.0.474': attribute type 1 has an invalid length.
[   82.389491][ T6979] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.451249][ T6979] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.454456][ T6979] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   82.459856][ T6979] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   82.503270][ T6991] gretap1: entered promiscuous mode
[   82.511782][ T6991] bond2: (slave gretap1): making interface the new active one
[   82.518049][ T6991] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   82.554329][ T6979] macvlan2: entered promiscuous mode
[   82.556450][ T6979] macvlan2: entered allmulticast mode
[   82.558785][ T6979] bond2: entered promiscuous mode
[   82.563309][ T6979] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   82.570363][ T6979] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   82.586523][ T6979] bond2: left promiscuous mode
[   82.754442][ T7008] IPv6: NLM_F_REPLACE set, but no existing node found!
[   83.079859][ T7043] netlink: 'syz.2.504': attribute type 21 has an invalid length.
[   83.128045][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'.
[   83.132467][ T7045] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   83.675785][ T7073] ieee802154 phy0 wpan0: encryption failed: -22
[   83.854558][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'.
[   83.858482][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'.
[   83.862532][ T7083] netlink: 'syz.1.524': attribute type 1 has an invalid length.
[   83.865809][ T7083] netlink: 10 bytes leftover after parsing attributes in process `syz.1.524'.
[   83.900633][ T7083] nbd: socks must be embedded in a SOCK_ITEM attr
[   83.905869][ T7083] block nbd0: shutting down sockets
[   84.098171][ T7095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.101865][ T7095] syzkaller0: entered promiscuous mode
[   84.104266][ T7095] syzkaller0: entered allmulticast mode
[   84.124083][ T7095] tipc: Resetting bearer <eth:syzkaller0>
[   84.129996][ T7094] tipc: Resetting bearer <eth:syzkaller0>
[   84.141493][ T7094] tipc: Disabling bearer <eth:syzkaller0>
[   84.149289][ T7101] delete_channel: no stack
[   84.626871][ T7116] netlink: 'syz.0.538': attribute type 13 has an invalid length.
[   84.717351][ T5874] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.725929][ T5874] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.729544][ T5874] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.736528][ T5874] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.655246][ T7151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.659485][ T7151] syzkaller0: entered promiscuous mode
[   85.663631][ T7151] syzkaller0: entered allmulticast mode
[   85.701488][ T7151] tipc: Resetting bearer <eth:syzkaller0>
[   85.714595][ T7150] tipc: Resetting bearer <eth:syzkaller0>
[   85.723313][ T7150] tipc: Disabling bearer <eth:syzkaller0>
[   85.786006][ T7155] netlink: 'syz.2.554': attribute type 3 has an invalid length.
[   86.205422][ T5897] IPVS: starting estimator thread 0...
[   86.211646][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'.
[   86.231866][ T7199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.301161][ T7197] IPVS: using max 80 ests per chain, 192000 per kthread
[   86.315668][ T7207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.579'.
[   86.318733][ T7207] netlink: 'syz.1.579': attribute type 1 has an invalid length.
[   86.422363][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[   86.520127][ T7219] nbd: must specify at least one socket
[   86.592561][   T33] audit: type=1800 audit(1753701509.811:2): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.586" name="memory.events" dev="tmpfs" ino=894 res=0 errno=0
[   86.613935][   T33] audit: type=1804 audit(1753701509.811:3): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.586" name="/newroot/174/memory.events" dev="tmpfs" ino=894 res=1 errno=0
[   86.824911][ T7245] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.598'.
[   86.936147][ T7254] netlink: 168 bytes leftover after parsing attributes in process `syz.2.602'.
[   87.157567][ T7269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.608'.
[   87.166721][ T7269] bond0: entered promiscuous mode
[   87.168972][ T7269] bond_slave_0: entered promiscuous mode
[   87.173825][ T7269] bond_slave_1: entered promiscuous mode
[   87.178406][ T7269] bond0: left promiscuous mode
[   87.183017][ T7269] bond_slave_0: left promiscuous mode
[   87.185536][ T7269] bond_slave_1: left promiscuous mode
[   87.356836][ T7277] netlink: 'syz.2.612': attribute type 1 has an invalid length.
