last executing test programs:

15.750751146s ago: executing program 0 (id=2239):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000240), &(0x7f00000002c0)=0x10)
unshare(0x20400)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$l2tp(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'})
r2 = socket(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x20044054}, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x10, 0x1, [{0x7ff}, {0x3, 0x0, 0x1}, {0x8}]}}, @NHA_OIF={0x8, 0x5, r7}]}, 0x3c}}, 0x0)

15.676710572s ago: executing program 0 (id=2241):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xffffffff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4d0}, 0x4000050)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_free_percpu\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
write$tun(r4, 0x0, 0x109c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10)
socket$igmp6(0xa, 0x3, 0x2)

15.675236386s ago: executing program 0 (id=2242):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d6974000000"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, 0x0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@getneigh={0x14, 0x1e, 0x800, 0x1, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x248c4}, 0x0)

15.600285244s ago: executing program 0 (id=2243):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0}) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) (async)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000008580)=[{{&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x4000000) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r5, 0x5}, 0x8) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000068000100000000000000000002000000000000000600070008000000080008800400010008000500", @ANYRES32=r1, @ANYBLOB], 0x30}}, 0x0)

11.065609762s ago: executing program 0 (id=2243):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0}) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) (async)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000008580)=[{{&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x4000000) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r5, 0x5}, 0x8) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000068000100000000000000000002000000000000000600070008000000080008800400010008000500", @ANYRES32=r1, @ANYBLOB], 0x30}}, 0x0)

5.178805403s ago: executing program 0 (id=2243):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0}) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) (async)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000008580)=[{{&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x4000000) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r5, 0x5}, 0x8) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000068000100000000000000000002000000000000000600070008000000080008800400010008000500", @ANYRES32=r1, @ANYBLOB], 0x30}}, 0x0)

2.701373023s ago: executing program 2 (id=2393):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
r4 = socket(0x15, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000068000100000000000000000002000000000000000600070008000000080008800400010008000500", @ANYRES32, @ANYBLOB], 0x30}}, 0x0)

2.408030717s ago: executing program 2 (id=2396):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x1000000000000005, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x15)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000184e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

2.340247164s ago: executing program 2 (id=2398):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r2)
socket$inet6(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0900c300fd30214fdbc562ac8d02474bf93b9c6d23d76bbbe3927da2320df6c19496d6935725b2290f7c83cf5b5ff87f3ad2280caa316e3c8110aa067482a09aefdf8bae5553553ac1a9cd030355f436ec26badecbd0c113449f94848fabb26a3922dc6f7da9bf0296cdba5043c7f6294ade73c48c88fda9f0e5474ed310d327080e7407b3eae53cfa30719fe1f09c9dfa87f34790ad8db8eb463657a3c91b30fc4c2238cfe1927fae3979d2a2c551f923f511f276a26632bc034aab6ee17e69d785aa53d606cc3ec957c0b72bfae78ec620a185f71661fdee27786571432a4a4641f75c238df06ea8123a6e05740a52e80c633e6a0e200d551b431f19c5ed770768af7fe1fc0647b345b8078a2d83e7f07d33ecf4b18f2f6509bb67a35c0d551bf5bd5c7d"], 0xcb)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100fffd08000a40000000000900020073797a32000000000900010073797a3000000000080005400000001d08000340000000042c0000000e0a01020000000000000000010000800900020073797a32000000140000001000010000000000000000000300000aa4b01c0e84a1e42721825ee28fff67a9416de9e05056524f5a"], 0xb8}}, 0x0)
recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r7, &(0x7f0000000180)={0x1a, 0x30c, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x7af2, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x14, &(0x7f0000000000)={&(0x7f0000000800)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0xb, 0x10}, {0xb, 0xfff1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)

1.309180245s ago: executing program 2 (id=2401):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000018000100c5000000ffdbdf25020000040000fd050000000006001500080000000c00168008000600ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x4d0}, 0x4000050)

450.174893ms ago: executing program 1 (id=2404):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x1000000000000005, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x15)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000188e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

358.029266ms ago: executing program 1 (id=2405):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000068000100000000000000000002000000000000000600070008000000080008800400010008000500", @ANYRES32=r2, @ANYBLOB], 0x30}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000068000100000000000000000002000000000000000600070008000000080008800400010008000500", @ANYRES32=r2, @ANYBLOB], 0x30}}, 0x0) (async)

354.738457ms ago: executing program 2 (id=2406):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711266000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000006800010000000000000000000a000000000000000600070008000000140008000000000008000500"/56, @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0)

289.425841ms ago: executing program 2 (id=2407):
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', <r2=>0x0, 0x29, 0x8, 0x9, 0x6a0, 0x30, @dev={0xfe, 0x80, '\x00', 0x27}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8000, 0x6, 0x101}})
sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x842db4eec3cd2c60}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getaddr={0x54, 0x16, 0x200, 0x70bd28, 0x25dfdbff, {0xa, 0x40, 0x2, 0xc8, r2}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_CACHEINFO={0x14, 0x6, {0x14d, 0x10, 0x80000001, 0x5}}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000300)='\xff\xff', <r3=>0x0}, 0x30)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r3}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r4}, 0x20)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0xfffffffe, 0x1, 0x623c4, r5, 0x4, '\x00', 0x0, r6, 0x5, 0x2}, 0x50)
socket$inet_smc(0x2b, 0x1, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r8, 0x107, 0x16, &(0x7f0000000540)=""/70, &(0x7f00000005c0)=0x46)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}}, 0x400c000)
unshare(0x40050080)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'erspan0\x00', &(0x7f0000000800)={'ip_vti0\x00', <r9=>r2, 0x7800, 0x7800, 0x8001, 0x1658, {{0x10, 0x4, 0x1, 0xb, 0x40, 0x66, 0x0, 0x8, 0x2b, 0x0, @local, @private=0xa010102, {[@rr={0x7, 0xb, 0x2f, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x18, 0x0, 0xa, [0x4]}, @lsrr={0x83, 0x13, 0xf6, [@multicast2, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x7, 0x6, "abd73b7a"}]}}}}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={r6, 0x20, &(0x7f0000000a80)={&(0x7f0000000940)=""/68, 0x44, <r10=>0x0, &(0x7f00000009c0)=""/165, 0xa5}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x13, &(0x7f0000000700)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xee90}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f00000007c0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x12, '\x00', r9, @fallback=0x4, r6, 0x8, &(0x7f00000008c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xb, 0xb3f, 0x4}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[r5, r5, r7, r5], 0xfffffffffffffffc, 0x10, 0xf2ae}, 0x94)
r11 = accept(r0, 0x0, &(0x7f0000000c00))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'ip6_vti0\x00', r2, 0x2f, 0xfa, 0x3, 0xffff, 0x4, @remote, @loopback, 0x40, 0x8, 0x9, 0x37bf}})
unshare(0x42000000)
sendmsg$NFT_BATCH(r4, &(0x7f0000001080)={&(0x7f0000000d00), 0xc, &(0x7f0000001040)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x298, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1dc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9e8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2d4}, 0x1, 0x0, 0x0, 0x2}, 0x20004010)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c860}, 0x24000810)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r12, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xe8c1)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000001380)={0x0, 0x1, 0x6, @link_local}, 0x10)

195.669927ms ago: executing program 1 (id=2408):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040), 0x4)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f00000000c0))
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)

99.20176ms ago: executing program 1 (id=2409):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {0x0, 0x2a3, 0x7f, 0xffffffffffffffff, 0x0, 0x33}, {0x7}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd2b}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x200}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0xd, "f42a97706b23b6a31f9f75fdcb"}}) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x10000}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x20) (async)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x8)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0xa0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010102}}, 0x0, 0x0, 0xee31, 0x0, 0x80}, 0x9c) (async)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000340)=0x100, 0x4) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffffffd, 0x800, 0x0, 0x0, 0x8a, 0x4}, 0x9c) (async)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) (async)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x300, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async)
sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000006800010000000000000000000a00000000000000060005000800000008000880040001000800010002000000"], 0x30}}, 0x4000090)

470.902µs ago: executing program 1 (id=2410):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x8000)

