last executing test programs:

33.977520081s ago: executing program 0 (id=3769):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900efff72797a30000000000900020073797a3200000000380000001c0a05000000000000000000020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0)

33.977227702s ago: executing program 0 (id=3770):
syz_emit_ethernet(0x46, &(0x7f0000000540)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xe, 0x5, 0x800}}}}}}, 0x0)

33.927904329s ago: executing program 0 (id=3771):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r0, 0xf45f2000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000380)={0x0, 0x1, 0x10, 0x7})

33.927620231s ago: executing program 0 (id=3772):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}})

33.857676481s ago: executing program 0 (id=3773):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b9000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)

33.857392547s ago: executing program 0 (id=3774):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x11, 0x6}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050)

18.846293921s ago: executing program 32 (id=3774):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x11, 0x6}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050)

1.161388934s ago: executing program 1 (id=4739):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000)

1.160941666s ago: executing program 1 (id=4740):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

1.09028374s ago: executing program 1 (id=4741):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4)

851.81235ms ago: executing program 1 (id=4747):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)

851.320699ms ago: executing program 1 (id=4749):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x203, 0x4)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

351.626412ms ago: executing program 3 (id=4768):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
accept4(r0, &(0x7f0000000340)=@isdn, 0x0, 0x80800)

332.565645ms ago: executing program 2 (id=4769):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x44, r1, 0xd0d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "baaec2d28c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0)

276.535547ms ago: executing program 3 (id=4770):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200008a0000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701000004ffffffb702000008000000b70300000002000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000520e0000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

276.199003ms ago: executing program 2 (id=4771):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x2e, 0x0, &(0x7f00000001c0))

210.763104ms ago: executing program 3 (id=4772):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010026bd700003000010020006"], 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x4008014)

210.54506ms ago: executing program 2 (id=4773):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000)

210.361631ms ago: executing program 3 (id=4774):
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0xfffffffffffffd4a, 0x4000, &(0x7f0000000480)={0x23, 0x81, 0x8, 0x6}, 0x10)

150.960504ms ago: executing program 2 (id=4775):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r0, 0x4}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})

150.797933ms ago: executing program 3 (id=4776):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000180))

103.485257ms ago: executing program 2 (id=4777):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x5, 0x0, 0xff, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b32, &(0x7f0000000040))
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000)
accept$phonet_pipe(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004090}, 0x0)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000340)={0x2, &(0x7f0000000200)=[{0x0, 0x1, 0x7, 0x6}, {0x81, 0x66, 0x1, 0x8}]})
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0)
setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f0000000280)=0x7, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x4000040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x10000003, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.222173ms ago: executing program 2 (id=4778):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)

2.0528ms ago: executing program 3 (id=4779):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