[   87.922091][ T7315] vlan2: entered promiscuous mode
[   87.924288][ T7315] syz_tun: entered promiscuous mode
[   88.201751][ T7330] __nla_validate_parse: 4 callbacks suppressed
[   88.201765][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[   88.413864][ T7341] IPVS: Scheduler module ip_vs_sip not found
[   88.419231][ T7341] IPVS: length: 146 != 8
[   88.448596][ T7346] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[   88.639697][ T7355] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   88.813795][ T7367] netlink: 124 bytes leftover after parsing attributes in process `syz.1.650'.
[   88.938759][ T7381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.657'.
[   89.041377][ T7389] IPVS: Scheduler module ip_vs_sip not found
[   89.050483][ T7391] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.661'.
[   89.054619][ T7391] netlink: zone id is out of range
[   89.056890][ T7391] netlink: zone id is out of range
[   89.059082][ T7391] netlink: zone id is out of range
[   89.070452][ T7391] netlink: zone id is out of range
[   89.074714][ T7391] netlink: zone id is out of range
[   89.077327][ T7391] netlink: zone id is out of range
[   89.079852][ T7391] netlink: zone id is out of range
[   89.086355][ T7391] netlink: zone id is out of range
[   89.195945][ T7404] netlink: 'syz.2.668': attribute type 35 has an invalid length.
[   89.200956][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'.
[   89.205175][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'.
[   89.209017][ T7402] netlink: 'syz.0.667': attribute type 1 has an invalid length.
[   89.221325][ T7402] netlink: 10 bytes leftover after parsing attributes in process `syz.0.667'.
[   89.252889][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'.
[   89.261008][ T7402] nbd: socks must be embedded in a SOCK_ITEM attr
[   89.263863][ T7402] block nbd1: shutting down sockets
[   89.315775][ T7408] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   89.330420][ T7408] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   89.791298][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'.
[   89.904830][ T7459] bridge0: entered promiscuous mode
[   89.914399][ T7459] vlan2: entered promiscuous mode
[   90.766073][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'.
[   90.878705][ T7540] netlink: 'syz.1.733': attribute type 1 has an invalid length.
[   91.631286][ T7580] IPVS: Error connecting to the multicast addr
[   91.750555][ T7591] net_ratelimit: 2 callbacks suppressed
[   91.750559][ T7591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.899552][ T7605] netlink: 'syz.2.765': attribute type 29 has an invalid length.
[   91.905510][ T7605] netlink: 'syz.2.765': attribute type 29 has an invalid length.
[   92.850648][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.471489][ T7776] netlink: 'syz.1.813': attribute type 3 has an invalid length.
[   94.479551][ T7776] __nla_validate_parse: 9 callbacks suppressed
[   94.479566][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.813'.
[   94.542711][ T7780] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   94.545953][ T7780] macsec1: entered allmulticast mode
[   94.547877][ T7780] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[   94.553755][ T7780] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[   94.556544][ T7780] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[   94.577087][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'.
[   94.580555][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'.
[   94.615533][ T7788] syz.2.818 uses old SIOCAX25GETINFO
[   94.666733][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'.
[   94.837209][ T7807] netlink: 'syz.2.827': attribute type 15 has an invalid length.
[   94.865842][ T7810] netlink: 'syz.1.829': attribute type 9 has an invalid length.
[   94.869210][ T7810] netlink: 224 bytes leftover after parsing attributes in process `syz.1.829'.
[   95.265893][ T7835] syzkaller0: entered promiscuous mode
[   95.268252][ T7835] syzkaller0: entered allmulticast mode
[   96.405373][ T7867] netlink: 104 bytes leftover after parsing attributes in process `syz.1.847'.