0s ago: executing program 1 (id=2411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r2, 0x89e2)
recvmmsg$unix(r1, &(0x7f0000003980)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000003c40)=""/82, 0x49}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f00000005c0)=""/39, 0x27}], 0x6, &(0x7f0000000680)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/97, 0x61}, {&(0x7f0000001840)=""/171, 0xab}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000001a00)=""/222, 0xde}, {&(0x7f0000001b00)=""/4096, 0xffffff32}, {&(0x7f0000002b00)=""/183, 0xb7}, {&(0x7f0000002bc0)=""/107, 0x6b}, {&(0x7f0000002c40)=""/178, 0xb2}, {&(0x7f0000002d00)=""/155, 0x9b}], 0xa, &(0x7f0000002e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002fc0)=""/136, 0x88}], 0x1, &(0x7f0000003080)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f00000031c0)=@abs, 0x6e, &(0x7f0000003580)=[{&(0x7f0000003240)=""/227, 0xe3}, {&(0x7f0000003340)=""/10, 0xa}, {&(0x7f0000003380)=""/204, 0xcc}, {&(0x7f0000003480)=""/63, 0x3f}, {&(0x7f00000034c0)=""/53, 0x35}, {&(0x7f0000003500)}, {&(0x7f0000003540)=""/51, 0x33}], 0x7, &(0x7f0000003600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000003700), 0x6e, &(0x7f0000003880)=[{&(0x7f0000003780)=""/214, 0xd6}], 0x1, &(0x7f00000038c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x5, 0x40008000, &(0x7f0000003ac0)={0x0, 0x989680})
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000003b40))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x38}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
shutdown(r4, 0x1)
sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000010)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r12, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003c00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="f1e6ffffffff000000eac064000008005f928e18020b416a0400", @ANYRES32=r11, @ANYBLOB="0400130006001200040000000a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003b00)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000003bc0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003c40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r13 = socket$kcm(0xa, 0x5, 0x0)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r14], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x8916, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x4, 0x25dfdbff, {0x2, 0x0, 0x10, 0x4, 0x0, 0x0, 0xfd, 0x5, 0x800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4d0}, 0x4000050)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58298' (ED25519) to the list of known hosts.
syzkaller login: [   56.318595][ T5820] cgroup: Unknown subsys name 'net'
[   56.418848][ T5820] cgroup: Unknown subsys name 'cpuset'
[   56.423187][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.844127][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.482937][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.487411][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.491349][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.494588][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.530340][ T5222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.534899][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.537866][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.539794][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.544357][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.544487][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.549805][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.552881][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.552996][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.561763][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.570423][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.970244][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   64.010283][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   64.050959][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   64.210249][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.213862][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.217696][ T5840] bridge_slave_0: entered allmulticast mode
[   64.221788][ T5840] bridge_slave_0: entered promiscuous mode
[   64.233584][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.236276][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.238640][ T5836] bridge_slave_0: entered allmulticast mode
[   64.241975][ T5836] bridge_slave_0: entered promiscuous mode
[   64.246164][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.248594][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.251061][ T5836] bridge_slave_1: entered allmulticast mode
[   64.254406][ T5836] bridge_slave_1: entered promiscuous mode
[   64.259626][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.262546][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.265684][ T5840] bridge_slave_1: entered allmulticast mode
[   64.269617][ T5840] bridge_slave_1: entered promiscuous mode
[   64.345880][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.349629][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.352508][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.356407][ T5844] bridge_slave_0: entered allmulticast mode
[   64.360315][ T5844] bridge_slave_0: entered promiscuous mode
[   64.366506][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.369435][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.372397][ T5844] bridge_slave_1: entered allmulticast mode
[   64.376451][ T5844] bridge_slave_1: entered promiscuous mode
[   64.394111][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.416625][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.446843][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.452183][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.484968][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.491483][ T5840] team0: Port device team_slave_0 added
[   64.510633][ T5836] team0: Port device team_slave_0 added
[   64.513892][ T5840] team0: Port device team_slave_1 added
[   64.541246][ T5836] team0: Port device team_slave_1 added
[   64.546861][ T5844] team0: Port device team_slave_0 added
[   64.559900][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.562564][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.572586][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.588634][ T5844] team0: Port device team_slave_1 added
[   64.599851][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.602102][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.610573][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.633486][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.636958][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.647248][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.668962][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.671761][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.682240][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.696757][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.699481][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.709489][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.716467][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.719225][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.729446][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.801462][ T5840] hsr_slave_0: entered promiscuous mode
[   64.803937][ T5840] hsr_slave_1: entered promiscuous mode
[   64.812270][ T5836] hsr_slave_0: entered promiscuous mode
[   64.817327][ T5836] hsr_slave_1: entered promiscuous mode
[   64.820242][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.823375][ T5836] Cannot create hsr debugfs directory
[   64.926959][ T5844] hsr_slave_0: entered promiscuous mode
[   64.930055][ T5844] hsr_slave_1: entered promiscuous mode
[   64.932906][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.936577][ T5844] Cannot create hsr debugfs directory
[   65.238853][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.250753][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.270835][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.278359][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.337487][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.355563][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.363489][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.390703][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.432138][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.443557][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.450540][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.455742][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.548493][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.576929][ T5843] Bluetooth: hci1: command tx timeout
[   65.576943][ T5838] Bluetooth: hci0: command tx timeout
[   65.587824][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   65.605716][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.608619][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.620559][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.623297][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.640757][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.651982][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.664931][ T5838] Bluetooth: hci2: command tx timeout
[   65.698241][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   65.702445][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   65.720771][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.723406][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.735504][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.737835][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.741289][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.744094][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.753702][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.756120][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.932215][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.003923][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.021193][ T5836] veth0_vlan: entered promiscuous mode
[   66.033402][ T5836] veth1_vlan: entered promiscuous mode
[   66.058113][ T5840] veth0_vlan: entered promiscuous mode
[   66.072171][ T5836] veth0_macvtap: entered promiscuous mode
[   66.087520][ T5836] veth1_macvtap: entered promiscuous mode
[   66.091161][ T5840] veth1_vlan: entered promiscuous mode
[   66.101389][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.130301][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.156373][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.171005][ T5840] veth0_macvtap: entered promiscuous mode
[   66.176524][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.180149][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.183630][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.188364][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.197930][ T5840] veth1_macvtap: entered promiscuous mode
[   66.244099][ T5844] veth0_vlan: entered promiscuous mode
[   66.257550][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.260198][ T5844] veth1_vlan: entered promiscuous mode