0s ago: executing program 1 (id=4780):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0639dc20fea50fe5f1ffe7a91a68", 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15776' (ED25519) to the list of known hosts.
syzkaller login: [   47.930392][ T5820] cgroup: Unknown subsys name 'net'
[   48.036892][ T5820] cgroup: Unknown subsys name 'cpuset'
[   48.042965][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.712445][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.091223][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.094982][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.097847][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.100930][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.104007][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.155868][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.158689][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.161119][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.164495][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.167090][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.199568][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.203594][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.207554][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.213738][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.217042][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.410128][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   62.559278][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.565417][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.568231][ T5864] bridge_slave_0: entered allmulticast mode
[   62.572955][ T5864] bridge_slave_0: entered promiscuous mode
[   62.577328][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   62.604500][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.606726][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.608880][ T5864] bridge_slave_1: entered allmulticast mode
[   62.611482][ T5864] bridge_slave_1: entered promiscuous mode
[   62.655652][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   62.665786][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.695504][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.754716][ T5864] team0: Port device team_slave_0 added
[   62.756810][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.759124][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.761240][ T5869] bridge_slave_0: entered allmulticast mode
[   62.764950][ T5869] bridge_slave_0: entered promiscuous mode
[   62.769557][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.771675][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.774705][ T5869] bridge_slave_1: entered allmulticast mode
[   62.777265][ T5869] bridge_slave_1: entered promiscuous mode
[   62.790746][ T5864] team0: Port device team_slave_1 added
[   62.825503][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.827725][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.829823][ T5872] bridge_slave_0: entered allmulticast mode
[   62.832545][ T5872] bridge_slave_0: entered promiscuous mode
[   62.844268][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.847517][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.849830][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.859050][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.865251][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.867309][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.875899][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.879417][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.881575][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.884045][ T5872] bridge_slave_1: entered allmulticast mode
[   62.886715][ T5872] bridge_slave_1: entered promiscuous mode
[   62.897956][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.934710][ T5869] team0: Port device team_slave_0 added
[   62.938282][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.943845][ T5869] team0: Port device team_slave_1 added
[   62.961686][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.999399][ T5872] team0: Port device team_slave_0 added
[   63.004691][ T5864] hsr_slave_0: entered promiscuous mode
[   63.006918][ T5864] hsr_slave_1: entered promiscuous mode
[   63.009954][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.012495][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.020332][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.024950][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.027062][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.034936][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.039381][ T5872] team0: Port device team_slave_1 added
[   63.096456][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.098989][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.107252][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.123928][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.126229][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.134652][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.140767][ T5869] hsr_slave_0: entered promiscuous mode
[   63.144119][ T5869] hsr_slave_1: entered promiscuous mode
[   63.146182][ T5869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.148541][ T5869] Cannot create hsr debugfs directory
[   63.226059][ T5872] hsr_slave_0: entered promiscuous mode
[   63.228287][ T5872] hsr_slave_1: entered promiscuous mode
[   63.230325][ T5872] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.233245][ T5872] Cannot create hsr debugfs directory
[   63.382729][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.400692][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.424759][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.429215][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.469441][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.477771][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.483221][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.490825][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.555980][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.561523][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.569093][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.584805][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.633897][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.663639][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.671850][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   63.690919][ T1856] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.693409][ T1856] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.698493][ T1856] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.700955][ T1856] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.721010][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.739270][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   63.754278][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   63.759984][ T1856] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.762399][ T1856] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.774167][ T1856] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.776644][ T1856] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.784761][ T1856] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.787188][ T1856] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.796238][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.798359][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.835729][ T5872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.838864][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.958192][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.968918][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.018263][ T5872] veth0_vlan: entered promiscuous mode
[   64.033097][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.035942][ T5864] veth0_vlan: entered promiscuous mode
[   64.041966][ T5872] veth1_vlan: entered promiscuous mode
[   64.050829][ T5864] veth1_vlan: entered promiscuous mode
[   64.091561][ T5869] veth0_vlan: entered promiscuous mode
[   64.096901][ T5864] veth0_macvtap: entered promiscuous mode
[   64.103780][ T5872] veth0_macvtap: entered promiscuous mode
[   64.109925][ T5869] veth1_vlan: entered promiscuous mode
[   64.114842][ T5864] veth1_macvtap: entered promiscuous mode
[   64.119348][ T5872] veth1_macvtap: entered promiscuous mode
[   64.133660][   T55] Bluetooth: hci0: command tx timeout
[   64.155775][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.161363][ T5869] veth0_macvtap: entered promiscuous mode
[   64.168757][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.173369][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.175941][ T5869] veth1_macvtap: entered promiscuous mode
[   64.184005][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.186723][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.189207][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.191682][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.199874][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.206132][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.208723][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.211287][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.214899][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.223364][   T55] Bluetooth: hci1: command tx timeout
[   64.254021][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.259220][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.288667][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.291271][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.294228][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.296794][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.302822][   T55] Bluetooth: hci2: command tx timeout
[   64.329732][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.333199][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.372714][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.375057][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.376663][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.379623][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.418912][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.421828][ T1856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.427266][ T1856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.451773][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.455129][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.493846][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.507630][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.510210][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'.
[   64.814100][ T5959] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.820471][ T5957] netlink: 'syz.1.31': attribute type 8 has an invalid length.
[   65.236471][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'.
[   65.239263][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'.
[   66.176910][ T6076] pimreg3: entered allmulticast mode
[   66.189519][ T6075] pimreg3: left allmulticast mode
[   66.212356][   T55] Bluetooth: hci0: command tx timeout
[   66.246912][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[   66.295616][   T55] Bluetooth: hci1: command tx timeout
[   66.305890][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'.
[   66.350065][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'.
[   66.373798][   T55] Bluetooth: hci2: command tx timeout
[   66.540641][ T6098] netlink: 96 bytes leftover after parsing attributes in process `syz.0.99'.
[   66.785047][ T6117] trusted_key: syz.1.108 sent an empty control message without MSG_MORE.
[   66.851597][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'.
[   66.876311][ T6126] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.112'.
[   67.056866][ T6141] tipc: Started in network mode
[   67.058441][ T6141] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   67.060705][ T6141] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   67.335143][ T6166] lo: entered allmulticast mode
[   67.336819][ T6166] lo: left allmulticast mode
[   67.459620][ T6172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.521581][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'.
[   68.055299][ T6213] veth1_to_team: entered allmulticast mode
[   68.072981][   T96] tipc: Node number set to 10136234
[   68.077668][ T6213] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   68.309024][   T55] Bluetooth: hci0: command tx timeout
[   68.382151][   T55] Bluetooth: hci1: command tx timeout
[   68.452557][   T55] Bluetooth: hci2: command tx timeout
[   68.742759][ T6256] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   68.826788][ T6264] bridge_slave_1: left allmulticast mode
[   68.829805][ T6264] bridge_slave_1: left promiscuous mode
[   68.832737][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.845023][ T6264] bridge_slave_0: left allmulticast mode
[   68.848099][ T6264] bridge_slave_0: left promiscuous mode
[   68.856887][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.380190][ T6310] netlink: 'syz.1.191': attribute type 1 has an invalid length.
[   69.583276][ T6321] openvswitch: netlink: Missing valid actions attribute.
[   69.585693][ T6321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.788379][ T6334] __nla_validate_parse: 5 callbacks suppressed
[   69.788392][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.202'.
[   69.840411][ T6338] netlink: 'syz.0.204': attribute type 1 has an invalid length.
[   69.844505][ T6338] netlink: 'syz.0.204': attribute type 1 has an invalid length.
[   69.846981][ T6338] netlink: 216 bytes leftover after parsing attributes in process `syz.0.204'.
[   70.112890][ T6359] netlink: 48 bytes leftover after parsing attributes in process `syz.2.211'.
[   70.149951][ T6359] Zero length message leads to an empty skb
[   70.165932][ T6359] bridge_slave_0: left allmulticast mode
[   70.167745][ T6359] bridge_slave_0: left promiscuous mode
[   70.169636][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.181605][ T6359] bridge_slave_1: left allmulticast mode
[   70.189789][ T6359] bridge_slave_1: left promiscuous mode
[   70.191725][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.198683][ T6359] bond0: (slave bond_slave_0): Releasing backup interface
[   70.204455][ T6359] bond0: (slave bond_slave_1): Releasing backup interface
[   70.221195][ T6359] team0: Port device team_slave_0 removed
[   70.237436][ T6359] team0: Port device team_slave_1 removed
[   70.239701][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.241967][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.246518][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.248928][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.345553][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.348159][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.372581][   T55] Bluetooth: hci0: command tx timeout
[   70.401052][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.411474][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.453156][   T55] Bluetooth: hci1: command tx timeout
[   70.457635][ T6370] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.465131][ T6370] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.467778][ T6370] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.470463][ T6370] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.532312][   T55] Bluetooth: hci2: command tx timeout
[   70.755275][ T6392] netlink: 'syz.1.228': attribute type 11 has an invalid length.
[   71.025746][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.028534][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.047879][ T6411] Driver unsupported XDP return value 0 on prog  (id 33) dev N/A, expect packet loss!
[   71.237933][ T6418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.289931][ T6423] xt_hashlimit: size too large, truncated to 1048576
[   71.474126][ T6429] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.738821][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.750180][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.771381][ T6444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.251'.
[   71.798112][ T6446] netlink: 'syz.0.252': attribute type 1 has an invalid length.
[   71.800593][ T6446] netlink: 'syz.0.252': attribute type 4 has an invalid length.
[   71.803357][ T6446] netlink: 14506 bytes leftover after parsing attributes in process `syz.0.252'.
[   71.868006][ T6441] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.871204][ T6441] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.874773][ T6441] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.877476][ T6441] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.043648][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'.
[   72.156011][ T6450] syzkaller1: entered promiscuous mode
[   72.157849][ T6450] syzkaller1: entered allmulticast mode