[   96.719904][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'.
[   96.785213][ T7894] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[   97.179881][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[   97.556695][ T7936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.872'.
[   98.092418][ T7960] netlink: 'syz.0.884': attribute type 12 has an invalid length.
[   98.096346][ T7960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.884'.
[   99.161687][ T7976] tipc: Can't bind to reserved service type 33
[   99.324715][ T7982] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   99.577520][ T8005] netlink: 'syz.2.902': attribute type 1 has an invalid length.
[   99.653287][ T7994] bridge_slave_0: left allmulticast mode
[   99.656696][ T7994] bridge_slave_0: left promiscuous mode
[   99.659625][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.666681][ T7994] bridge_slave_1: left allmulticast mode
[   99.669393][ T7994] bridge_slave_1: left promiscuous mode
[   99.674050][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.692379][ T7994] bond0: (slave bond_slave_0): Releasing backup interface
[   99.698551][ T7994] bond0: (slave bond_slave_1): Releasing backup interface
[   99.707604][ T7994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.720563][ T7994] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.725881][ T7994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.728846][ T7994] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.741009][ T8019] netlink: 'syz.0.906': attribute type 10 has an invalid length.
[   99.744909][ T7994] bond1: (slave gretap1): Releasing active interface
[   99.757186][ T8014] bridge_slave_0: left allmulticast mode
[   99.766470][ T8014] bridge_slave_0: left promiscuous mode
[   99.769067][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.780273][ T8014] bridge_slave_1: left allmulticast mode
[   99.782623][ T8014] bridge_slave_1: left promiscuous mode
[   99.785161][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.796196][ T8014] bond0: (slave bond_slave_0): Releasing backup interface
[   99.801735][ T8014] bond0: (slave bond_slave_1): Releasing backup interface
[   99.806229][ T8014] team0: Port device team_slave_0 removed
[   99.809972][ T8014] team0: Port device team_slave_1 removed
[   99.815798][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.819809][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.824715][ T8014] bond0: (slave bond1): Releasing backup interface
[   99.828906][ T8014] bond2: (slave gretap1): Releasing active interface
[   99.837772][ T8019] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   99.845692][ T8021] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.849343][ T8021] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.410102][ T8027] netlink: 'syz.1.911': attribute type 1 has an invalid length.
[  101.396506][ T8051] netlink: 'syz.2.923': attribute type 25 has an invalid length.
[  101.431965][ T8055] netlink: 'syz.2.925': attribute type 1 has an invalid length.
[  101.434446][ T8055] __nla_validate_parse: 1 callbacks suppressed
[  101.434453][ T8055] netlink: 236 bytes leftover after parsing attributes in process `syz.2.925'.
[  101.439682][ T8055] NCSI netlink: No device for ifindex 813332851
[  101.533552][ T8065] netlink: 'syz.1.930': attribute type 4 has an invalid length.
[  101.560074][ T8065] netlink: 'syz.1.930': attribute type 4 has an invalid length.
[  101.643557][ T8075] netlink: 'syz.1.935': attribute type 4 has an invalid length.
[  102.677048][ T8105] netlink: 'syz.1.949': attribute type 7 has an invalid length.
[  102.727614][ T8110] netlink: 'syz.0.951': attribute type 7 has an invalid length.
[  102.756353][ T8113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.952'.
[  102.760094][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'.
[  102.778404][ T8113] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  102.825289][ T8117] bridge0: port 1(erspan0) entered blocking state
[  102.830792][ T8117] bridge0: port 1(erspan0) entered disabled state
[  102.833324][ T8117] erspan0: entered allmulticast mode
[  102.841119][ T8117] erspan0: entered promiscuous mode
[  102.856263][ T8117] erspan0: left allmulticast mode
[  102.858497][ T8117] erspan0: left promiscuous mode
[  102.860844][ T8123] netlink: 27 bytes leftover after parsing attributes in process `syz.2.957'.