[   66.270884][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.287492][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.290171][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.292831][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.296360][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.367738][ T5844] veth0_macvtap: entered promiscuous mode
[   66.389812][ T5844] veth1_macvtap: entered promiscuous mode
[   66.408329][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.411694][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.429270][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.447920][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.469757][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.473056][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.480285][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.485511][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.488866][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.491957][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.527235][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.530476][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.600661][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.602975][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.648923][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.651943][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.670418][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.689675][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.692105][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.793385][ T5907] netlink: 'syz.2.3': attribute type 10 has an invalid length.
[   67.082010][ T5935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8'.
[   67.090294][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'.
[   67.108194][ T5934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'.
[   67.112054][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'.
[   67.158301][ T5939] netlink: 'syz.1.11': attribute type 10 has an invalid length.
[   67.355428][ T5956] Zero length message leads to an empty skb
[   67.535522][ T5961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.655148][ T5838] Bluetooth: hci0: command tx timeout
[   67.664632][ T5838] Bluetooth: hci1: command tx timeout
[   67.736555][ T5838] Bluetooth: hci2: command tx timeout
[   68.295083][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'.
[   68.318583][ T6018] ip6t_srh: unknown srh match flags  5294
[   68.402725][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.446945][ T6032] netlink: 'syz.1.34': attribute type 21 has an invalid length.
[   68.634618][ T6048] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   68.637070][ T6048] netlink: 228 bytes leftover after parsing attributes in process `syz.0.36'.
[   68.639637][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'.
[   69.079481][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'.
[   69.082613][ T6077] syz_tun: entered allmulticast mode
[   69.265512][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[   69.473339][ T6094] syz.1.53 uses obsolete (PF_INET,SOCK_PACKET)
[   69.735260][ T5843] Bluetooth: hci0: command tx timeout
[   69.736342][ T5838] Bluetooth: hci1: command tx timeout
[   69.785769][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'.
[   69.816465][ T5838] Bluetooth: hci2: command tx timeout
[   69.975093][ T6125] x_tables: duplicate underflow at hook 2
[   70.072029][ T6133] netlink: 'syz.1.67': attribute type 6 has an invalid length.
[   70.534763][ T6151] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   70.577120][ T6152] warning: `syz.0.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.689741][ T6152] netlink: 'syz.0.75': attribute type 10 has an invalid length.
[   70.735540][ T6151] bridge_slave_0: left allmulticast mode
[   70.737733][ T6151] bridge_slave_0: left promiscuous mode
[   70.740646][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.820031][ T6151] bridge_slave_1: left allmulticast mode
[   70.822289][ T6151] bridge_slave_1: left promiscuous mode
[   70.838686][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.859091][ T6151] bond0: (slave bond_slave_0): Releasing backup interface
[   70.870260][ T6151] bond0: (slave bond_slave_1): Releasing backup interface
[   70.893702][ T6151] team0: Port device team_slave_0 removed
[   70.903583][ T6151] team0: Port device team_slave_1 removed
[   70.906784][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.909336][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.916642][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.919930][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.950588][ T6152] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   70.967956][ T6152] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.982937][ T6152] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   71.035862][ T6165] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   71.060151][ T6151] syz.0.75 (6151) used greatest stack depth: 20120 bytes left
[   71.092406][ T6165] bridge_slave_0: left allmulticast mode
[   71.099455][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.101592][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.103688][ T5298] IPVS: starting estimator thread 0...
[   71.106498][ T6165] bridge_slave_0: left promiscuous mode
[   71.111245][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.136772][ T6168] netlink: 'syz.1.79': attribute type 10 has an invalid length.
[   71.138026][ T6165] bridge_slave_1: left allmulticast mode
[   71.141722][ T6165] bridge_slave_1: left promiscuous mode
[   71.144103][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.153304][ T6165] bond0: (slave bond_slave_0): Releasing backup interface
[   71.177439][ T6165] bond0: (slave bond_slave_1): Releasing backup interface
[   71.197188][ T6169] IPVS: using max 45 ests per chain, 108000 per kthread
[   71.206695][ T6165] team0: Port device team_slave_0 removed
[   71.218656][ T6165] team0: Port device team_slave_1 removed
[   71.221841][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.225548][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.229970][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.232478][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.244671][ T6168] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[   71.261053][ T6168] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.281953][ T6168] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   71.420645][ T6185] netlink: 'syz.0.86': attribute type 10 has an invalid length.
[   71.423293][ T6185] bridge0: port 1(team0) entered blocking state
[   71.433633][ T6185] bridge0: port 1(team0) entered disabled state
[   71.436375][ T6185] team0: entered allmulticast mode
[   71.701883][ T6205] netlink: 'syz.1.90': attribute type 2 has an invalid length.
[   71.817292][ T5838] Bluetooth: hci1: command tx timeout
[   71.817334][ T5843] Bluetooth: hci0: command tx timeout
[   71.896487][ T5843] Bluetooth: hci2: command tx timeout
[   71.976800][ T6213] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   72.172378][ T6225] __nla_validate_parse: 8 callbacks suppressed
[   72.172394][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'.
[   72.318464][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'.
[   72.348749][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'.
[   72.672810][ T6267] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   72.684907][ T6267] netlink: 'syz.2.112': attribute type 10 has an invalid length.
[   72.688182][ T6267] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   72.826430][ T6276] netlink: 'syz.0.116': attribute type 1 has an invalid length.
[   72.968545][ T6290] netlink: 'syz.0.118': attribute type 10 has an invalid length.
[   73.130936][ T6297] Bluetooth: MGMT ver 1.23
[   73.136257][ T6296] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   73.144392][ T6296] netlink: 'syz.1.121': attribute type 10 has an invalid length.
[   73.147345][ T6296] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[   73.191695][    T9] IPVS: starting estimator thread 0...
[   73.196386][ T6299] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20004
[   73.258499][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.124'.
[   73.267818][ T6305] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   73.286207][ T6300] IPVS: using max 62 ests per chain, 148800 per kthread
[   73.374054][ T6307] netlink: 176 bytes leftover after parsing attributes in process `syz.1.125'.
[   74.110382][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'.
[   74.116859][ T6320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.130'.
[   74.474540][ T6351] netlink: 64 bytes leftover after parsing attributes in process `syz.0.140'.
[   74.641434][ T6356] netlink: 'syz.2.141': attribute type 10 has an invalid length.
[   74.662228][ T6356] bridge0: port 3(team0) entered blocking state
[   74.665464][ T6356] bridge0: port 3(team0) entered disabled state
[   74.668231][ T6356] team0: entered allmulticast mode
[   74.672655][ T6356] team_slave_0: entered allmulticast mode
[   74.676757][ T6356] team_slave_1: entered allmulticast mode
[   74.681428][ T6356] team0: entered promiscuous mode
[   74.684107][ T6356] team_slave_0: entered promiscuous mode
[   74.686492][ T6356] team_slave_1: entered promiscuous mode
[   74.688753][ T6356] bridge0: port 3(team0) entered blocking state
[   74.690770][ T6356] bridge0: port 3(team0) entered forwarding state
[   74.784029][ T6369] vlan0: entered promiscuous mode
[   74.787929][ T6369] vlan0: entered allmulticast mode
[   74.789547][ T6369] veth0_vlan: entered allmulticast mode
[   74.793343][ T6369] team0: Port device vlan0 added
[   75.020505][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'.
[   75.179566][ T6386] sch_fq: defrate 0 ignored.
[   75.373126][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'.
[   75.427965][ T6408] vxcan1: entered allmulticast mode
[   75.431199][ T6409] vxcan1: left allmulticast mode
[   75.773103][ T6443] tipc: Started in network mode
[   75.776681][ T6443] tipc: Node identity 4, cluster identity 4711
[   75.778631][ T6443] tipc: Node number set to 4
[   76.078336][ T6489] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   76.086373][ T6489] netlink: 'syz.1.180': attribute type 10 has an invalid length.
[   76.088934][ T6489] bridge0: port 1(team0) entered blocking state
[   76.094962][ T6489] bridge0: port 1(team0) entered disabled state
[   76.097835][ T6489] team0: entered allmulticast mode
[   76.100526][ T6489] team0: entered promiscuous mode
[   76.506560][ T6518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.510950][ T6519] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   76.513581][ T6519] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   76.560093][ T6523] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   76.563596][ T6523] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   76.989305][ T6549] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   77.019731][ T6549] sctp: [Deprecated]: syz.0.197 (pid 6549) Use of int in max_burst socket option.
[   77.019731][ T6549] Use struct sctp_assoc_value instead