[   72.315205][ T6473] openvswitch: netlink: Duplicate or invalid key (type 0).
[   72.317489][ T6473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.571337][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'.
[   72.966930][ T6511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.978037][ T6511] syzkaller0: entered promiscuous mode
[   72.985626][ T6511] syzkaller0: entered allmulticast mode
[   73.014925][ T6511] tipc: Resetting bearer <eth:syzkaller0>
[   73.020131][ T6509] tipc: Resetting bearer <eth:syzkaller0>
[   73.030049][ T6509] tipc: Disabling bearer <eth:syzkaller0>
[   73.207653][ T6535] nbd: socks must be embedded in a SOCK_ITEM attr
[   73.283209][ T6538] tipc: Started in network mode
[   73.284759][ T6538] tipc: Node identity 764ef25e6dcb, cluster identity 4711
[   73.302973][ T6538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.310138][ T6538] syzkaller0: entered promiscuous mode
[   73.311893][ T6538] syzkaller0: entered allmulticast mode
[   73.355685][ T6538] tipc: Resetting bearer <eth:syzkaller0>
[   73.358942][ T6537] tipc: Resetting bearer <eth:syzkaller0>
[   73.382755][ T6537] tipc: Disabling bearer <eth:syzkaller0>
[   73.758353][ T6573] batadv_slave_0: entered promiscuous mode
[   73.890402][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   73.895685][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'.
[   73.898584][ T6585] netlink: 'syz.0.317': attribute type 19 has an invalid length.
[   73.950630][ T6591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.320'.
[   74.374079][ T6622] syzkaller0: entered promiscuous mode
[   74.376911][ T6622] syzkaller0: entered allmulticast mode
[   75.262001][ T6638] __nla_validate_parse: 1 callbacks suppressed
[   75.265939][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'.
[   75.384354][ T6648] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[   75.393219][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'.
[   75.453707][ T6658] syz.0.350 uses obsolete (PF_INET,SOCK_PACKET)
[   75.457107][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[   75.725516][ T6678] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   75.876006][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'.
[   75.980769][ T6690] team0 (unregistering): Port device team_slave_0 removed
[   75.984134][ T6690] team0 (unregistering): Port device team_slave_1 removed
[   76.010062][ T6698] netlink: 224 bytes leftover after parsing attributes in process `syz.2.369'.
[   76.019155][ T6698] netlink: 'syz.2.369': attribute type 1 has an invalid length.
[   76.033954][ T6698] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.051956][ T6698] bond1: (slave gretap1): making interface the new active one
[   76.061150][ T6698] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   76.110097][ T6698] syz.2.369 (6698) used greatest stack depth: 19664 bytes left
[   76.113541][ T6701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.370'.
[   76.302760][ T6715] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   76.571048][ T6736] netlink: 'syz.0.386': attribute type 11 has an invalid length.
[   76.719210][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'.
[   76.740602][ T6749] vlan2: entered promiscuous mode
[   76.742615][ T6749] dummy0: entered promiscuous mode
[   76.900886][ T6765] netlink: zone id is out of range
[   76.903199][ T6765] netlink: zone id is out of range
[   76.926336][ T6765] netlink: set zone limit has 4 unknown bytes
[   77.136862][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'.
[   77.287043][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'.
[   78.025203][ T6860] netlink: 52 bytes leftover after parsing attributes in process `syz.1.443'.
[   78.036973][ T6856] netlink: 'syz.0.441': attribute type 11 has an invalid length.
[   78.227404][ T6864] netlink: 'syz.0.445': attribute type 13 has an invalid length.
[   78.229985][ T6864] netlink: 'syz.0.445': attribute type 17 has an invalid length.
[   78.308214][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.313544][ T6864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.401385][ T6864] syz.0.445 (6864) used greatest stack depth: 17600 bytes left
[   78.934453][ T6892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.298001][ T6921] xt_TPROXY: Can be used only with -p tcp or -p udp
[   79.407432][ T6929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.731528][   T34] audit: type=1800 audit(1752817502.605:2): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.472" name="blkio.bfq.time_recursive" dev="tmpfs" ino=694 res=0 errno=0
[   79.752796][   T34] audit: type=1800 audit(1752817502.625:3): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.472" name="blkio.bfq.time_recursive" dev="tmpfs" ino=694 res=0 errno=0
[   80.320317][ T6954] __nla_validate_parse: 7 callbacks suppressed
[   80.320329][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'.
[   80.493416][ T6966] netlink: 'syz.1.485': attribute type 7 has an invalid length.
[   80.496017][ T6966] netlink: 'syz.1.485': attribute type 8 has an invalid length.
[   80.509547][ T6966] netlink: 'syz.1.485': attribute type 4 has an invalid length.
[   80.511901][ T6966] netlink: 204 bytes leftover after parsing attributes in process `syz.1.485'.
[   80.704956][ T6974] netlink: 'syz.0.489': attribute type 39 has an invalid length.
[   81.263244][   T47] cfg80211: failed to load regulatory.db
[   81.459830][ T6998] lo speed is unknown, defaulting to 1000
[   81.473702][ T6998] lo speed is unknown, defaulting to 1000
[   81.477003][ T6998] lo speed is unknown, defaulting to 1000
[   81.547138][ T7007] xt_bpf: check failed: parse error
[   81.550729][ T7003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.614741][ T7011] IPv6: syztnl1: Disabled Multicast RS
[   81.690603][ T6998] infiniband syz0: set active
[   81.692285][ T6998] infiniband syz0: added lo
[   81.699019][  T790] lo speed is unknown, defaulting to 1000
[   81.719401][ T6998] RDS/IB: syz0: added
[   81.721118][ T6998] smc: adding ib device syz0 with port count 1
[   81.723383][ T6998] smc:    ib device syz0 port 1 has pnetid 
[   81.727906][ T6998] lo speed is unknown, defaulting to 1000
[   81.852191][ T6998] lo speed is unknown, defaulting to 1000
[   81.904321][  T790] lo speed is unknown, defaulting to 1000
[   82.056671][ T6998] lo speed is unknown, defaulting to 1000
[   82.128036][ T7038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.133149][ T7039] netlink: 'syz.0.519': attribute type 10 has an invalid length.
[   82.135616][ T7039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.519'.
[   82.138637][ T7039] dummy0: entered promiscuous mode
[   82.141012][ T7039] bridge0: port 3(dummy0) entered blocking state
[   82.143943][ T7039] bridge0: port 3(dummy0) entered disabled state
[   82.146240][ T7039] dummy0: entered allmulticast mode
[   82.153375][ T7039] bridge0: port 3(dummy0) entered blocking state
[   82.155459][ T7039] bridge0: port 3(dummy0) entered forwarding state
[   82.436884][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'.
[   82.507699][ T7068] netlink: 'syz.0.533': attribute type 2 has an invalid length.
[   82.510139][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'.
[   82.622203][   T55] Bluetooth: hci2: command tx timeout
[   82.654286][ T7080] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   82.874525][ T7099] x_tables: ip_tables: osf match: only valid for protocol 6
[   83.216028][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'.
[   83.218834][ T7130] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[   83.224134][ T7130] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.304091][ T7135] Bluetooth: MGMT ver 1.23
[   83.657836][ T7151] bridge0: port 1(erspan0) entered blocking state
[   83.661177][ T7151] bridge0: port 1(erspan0) entered disabled state
[   83.671139][ T7151] erspan0: entered allmulticast mode
[   83.676159][ T7151] erspan0: entered promiscuous mode
[   83.768318][  T790] IPVS: starting estimator thread 0...
[   83.872691][ T7158] IPVS: using max 61 ests per chain, 146400 per kthread
[   83.927083][ T7160] lo speed is unknown, defaulting to 1000
[   84.131935][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'.
[   84.151257][ T7171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.579'.
[   84.215848][ T7175] netlink: 'syz.2.581': attribute type 13 has an invalid length.
[   84.406212][ T7175] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.409075][ T7175] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.411813][ T7175] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.414888][ T7175] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.451678][    T9] lo speed is unknown, defaulting to 1000
[   84.455253][    T9] syz0: Port: 1 Link DOWN
[   84.459325][ T7177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.582'.
[   84.464776][    T9] lo speed is unknown, defaulting to 1000
[   84.726363][ T7191] openvswitch: netlink: IPv6 tunnel dst address is zero
[   84.763152][ T7193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.769270][ T7193] syzkaller0: entered promiscuous mode
[   84.773660][ T7193] syzkaller0: entered allmulticast mode
[   84.800489][ T7193] tipc: Resetting bearer <eth:syzkaller0>
[   84.811151][ T7192] tipc: Resetting bearer <eth:syzkaller0>
[   84.824790][ T7192] tipc: Disabling bearer <eth:syzkaller0>
[   84.853999][ T7197] tipc: Started in network mode
[   84.855653][ T7197] tipc: Node identity 3ad6e3629bc8, cluster identity 4711
[   84.858026][ T7197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.861642][ T7197] syzkaller0: entered promiscuous mode
[   84.863998][ T7197] syzkaller0: entered allmulticast mode
[   84.876619][ T7197] tipc: Resetting bearer <eth:syzkaller0>
[   84.880773][ T7196] tipc: Resetting bearer <eth:syzkaller0>
[   84.890864][ T7196] tipc: Disabling bearer <eth:syzkaller0>
[   85.027849][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'.
[   85.629161][ T7232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.661584][ T7234] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   85.691010][ T7236] IPv6: NLM_F_REPLACE set, but no existing node found!
[   85.819280][ T7246] bridge0: entered promiscuous mode
[   85.941184][ T7250] __nla_validate_parse: 2 callbacks suppressed
[   85.941196][ T7250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'.
[   86.054195][ T7262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.622'.
[   86.094555][ T7266] warning: `syz.1.624' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.251106][ T7274] netlink: 'syz.2.628': attribute type 83 has an invalid length.
[   86.645330][ T7307] openvswitch: netlink: Message has 16 unknown bytes.
[   86.779067][ T7318] batadv_slave_0: left promiscuous mode
[   86.783511][ T7318] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[   86.787884][ T7315] netlink: 'syz.2.649': attribute type 10 has an invalid length.
[   86.790875][ T7318] bridge0: left promiscuous mode
[   86.802517][ T7315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.815949][ T7315] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   86.850976][ T7324] netlink: 312 bytes leftover after parsing attributes in process `syz.0.652'.
[   86.952179][ T7332] netlink: 'syz.2.656': attribute type 1 has an invalid length.
[   86.954539][ T7332] netlink: 232 bytes leftover after parsing attributes in process `syz.2.656'.
[   87.259705][ T7360] netlink: 11 bytes leftover after parsing attributes in process `syz.2.670'.
[   87.525016][ T7373] netlink: 60 bytes leftover after parsing attributes in process `syz.2.675'.
[   87.759772][ T7386] lo speed is unknown, defaulting to 1000
[   87.813527][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'.
[   87.918961][ T7389] bond0: (slave batadv0): Releasing backup interface
[   88.870894][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'.
[   88.890184][ T7410] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 39993 - 0
[   88.894627][ T7410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 39993 - 0
[   88.898434][ T7410] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 39993 - 0
[   88.911090][ T7410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 39993 - 0
[   88.932647][ T7410] geneve2: entered promiscuous mode
[   88.944705][ T7410] geneve2: entered allmulticast mode
[   89.155238][ T7424] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   89.727110][ T7468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.745690][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'.
[   89.758201][ T7468] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   89.767593][ T7468] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   89.856784][ T7492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.887658][ T7494] Unknown options in mask 700
[   90.068955][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'.
[   90.123557][ T7518] netlink: 'syz.1.729': attribute type 1 has an invalid length.
[   90.360146][ T7535] netlink: 'syz.1.738': attribute type 13 has an invalid length.
[   90.366148][ T7535] netlink: 'syz.1.738': attribute type 17 has an invalid length.
[   90.499762][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.510550][ T7535] 8021q: adding VLAN 0 to HW filter on device team0
[   90.526900][ T7535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.586701][ T7541] lo speed is unknown, defaulting to 1000
[   90.603469][ T7535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.656730][ T7556] geneve3: entered promiscuous mode
[   90.660820][ T7535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.717043][ T7535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.447728][ T7611] __nla_validate_parse: 3 callbacks suppressed
[   91.447740][ T7611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.771'.
[   91.453538][ T7606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.771'.
[   92.200413][ T7677] netlink: 248 bytes leftover after parsing attributes in process `syz.2.802'.
[   92.615527][ T7701] pim6reg1: entered promiscuous mode
[   92.617326][ T7701] pim6reg1: entered allmulticast mode
[   92.769206][ T7706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.809'.
[   92.787294][ T7706] bond2 (unregistering): Released all slaves
[   93.100104][ T7735] netlink: 'syz.1.817': attribute type 4 has an invalid length.
[   93.198344][ T7741] rdma_rxe: rxe_newlink: failed to add lo
[   93.216335][ T7740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.457022][ T7747] Bluetooth: MGMT ver 1.23
[   93.585476][ T7767] macsec0: entered allmulticast mode
[   93.587802][ T7767] veth1_macvtap: entered allmulticast mode
[   93.589674][ T7767] macsec0: left allmulticast mode
[   93.591554][ T7767] veth1_macvtap: left allmulticast mode
[   93.643026][ T7773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.645900][ T7773] syzkaller0: entered promiscuous mode
[   93.648032][ T7773] syzkaller0: entered allmulticast mode
[   93.661222][ T7773] tipc: Resetting bearer <eth:syzkaller0>
[   93.670347][ T7772] tipc: Resetting bearer <eth:syzkaller0>
[   93.724837][ T7772] tipc: Disabling bearer <eth:syzkaller0>
[   93.888256][ T7791] SET target dimension over the limit!
[   94.282471][ T7826] netlink: 'syz.1.860': attribute type 3 has an invalid length.
[   94.366927][ T7832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.863'.
[   94.396826][ T7834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.864'.
[   95.112562][ T7891] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[   95.353669][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'.
[   95.492574][ T5220] Bluetooth: hci0: command 0x0c1a tx timeout
[   95.494538][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   95.581735][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   96.447922][ T7948] syzkaller1: entered promiscuous mode
[   96.449638][ T7948] syzkaller1: entered allmulticast mode
[   96.605652][ T7963] netlink: 'syz.2.913': attribute type 32 has an invalid length.
[   96.608114][ T7963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.913'.
[   96.747866][ T7982] netlink: 'syz.1.918': attribute type 1 has an invalid length.
[   96.750207][ T7982] netlink: 92 bytes leftover after parsing attributes in process `syz.1.918'.
[   96.961739][ T8006] xt_TCPMSS: Only works on TCP SYN packets
[   97.038083][ T8010] lo speed is unknown, defaulting to 1000
[   97.132614][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'.
[   97.364901][ T8036] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   97.426270][ T8042] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.946'.
[   98.055877][ T8104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.977'.
[   98.178360][ T8113] netlink: 'syz.2.980': attribute type 1 has an invalid length.
[   98.181352][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'.
[   99.176880][ T8133] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   99.183053][ T8128] syzkaller1: entered promiscuous mode