[  102.862055][ T8117] bridge0: port 1(erspan0) entered disabled state
[  102.974164][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.961'.
[  102.984240][ T8132] openvswitch: netlink: Missing key (keys=40, expected=80)
[  102.992991][ T8132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.961'.
[  102.996952][ T8132] dummy0: entered promiscuous mode
[  102.999565][ T8132] bridge0: port 1(dummy0) entered blocking state
[  103.002115][ T8132] bridge0: port 1(dummy0) entered disabled state
[  103.004414][ T8132] dummy0: entered allmulticast mode
[  103.007738][ T8132] bridge0: port 1(dummy0) entered blocking state
[  103.010719][ T8132] bridge0: port 1(dummy0) entered forwarding state
[  103.067419][ T8134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.242149][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'.
[  103.325432][ T8152] netlink: 2 bytes leftover after parsing attributes in process `syz.2.971'.
[  103.333976][ T8152] batadv_slave_1: entered promiscuous mode
[  103.857566][ T8197] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  104.663887][ T8253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'.
[  104.666752][ T8253] openvswitch: netlink: Missing key (keys=40, expected=80)
[  104.840733][ T8265] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1020'.
[  105.656075][ T8335] pim6reg0: tun_chr_ioctl cmd 1074025677
[  105.661432][ T8335] pim6reg0: linktype set to 768
[  106.192792][ T8390] validate_nla: 2 callbacks suppressed
[  106.192807][ T8390] netlink: 'syz.0.1080': attribute type 5 has an invalid length.
[  106.197481][ T8390] netlink: 'syz.0.1080': attribute type 6 has an invalid length.
[  106.512455][ T8416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.526017][ T8416] syzkaller0: entered promiscuous mode
[  106.528162][ T8416] syzkaller0: entered allmulticast mode
[  106.572255][ T8416] tipc: Resetting bearer <eth:syzkaller0>
[  106.575720][ T8415] tipc: Resetting bearer <eth:syzkaller0>
[  106.595429][ T8415] tipc: Disabling bearer <eth:syzkaller0>
[  106.836054][   T33] audit: type=1804 audit(1753701530.051:4): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1100" name="/newroot/381/cgroup.controllers" dev="tmpfs" ino=1940 res=1 errno=0
[  106.849439][   T33] audit: type=1800 audit(1753701530.061:5): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1100" name="cgroup.controllers" dev="tmpfs" ino=1940 res=0 errno=0
[  107.194793][ T8468] netlink: 'syz.2.1113': attribute type 13 has an invalid length.
[  107.198160][ T8468] netlink: 'syz.2.1113': attribute type 17 has an invalid length.
[  107.204665][ T8470] __nla_validate_parse: 2 callbacks suppressed
[  107.204679][ T8470] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.1117'.
[  107.253344][ T8468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.784084][ T8513] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
Connection to localhost closed by remote host.
[  109.249440][ T5869] syz-executor (5869) used greatest stack depth: 19768 bytes left
[  127.410825][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog

VM DIAGNOSIS:
11:19:01  Registers:
info registers vcpu 0

CPU#0
RAX=bb71ec8749f03800 RBX=ffffffff81976a48 RCX=bb71ec8749f03800 RDX=0000000000000001
RSI=ffffffff8d99ec30 RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa22bf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6fb4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005575c9507e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffff000000 0000000000000000 XMM05=0000000000000301 000000000061642e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffff000000 XMM09=79726f74616c7567 65722f657261776d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000083b1f RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000083b1f RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000000 R9 =ffffffff81aec9fe R10=0000000000000003 R11=ffffffff81702490
R12=000000000fffe883 R13=dffffc0000000000 R14=0000000000083b1f R15=0000000000000020
RIP=ffffffff81714f69 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005575c94f8748 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000010000000000
XMM02=0000000000000000 0000550078756166 XMM03=0000000000000000 ffffff0000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000301 000000000061642e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffff000000 XMM09=79726f74616c7567 65722f657261776d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