[   77.337597][ T6589] __nla_validate_parse: 4 callbacks suppressed
[   77.337607][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'.
[   77.357000][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[   77.362454][ T6589] netlink: 'syz.2.205': attribute type 142 has an invalid length.
[   77.379824][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'.
[   77.694786][ T6614] block nbd0: NBD_DISCONNECT
[   77.938371][ T6629] netlink: 'syz.1.215': attribute type 10 has an invalid length.
[   77.941436][ T6629] team0: left allmulticast mode
[   77.943238][ T6629] team0: left promiscuous mode
[   77.947219][ T6629] bridge0: port 1(team0) entered disabled state
[   78.050968][ T6637] netlink: 'syz.1.218': attribute type 10 has an invalid length.
[   78.053602][ T6637] bridge0: port 1(team0) entered blocking state
[   78.068262][ T6637] bridge0: port 1(team0) entered disabled state
[   78.074832][ T6637] team0: entered allmulticast mode
[   78.084851][ T6637] team0: entered promiscuous mode
[   78.093266][ T6640] vlan0: entered allmulticast mode
[   78.110363][ T6640] veth0_vlan: entered allmulticast mode
[   78.112610][ T6640] team0: Port device vlan0 added
[   78.127676][   T32] bridge0: port 1(team0) entered blocking state
[   78.129941][   T32] bridge0: port 1(team0) entered forwarding state
[   78.328530][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[   78.331652][ T6651] chnl_net:caif_netlink_parms(): no params data found
[   78.503694][ T6660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.229'.
[   78.601303][ T6665] netdevsim netdevsim0: Direct firmware load for 2Q failed with error -2
[   78.614570][ T6665] netdevsim netdevsim0: Falling back to sysfs fallback for: 2Q
[   78.699134][ T6669] netlink: 'syz.0.231': attribute type 1 has an invalid length.
[   79.525807][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'.
[   79.635622][ T6715] netlink: 'syz.0.247': attribute type 11 has an invalid length.
[   79.644343][ T6715] netlink: 228 bytes leftover after parsing attributes in process `syz.0.247'.
[   79.649032][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'.
[   80.008125][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'.
[   80.028645][ T6733] netlink: 'syz.2.251': attribute type 1 has an invalid length.
[   80.031101][ T6733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   80.033898][ T6733] IPv6: NLM_F_CREATE should be set when creating new route
[   80.048487][ T6733] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   81.347752][  T971] cfg80211: failed to load regulatory.db
[  115.498073][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.258'.
[  115.507408][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'.
[  115.511049][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'.
[  115.570168][ T6776] netlink: 108 bytes leftover after parsing attributes in process `syz.1.263'.
[  115.579589][ T6776] netlink: 108 bytes leftover after parsing attributes in process `syz.1.263'.
[  115.675270][ T6782] netlink: 'syz.2.265': attribute type 1 has an invalid length.
[  115.746996][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'.
[  115.771377][ T6798] netlink: 76 bytes leftover after parsing attributes in process `syz.0.269'.
[  115.782450][ T6800] netlink: 'syz.1.270': attribute type 3 has an invalid length.
[  115.785178][ T6800] netlink: 666 bytes leftover after parsing attributes in process `syz.1.270'.
[  115.962067][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[  116.198576][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.282'.
[  116.249673][ T6836] netlink: 'syz.2.283': attribute type 1 has an invalid length.
[  116.252944][ T6837] netlink: 'syz.2.283': attribute type 1 has an invalid length.
[  117.091304][ T6878] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  117.097698][ T6878] bond0 (unregistering): Released all slaves
[  117.437013][ T6912] xt_CT: You must specify a L4 protocol and not use inversions on it
[  117.823723][ T6925] netlink: 'syz.0.312': attribute type 10 has an invalid length.
[  117.835463][ T6925] team0: Device ipvlan1 failed to register rx_handler
[  118.278581][ T6943] netlink: 'syz.2.319': attribute type 83 has an invalid length.
[  118.375693][ T6948] netlink: 'syz.0.321': attribute type 11 has an invalid length.
[  118.456359][ T6955] team0: No ports can be present during mode change
[  118.533650][ T6959] netlink: 'syz.1.326': attribute type 1 has an invalid length.
[  118.654893][ T6965] netlink: 'syz.1.328': attribute type 39 has an invalid length.
[  118.673574][ T6965] syz_tun (unregistering): left allmulticast mode
[  118.948594][ T6982] syzkaller1: entered promiscuous mode
[  118.950822][ T6982] syzkaller1: entered allmulticast mode
[  119.089457][ T6993] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  119.241115][ T7006] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  119.247750][ T7006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.392209][ T7021] netlink: 'syz.2.343': attribute type 1 has an invalid length.
[  119.861595][ T7054] ip6gre1: entered promiscuous mode
[  119.870787][ T7054] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  119.912478][ T7054] "syz.2.356" (7054) uses obsolete ecb(arc4) skcipher
[  120.925012][ T7087] openvswitch: netlink: IP tunnel dst address not specified
[  121.062487][ T7092] netlink: 'syz.1.365': attribute type 1 has an invalid length.
[  121.221020][ T7105] __nla_validate_parse: 19 callbacks suppressed
[  121.221035][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.369'.
[  121.229261][ T7105] netlink: 'syz.2.369': attribute type 7 has an invalid length.
[  121.232294][ T7105] netlink: 'syz.2.369': attribute type 8 has an invalid length.
[  121.238022][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[  121.363995][ T7115] netlink: 'syz.1.371': attribute type 12 has an invalid length.
[  121.379958][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.371'.
[  121.582769][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'.
[  121.583190][ T7129] netlink: 200 bytes leftover after parsing attributes in process `syz.2.375'.
[  121.590614][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'.
[  121.758470][ T7133] tipc: Started in network mode
[  121.761085][ T7133] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  121.765505][ T7133] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  122.298950][ T7154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'.
[  122.307448][ T7157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'.
[  122.500481][ T7167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'.
[  122.549037][ T7170] netlink: 64 bytes leftover after parsing attributes in process `syz.1.389'.
[  122.639256][ T7172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.885935][ T5298] tipc: Node number set to 9480874
[  123.402745][ T7217] raw_sendmsg: syz.0.408 forgot to set AF_INET. Fix it!
[  124.676954][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  124.837782][ T7310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.272935][ T7346] netlink: 'syz.1.452': attribute type 1 has an invalid length.
[  125.466944][ T7360] team0: left allmulticast mode
[  125.470088][ T7360] team_slave_0: left allmulticast mode
[  125.473030][ T7360] team_slave_1: left allmulticast mode
[  125.477371][ T7360] vlan0: left allmulticast mode
[  125.479131][ T7360] veth0_vlan: left allmulticast mode
[  125.481410][ T7360] team0: left promiscuous mode
[  125.483460][ T7360] team_slave_0: left promiscuous mode
[  125.486173][ T7360] team_slave_1: left promiscuous mode
[  125.489355][ T7360] vlan0: left promiscuous mode
[  125.492723][ T7360] bridge0: port 3(team0) entered disabled state
[  125.506611][ T7360] bridge_slave_0: left allmulticast mode
[  125.508418][ T7360] bridge_slave_0: left promiscuous mode
[  125.510367][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.518458][ T7360] bridge_slave_1: left allmulticast mode
[  125.520213][ T7360] bridge_slave_1: left promiscuous mode
[  125.522070][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.528993][ T7360] bond0: (slave bond_slave_0): Releasing backup interface
[  125.540402][ T7360] bond0: (slave bond_slave_1): Releasing backup interface
[  125.562228][ T7360] team0: Port device team_slave_0 removed
[  125.582144][ T7360] team0: Port device team_slave_1 removed
[  125.588658][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.591740][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.598909][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.602055][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.614558][ T7360] team0: Port device vlan0 removed
[  126.667235][ T7397] __nla_validate_parse: 13 callbacks suppressed
[  126.667249][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'.
[  126.680924][ T7408] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.471'.
[  126.689139][ T7408] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  126.766940][ T7413] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.473'.
[  126.862861][ T7419] netlink: 144 bytes leftover after parsing attributes in process `syz.2.476'.
[  126.902423][ T7421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.914046][ T7425] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.980915][ T7421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.047488][ T7421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.121047][ T7421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.173296][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'.
[  127.203567][ T7421] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.213901][ T7421] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.222678][ T7421] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.230878][ T7421] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.538831][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.541333][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  163.092140][ T7483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.494'.
[  163.167212][ T7487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.496'.
[  163.171895][ T7487] netlink: 'syz.2.496': attribute type 29 has an invalid length.
[  163.272680][ T7493] Driver unsupported XDP return value 0 on prog  (id 99) dev N/A, expect packet loss!
[  163.463748][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'.
[  163.865392][ T7543] netlink: 'syz.1.513': attribute type 2 has an invalid length.
[  163.869420][ T7543] netlink: 'syz.1.513': attribute type 1 has an invalid length.
[  164.018330][ T7561] can: request_module (can-proto-4) failed.
[  164.082835][ T7566] netlink: 'syz.1.522': attribute type 1 has an invalid length.
[  164.085629][ T7566] netlink: 228 bytes leftover after parsing attributes in process `syz.1.522'.
[  164.088531][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'.
[  164.178586][ T7577] netlink: 136 bytes leftover after parsing attributes in process `syz.1.525'.
[  164.280714][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[  164.287115][  T788] IPVS: starting estimator thread 0...
[  164.289628][ T7582] netlink: 136 bytes leftover after parsing attributes in process `syz.1.527'.
[  164.374407][ T7583] IPVS: using max 62 ests per chain, 148800 per kthread