[   99.186938][ T8128] syzkaller1: entered allmulticast mode
[   99.391439][ T8141] netlink: 'syz.2.991': attribute type 9 has an invalid length.
[   99.986187][ T8203] C: renamed from lo (while UP)
[   99.993528][ T8203] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  100.264029][ T8231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1031'.
[  100.591184][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1043'.
[  100.720072][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'.
[  100.789168][ T8272] lo speed is unknown, defaulting to 1000
[  100.953890][ T8281] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1055'.
[  101.037654][ T8283] bridge_slave_1 (unregistering): left allmulticast mode
[  101.040144][ T8283] bridge_slave_1 (unregistering): left promiscuous mode
[  101.042917][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.238360][ T8295] netlink: 'syz.1.1060': attribute type 1 has an invalid length.
[  101.331934][ T8297] lo speed is unknown, defaulting to 1000
[  101.353516][ T8298] af_packet: tpacket_rcv: packet too big, clamped from 65638 to 3710. macoff=82
[  102.116489][ T8335] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  102.562745][ T8382] netlink: 'syz.2.1099': attribute type 1 has an invalid length.
[  102.702148][ T8398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.704752][ T8398] syzkaller0: entered promiscuous mode
[  102.706443][ T8398] syzkaller0: entered allmulticast mode
[  102.714476][ T8398] tipc: Resetting bearer <eth:syzkaller0>
[  102.719644][ T8397] tipc: Resetting bearer <eth:syzkaller0>
[  102.720553][ T8402] __nla_validate_parse: 1 callbacks suppressed
[  102.720563][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'.
[  102.727189][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'.
[  102.729977][ T8402] netlink: 'syz.1.1108': attribute type 15 has an invalid length.
[  102.732469][ T8402] netlink: 'syz.1.1108': attribute type 18 has an invalid length.
[  102.742237][ T8397] tipc: Disabling bearer <eth:syzkaller0>
[  103.099045][ T8433] IPv6: NLM_F_REPLACE set, but no existing node found!
[  103.442364][   T34] audit: type=1800 audit(1752817526.315:4): pid=8459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1132" name="memory.events" dev="tmpfs" ino=2061 res=0 errno=0
[  103.469005][ T8464] delete_channel: no stack
[  103.679064][ T8486] netlink: 'syz.2.1146': attribute type 1 has an invalid length.
[  103.705555][ T8486] bond2: entered promiscuous mode
[  103.707374][ T8486] 8021q: adding VLAN 0 to HW filter on device bond2
[  103.725922][ T8486] 8021q: adding VLAN 0 to HW filter on device bond2
[  103.728205][ T8486] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  103.732490][ T8486] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  103.737509][ T8486] bond2: (slave vcan1): making interface the new active one
[  103.751122][ T8486] vcan1: entered promiscuous mode
[  103.754861][ T8486] bond2: (slave vcan1): Enslaving as an active interface with an up link
[  103.878694][ T8506] delete_channel: no stack
[  103.941682][ T8514] netlink: 'syz.2.1158': attribute type 1 has an invalid length.
[  103.953308][ T8514] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1158'.
[  104.011733][ T8524] netlink: 'syz.2.1164': attribute type 3 has an invalid length.
[  104.016240][ T8524] netlink: 'syz.2.1164': attribute type 1 has an invalid length.
[  104.018588][ T8524] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1164'.
[  104.021457][ T8524] NCSI netlink: No device for ifindex 0
[  104.069113][ T8530] netlink: 'syz.0.1167': attribute type 13 has an invalid length.
[  104.138595][ T8536] netlink: 'syz.0.1170': attribute type 13 has an invalid length.
[  104.141053][ T8536] netlink: 'syz.0.1170': attribute type 17 has an invalid length.
[  104.161949][ T8538] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1172'.
[  104.167678][ T8536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.200303][ T8536] lo speed is unknown, defaulting to 1000
[  104.265102][ T8545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.326018][ T8552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.398514][ T8552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.650345][ T8571] SET target dimension over the limit!
[  104.709861][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1184'.
[  104.747825][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1185'.
[  104.752857][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1185'.
[  105.154676][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'.
[  105.159393][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'.
[  105.168654][ T8596] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  105.551024][ T8638] dvmrp8: entered allmulticast mode
[  105.554203][ T8637] dvmrp8: left allmulticast mode
[  105.853414][ T8671] 8021q: adding VLAN 0 to HW filter on device bond3
[  105.875144][ T8671] bond3: (slave ip6gretap1): making interface the new active one
[  105.878450][ T8671] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  106.025866][ T8689] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  106.101120][ T8696] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  106.145985][ T8702] netem: change failed
[  106.176441][ T8704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.787825][ T8769] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  106.948151][ T8786] syzkaller1: entered promiscuous mode
[  106.950154][ T8786] syzkaller1: entered allmulticast mode
[  107.218126][ T8809] dummy0: left allmulticast mode
[  107.219704][ T8809] dummy0: left promiscuous mode
[  107.221329][ T8809] bridge0: port 3(dummy0) entered disabled state
[  107.984018][ T8809] bridge_slave_0: left allmulticast mode
[  107.985858][ T8809] bridge_slave_0: left promiscuous mode
[  107.987735][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.325346][ T8833] validate_nla: 8 callbacks suppressed
[  108.325371][ T8833] netlink: 'syz.0.1302': attribute type 9 has an invalid length.
[  108.332576][ T8833] netlink: 'syz.0.1302': attribute type 7 has an invalid length.
[  108.336953][ T8833] netlink: 'syz.0.1302': attribute type 8 has an invalid length.
[  109.183413][ T8919] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  109.436058][ T8940] netlink: 'syz.2.1353': attribute type 11 has an invalid length.
[  109.876492][ T8982] netlink: 'syz.0.1371': attribute type 13 has an invalid length.
[  109.878864][ T8982] netlink: 'syz.0.1371': attribute type 17 has an invalid length.
[  109.910595][ T8982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.003341][ T8979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.058849][ T8982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.117932][ T8979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.366560][ T8999] __nla_validate_parse: 9 callbacks suppressed
[  110.366571][ T8999] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1380'.
[  110.894333][ T9029] netlink: 'syz.2.1396': attribute type 1 has an invalid length.
[  110.896693][ T9029] netlink: 784 bytes leftover after parsing attributes in process `syz.2.1396'.
[  111.228165][ T9059] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  111.230772][ T9059] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  111.234136][ T9059] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  111.237251][ T9059] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  111.240403][ T9059] geneve3: entered promiscuous mode
[  111.366810][ T9075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.600766][ T9088] netlink: 'syz.0.1423': attribute type 303 has an invalid length.
[  111.605656][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'.
[  111.611945][ T9088] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  111.615349][ T9088] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  111.655890][   T34] audit: type=1800 audit(1752817534.535:5): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1420" name="cgroup.controllers" dev="tmpfs" ino=2525 res=0 errno=0
[  111.896886][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'.
[  111.903398][ T9098] vlan2: entered promiscuous mode
[  111.905167][ T9098] batadv0: entered promiscuous mode
[  112.030643][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'.
[  112.308198][ T9133] ieee802154 phy0 wpan0: encryption failed: -22
[  112.456608][ T9142] --map-set only usable from mangle table
[  112.567631][ T9149] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  112.696750][ T9159] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1458'.
[  112.970102][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'.
[  113.502770][ T9239] netlink: 'syz.1.1495': attribute type 1 has an invalid length.
[  113.507050][ T9239] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1495'.
[  113.560112][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'.
[  113.565198][ T9249] netlink: 'syz.1.1501': attribute type 2 has an invalid length.
[  113.713864][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.716316][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.796898][ T9272] netlink: 'syz.2.1510': attribute type 13 has an invalid length.
[  113.799421][ T9272] netlink: 'syz.2.1510': attribute type 17 has an invalid length.
[  113.879715][ T9272] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.884047][ T9272] 8021q: adding VLAN 0 to HW filter on device team0
[  113.890618][ T9272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.897413][   T47] lo speed is unknown, defaulting to 1000
[  113.899209][   T47] syz0: Port: 1 Link ACTIVE
[  113.900642][   T47] lo speed is unknown, defaulting to 1000
[  113.925028][ T9279] lo speed is unknown, defaulting to 1000
[  113.960996][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1510'.
[  113.966509][ T9272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.028770][ T9272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.093886][ T9293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.257632][ T9311] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  114.291634][ T9313] tipc: Cannot configure node identity twice
[  115.041854][ T9370] netlink: 'syz.2.1551': attribute type 2 has an invalid length.
[  115.502176][ T9411] batadv_slave_1: entered promiscuous mode
[  115.514509][ T9409] batadv_slave_1: left promiscuous mode
[  115.684798][ T9423] __nla_validate_parse: 5 callbacks suppressed
[  115.684809][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1568'.
[  115.689978][ T9423] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  115.763738][ T9429] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1574'.
[  115.772749][ T9429] netlink: zone id is out of range
[  115.777239][ T9429] netlink: zone id is out of range
[  115.780611][ T9429] netlink: zone id is out of range
[  115.787363][ T9429] netlink: zone id is out of range
[  115.792254][ T9429] netlink: zone id is out of range
[  115.798082][ T9429] netlink: zone id is out of range
[  116.053509][ T9456] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1585'.
[  116.090933][ T9461] nbd: must specify at least one socket
[  116.259447][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1594'.
[  116.304181][ T9484] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1597'.
[  116.308933][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'.
[  116.407939][ T9491] netlink: 'syz.2.1600': attribute type 2 has an invalid length.
[  116.410365][ T9491] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1600'.
[  116.518963][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1606'.
[  116.522501][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1606'.
[  116.595604][ T9506] tipc: New replicast peer: 255.255.255.255
[  116.597875][ T9506] tipc: Enabled bearer <udp:syz2>, priority 10
[  116.642222][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'.
[  116.645003][ T9506] tipc: Disabling bearer <udp:syz2>
[  117.480312][ T9517] ieee802154 phy0 wpan0: encryption failed: -90
[  117.484028][ T9513] tun0: tun_chr_ioctl cmd 1074025681
[  117.756041][ T9552] xt_CT: You must specify a L4 protocol and not use inversions on it
[  117.760794][ T9551] sctp: [Deprecated]: syz.2.1629 (pid 9551) Use of int in maxseg socket option.
[  117.760794][ T9551] Use struct sctp_assoc_value instead
[  117.985747][   T55] Bluetooth: hci2: link tx timeout
[  117.987856][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.480183][ T9601] netlink: 'syz.2.1652': attribute type 10 has an invalid length.
[  118.489699][ T9601] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  118.494361][ T9600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.660236][ T9611] netlink: 'syz.1.1656': attribute type 1 has an invalid length.
[  118.667928][ T9611] netlink: 'syz.1.1656': attribute type 2 has an invalid length.
[  119.539506][ T9699] net_ratelimit: 77 callbacks suppressed
[  119.539547][ T9699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.555211][ T9699] netlink: 'syz.2.1690': attribute type 4 has an invalid length.
[  119.575156][   T96] lo speed is unknown, defaulting to 1000
[  119.576940][   T96] syz0: Port: 1 Link DOWN
[  119.578981][   T96] lo speed is unknown, defaulting to 1000
[  120.063590][ T5220] Bluetooth: hci2: command 0x0406 tx timeout
[  120.413135][ T9725] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.416020][ T9725] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.418709][ T9725] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.421401][ T9725] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.545931][ T9739] netlink: 'syz.1.1712': attribute type 12 has an invalid length.
[  120.774417][ T9756] netlink: 'syz.1.1719': attribute type 11 has an invalid length.
[  120.782202][ T9756] __nla_validate_parse: 30 callbacks suppressed
[  120.782216][ T9756] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1719'.
[  120.995371][ T9771] netlink: 'syz.2.1724': attribute type 10 has an invalid length.
[  121.261266][ T9792] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1736'.
[  121.321848][ T9792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.325681][ T9792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.328937][ T9792] bond0 (unregistering): Released all slaves
[  121.429122][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'.
[  121.433749][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'.
[  121.462953][ T9798] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1739'.
[  121.496377][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'.
[  121.558351][ T9802] xt_TCPMSS: Only works on TCP SYN packets
[  121.765967][ T9819] syzkaller1: entered promiscuous mode
[  121.768304][ T9819] syzkaller1: entered allmulticast mode
[  122.241736][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'.
[  122.624403][ T9873] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.1770'.
[  122.627469][ T9873] netlink: zone id is out of range
[  122.629236][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1771'.
[  122.633401][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1771'.
[  122.634382][ T9873] netlink: zone id is out of range
[  122.638063][ T9873] netlink: zone id is out of range
[  122.639673][ T9873] netlink: zone id is out of range
[  122.641245][ T9873] netlink: zone id is out of range
[  122.644687][ T9873] netlink: zone id is out of range
[  122.646251][ T9873] netlink: zone id is out of range
[  122.647834][ T9873] netlink: zone id is out of range
[  122.649419][ T9873] netlink: zone id is out of range
[  124.005320][ T9981] netlink: 'syz.0.1820': attribute type 21 has an invalid length.
[  124.304218][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  124.306452][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  124.308433][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  124.310999][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  124.693280][T10033] bond0: entered promiscuous mode
[  124.695019][T10033] bond_slave_0: entered promiscuous mode
[  124.696880][T10033] bond_slave_1: entered promiscuous mode
[  124.702732][T10033] syz_tun: entered promiscuous mode
[  124.715927][   T47] syz1: Port: 1 Link DOWN
[  124.744561][T10043] netlink: 'syz.2.1850': attribute type 30 has an invalid length.
[  124.910281][T10052] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.913386][T10052] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.916154][T10052] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.918913][T10052] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.343752][T10102] netlink: 'syz.2.1877': attribute type 11 has an invalid length.
[  125.477774][T10113] netlink: 'syz.1.1882': attribute type 33 has an invalid length.
[  125.866492][T10127] delete_channel: no stack
[  126.419829][T10159] __nla_validate_parse: 16 callbacks suppressed
[  126.419841][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1903'.
[  126.546266][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'.