[  164.405951][ T7590] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[  164.408674][ T7590] netlink: 224 bytes leftover after parsing attributes in process `syz.1.529'.
[  165.157277][ T7633] netlink: 144 bytes leftover after parsing attributes in process `syz.0.536'.
[  165.276377][ T7636] netlink: 'syz.2.537': attribute type 4 has an invalid length.
[  165.289497][ T7636] : renamed from bond0 (while UP)
[  165.780066][ T7679] ieee802154 phy1 wpan1: encryption failed: -22
[  166.321455][ T7722] netlink: 'syz.2.565': attribute type 2 has an invalid length.
[  166.350718][ T7720] bridge0: port 1(team0) entered disabled state
[  166.559704][ T7720] tipc: Resetting bearer <eth:syzkaller0>
[  166.563591][ T7720] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  166.566908][ T7720] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  166.599560][ T7720] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.603155][ T7720] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.612111][ T7720] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.615663][ T7720] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.794091][ T7743] netlink: 'syz.1.572': attribute type 21 has an invalid length.
[  166.797520][ T7743] netlink: 'syz.1.572': attribute type 4 has an invalid length.
[  166.801856][ T7743] netlink: 'syz.1.572': attribute type 5 has an invalid length.
[  167.873763][ T7803] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  167.951933][ T7808] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  168.855241][ T7850] netlink: 'syz.1.606': attribute type 83 has an invalid length.
[  168.920495][ T7855] Cannot find del_set index 4 as target
[  168.923679][ T7855] Cannot find del_set index 4 as target
[  169.015111][ T5838] Bluetooth: hci2: command 0x0405 tx timeout
[  170.222900][ T7904] netlink: 'syz.1.625': attribute type 10 has an invalid length.
[  170.225859][ T7904] __nla_validate_parse: 10 callbacks suppressed
[  170.225867][ T7904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.625'.
[  170.242450][ T7904] dummy0: entered promiscuous mode
[  170.252431][ T7904] dummy0: entered allmulticast mode
[  170.256118][ T7904] bridge0: port 2(dummy0) entered blocking state
[  170.271643][ T7904] bridge0: port 2(dummy0) entered disabled state
[  170.277552][ T7904] bridge0: port 2(dummy0) entered blocking state
[  170.279999][ T7904] bridge0: port 2(dummy0) entered forwarding state
[  170.341237][ T7911] netlink: 136 bytes leftover after parsing attributes in process `syz.0.627'.
[  170.373845][ T7918] netlink: 136 bytes leftover after parsing attributes in process `syz.1.629'.
[  170.462615][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'.
[  170.537668][ T7929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.633'.
[  170.681828][ T7944] team0: Mode changed to "broadcast"
[  170.690107][ T7944] bond0: Master is either lo or non-ether device
[  170.698492][ T7946] netlink: 72 bytes leftover after parsing attributes in process `syz.2.639'.
[  170.860817][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'.
[  171.063155][ T7966] SET target dimension over the limit!
[  171.189565][ T7974] syz.1.645: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  171.196216][ T7974] CPU: 0 UID: 0 PID: 7974 Comm: syz.1.645 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  171.196227][ T7974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.196233][ T7974] Call Trace:
[  171.196237][ T7974]  <TASK>
[  171.196242][ T7974]  dump_stack_lvl+0x189/0x250
[  171.196260][ T7974]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.196270][ T7974]  ? __pfx__printk+0x10/0x10
[  171.196282][ T7974]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  171.196295][ T7974]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  171.196306][ T7974]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  171.196317][ T7974]  warn_alloc+0x214/0x310
[  171.196333][ T7974]  ? __pfx_warn_alloc+0x10/0x10
[  171.196348][ T7974]  ? __get_vm_area_node+0x28f/0x300
[  171.196359][ T7974]  ? xskq_create+0xbf/0x170
[  171.196382][ T7974]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  171.196415][ T7974]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  171.196437][ T7974]  ? __kasan_kmalloc+0x93/0xb0
[  171.196454][ T7974]  vmalloc_user_noprof+0xad/0xf0
[  171.196471][ T7974]  ? xskq_create+0xbf/0x170
[  171.196491][ T7974]  xskq_create+0xbf/0x170
[  171.196511][ T7974]  xsk_init_queue+0xb0/0x110
[  171.196532][ T7974]  xsk_setsockopt+0x4de/0x710
[  171.196553][ T7974]  ? __pfx_xsk_setsockopt+0x10/0x10
[  171.196574][ T7974]  ? aa_sock_opt_perm+0x74/0x110
[  171.196623][ T7974]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  171.196643][ T7974]  ? __pfx_xsk_setsockopt+0x10/0x10
[  171.196662][ T7974]  do_sock_setsockopt+0x25a/0x3e0
[  171.196684][ T7974]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  171.196703][ T7974]  ? __fget_files+0x2a/0x420
[  171.196725][ T7974]  __x64_sys_setsockopt+0x18b/0x220
[  171.196745][ T7974]  do_syscall_64+0xfa/0x3b0
[  171.196759][ T7974]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.196778][ T7974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.196791][ T7974]  ? exc_page_fault+0x9f/0xf0
[  171.196810][ T7974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.196822][ T7974] RIP: 0033:0x7fa2b3b8e929
[  171.196835][ T7974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.196846][ T7974] RSP: 002b:00007fa2b494e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  171.196860][ T7974] RAX: ffffffffffffffda RBX: 00007fa2b3db5fa0 RCX: 00007fa2b3b8e929
[  171.196870][ T7974] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[  171.196877][ T7974] RBP: 00007fa2b3c10b39 R08: 0000000000000004 R09: 0000000000000000
[  171.196884][ T7974] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  171.196892][ T7974] R13: 0000000000000000 R14: 00007fa2b3db5fa0 R15: 00007ffcef1c6a28
[  171.196910][ T7974]  </TASK>
[  171.196914][ T7974] Mem-Info:
[  171.292928][ T7974] active_anon:12525 inactive_anon:0 isolated_anon:0
[  171.292928][ T7974]  active_file:1106 inactive_file:38237 isolated_file:0
[  171.292928][ T7974]  unevictable:1768 dirty:71 writeback:0
[  171.292928][ T7974]  slab_reclaimable:9263 slab_unreclaimable:53668
[  171.292928][ T7974]  mapped:18238 shmem:2436 pagetables:1047
[  171.292928][ T7974]  sec_pagetables:0 bounce:0
[  171.292928][ T7974]  kernel_misc_reclaimable:0
[  171.292928][ T7974]  free:292344 free_pcp:17603 free_cma:0
[  171.306348][ T7974] Node 0 active_anon:12848kB inactive_anon:0kB active_file:3248kB inactive_file:147788kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48268kB dirty:176kB writeback:0kB shmem:5064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7480kB pagetables:2124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  171.317340][ T7974] Node 1 active_anon:37252kB inactive_anon:0kB active_file:1176kB inactive_file:5160kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24684kB dirty:108kB writeback:0kB shmem:4680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4148kB pagetables:1928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  171.328181][ T7974] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  171.340393][ T7974] lowmem_reserve[]: 0 812 812 812 812
[  171.342678][ T7974] Node 0 DMA32 free:259760kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12848kB inactive_anon:0kB active_file:3248kB inactive_file:147788kB unevictable:3536kB writepending:176kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:30504kB local_pcp:13916kB free_cma:0kB
[  171.353796][ T7974] lowmem_reserve[]: 0 0 0 0 0
[  171.355592][ T7974] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  171.365384][ T7974] lowmem_reserve[]: 0 0 854 854 854
[  171.367245][ T7974] Node 1 Normal free:435764kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37252kB inactive_anon:0kB active_file:1176kB inactive_file:5160kB unevictable:3536kB writepending:108kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:40580kB local_pcp:21736kB free_cma:0kB
[  171.378491][ T7974] lowmem_reserve[]: 0 0 0 0 0
[  171.380167][ T7974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  171.385423][ T7974] Node 0 DMA32: 822*4kB (M) 521*8kB (UM) 391*16kB (UME) 124*32kB (M) 52*64kB (UME) 27*128kB (UME) 17*256kB (ME) 5*512kB (M) 5*1024kB (UM) 7*2048kB (UME) 51*4096kB (UM) = 259728kB
[  171.391956][ T7974] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  171.398225][ T7974] Node 1 Normal: 677*4kB (UME) 508*8kB (UE) 529*16kB (UME) 585*32kB (UE) 160*64kB (UME) 53*128kB (UME) 11*256kB (UM) 4*512kB (UM) 1*1024kB (U) 3*2048kB (UME) 91*4096kB (M) = 435748kB
[  171.404688][ T7974] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  171.407863][ T7974] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  171.410893][ T7974] 41779 total pagecache pages
[  171.412655][ T7974] 0 pages in swap cache
[  171.418428][ T7974] Free swap  = 124996kB
[  171.419789][ T7974] Total swap = 124996kB
[  171.421343][ T7974] 786301 pages RAM
[  171.422911][ T7974] 0 pages HighMem/MovableOnly
[  171.424694][ T7974] 241085 pages reserved
[  171.426026][ T7974] 0 pages cma reserved
[  171.512077][ T7985] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  171.516235][ T7985] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  171.686980][ T7996] netlink: 52 bytes leftover after parsing attributes in process `syz.2.649'.
[  171.813645][ T8006] netlink: 'syz.1.651': attribute type 6 has an invalid length.
[  171.827311][ T8006] netlink: 'syz.1.651': attribute type 7 has an invalid length.
[  171.829914][ T8006] netlink: 'syz.1.651': attribute type 8 has an invalid length.
[  171.926204][ T8014] xt_time: invalid argument - start or stop time greater than 23:59:59
[  172.089744][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'.
[  172.138785][ T8029] netlink: 'syz.0.658': attribute type 1 has an invalid length.
[  172.141801][ T8029] netlink: 244 bytes leftover after parsing attributes in process `syz.0.658'.
[  172.176420][ T8034] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  172.499012][ T8067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.606108][ T8069] netlink: zone id is out of range
[  172.610137][ T8069] netlink: zone id is out of range
[  172.612143][ T8069] netlink: zone id is out of range
[  172.627713][ T8069] netlink: zone id is out of range
[  172.629558][ T8069] netlink: zone id is out of range
[  172.631181][ T8069] netlink: zone id is out of range
[  172.632723][ T8069] netlink: zone id is out of range
[  172.634860][ T8069] netlink: get zone limit has 8 unknown bytes
[  172.795507][ T8086] netlink: 'syz.1.678': attribute type 2 has an invalid length.
[  173.092956][ T8098] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  174.109774][ T8148] netlink: 'syz.2.699': attribute type 3 has an invalid length.
[  174.112878][ T8148] netlink: 'syz.2.699': attribute type 2 has an invalid length.
[  174.116107][ T8148] netlink: 'syz.2.699': attribute type 2 has an invalid length.
[  174.190636][ T8155] netlink: 'syz.2.701': attribute type 1 has an invalid length.
[  174.193728][ T8155] netlink: 'syz.2.701': attribute type 2 has an invalid length.
[  174.454421][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  174.721365][ T8179] ieee802154 phy1 wpan1: encryption failed: -22
[  174.918721][ T8194] nbd: couldn't find device at index 536870912
[  174.943375][ T8196] netlink: 'syz.0.719': attribute type 10 has an invalid length.
[  174.951504][ T8196] team0: left allmulticast mode
[  174.955870][ T8196] vlan0: left allmulticast mode
[  174.959085][ T8196] veth0_vlan: left allmulticast mode
[  174.961144][ T8196] bridge0: port 1(team0) entered disabled state
[  174.974515][ T8196] batman_adv: batadv0: Adding interface: team0
[  174.976725][ T8196] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.985622][ T8196] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  174.995630][ T8196] netlink: 'syz.0.719': attribute type 10 has an invalid length.
[  174.998797][ T8196] team0: entered promiscuous mode
[  175.000788][ T8196] vlan0: entered promiscuous mode
[  175.007867][ T8196] 8021q: adding VLAN 0 to HW filter on device team0
[  175.011035][ T8196] batman_adv: batadv0: Interface activated: team0
[  175.013533][ T8196] batman_adv: batadv0: Interface deactivated: team0
[  175.016672][ T8196] batman_adv: batadv0: Removing interface: team0
[  175.019461][ T8196] bridge0: port 1(team0) entered blocking state
[  175.021433][ T8196] bridge0: port 1(team0) entered disabled state
[  175.023442][ T8196] team0: entered allmulticast mode
[  175.025479][ T8196] vlan0: entered allmulticast mode
[  175.027012][ T8196] veth0_vlan: entered allmulticast mode
[  175.332038][ T8219] __nla_validate_parse: 19 callbacks suppressed
[  175.332054][ T8219] netlink: 136 bytes leftover after parsing attributes in process `syz.0.728'.
[  175.717845][ T8262] netlink: 3660 bytes leftover after parsing attributes in process `syz.1.741'.
[  175.766487][ T8266] netlink: 'syz.0.743': attribute type 3 has an invalid length.
[  175.768891][ T8266] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[  175.771118][ T8266] netlink: 192 bytes leftover after parsing attributes in process `syz.0.743'.
[  175.773937][ T8266] NCSI netlink: No device for ifindex 0
[  175.980437][ T8276] netlink: 288 bytes leftover after parsing attributes in process `syz.1.745'.
[  175.990653][ T8277] netlink: 'syz.1.745': attribute type 3 has an invalid length.
[  175.997689][ T8276] tipc: Started in network mode
[  175.999773][ T8276] tipc: Node identity aaaaaaaaaa38, cluster identity 4711
[  176.002667][ T8276] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  176.506487][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.758'.
[  176.764938][ T8329] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  176.769551][ T8330] netlink: 96 bytes leftover after parsing attributes in process `syz.0.763'.
[  176.779237][ T8330] netlink: 'syz.0.763': attribute type 11 has an invalid length.
[  176.787123][ T8330] netlink: 'syz.0.763': attribute type 11 has an invalid length.
[  176.794827][ T8330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.763'.
[  177.079491][ T8353] syz.0.774 uses old SIOCAX25GETINFO
[  177.124265][    T9] tipc: Node number set to 9611946
[  177.426648][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.784'.
[  177.536473][ T8388] netlink: 136 bytes leftover after parsing attributes in process `syz.2.786'.
[  177.589829][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'.
[  177.936740][ T8413] xt_cgroup: path and classid specified
[  178.471579][ T8446] batadv0: entered promiscuous mode
[  178.473691][ T8446] vlan4: entered promiscuous mode
[  178.493319][ T8445] bridge0: port 2(gretap0) entered blocking state
[  178.495654][ T8445] bridge0: port 2(gretap0) entered disabled state
[  178.497748][ T8445] gretap0: entered allmulticast mode
[  178.500433][ T8445] gretap0: entered promiscuous mode
[  178.510829][ T8445] vlan4: entered promiscuous mode
[  178.512495][ T8445] bridge0: entered promiscuous mode
[  178.516423][ T8445] vlan4: entered allmulticast mode
[  178.519001][ T8445] bridge0: entered allmulticast mode
[  180.220910][ T8557] dvmrp0: entered allmulticast mode
[  180.459050][ T8578] __nla_validate_parse: 9 callbacks suppressed
[  180.459068][ T8578] netlink: 136 bytes leftover after parsing attributes in process `syz.2.849'.
[  180.541061][ T8582] netlink: 100 bytes leftover after parsing attributes in process `syz.1.852'.
[  180.546721][ T8582] xt_hashlimit: max too large, truncated to 1048576
[  180.551745][ T8582] No such timeout policy "syz1"
[  180.717336][ T8597] netlink: 136 bytes leftover after parsing attributes in process `syz.1.857'.
[  180.766052][ T8601] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.861'.
[  180.838898][ T8609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.863'.
[  180.842003][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'.
[  181.029305][ T8624] validate_nla: 3 callbacks suppressed
[  181.029339][ T8624] netlink: 'syz.1.867': attribute type 1 has an invalid length.
[  181.062035][ T8624] 8021q: adding VLAN 0 to HW filter on device bond2
[  181.066006][ T8627] netlink: 288 bytes leftover after parsing attributes in process `syz.2.868'.
[  181.081803][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'.
[  181.108373][ T8624] 8021q: adding VLAN 0 to HW filter on device bond2
[  181.111543][ T8624] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  181.119236][ T8624] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  181.137463][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'.
[  181.184965][ T8634] bond2: (slave bridge3): Enslaving as an active interface with a down link
[  181.273470][ T8634] openvswitch: netlink: Message has 24 unknown bytes.
[  181.280177][ T8634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.456748][ T8648] netlink: 136 bytes leftover after parsing attributes in process `syz.1.872'.
[  182.020613][ T8692] syzkaller1: entered promiscuous mode
[  182.022897][ T8692] syzkaller1: entered allmulticast mode
[  182.282228][   T33] audit: type=1800 audit(1752392797.772:2): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.888" name="x000000000000000900000000000000000000011" dev="tmpfs" ino=1418 res=0 errno=0
[  182.302932][   T33] audit: type=1804 audit(1752392797.792:3): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.888" name="x000000000000000900000000000000000000011" dev="tmpfs" ino=1418 res=1 errno=0
[  183.122143][ T8796] netlink: 'syz.2.913': attribute type 7 has an invalid length.
[  183.184757][ T8804] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  183.258258][ T8813] netlink: 'syz.1.918': attribute type 30 has an invalid length.
[  183.263471][ T8813] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  183.270806][ T8813] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  183.276279][ T8817] 8021q: VLANs not supported on wg0
[  183.332831][ T8821] netlink: 'syz.1.918': attribute type 3 has an invalid length.
[  183.366032][ T8823] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  183.833889][ T8860] netlink: 'syz.0.934': attribute type 12 has an invalid length.
[  183.862117][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.865706][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.926959][ T8859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.336757][ T8879] tipc: Started in network mode
[  184.338488][ T8879] tipc: Node identity , cluster identity 4711
[  185.012911][ T8946] xt_cgroup: xt_cgroup: no path or classid specified
[  185.171369][ T8948] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  185.676048][ T8985] net veth1_virt_wifi : renamed from virt_wifi0
[  185.790497][ T8997] netlink: 'syz.1.981': attribute type 4 has an invalid length.
[  185.816430][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  185.816828][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  185.849966][ T9004] __nla_validate_parse: 21 callbacks suppressed
[  185.849984][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'.
[  185.936524][ T9014] netlink: 136 bytes leftover after parsing attributes in process `syz.2.987'.
[  186.035716][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.993'.
[  186.057125][ T9026] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  186.116465][ T9039] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  186.171519][ T9045] tun0: tun_chr_ioctl cmd 1074812117
[  186.219247][ T9051] macvlan2: entered allmulticast mode
[  186.229349][ T9051] bridge_slave_0: default FDB implementation only supports local addresses
[  186.233413][ T9051] netlink: 136 bytes leftover after parsing attributes in process `syz.0.998'.
[  186.272728][ T9055] netlink: 'syz.0.1000': attribute type 2 has an invalid length.
[  186.341791][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'.
[  186.346175][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'.
[  186.351145][ T9064] netlink: 'syz.1.1004': attribute type 18 has an invalid length.
[  186.387378][ T9064] xt_l2tp: wrong L2TP version: 0
[  186.835822][ T9104] xt_hashlimit: size too large, truncated to 1048576
[  187.186029][ T9143] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1024'.
[  187.346260][ T9159] TCP: TCP_TX_DELAY enabled
[  187.435651][ T9173] tap0: tun_chr_ioctl cmd 1074025677
[  187.438770][ T9173] tap0: linktype set to 776
[  187.440888][ T9174] tap0: tun_chr_ioctl cmd 1074025677
[  187.442935][ T9174] tap0: linktype set to 776
[  187.571712][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'.
[  187.592918][ T9197] netlink: 'syz.2.1042': attribute type 1 has an invalid length.
[  187.596608][ T9197] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1042'.
[  187.621958][   T33] audit: type=1804 audit(1752392803.112:4): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1044" name="/newroot/331/memory.events.local" dev="tmpfs" ino=1709 res=1 errno=0
[  187.661105][   T33] audit: type=1800 audit(1752392803.112:5): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1044" name="memory.events.local" dev="tmpfs" ino=1709 res=0 errno=0
[  187.685492][   T33] audit: type=1800 audit(1752392803.122:6): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1044" name="memory.events.local" dev="tmpfs" ino=1709 res=0 errno=0
[  187.710922][ T9208] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1047'.
[  187.947707][ T9239] can: request_module (can-proto-0) failed.
[  187.963091][ T9239] can: request_module (can-proto-0) failed.
[  188.040684][ T9254] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  188.467071][ T9277] batadv1: entered promiscuous mode
[  188.492711][ T9279] batadv1: entered promiscuous mode
[  188.503089][ T9281] 8021q: VLANs not supported on vxcan0
[  189.339867][ T9328] lo: entered allmulticast mode
[  189.342176][ T9328] lo: left allmulticast mode
[  189.726072][ T9362] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  190.091367][ T9379] set match dimension is over the limit!
[  190.465658][ T5838] Bluetooth: hci2: command 0x0405 tx timeout
[  191.069057][ T9435] sctp: [Deprecated]: syz.1.1125 (pid 9435) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.069057][ T9435] Use struct sctp_sack_info instead
[  191.110199][ T9443] __nla_validate_parse: 12 callbacks suppressed
[  191.110211][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1126'.
[  191.115826][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1126'.