[  126.559472][T10168] team0: entered promiscuous mode
[  126.561886][T10168] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  126.566006][T10168] team0: left promiscuous mode
[  126.660801][T10170] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1908'.
[  126.795387][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'.
[  126.880407][T10178] team0 (unregistering): Port device team_slave_0 removed
[  126.884663][T10178] team0 (unregistering): Port device team_slave_1 removed
[  126.904758][T10181] netlink: 'syz.1.1912': attribute type 10 has an invalid length.
[  127.205965][T10206] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1924'.
[  127.209618][T10207] sctp: [Deprecated]: syz.2.1921 (pid 10207) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.209618][T10207] Use struct sctp_sack_info instead
[  127.215000][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1924'.
[  127.220329][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'.
[  127.266529][T10209] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1925'.
[  127.269265][T10209] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1925'.
[  127.271937][T10209] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1925'.
[  127.874752][T10248] netlink: 'syz.0.1942': attribute type 7 has an invalid length.
[  127.877328][T10248] netlink: 'syz.0.1942': attribute type 8 has an invalid length.
[  127.887717][T10248] ip6gretap0: entered promiscuous mode
[  127.892984][T10248] ip6gretap0: left promiscuous mode
[  128.324740][T10256] veth0: entered promiscuous mode
[  128.656683][T10282] erspan0: left allmulticast mode
[  128.658394][T10282] erspan0: left promiscuous mode
[  128.661883][T10282] bridge0: port 1(erspan0) entered disabled state
[  128.719508][T10254] veth0: left promiscuous mode
[  130.771682][T10431] netlink: 'syz.0.2014': attribute type 10 has an invalid length.
[  131.376768][T10456] lo speed is unknown, defaulting to 1000
[  131.410818][T10459] netlink: 'syz.2.2026': attribute type 20 has an invalid length.
[  131.418267][T10459] netlink: 'syz.2.2026': attribute type 21 has an invalid length.
[  131.420677][T10459] netlink: 'syz.2.2026': attribute type 23 has an invalid length.
[  131.423619][T10459] netlink: 'syz.2.2026': attribute type 25 has an invalid length.
[  131.426130][T10459] netlink: 'syz.2.2026': attribute type 27 has an invalid length.
[  131.428647][T10459] netlink: 'syz.2.2026': attribute type 28 has an invalid length.
[  131.431243][T10459] netlink: 'syz.2.2026': attribute type 29 has an invalid length.
[  131.434864][T10459] netlink: 'syz.2.2026': attribute type 30 has an invalid length.
[  131.683843][T10468] syz.1.2030 uses old SIOCAX25GETINFO
[  131.759266][T10475] raw_sendmsg: syz.2.2033 forgot to set AF_INET. Fix it!
[  132.054111][T10483] __nla_validate_parse: 11 callbacks suppressed
[  132.054124][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'.
[  132.176569][T10497] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2043'.
[  132.220752][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'.
[  132.383958][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2051'.
[  132.389349][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2051'.
[  132.465344][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.468284][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.714629][T10544] net_ratelimit: 4057 callbacks suppressed
[  132.714651][T10544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.863730][T10549] IPVS: Scheduler module ip_vs_sip not found
[  132.978115][T10559] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  133.312799][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2077'.
[  133.337088][T10585] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2079'.
[  133.378271][T10590] sctp: [Deprecated]: syz.2.2081 (pid 10590) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.378271][T10590] Use struct sctp_sack_info instead
[  133.396619][T10594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2083'.
[  133.453654][T10598] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2084'.
[  133.626589][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2097'.
[  133.819503][T10645] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  133.957316][T10662] netlink: 'syz.2.2115': attribute type 2 has an invalid length.
[  134.745928][T10755] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  134.748772][T10755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.962396][T10784] gretap0: entered promiscuous mode
[  134.964601][T10784] batadv_slave_1: entered promiscuous mode
[  134.966715][T10784] erspan0: entered promiscuous mode
[  134.971016][T10784] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.987279][T10786] No such timeout policy "syz0"
[  135.149553][T10792] bond3 (unregistering): Released all slaves
[  135.482904][  T790] lo speed is unknown, defaulting to 1000
[  135.484737][  T790] syz0: Port: 1 Link ACTIVE
[  135.486202][  T790] lo speed is unknown, defaulting to 1000
[  136.736043][T10865] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  136.928823][ T5927] IPVS: starting estimator thread 0...
[  136.978886][T10892] sctp: [Deprecated]: syz.0.2219 (pid 10892) Use of int in max_burst socket option deprecated.
[  136.978886][T10892] Use struct sctp_assoc_value instead
[  137.022126][T10889] IPVS: using max 61 ests per chain, 146400 per kthread
[  137.047503][T10901] openvswitch: netlink: Missing key (keys=40, expected=80)
[  137.074084][T10904] __nla_validate_parse: 10 callbacks suppressed
[  137.074097][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'.
[  137.190730][T10917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.350792][T10926] validate_nla: 8 callbacks suppressed
[  137.350804][T10926] netlink: 'syz.0.2236': attribute type 1 has an invalid length.
[  137.373609][T10926] bond3: entered promiscuous mode
[  137.375474][T10926] 8021q: adding VLAN 0 to HW filter on device bond3
[  137.385090][T10926] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2236'.
[  137.392976][T10926] batadv1: entered promiscuous mode
[  137.394643][T10926] batadv1: entered allmulticast mode
[  137.397301][T10926] 8021q: adding VLAN 0 to HW filter on device batadv1
[  137.401699][T10926] bond3: (slave batadv1): making interface the new active one
[  137.405888][T10926] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  137.533243][T10931] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2236'.
[  137.727420][T10938] netlink: 'syz.1.2239': attribute type 1 has an invalid length.
[  137.730974][T10938] netlink: 'syz.1.2239': attribute type 10 has an invalid length.
[  137.741415][T10938] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2239'.
[  138.309046][T10982] lo speed is unknown, defaulting to 1000
[  138.767534][T11001] netlink: 'syz.1.2265': attribute type 13 has an invalid length.
[  138.819067][T11007] sctp: [Deprecated]: syz.2.2268 (pid 11007) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.819067][T11007] Use struct sctp_sack_info instead
[  139.119914][T11028] bridge2: entered allmulticast mode
[  139.149734][T11030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2276'.
[  139.208678][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'.
[  139.291928][T11043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.317869][T11043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2283'.
[  139.353647][T11049] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2284'.
[  139.357142][T11049] bridge_slave_0: entered allmulticast mode
[  139.866925][T11092] bond0 (uninitialized): option lp_interval: invalid value (18446744073709551604)
[  139.869747][T11092] bond0 (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  139.881865][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2303'.
[  139.980220][T11098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2306'.
[  140.095986][T11108] pim6reg1: entered promiscuous mode
[  140.098453][T11108] pim6reg1: entered allmulticast mode
[  140.175224][T11114] netlink: 'syz.2.2314': attribute type 23 has an invalid length.
[  140.720940][T11178] xt_policy: neither incoming nor outgoing policy selected
[  140.969730][T11207] netlink: 'syz.0.2358': attribute type 12 has an invalid length.
[  141.125653][T11217] nftables ruleset with unbound set
[  141.216413][T11229] netlink: 'syz.1.2368': attribute type 45 has an invalid length.
[  141.273450][T11233] nbd: couldn't find device at index 536870912
[  141.569529][T11256] netlink: 'syz.1.2380': attribute type 1 has an invalid length.
[  141.660024][T11268] !: renamed from dummy0
[  141.810215][T11282] lo speed is unknown, defaulting to 1000
[  143.000940][T11382] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  143.089983][T11387] __nla_validate_parse: 9 callbacks suppressed
[  143.090014][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'.
[  143.094932][T11387] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2412'.
[  143.126783][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.129151][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.179262][T11394] netlink: 'syz.2.2415': attribute type 1 has an invalid length.
[  143.181812][T11394] NCSI netlink: No device for ifindex 0
[  143.377279][T11408] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2422'.
[  143.380251][T11408] netlink: 'syz.2.2422': attribute type 5 has an invalid length.
[  143.621851][T11418] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2427'.
[  143.786056][T11425] lo speed is unknown, defaulting to 1000
[  144.049436][T11440] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2436'.
[  144.129349][T11445] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  144.147726][T11445] bond0: entered promiscuous mode
[  144.149447][T11445] bond0: entered allmulticast mode
[  144.151546][T11445] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.239667][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2442'.
[  144.324802][T11461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.327062][T11461] IPv6: NLM_F_CREATE should be set when creating new route
[  144.357366][T11463] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2443'.
[  144.423167][T11471] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2449'.
[  144.423230][T11469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2448'.
[  144.434537][T11471] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2449'.
[  144.437458][T11471] 0{X: renamed from gretap0
[  144.441617][T11471] 0{X: entered allmulticast mode
[  144.450982][T11471] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  144.538824][T11476] netlink: 'syz.1.2451': attribute type 1 has an invalid length.
[  145.539037][T11519] xt_l2tp: v2 doesn't support IP mode
[  145.776433][T11539] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  145.982653][T11566] xt_SECMARK: invalid mode: 0
[  146.163505][   T34] audit: type=1107 audit(1752817569.035:6): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  146.169852][T11582] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  146.200895][T11582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.695858][T11593] macvlan1: entered promiscuous mode
[  146.698310][T11593] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  146.701390][T11593] hsr2: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network
[  146.705059][T11593] hsr2: entered promiscuous mode
[  147.139270][T11626] netlink: 'syz.0.2513': attribute type 10 has an invalid length.
[  147.142646][T11626] netlink: 'syz.0.2513': attribute type 10 has an invalid length.
[  147.207172][T11635] netlink: set zone limit has 8 unknown bytes
[  147.243247][T11641] netlink: 'syz.0.2520': attribute type 21 has an invalid length.
[  147.390495][T11659] x_tables: duplicate entry at hook 2
[  147.439782][T11665] syzkaller1: entered promiscuous mode
[  147.441510][T11665] syzkaller1: entered allmulticast mode
[  147.473615][ T5927] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  147.480834][ T5927] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  147.623000][T11687] netlink: 'syz.2.2540': attribute type 1 has an invalid length.
[  147.640076][T11687] 8021q: adding VLAN 0 to HW filter on device bond5
[  147.668266][T11687] 8021q: adding VLAN 0 to HW filter on device bond5
[  147.670532][T11687] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  147.679874][T11687] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  147.756485][T11696] veth5: entered promiscuous mode
[  147.763300][T11696] bond5: (slave veth5): Enslaving as an active interface with a down link
[  147.769418][ T1858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.771805][ T1858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.848807][T11708] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  147.851249][T11708] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  147.862227][T11708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  148.136507][T11728] tipc: Failed to remove unknown binding: 66,1,1/10136234:3938717285/3938717287
[  148.167036][T11730] vti0: entered promiscuous mode
[  148.233294][T11732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.257289][   T47] lo speed is unknown, defaulting to 1000
[  148.259077][   T47] syz0: Port: 1 Link DOWN
[  148.260443][   T47] lo speed is unknown, defaulting to 1000
[  148.693639][T11767] __nla_validate_parse: 11 callbacks suppressed
[  148.693650][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2576'.
[  148.700675][T11767] IPVS: Error joining to the multicast group
[  148.706199][T11769] netlink: 'syz.0.2577': attribute type 1 has an invalid length.
[  148.709893][T11769] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2577'.
[  148.744644][T11771] netlink: 'syz.1.2578': attribute type 39 has an invalid length.
[  148.866231][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2582'.
[  149.307903][T11829] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2606'.
[  149.311878][T11829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2606'.
[  149.315757][T11829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2606'.
[  149.387468][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2610'.
[  149.393122][T11836] netlink: 'syz.1.2609': attribute type 2 has an invalid length.
[  149.662788][T11866] bond0: left promiscuous mode
[  149.669784][T11866] bond0: left allmulticast mode
[  149.713954][T11872] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2626'.
[  150.828985][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2665'.
[  150.831703][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2665'.
[  150.939511][T11968] tun0: tun_chr_ioctl cmd 2148553947
[  152.620022][T12021] pim6reg0: tun_chr_ioctl cmd 1074025694
[  152.786620][T12033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.796229][T12033] syzkaller0: entered promiscuous mode
[  152.797950][T12033] syzkaller0: entered allmulticast mode
[  152.815626][T12033] tipc: Resetting bearer <eth:syzkaller0>
[  153.205994][T12081] netem: incorrect gi model size
[  153.207716][T12081] netem: change failed
[  153.312575][T12089] nbd0: detected capacity change from 0 to 63
[  153.321702][T12089] block nbd0: NBD_DISCONNECT
[  153.325183][T12089] block nbd0: Disconnected due to user request.
[  153.327222][T12089] block nbd0: shutting down sockets
[  153.334695][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.337650][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  153.340009][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.342739][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  153.344988][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.347607][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  153.349919][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.352705][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  153.357469][T11991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.366991][T11991] Buffer I/O error on dev nbd0, logical block 0, async page read
[  153.369456][T11991] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.374663][T11991] Buffer I/O error on dev nbd0, logical block 1, async page read
[  153.377035][T11991] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.382417][T11991] Buffer I/O error on dev nbd0, logical block 2, async page read
[  153.385122][T11991] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.389720][T11991] Buffer I/O error on dev nbd0, logical block 3, async page read
[  153.393051][T11991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.395775][T11991] Buffer I/O error on dev nbd0, logical block 0, async page read
[  153.398513][T11991] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.401711][T11991] Buffer I/O error on dev nbd0, logical block 1, async page read
[  153.405633][T11991] ldm_validate_partition_table(): Disk read failed.
[  153.413348][T11991] Dev nbd0: unable to read RDB block 0
[  153.416816][T11991]  nbd0: unable to read partition table
[  153.432866][T11991] ldm_validate_partition_table(): Disk read failed.