[  191.151051][ T9445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.162945][ T9445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.808805][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'.
[  191.811804][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'.
[  191.824316][ T9471] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  191.827370][ T9471] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  191.829970][ T9471] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  191.832540][ T9471] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.891761][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'.
[  192.025625][ T9485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1140'.
[  192.064638][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1141'.
[  192.534956][ T5838] Bluetooth: hci2: command 0x0405 tx timeout
[  192.979053][ T9549] netlink: 'syz.1.1157': attribute type 5 has an invalid length.
[  192.979060][ T9548] netlink: 'syz.1.1157': attribute type 5 has an invalid length.
[  193.625451][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1166'.
[  193.634298][ T9588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1166'.
[  193.686235][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1168'.
[  193.727963][ T9596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.731341][ T9596] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  193.737335][ T9596] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  193.760054][ T9596] tipc: Resetting bearer <eth:syzkaller0>
[  193.889114][ T9610] netlink: 'syz.0.1175': attribute type 62 has an invalid length.
[  195.270909][ T9655] sctp: [Deprecated]: syz.0.1189 (pid 9655) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.270909][ T9655] Use struct sctp_sack_info instead
[  195.528400][ T9677] netlink: 'syz.1.1195': attribute type 1 has an invalid length.
[  195.587575][ T9681] 8021q: adding VLAN 0 to HW filter on device bond1
[  195.944148][ T9718] pim6reg1: entered promiscuous mode
[  195.946628][ T9718] pim6reg1: entered allmulticast mode
[  196.013815][ T9722] tun0: tun_chr_ioctl cmd 1074025675
[  196.016115][ T9722] tun0: persist enabled
[  196.018186][ T9722] tun0: tun_chr_ioctl cmd 1074025675
[  196.020221][ T9722] tun0: persist enabled
[  196.196984][ T9741] __nla_validate_parse: 10 callbacks suppressed
[  196.196996][ T9741] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1215'.
[  196.329482][ T9751] wg2: entered promiscuous mode
[  196.365305][ T9756] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1219'.
[  196.368577][ T9756] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1219'.
[  196.416722][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1221'.
[  196.419936][ T9761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1221'.
[  196.503083][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'.
[  196.517214][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'.
[  196.521556][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'.
[  196.583435][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'.
[  196.587706][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'.
[  196.641712][ T9785] syz.0.1226 (9785) used obsolete PPPIOCDETACH ioctl
[  196.815639][ T9795] gretap0: left allmulticast mode
[  196.817736][ T9795] gretap0: left promiscuous mode
[  196.819837][ T9795] bridge0: port 2(gretap0) entered disabled state
[  196.823858][ T9795] team0: left allmulticast mode
[  196.827083][ T9795] vlan0: left allmulticast mode
[  196.828694][ T9795] veth0_vlan: left allmulticast mode
[  196.831227][ T9795] bridge0: port 1(team0) entered disabled state
[  197.728764][ T9808] netlink: 'syz.1.1234': attribute type 7 has an invalid length.
[  197.795800][ T9814] netlink: 'syz.0.1237': attribute type 2 has an invalid length.
[  197.817944][ T9816] x_tables: ip_tables: udp match: only valid for protocol 17
[  198.226074][ T9840] netlink: 'syz.0.1247': attribute type 10 has an invalid length.
[  199.317260][ T9868] vlan4: entered promiscuous mode
[  199.329512][ T9868] : entered promiscuous mode
[  199.335381][ T9868] : (slave vlan4): Opening slave failed
[  205.931800][ T9887] netlink: 'syz.0.1263': attribute type 4 has an invalid length.
[  208.321753][ T9900] netlink: 'syz.0.1266': attribute type 1 has an invalid length.
[  208.333536][ T9900] netlink: 'syz.0.1266': attribute type 2 has an invalid length.
[  208.339378][ T9900] __nla_validate_parse: 10 callbacks suppressed
[  208.339391][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'.
[  208.409278][ T9911] bond0: Master is either lo or non-ether device
[  208.461292][ T9919] netlink: 'syz.1.1269': attribute type 1 has an invalid length.
[  208.462208][ T9921] netlink: 'syz.0.1270': attribute type 9 has an invalid length.
[  208.508058][ T9923] netlink: 'syz.0.1272': attribute type 1 has an invalid length.
[  209.040565][ T9960] infiniband syz0: set down
[  209.043448][ T9960] infiniband syz0: added ipvlan1
[  209.089715][ T9960] RDS/IB: syz0: added
[  209.091643][ T9960] smc: adding ib device syz0 with port count 1
[  209.094063][ T9960] smc:    ib device syz0 port 1 has pnetid 
[  209.175631][ T9973] netlink: 'syz.0.1285': attribute type 1 has an invalid length.
[  209.178286][ T9973] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1285'.
[  209.726725][T10004] netlink: 'syz.2.1293': attribute type 3 has an invalid length.
[  209.729857][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'.
[  209.839705][ T9960] syz.1.1281 (9960) used greatest stack depth: 19624 bytes left
[  209.935399][T10025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1300'.
[  210.013035][T10034] netlink: 'syz.2.1304': attribute type 1 has an invalid length.
[  210.017336][T10034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  210.020303][T10034] IPv6: NLM_F_CREATE should be set when creating new route
[  210.022682][T10034] IPv6: NLM_F_CREATE should be set when creating new route
[  210.185446][T10051] netlink: 'syz.2.1309': attribute type 2 has an invalid length.
[  210.190031][T10051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  210.261641][T10055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1311'.
[  210.269315][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'.
[  210.278958][T10055] lo: entered promiscuous mode
[  210.283462][T10055] tunl0: entered promiscuous mode
[  210.290727][T10055] gre0: entered promiscuous mode
[  210.319114][T10055] gretap0: entered promiscuous mode
[  210.323579][T10055] erspan0: entered promiscuous mode
[  210.328270][T10055] ip_vti0: entered promiscuous mode
[  210.332925][T10055] ip6_vti0: entered promiscuous mode
[  210.335964][T10055] sit0: entered promiscuous mode
[  210.338806][T10055] ip6tnl0: entered promiscuous mode
[  210.341912][T10055] ip6gre0: entered promiscuous mode
[  210.345897][T10055] ip6gretap0: entered promiscuous mode
[  210.355833][T10055] bridge0: entered promiscuous mode
[  210.358310][T10055] bond0: entered promiscuous mode
[  210.360077][T10055] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  210.367370][T10055] nlmon0: entered promiscuous mode
[  210.370992][T10055] caif0: entered promiscuous mode
[  210.372998][T10055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.393833][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'.
[  211.111957][T10119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1331'.
[  211.578556][T10140] netlink: 'syz.0.1338': attribute type 4 has an invalid length.
[  212.657833][T10185] netlink: 'syz.2.1348': attribute type 2 has an invalid length.
[  212.658430][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'.
[  212.736045][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'.
[  213.092795][T10229] x_tables: duplicate underflow at hook 2
[  213.480484][T10253] netlink: 'syz.1.1372': attribute type 1 has an invalid length.
[  213.483680][T10253] __nla_validate_parse: 3 callbacks suppressed
[  213.483692][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1372'.
[  213.497749][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'.
[  213.506637][T10259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1374'.
[  213.518220][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'.
[  213.526169][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'.
[  213.529667][T10259] syz_tun: entered allmulticast mode
[  213.591838][T10261] syzkaller1: entered promiscuous mode
[  213.593633][T10261] syzkaller1: entered allmulticast mode
[  213.605423][T10256] syz_tun: left allmulticast mode
[  213.742284][T10273] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1379'.
[  213.759697][T10276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1379'.
[  214.436804][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1399'.
[  214.629441][   T24] hid-generic 0005:03FF:5505.0001: unknown main item tag 0x0
[  214.632798][   T24] hid-generic 0005:03FF:5505.0001: unknown main item tag 0x0
[  214.652473][   T24] hid-generic 0005:03FF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  215.054305][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1414'.
[  215.650513][T10441] Cannot find add_set index 2 as target
[  215.655973][T10442] Cannot find add_set index 2 as target
[  215.710990][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'.
[  215.770989][T10451] netlink: 'syz.2.1438': attribute type 1 has an invalid length.
[  216.316818][T10470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.431133][T10470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.482173][T10470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.551246][T10470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.590141][T10485] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  216.669413][T10470] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.688432][T10470] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.695144][T10489] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  216.706067][T10470] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.721330][T10470] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.190909][T10529] netlink: 'syz.1.1462': attribute type 3 has an invalid length.
[  217.194746][T10529] netlink: 'syz.1.1462': attribute type 2 has an invalid length.
[  217.198066][T10529] netlink: 'syz.1.1462': attribute type 2 has an invalid length.
[  217.820769][T10574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.947234][T10581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.957836][T10581] netlink: 'syz.2.1466': attribute type 4 has an invalid length.
[  218.001940][T10584] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  218.939293][T10627] netlink: 'syz.1.1483': attribute type 6 has an invalid length.
[  218.942442][T10627] netlink: 'syz.1.1483': attribute type 7 has an invalid length.
[  218.949269][T10627] netlink: 'syz.1.1483': attribute type 8 has an invalid length.
[  219.163756][T10647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.207881][T10640] __nla_validate_parse: 11 callbacks suppressed
[  219.207895][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'.
[  219.262863][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'.
[  219.498820][T10683] netlink: 'syz.0.1503': attribute type 1 has an invalid length.