[  153.436550][T11991] Dev nbd0: unable to read RDB block 0
[  153.439433][T11991]  nbd0: unable to read partition table
[  153.578426][T12123] netlink: 'syz.2.2742': attribute type 4 has an invalid length.
[  153.583350][T12123] netlink: 'syz.2.2742': attribute type 4 has an invalid length.
[  153.589464][ T5927] lo speed is unknown, defaulting to 1000
[  153.591229][ T5927] syz0: Port: 1 Link ACTIVE
[  153.596693][ T5927] lo speed is unknown, defaulting to 1000
[  153.612077][ T5927] lo speed is unknown, defaulting to 1000
[  153.613822][ T5927] syz0: Port: 1 Link DOWN
[  153.615176][ T5927] lo speed is unknown, defaulting to 1000
[  153.775258][T12145] __nla_validate_parse: 11 callbacks suppressed
[  153.775271][T12145] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2751'.
[  153.780279][T12145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.792778][T12145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.795402][T12145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.798258][T12145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.803641][T12145] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2751'.
[  153.983997][T12164] bond0: (slave syz_tun): Releasing backup interface
[  153.986458][T12164] syz_tun: left promiscuous mode
[  154.001135][T12164] bond0: (slave bond_slave_0): Releasing backup interface
[  154.005094][T12164] bond_slave_0: left promiscuous mode
[  154.009800][T12164] bond0: (slave bond_slave_1): Releasing backup interface
[  154.013829][T12164] bond_slave_1: left promiscuous mode
[  154.015950][T12164] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.018596][T12164] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.023302][T12164] bond3: (slave batadv1): Releasing active interface
[  154.063561][T12164] 0{X: left allmulticast mode
[  154.079591][T12164] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.082372][T12164] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  154.375687][T12198] netlink: 'syz.1.2774': attribute type 12 has an invalid length.
[  154.378170][T12198] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2774'.
[  154.435604][T12208] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  154.441541][T12208] batman_adv: batadv0: Adding interface: ip6gretap1
[  154.444705][T12208] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.456905][T12208] batman_adv: batadv0: Interface activated: ip6gretap1
[  154.638226][T12228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2788'.
[  154.773352][ T5875] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  155.591789][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2797'.
[  155.641759][T12258] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  155.646939][T12258] batman_adv: batadv0: Removing interface: ip6gretap1
[  155.818905][T12276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.527940][T12290] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2814'.
[  156.595369][T12298] netlink: 'syz.1.2818': attribute type 21 has an invalid length.
[  156.621799][T12301] lo speed is unknown, defaulting to 1000
[  156.664978][T12303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.797919][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2824'.
[  156.945748][T12318] lo speed is unknown, defaulting to 1000
[  157.086868][T12336] macsec1: entered promiscuous mode
[  157.088531][T12336] bridge0: entered promiscuous mode
[  157.090757][T12336] bridge0: port 1(macsec1) entered blocking state
[  157.112326][T12336] bridge0: port 1(macsec1) entered disabled state
[  157.122455][T12336] macsec1: entered allmulticast mode
[  157.124746][T12336] bridge0: entered allmulticast mode
[  157.147326][T12336] macsec1: left allmulticast mode
[  157.148903][T12336] bridge0: left allmulticast mode
[  157.155552][T12336] bridge0: left promiscuous mode
[  157.341190][T12350] netlink: 'syz.0.2830': attribute type 29 has an invalid length.
[  157.376832][T12350] netlink: 'syz.0.2830': attribute type 29 has an invalid length.
[  157.379634][T12350] netlink: 'syz.0.2830': attribute type 29 has an invalid length.
[  157.383987][T12350] netlink: 'syz.0.2830': attribute type 29 has an invalid length.
[  157.386554][T12350] netlink: 'syz.0.2830': attribute type 29 has an invalid length.
[  157.389187][T12350] netlink: 'syz.0.2830': attribute type 29 has an invalid length.
[  157.404506][T12350] netlink: 'syz.0.2830': attribute type 29 has an invalid length.
[  157.412422][T12350] netlink: 'syz.0.2830': attribute type 29 has an invalid length.
[  157.827875][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2836'.
[  158.357249][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2856'.
[  158.361293][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2856'.
[  158.786629][T12476] ip6gre1: entered allmulticast mode
[  158.819647][T12481] tipc: Resetting bearer <eth:syzkaller0>
[  159.031766][T12497] __nla_validate_parse: 2 callbacks suppressed
[  159.031779][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'.
[  159.055759][T12499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2890'.
[  159.161089][T12512] bond0: (slave rose0): Error: Device can not be enslaved while up
[  159.194821][T12515] netlink: 784 bytes leftover after parsing attributes in process `syz.1.2898'.
[  159.304522][T12528] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.324861][T12528] lo speed is unknown, defaulting to 1000
[  159.337740][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2906'.
[  159.547367][T12543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2910'.
[  160.964878][T12545] lo speed is unknown, defaulting to 1000
[  161.353054][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2927'.
[  161.355750][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'.
[  161.727186][T12603] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.738051][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2938'.
[  161.753739][ T5863] bond0: (slave wlan1): link status definitely down, disabling slave
[  161.764667][ T5863] bond0: now running without any active interface!
[  162.380215][T12637] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2954'.
[  162.623237][T12657] tap0: tun_chr_ioctl cmd 1074025676
[  162.625192][T12657] tap0: owner set to 0
[  162.958623][T12692] openvswitch: netlink: EtherType 10 is less than min 600
[  163.199019][T12714] validate_nla: 29 callbacks suppressed
[  163.199030][T12714] netlink: 'syz.1.2990': attribute type 20 has an invalid length.
[  163.560899][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3008'.
[  164.337680][T12824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.398612][T12829] sock: sock_timestamping_bind_phc: sock not bind to device
[  164.456928][T12838] IPv6: Can't replace route, no match found
[  164.540856][T12848] __nla_validate_parse: 2 callbacks suppressed
[  164.540867][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3056'.
[  164.550094][T12848] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  164.553397][T12848] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  164.930512][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3069'.
[  164.935769][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3069'.
[  164.941438][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3069'.
[  165.127432][T12899] netlink: 'syz.1.3077': attribute type 64 has an invalid length.
[  165.130738][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3077'.
[  165.307097][T12907] tap0: tun_chr_ioctl cmd 1074025677
[  165.308847][T12907] tap0: linktype set to 1
[  165.371399][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'.
[  165.534568][T12925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3088'.
[  165.576725][T12931] netlink: 'syz.2.3091': attribute type 14 has an invalid length.
[  165.695582][T12939] netlink: 'syz.2.3095': attribute type 1 has an invalid length.
[  165.697995][T12939] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3095'.
[  165.813409][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'.
[  165.819800][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3099'.
[  165.831724][T12952] netlink: 'syz.0.3102': attribute type 21 has an invalid length.
[  166.203699][T12990] xt_l2tp: invalid flags combination: 4
[  166.270004][T13000] netdevsim netdevsim2 netdevsim0: default FDB implementation only supports local addresses
[  166.339113][T13007] netlink: 'syz.2.3126': attribute type 4 has an invalid length.
[  166.555927][T13022] No such timeout policy "syz1"
[  166.775603][T13030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  167.321587][T13059] netlink: 'syz.2.3149': attribute type 1 has an invalid length.
[  167.382380][T13059] nbd: socks must be embedded in a SOCK_ITEM attr
[  167.384994][T13059] block nbd0: shutting down sockets
[  167.498038][T13070] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  167.501013][T13070] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  167.548447][T13074] 8021q: VLANs not supported on ipvlan1
[  167.826117][T13088] netlink: 'syz.0.3163': attribute type 1 has an invalid length.
[  167.904006][T13091] xt_CT: No such helper "snmp"
[  168.364999][T13100] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  168.496301][T13107] xt_CT: You must specify a L4 protocol and not use inversions on it
[  168.610687][T13112] netlink: 'syz.2.3172': attribute type 1 has an invalid length.
[  168.691648][T13116] netlink: 'syz.2.3174': attribute type 21 has an invalid length.
[  168.698645][T13116] netlink: 'syz.2.3174': attribute type 6 has an invalid length.
[  169.552409][T13138] __nla_validate_parse: 16 callbacks suppressed
[  169.552421][T13138] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3183'.
[  169.659701][T13144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.663976][T13144] syzkaller0: entered promiscuous mode
[  169.665751][T13144] syzkaller0: entered allmulticast mode
[  169.683451][T13144] tipc: Resetting bearer <eth:syzkaller0>
[  169.688507][T13143] tipc: Resetting bearer <eth:syzkaller0>
[  169.706813][T13143] tipc: Disabling bearer <eth:syzkaller0>
[  170.151315][T13200] netlink: 'syz.0.3207': attribute type 64 has an invalid length.
[  170.155050][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3207'.
[  170.245353][T13190] macvlan1 (unregistering): left promiscuous mode
[  170.266610][T13206] lo speed is unknown, defaulting to 1000
[  170.366343][T13214] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.3216'.
[  170.369318][T13214] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  170.424491][T13216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3217'.
[  170.661917][T13237] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  171.031841][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3242'.
[  171.285096][T13290] tipc: Can't bind to reserved service type 1
[  171.288878][T13290] openvswitch: netlink: Flow actions attr not present in new flow.
[  171.558705][T13307] netlink: 'syz.0.3259': attribute type 2 has an invalid length.
[  171.561076][T13307] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3259'.
[  171.915029][T13335] xt_TCPMSS: Only works on TCP SYN packets
[  171.931517][T13337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3274'.
[  171.943870][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'.
[  171.987902][T13346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.024693][T13348] : entered promiscuous mode
[  172.095434][T13358] netlink: 'syz.1.3283': attribute type 4 has an invalid length.
[  172.446389][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3300'.
[  172.508403][T13403] netlink: 'syz.1.3304': attribute type 7 has an invalid length.
[  172.614402][T13412] netlink: 'syz.1.3308': attribute type 13 has an invalid length.
[  172.617480][T13412] netlink: 'syz.1.3308': attribute type 17 has an invalid length.
[  172.687869][T13412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.717687][T13417] lo speed is unknown, defaulting to 1000
[  172.748240][T13412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3308'.
[  172.756370][T13412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.820256][T13423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.893384][T13412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.079602][T13440] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  173.115759][T13442] netlink: 'syz.2.3321': attribute type 4 has an invalid length.
[  173.561181][T13486] delete_channel: no stack
[  173.893917][T13520] validate_nla: 1 callbacks suppressed
[  173.893929][T13520] netlink: 'syz.0.3358': attribute type 2 has an invalid length.
[  174.060614][T13536] syz_tun: entered allmulticast mode
[  174.064423][T13535] syz_tun: left allmulticast mode
[  174.149018][T13546] xt_HMARK: proto mask must be zero with L3 mode
[  174.504876][T13565] x_tables: ip_tables: udp match: only valid for protocol 17
[  174.762362][T13584] netlink: 'syz.2.3389': attribute type 3 has an invalid length.
[  174.794623][T13586] xt_connbytes: Forcing CT accounting to be enabled
[  174.796952][T13586] set match dimension is over the limit!
[  174.800367][T13586] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  175.396057][T13617] xt_CT: No such helper "snmp"
[  175.451656][T13622] __nla_validate_parse: 12 callbacks suppressed
[  175.451668][T13622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3407'.
[  175.478642][T13622] lo speed is unknown, defaulting to 1000
[  175.659030][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3413'.
[  175.709525][T13641] veth8: entered allmulticast mode
[  175.725056][T13641] veth9: entered promiscuous mode
[  175.955790][T13665] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3421'.
[  176.032692][T13671] bridge: RTM_NEWNEIGH with invalid ether address
[  176.114034][T13681] sctp: [Deprecated]: syz.1.3434 (pid 13681) Use of struct sctp_assoc_value in delayed_ack socket option.
[  176.114034][T13681] Use struct sctp_sack_info instead
[  176.169716][T13687] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3437'.
[  176.178598][T13687] batadv1: entered promiscuous mode
[  176.180232][T13687] batadv1: entered allmulticast mode
[  176.331303][T13694] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3437'.
[  176.846716][T13743] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3461'.
[  176.978744][T13755] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3466'.
[  177.150466][T13768] netlink: 'syz.0.3472': attribute type 3 has an invalid length.
[  177.284151][T13778] syzkaller1: entered promiscuous mode
[  177.285978][T13778] syzkaller1: entered allmulticast mode
[  177.394975][T13782] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3479'.
[  177.550464][T13790] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3483'.
[  177.948295][T13805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3489'.
[  178.114408][T13817] syzkaller0: entered promiscuous mode
[  178.116298][T13817] syzkaller0: entered allmulticast mode
[  178.767084][T13825] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  179.171793][T13843] netlink: 'syz.2.3505': attribute type 10 has an invalid length.
[  179.176603][T13843] netlink: 'syz.2.3505': attribute type 49 has an invalid length.
[  179.877342][T13845] bond0: invalid ARP target 0.0.0.0 specified for addition
[  179.882216][T13845] bond0: option arp_ip_target: invalid value (0)
[  179.956721][T13853] netlink: 'syz.2.3509': attribute type 1 has an invalid length.
[  179.987942][T13855] netlink: 'syz.1.3511': attribute type 21 has an invalid length.
[  179.990582][T13855] netlink: 'syz.1.3511': attribute type 1 has an invalid length.
[  180.029183][T13859] netlink: 'syz.1.3513': attribute type 10 has an invalid length.
[  180.033625][T13853] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  180.283353][T13890] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  180.570781][T13931] netlink: 'syz.0.3541': attribute type 64 has an invalid length.
[  180.622144][T13922] __nla_validate_parse: 9 callbacks suppressed
[  180.622155][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3541'.
[  180.665181][T13939] lo speed is unknown, defaulting to 1000
[  181.745358][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3566'.
[  181.901138][T14011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3572'.
[  182.128389][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'.
[  182.131196][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'.
[  183.259675][T14079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3603'.
[  183.262611][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3603'.
[  183.327549][T14085] netlink: 'syz.0.3605': attribute type 6 has an invalid length.
[  183.378446][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3607'.
[  183.388594][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3607'.
[  183.391254][T14091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.419683][T14097] bond0: entered allmulticast mode
[  183.466530][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3614'.
[  184.023607][T14133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  184.025835][T14133] IPv6: NLM_F_CREATE should be set when creating new route
[  185.457656][T14185] netlink: 'syz.0.3649': attribute type 2 has an invalid length.
[  185.500891][T14192] netlink: 'syz.2.3648': attribute type 9 has an invalid length.
[  185.593340][ T5220] Bluetooth: hci2: link tx timeout
[  185.595001][ T5220] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  185.681370][T14212] syz_tun: entered allmulticast mode
[  185.742223][ T5868] Bluetooth: hci1: command 0x0406 tx timeout
[  186.377822][T14238] gretap3: entered promiscuous mode
[  186.379431][T14238] gretap3: entered allmulticast mode
[  186.841725][T14287] lo speed is unknown, defaulting to 1000
[  186.985694][T14289] lo speed is unknown, defaulting to 1000
[  187.295535][T14318] __nla_validate_parse: 2 callbacks suppressed
[  187.295546][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3704'.
[  187.550749][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'.
[  187.554433][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'.
[  187.557980][T14340] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  187.561918][T14340] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  187.658818][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  188.111659][T14382] netlink: 'syz.2.3733': attribute type 5 has an invalid length.
[  188.221321][T14390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3736'.
[  188.426178][T14414] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3748'.
[  188.459199][T14418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3750'.
[  189.003859][T14450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3764'.
[  189.267076][T14466] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  189.270735][T14466] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 39993 - 0
[  189.343503][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3774'.
[  189.628697][T14476] netlink: 'syz.2.3777': attribute type 42 has an invalid length.
[  189.732287][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  189.864261][T14500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.867173][T14500] syzkaller0: left promiscuous mode
[  189.868800][T14500] syzkaller0: left allmulticast mode
[  190.563483][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3818'.
[  190.594639][T14567] batadv_slave_1: entered promiscuous mode
[  190.596974][T14565] batadv_slave_1: left promiscuous mode
[  190.684270][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3825'.
[  191.005369][T14612] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.009063][T14612] syzkaller0: entered promiscuous mode
[  191.011269][T14612] syzkaller0: entered allmulticast mode
[  191.243879][T14626] xt_CT: No such helper "snmp"
[  192.143259][T14651] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.146221][T14651] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.149074][T14651] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.151781][T14651] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.159834][T14656] netlink: 'syz.2.3857': attribute type 1 has an invalid length.
[  192.162596][T14656] netlink: 'syz.2.3857': attribute type 2 has an invalid length.
[  192.164954][T14656] netlink: 'syz.2.3857': attribute type 8 has an invalid length.
[  192.698027][T14711] __nla_validate_parse: 2 callbacks suppressed
[  192.698038][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'.
[  192.861366][T14718] @: renamed from bond_slave_0
[  192.906511][T14720] lo speed is unknown, defaulting to 1000
[  192.983788][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3891'.
[  193.177817][T14738] xfrm1: entered allmulticast mode
[  193.758142][T14756] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3904'.
[  193.761947][T14756] x_tables: duplicate entry at hook 1
[  193.895076][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.136073][T14786] netlink: 'syz.2.3919': attribute type 2 has an invalid length.
[  194.146142][T14786] : entered promiscuous mode
[  194.236291][T14799] netlink: 'syz.2.3925': attribute type 4 has an invalid length.
[  194.238706][T14799] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3925'.
[  194.322743][T14807] tipc: New replicast peer: 0.0.0.0
[  194.332266][T14807] tipc: Enabled bearer <udp:syz2>, priority 10
[  194.336338][T14807] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  194.526627][T14831] bond1: entered promiscuous mode
[  194.528209][T14831] bond1: entered allmulticast mode
[  194.650354][T14848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.659136][T14847] nbd: must specify an index to disconnect
[  194.696275][   T34] audit: type=1800 audit(1752817617.575:7): pid=14852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3950" name=33FFFF dev="tmpfs" ino=6926 res=0 errno=0
[  194.754714][T14858] netlink: 'syz.2.3953': attribute type 10 has an invalid length.
[  194.757157][T14858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3953'.
[  194.760077][T14858] team0: entered promiscuous mode
[  194.761642][T14858] team0: entered allmulticast mode
[  194.764615][T14858] 8021q: adding VLAN 0 to HW filter on device team0
[  194.767134][T14858] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  194.947677][T14881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.951406][T14881] syzkaller0: entered promiscuous mode
[  194.961327][T14881] syzkaller0: entered allmulticast mode
[  194.975499][T14881] tipc: Resetting bearer <eth:syzkaller0>
[  194.978926][T14880] tipc: Resetting bearer <eth:syzkaller0>
[  194.988556][T14880] tipc: Disabling bearer <eth:syzkaller0>
[  195.138847][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3971'.
[  195.141726][T14897] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  196.023186][   T47] tipc: Node number set to 2703156066
[  196.498814][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3997'.
[  196.585293][T14962] can: request_module (can-proto-0) failed.
[  197.305463][T14969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4003'.
[  197.591749][T14993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4015'.
[  197.847982][T15003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.308463][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4035'.
[  198.355617][T15039] xt_CT: No such helper "snmp_trap"
[  198.820054][T15090] lo speed is unknown, defaulting to 1000
[  198.870538][T15099] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4063'.
[  198.874021][T15099] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4063'.
[  198.876797][T15099] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4063'.
[  198.883369][T15099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4063'.
[  199.011733][T15102] tap0: tun_chr_ioctl cmd 1074025675
[  199.016036][T15102] tap0: persist disabled
[  199.404465][T15128] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  200.012296][T15196] netlink: 'syz.2.4109': attribute type 13 has an invalid length.
[  200.055008][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4110'.
[  200.168927][T15211] lo speed is unknown, defaulting to 1000
[  200.175388][T15213] syzkaller1: entered promiscuous mode
[  200.177303][T15213] syzkaller1: entered allmulticast mode
[  200.207443][T15214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.265979][T15214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.334751][T15211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.576700][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4127'.
[  201.021653][T15263] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4140'.
[  201.026913][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4140'.
[  201.029918][T15263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4140'.
[  201.691406][T15314] netlink: 'syz.2.4163': attribute type 6 has an invalid length.
[  203.057391][T15401] syzkaller0: Caught tx_queue_len zero misconfig
[  204.483280][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  204.487469][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  204.491476][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  204.495578][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  204.498489][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  204.524948][T15465] lo speed is unknown, defaulting to 1000
[  204.730922][T15465] chnl_net:caif_netlink_parms(): no params data found
[  204.824232][T15465] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.826811][T15465] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.829685][T15465] bridge_slave_0: entered allmulticast mode
[  204.833108][T15465] bridge_slave_0: entered promiscuous mode
[  204.839020][T15465] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.841265][T15465] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.844202][T15465] bridge_slave_1: entered allmulticast mode
[  204.847176][T15465] bridge_slave_1: entered promiscuous mode
[  204.869232][T15465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.876073][T15465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.900003][T15465] team0: Port device team_slave_0 added
[  204.903881][T15465] team0: Port device team_slave_1 added
[  204.926790][T15465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.928890][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.937188][T15465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.941746][T15465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.944385][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.952162][T15465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.984121][T15465] hsr_slave_0: entered promiscuous mode
[  204.986425][T15465] hsr_slave_1: entered promiscuous mode
[  204.989522][T15465] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.993328][T15465] Cannot create hsr debugfs directory
[  204.995316][T15492] lo speed is unknown, defaulting to 1000
[  205.136071][T15465] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  205.153573][T15465] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  205.176788][T15465] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  205.185861][T15465] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  205.214076][   T34] audit: type=1804 audit(1752817628.095:8): pid=15500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4244" name="/newroot/1525/cgroup.controllers" dev="tmpfs" ino=7696 res=1 errno=0
[  205.223271][   T34] audit: type=1800 audit(1752817628.095:9): pid=15500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4244" name="cgroup.controllers" dev="tmpfs" ino=7696 res=0 errno=0
[  205.230451][   T34] audit: type=1800 audit(1752817628.095:10): pid=15500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4244" name="cgroup.controllers" dev="tmpfs" ino=7696 res=0 errno=0
[  205.260570][T15465] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.262849][T15465] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.265229][T15465] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.267356][T15465] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.314712][T15465] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.323872][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.326775][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.339568][T15465] 8021q: adding VLAN 0 to HW filter on device team0
[  205.347637][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.350451][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.357056][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.359253][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.391961][T15465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.406823][T15513] __nla_validate_parse: 4 callbacks suppressed
[  205.406834][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4248'.
[  205.467828][T15521] netlink: 'syz.1.4250': attribute type 21 has an invalid length.
[  205.488365][T15465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.535472][T15465] veth0_vlan: entered promiscuous mode
[  205.546705][T15465] veth1_vlan: entered promiscuous mode
[  205.571008][T15465] veth0_macvtap: entered promiscuous mode
[  205.576789][T15465] veth1_macvtap: entered promiscuous mode
[  205.588188][T15465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.606523][T15465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.610468][T15465] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.613274][T15465] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.615807][T15465] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.618301][T15465] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.785713][ T1858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.788186][ T1858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.834361][ T1858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.836878][ T1858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.039950][T15552] sctp: [Deprecated]: syz.3.4263 (pid 15552) Use of struct sctp_assoc_value in delayed_ack socket option.
[  206.039950][T15552] Use struct sctp_sack_info instead
[  206.194859][T15568] netlink: 'syz.3.4271': attribute type 1 has an invalid length.
[  206.197293][T15568] netlink: 'syz.3.4271': attribute type 2 has an invalid length.
[  206.207920][T15571] netlink: 'syz.1.4274': attribute type 21 has an invalid length.
[  206.210303][T15571] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4274'.
[  206.214347][T15571] netlink: 'syz.1.4274': attribute type 4 has an invalid length.
[  206.216679][T15571] netlink: 'syz.1.4274': attribute type 5 has an invalid length.
[  206.218964][T15571] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4274'.
[  206.387294][T15591] tipc: Started in network mode
[  206.388831][T15591] tipc: Node identity 26dc97b7479d, cluster identity 4711
[  206.397269][T15591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.407771][T15591] syzkaller0: entered promiscuous mode
[  206.409454][T15591] syzkaller0: entered allmulticast mode
[  206.459852][T15591] tipc: Resetting bearer <eth:syzkaller0>
[  206.470620][T15589] tipc: Resetting bearer <eth:syzkaller0>
[  206.488038][T15589] tipc: Disabling bearer <eth:syzkaller0>
[  206.536191][   T55] Bluetooth: hci3: command tx timeout
[  206.733765][T15618] tap0: tun_chr_ioctl cmd 1074025676
[  206.735424][T15618] tap0: owner set to 0
[  207.016609][T15628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4301'.
[  207.081449][T15633] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4303'.
[  207.492124][T15661] lo speed is unknown, defaulting to 1000
[  207.867419][T15680] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4323'.
[  207.870172][T15680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.352724][T15707] ipt_ECN: cannot use operation on non-tcp rule
[  208.509846][T15707] syzkaller0: entered allmulticast mode
[  208.518778][T15707] syzkaller0 (unregistering): left allmulticast mode
[  208.613000][   T55] Bluetooth: hci3: command tx timeout
[  208.721901][T15728] netlink: 'syz.2.4346': attribute type 16 has an invalid length.
[  208.724542][T15728] netlink: 'syz.2.4346': attribute type 3 has an invalid length.
[  208.726923][T15728] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.4346'.
[  208.987414][T15754] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.4358'.
[  209.105958][T15767] netlink: 'syz.3.4364': attribute type 1 has an invalid length.
[  209.108535][T15767] netlink: 15 bytes leftover after parsing attributes in process `syz.3.4364'.
[  209.464198][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4383'.
[  209.619475][T15817] syzkaller1: entered promiscuous mode
[  209.621261][T15817] syzkaller1: entered allmulticast mode
[  209.837573][T15835] nbd: must specify a size in bytes for the device
[  210.279662][T15864] xt_l2tp: v2 sid > 0xffff: 4294901760
[  210.497561][   T34] audit: type=1107 audit(1752817633.375:11): pid=15887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  210.551287][T15894] __nla_validate_parse: 5 callbacks suppressed
[  210.551300][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4428'.
[  210.698445][   T55] Bluetooth: hci3: command tx timeout
[  210.902599][T15930] lo speed is unknown, defaulting to 1000
[  212.072378][T15965] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  212.209693][T15973] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  212.330993][ T5893] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  212.772292][   T55] Bluetooth: hci3: command tx timeout
[  213.170816][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4471'.
[  213.381829][T16008] team0: No ports can be present during mode change
[  214.157218][T16054] xt_TPROXY: Can be used only with -p tcp or -p udp
[  214.350344][T16074] netlink: 508 bytes leftover after parsing attributes in process `syz.3.4505'.
[  214.658375][T16107] bond0: (slave wlan1): Releasing backup interface
[  214.671638][T16107] bond1: (slave gretap1): Releasing active interface
[  214.675528][T16107] bond2: (slave vcan1): Releasing backup interface
[  214.677574][T16107] vcan1: left promiscuous mode
[  214.685741][T16107] bond3: (slave ip6gretap1): Releasing active interface
[  214.693962][T16107] bond5: (slave veth5): Releasing active interface
[  214.717646][T16107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4517'.
[  215.007156][T16129] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  215.111575][T16133] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.114997][T16133] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.166311][T16133] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  215.360248][T16144] netlink: 'syz.1.4538': attribute type 5 has an invalid length.
[  215.366104][T16144] netlink: 'syz.1.4538': attribute type 7 has an invalid length.
[  215.376331][T16144] : entered promiscuous mode
[  215.437706][T16151] netlink: 'syz.1.4541': attribute type 10 has an invalid length.
[  215.440247][T16151] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  215.788966][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4560'.
[  215.918779][T16200] netlink: 'syz.1.4565': attribute type 11 has an invalid length.
[  216.235096][T16226] netlink: 'syz.1.4579': attribute type 2 has an invalid length.
[  216.271296][T16230] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4580'.
[  216.347119][T16236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4583'.
[  216.350013][T16236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4583'.
[  216.364259][T16236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4583'.
[  216.400906][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4586'.
[  216.423620][T16242] xfrm1: entered promiscuous mode
[  216.425488][T16242] xfrm1: entered allmulticast mode
[  216.490679][T16251] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4591'.
[  216.531194][T16252] netlink: 'syz.3.4589': attribute type 2 has an invalid length.
[  216.546899][T16252] : entered promiscuous mode
[  216.763443][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4602'.
[  216.879742][T16286] netlink: 'syz.3.4606': attribute type 1 has an invalid length.
[  216.886141][T16286] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.4606'.
[  217.201387][T16320] sctp: [Deprecated]: syz.2.4624 (pid 16320) Use of int in max_burst socket option deprecated.
[  217.201387][T16320] Use struct sctp_assoc_value instead
[  217.534848][T16343] netdevsim netdevsim3: Direct firmware load for 2Q failed with error -2
[  217.537532][T16343] netdevsim netdevsim3: Falling back to sysfs fallback for: 2Q
[  218.198549][T16374] No such timeout policy "syz0"
[  218.324621][T16382] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4654'.
[  218.521526][T16384] 8021q: adding VLAN 0 to HW filter on device bond6
[  218.530466][T16384] bond0: (slave bond6): Enslaving as an active interface with a down link
[  218.630644][T16395] syzkaller1: entered promiscuous mode
[  218.632601][T16395] syzkaller1: entered allmulticast mode
[  218.902980][T16411] netlink: 'syz.3.4668': attribute type 2 has an invalid length.
[  218.914452][T16411] : entered promiscuous mode
[  219.248384][T16454] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode
[  219.268260][T16454] bridge_slave_0: left allmulticast mode
[  219.270056][T16454] bridge_slave_0: left promiscuous mode
[  219.271950][T16454] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.277271][T16454] bridge_slave_1: left allmulticast mode
[  219.279012][T16454] bridge_slave_1: left promiscuous mode
[  219.280819][T16454] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.286160][T16454] bond0: (slave bond_slave_0): Releasing backup interface
[  219.290692][T16454] bond0: (slave bond_slave_1): Releasing backup interface
[  219.305804][T16454] team0: Port device team_slave_0 removed
[  219.313424][T16454] team0: Port device team_slave_1 removed
[  219.315568][T16454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.317829][T16454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.320928][T16454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.323756][T16454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.327636][T16459] netlink: 'syz.3.4687': attribute type 10 has an invalid length.
[  219.338798][T16459] mac80211_hwsim hwsim20 wlan1: left allmulticast mode
[  219.787279][T16495] xt_time: unknown flags 0x4
[  220.218495][T16533] Bluetooth: MGMT ver 1.23
[  221.061627][T16554] netlink: 'syz.2.4733': attribute type 1 has an invalid length.
[  221.206653][T16566] netlink: 'syz.2.4738': attribute type 1 has an invalid length.
[  221.366177][T16569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4738'.
[  222.006380][T16555] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.010003][T16555] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.015623][T16555] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.019268][T16555] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.079805][T16566] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  222.081112][T16567] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  222.214172][T16584] SET target dimension over the limit!
[  222.238927][T16586] xt_CONNSECMARK: invalid mode: 254
[  222.308879][T16593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.343838][T16596] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4745'.
[  222.353402][T16586] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4745'.
[  222.400170][T16603] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4751'.
[  222.518279][T16614] netlink: 'syz.2.4756': attribute type 1 has an invalid length.
[  222.545385][T16614] 8021q: adding VLAN 0 to HW filter on device bond7
[  222.563557][T16614] bond7: (slave ip6erspan0): making interface the new active one
[  222.567526][T16614] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link
[  222.661070][T16625] netlink: 'syz.3.4761': attribute type 3 has an invalid length.
[  222.670017][T16625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4761'.
[  222.718364][T16630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4764'.
[  222.775348][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4765'.
[  223.067245][T16657] netlink: 'syz.2.4777': attribute type 1 has an invalid length.
[  223.069756][T16657] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4777'.
[  223.093863][T16657] xt_CT: No such helper "snmp"
[  223.153335][T16661] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4778'.
[  223.167026][T16661] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4778'.
[  223.217015][T16663] nbd: socks must be embedded in a SOCK_ITEM attr
[  223.219575][T15467] block nbd64: NBD_DISCONNECT
[  223.241519][ T1087] 
[  223.242302][ T1087] ======================================================
[  223.244332][ T1087] WARNING: possible circular locking dependency detected
[  223.246424][ T1087] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[  223.249452][ T1087] ------------------------------------------------------
[  223.251898][ T1087] kworker/u9:5/1087 is trying to acquire lock:
[  223.253820][ T1087] ffff8881307a3358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  223.256622][ T1087] 
[  223.256622][ T1087] but task is already holding lock:
[  223.258854][ T1087] ffff88810964d988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  223.261722][ T1087] 
[  223.261722][ T1087] which lock already depends on the new lock.
[  223.261722][ T1087] 
[  223.264778][ T1087] 
[  223.264778][ T1087] the existing dependency chain (in reverse order) is:
[  223.267427][ T1087] 
[  223.267427][ T1087] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  223.269878][ T1087]        lock_acquire+0x120/0x360
[  223.271414][ T1087]        down_write+0x96/0x1f0
[  223.272876][ T1087]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  223.274763][ T1087]        nbd_start_device+0x16c/0xac0
[  223.276384][ T1087]        nbd_genl_connect+0x1250/0x1930
[  223.278084][ T1087]        genl_family_rcv_msg_doit+0x215/0x300
[  223.279873][ T1087]        genl_rcv_msg+0x60e/0x790
[  223.281377][ T1087]        netlink_rcv_skb+0x208/0x470
[  223.282996][ T1087]        genl_rcv+0x28/0x40
[  223.284364][ T1087]        netlink_unicast+0x75c/0x8e0
[  223.285976][ T1087]        netlink_sendmsg+0x805/0xb30
[  223.287581][ T1087]        __sock_sendmsg+0x21c/0x270
[  223.289152][ T1087]        ____sys_sendmsg+0x505/0x830
[  223.290755][ T1087]        ___sys_sendmsg+0x21f/0x2a0
[  223.292327][ T1087]        __x64_sys_sendmsg+0x19b/0x260
[  223.293966][ T1087]        do_syscall_64+0xfa/0x3b0
[  223.295490][ T1087]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.297410][ T1087] 
[  223.297410][ T1087] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  223.299743][ T1087]        lock_acquire+0x120/0x360
[  223.301270][ T1087]        __mutex_lock+0x182/0xe80
[  223.302802][ T1087]        refcount_dec_and_mutex_lock+0x30/0xa0
[  223.304608][ T1087]        nbd_config_put+0x2c/0x790
[  223.306150][ T1087]        nbd_release+0xfe/0x140
[  223.307626][ T1087]        bdev_release+0x536/0x650
[  223.309108][ T1087]        blkdev_release+0x15/0x20
[  223.310654][ T1087]        __fput+0x44c/0xa70
[  223.312045][ T1087]        fput_close_sync+0x119/0x200
[  223.313641][ T1087]        __x64_sys_close+0x7f/0x110
[  223.315221][ T1087]        do_syscall_64+0xfa/0x3b0
[  223.316771][ T1087]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.318668][ T1087] 
[  223.318668][ T1087] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  223.320927][ T1087]        validate_chain+0xb9b/0x2140
[  223.322548][ T1087]        __lock_acquire+0xab9/0xd20
[  223.324133][ T1087]        lock_acquire+0x120/0x360
[  223.325686][ T1087]        __mutex_lock+0x182/0xe80
[  223.327171][ T1087]        __del_gendisk+0x129/0x9e0
[  223.328706][ T1087]        del_gendisk+0xe8/0x160
[  223.330164][ T1087]        nbd_dev_remove_work+0x47/0xe0
[  223.331831][ T1087]        process_scheduled_works+0xae1/0x17b0
[  223.333676][ T1087]        worker_thread+0x8a0/0xda0
[  223.335215][ T1087]        kthread+0x711/0x8a0
[  223.336620][ T1087]        ret_from_fork+0x3fc/0x770
[  223.338170][ T1087]        ret_from_fork_asm+0x1a/0x30
[  223.339770][ T1087] 
[  223.339770][ T1087] other info that might help us debug this:
[  223.339770][ T1087] 
[  223.342803][ T1087] Chain exists of:
[  223.342803][ T1087]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  223.342803][ T1087] 
[  223.346994][ T1087]  Possible unsafe locking scenario:
[  223.346994][ T1087] 
[  223.349202][ T1087]        CPU0                    CPU1
[  223.350816][ T1087]        ----                    ----
[  223.352443][ T1087]   rlock(&set->update_nr_hwq_lock);
[  223.354026][ T1087]                                lock(&nbd->config_lock);
[  223.356095][ T1087]                                lock(&set->update_nr_hwq_lock);
[  223.358323][ T1087]   lock(&disk->open_mutex);
[  223.359732][ T1087] 
[  223.359732][ T1087]  *** DEADLOCK ***
[  223.359732][ T1087] 
[  223.362156][ T1087] 3 locks held by kworker/u9:5/1087:
[  223.363763][ T1087]  #0: ffff888020fd0148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  223.366991][ T1087]  #1: ffffc90006bd7bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  223.370554][ T1087]  #2: ffff88810964d988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  223.373525][ T1087] 
[  223.373525][ T1087] stack backtrace:
[  223.375254][ T1087] CPU: 0 UID: 0 PID: 1087 Comm: kworker/u9:5 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  223.375265][ T1087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.375273][ T1087] Workqueue: nbd-del nbd_dev_remove_work
[  223.375287][ T1087] Call Trace:
[  223.375294][ T1087]  <TASK>
[  223.375306][ T1087]  dump_stack_lvl+0x189/0x250
[  223.375319][ T1087]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.375328][ T1087]  ? __pfx__printk+0x10/0x10
[  223.375340][ T1087]  ? print_lock_name+0xde/0x100
[  223.375351][ T1087]  print_circular_bug+0x2ee/0x310
[  223.375364][ T1087]  check_noncircular+0x134/0x160
[  223.375376][ T1087]  validate_chain+0xb9b/0x2140
[  223.375409][ T1087]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  223.375422][ T1087]  ? arch_stack_walk+0x11c/0x150
[  223.375435][ T1087]  __lock_acquire+0xab9/0xd20
[  223.375444][ T1087]  ? __del_gendisk+0x129/0x9e0
[  223.375454][ T1087]  lock_acquire+0x120/0x360
[  223.375462][ T1087]  ? __del_gendisk+0x129/0x9e0
[  223.375473][ T1087]  ? check_path+0x21/0x40
[  223.375483][ T1087]  __mutex_lock+0x182/0xe80
[  223.375494][ T1087]  ? __del_gendisk+0x129/0x9e0
[  223.375505][ T1087]  ? __del_gendisk+0x129/0x9e0
[  223.375515][ T1087]  ? __pfx___mutex_lock+0x10/0x10
[  223.375524][ T1087]  ? __pfx___might_resched+0x10/0x10
[  223.375536][ T1087]  ? __lock_acquire+0xab9/0xd20
[  223.375543][ T1087]  ? disk_del_events+0xb5/0x210
[  223.375555][ T1087]  ? __del_gendisk+0xc1/0x9e0
[  223.375565][ T1087]  __del_gendisk+0x129/0x9e0
[  223.375575][ T1087]  ? del_gendisk+0xe0/0x160
[  223.375586][ T1087]  ? __pfx___del_gendisk+0x10/0x10
[  223.375597][ T1087]  ? down_read+0x1ad/0x2e0
[  223.375606][ T1087]  del_gendisk+0xe8/0x160
[  223.375616][ T1087]  nbd_dev_remove_work+0x47/0xe0
[  223.375626][ T1087]  ? process_scheduled_works+0x9ef/0x17b0
[  223.375635][ T1087]  process_scheduled_works+0xae1/0x17b0
[  223.375650][ T1087]  ? __pfx_process_scheduled_works+0x10/0x10
[  223.375662][ T1087]  worker_thread+0x8a0/0xda0
[  223.375676][ T1087]  kthread+0x711/0x8a0
[  223.375688][ T1087]  ? __pfx_worker_thread+0x10/0x10
[  223.375701][ T1087]  ? __pfx_kthread+0x10/0x10
[  223.375712][ T1087]  ? _raw_spin_unlock_irq+0x23/0x50
[  223.375724][ T1087]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.375732][ T1087]  ? __pfx_kthread+0x10/0x10
[  223.375743][ T1087]  ret_from_fork+0x3fc/0x770
[  223.375753][ T1087]  ? __pfx_ret_from_fork+0x10/0x10
[  223.375762][ T1087]  ? __switch_to_asm+0x39/0x70
[  223.375772][ T1087]  ? __switch_to_asm+0x33/0x70
[  223.375781][ T1087]  ? __pfx_kthread+0x10/0x10
[  223.375792][ T1087]  ret_from_fork_asm+0x1a/0x30
[  223.375806][ T1087]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  224.140922][ T5875] bond0 (unregistering): Released all slaves
[  224.145543][ T5875] bond1 (unregistering): Released all slaves
[  224.196194][ T5875] : left promiscuous mode
[  224.262482][ T5875] : left promiscuous mode
[  224.323108][ T5875] tipc: Left network mode
[  224.476592][ T5875] hsr_slave_0: left promiscuous mode
[  224.478587][ T5875] hsr_slave_1: left promiscuous mode
[  225.531597][ T5875] tipc: Resetting bearer <eth:syzkaller0>
[  225.550144][ T5875] tipc: Disabling bearer <ib:ip6gre0>
[  225.565301][ T5875] bond7 (unregistering): (slave ip6erspan0): Releasing active interface
[  225.810736][ T5875] tipc: Disabling bearer <eth:syzkaller0>
[  226.072450][ T5875] bond0 (unregistering): (slave bond6): Releasing backup interface
[  226.075452][ T5875] bond0 (unregistering): Released all slaves
[  226.141501][ T5875] bond1 (unregistering): Released all slaves
[  226.204893][ T5875] bond2 (unregistering): Released all slaves
[  226.270687][ T5875] bond3 (unregistering): Released all slaves
[  226.275046][ T5875] bond4 (unregistering): Released all slaves
[  226.342559][ T5875] bond5 (unregistering): Released all slaves
[  226.406295][ T5875] bond6 (unregistering): Released all slaves
[  226.413002][ T5875] bond7 (unregistering): Released all slaves
[  226.470870][ T5875] : left promiscuous mode
[  226.503142][ T5875] : left promiscuous mode
[  226.553373][ T5875] tipc: Disabling bearer <eth:ipvlan1>
[  226.562865][ T5875] tipc: Left network mode
[  226.710287][ T5875] hsr_slave_0: left promiscuous mode
[  226.712525][ T5875] hsr_slave_1: left promiscuous mode
[  227.121019][ T1088] smc: removing ib device syz0
[  227.287238][ T5875] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
05:47:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006bd6e10
R8 =ffff888107890237 R9 =1ffff11020f12046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8c9 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32911ff8 CR3=0000000027898000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133a4fe ffffffff8133a4fe
XMM02=ffffffff8133a4fe ffffffff8133a4fe XMM03=ffffffff8133a4fe ffffffff8133a4fe
XMM04=ffffffff8133a4fe ffffffff8133a4fe XMM05=ffffffff8133a4fe ffffffff8133a4fe
XMM06=ffffffff8133a4fe ffffffff8133a4fe XMM07=ffffffff8133a4fe ffffffff812c400c
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc149611df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c210 RBX=ffff88813663b1c0 RCX=ffff8881096f0000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90008ac7800 RSP=ffffc90008ac76a0
R8 =ffffffff8fa1d5f7 R9 =1ffffffff1f43abe R10=dffffc0000000000 R11=fffffbfff1f43abf
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8a7a8e56c0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8a79c11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