[  219.568317][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1503'.
[  219.572612][T10686] netlink: 'syz.0.1503': attribute type 1 has an invalid length.
[  219.772844][T10704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1508'.
[  219.836151][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'.
[  220.029317][T10737] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1523'.
[  220.075511][T10744] tipc: Failed to remove unknown binding: 66,1,1/9611946:3555053092/3555053094
[  220.081138][T10744] tipc: Failed to remove unknown binding: 66,1,1/9611946:3555053092/3555053094
[  220.089130][T10744] tipc: Failed to remove unknown binding: 66,1,1/9611946:3555053092/3555053094
[  220.107015][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1527'.
[  220.282885][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'.
[  220.334969][T10770] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  220.432647][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'.
[  220.976805][T10791] xt_CT: No such helper "syz0"
[  221.131659][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'.
[  221.211192][T10811] netlink: 'syz.1.1547': attribute type 9 has an invalid length.
[  221.369239][T10824] : entered promiscuous mode
[  222.337128][T10896] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  222.340568][T10897] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  222.353469][T10895] delete_channel: no stack
[  222.540939][T10916] netlink: 'syz.1.1571': attribute type 1 has an invalid length.
[  223.127116][T10938] netlink: 'syz.2.1576': attribute type 4 has an invalid length.
[  223.587836][T10969] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  224.462468][T11021] __nla_validate_parse: 15 callbacks suppressed
[  224.462487][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1603'.
[  224.783466][T11049] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  224.808369][T11049] netlink: 'syz.2.1612': attribute type 1 has an invalid length.
[  224.873891][T11049] bond2: (slave bridge2): making interface the new active one
[  224.887110][T11049] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  225.002078][T11059] netlink: 'syz.1.1615': attribute type 11 has an invalid length.
[  225.006361][T11059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1615'.
[  225.017373][T11059] netlink: 'syz.1.1615': attribute type 29 has an invalid length.
[  225.023770][T11059] netlink: 'syz.1.1615': attribute type 29 has an invalid length.
[  225.039115][T11059] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1615'.
[  225.151037][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1619'.
[  225.533297][T11110] netlink: 'syz.1.1630': attribute type 14 has an invalid length.
[  225.539263][T11110] netlink: 'syz.1.1630': attribute type 14 has an invalid length.
[  225.917819][T11142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'.
[  225.989325][T11140] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1638'.
[  225.992258][T11140] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1638'.
[  226.000263][T11140] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1638'.
[  226.061383][T11139] bridge0: port 2(dummy0) entered disabled state
[  226.067016][T11147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1638'.
[  226.288103][T11139] tipc: Resetting bearer <eth:veth0_macvtap>
[  226.330506][T11139] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.333797][T11139] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.343549][T11139] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.348915][T11139] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.371997][T11139] tipc: Resetting bearer <eth:syzkaller0>
[  228.852216][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'.
[  228.873888][   T33] audit: type=1800 audit(1752392844.362:7): pid=11227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1662" name="memory.events" dev="tmpfs" ino=2905 res=0 errno=0
[  229.359043][T11252] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  229.869754][T11273] : (slave vlan4): Opening slave failed
[  229.917057][T11273] netlink: 'syz.2.1676': attribute type 1 has an invalid length.
[  229.921423][T11273] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1676'.
[  229.925692][T11275] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  229.928840][T11275] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  230.046226][T11284] netlink: 'syz.2.1680': attribute type 1 has an invalid length.
[  230.048801][T11284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1680'.
[  230.081906][T11284] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  230.133200][T11288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1682'.
[  230.198257][T11295] netlink: 'syz.0.1684': attribute type 1 has an invalid length.
[  230.201991][T11295] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1684'.
[  230.380578][T11308] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1689'.
[  230.486337][T11316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1693'.
[  230.494113][T11319] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  230.499660][T11319] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  230.666435][T11334] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1698'.
[  230.669954][T11334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1698'.
[  230.728533][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1697'.
[  230.741215][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1700'.
[  231.673357][T11427] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  231.793090][T11439] tap0: tun_chr_ioctl cmd 1074025677
[  231.796128][T11439] tap0: linktype set to 823
[  231.811579][T11439] tap0: tun_chr_ioctl cmd 1074025680
[  232.167595][T11468] netlink: 'syz.1.1741': attribute type 83 has an invalid length.
[  233.039318][T11532] lo: left promiscuous mode
[  233.040863][T11532] tunl0: left promiscuous mode
[  233.045852][T11532] gre0: left promiscuous mode
[  233.047460][T11532] gretap0: left promiscuous mode
[  233.054668][T11532] erspan0: left promiscuous mode
[  233.056880][T11532] ip_vti0: left promiscuous mode
[  233.058453][T11532] ip6_vti0: left promiscuous mode
[  233.060028][T11532] sit0: left promiscuous mode
[  233.061561][T11532] ip6tnl0: left promiscuous mode
[  233.063412][T11532] ip6gre0: left promiscuous mode
[  233.085050][T11532] ip6gretap0: left promiscuous mode
[  233.089633][T11532] bridge0: left promiscuous mode
[  233.092035][T11532] bond0: left promiscuous mode
[  233.093960][T11532] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  233.098609][T11532] nlmon0: left promiscuous mode
[  233.100426][T11532] caif0: left promiscuous mode
[  233.216692][T11549] geneve4: entered allmulticast mode
[  233.242359][   T33] audit: type=1800 audit(1752392848.732:8): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1767" name="memory.events" dev="tmpfs" ino=2503 res=0 errno=0
[  233.369022][   T10] hid-generic 0005:04F3:8002.0002: collection stack underflow
[  233.372218][   T10] hid-generic 0005:04F3:8002.0002: item 0 0 0 12 parsing failed
[  233.380568][   T10] hid-generic 0005:04F3:8002.0002: probe with driver hid-generic failed with error -22
[  233.778436][T11578] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  234.334105][T11594] x_tables: duplicate underflow at hook 2
[  234.430043][T11605] netlink: 'syz.0.1783': attribute type 1 has an invalid length.
[  234.452350][T11605] bond3: entered promiscuous mode
[  234.457124][T11605] 8021q: adding VLAN 0 to HW filter on device bond3
[  234.740905][T11620] IPVS: Unknown mcast interface: nr0
[  234.947794][T11630] x_tables: duplicate underflow at hook 1
[  234.953993][T11628] __nla_validate_parse: 41 callbacks suppressed
[  234.954004][T11628] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1789'.
[  235.033358][T11634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1794'.
[  235.125483][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1796'.
[  235.188569][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'.
[  235.191722][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'.
[  235.508966][T11667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1804'.
[  235.708235][T11692] kthread_run failed with err -4
[  235.767094][T11700] Cannot find add_set index 4 as target
[  235.789247][T11703] bond0: Master is either lo or non-ether device
[  235.822616][T11703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1814'.
[  235.883195][T11712] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  235.922842][T11708] pim6reg: entered allmulticast mode
[  235.926914][T11708] netlink: 'syz.2.1816': attribute type 29 has an invalid length.
[  235.937650][T11716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1819'.
[  236.026783][T11728] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.075163][T11738] nbd: must specify a device to reconfigure
[  236.079973][T11739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1826'.
[  236.298729][T11774] x_tables: duplicate underflow at hook 2
[  236.496262][T11792] netlink: 'syz.2.1842': attribute type 23 has an invalid length.
[  236.698499][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1846'.
[  236.888403][T11818] 8021q: adding VLAN 0 to HW filter on device bond4
[  236.892199][T11818] bond0: (slave bond4): Enslaving as an active interface with a down link
[  237.360432][T11861] netlink: 'syz.0.1866': attribute type 1 has an invalid length.
[  237.369604][T11861] netlink: 'syz.0.1866': attribute type 1 has an invalid length.
[  237.408410][T11863] netlink: 'syz.1.1865': attribute type 1 has an invalid length.
[  237.413697][T11863] netlink: 'syz.1.1865': attribute type 11 has an invalid length.
[  237.425704][T11801] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  237.532054][T11877] netlink: del zone limit has 8 unknown bytes
[  237.560989][T11880] batadv0: entered promiscuous mode
[  237.562884][T11880] batadv0: entered allmulticast mode
[  237.956371][T11916] netem: change failed
[  237.959107][T11916] netlink: 'syz.0.1884': attribute type 12 has an invalid length.
[  238.127907][T11941] IPVS: length: 148 != 24
[  238.211126][T11952] x_tables: duplicate underflow at hook 2
[  238.358191][T11963] vlan0: left promiscuous mode
[  238.363532][T11963] team0: Port device vlan0 removed
[  238.368809][T11963] bond0: (slave bond4): Releasing backup interface
[  238.389509][T11965] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  238.726140][T11973] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  238.781347][T11975] netlink: 'syz.1.1909': attribute type 9 has an invalid length.
[  238.926248][T11981] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  239.108314][T11989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.113830][T11989] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  239.118109][T11989] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  239.661572][T12023] 8021q: adding VLAN 0 to HW filter on device 
[  239.668530][T12023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.729188][T12025] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.736800][T12025] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  239.749954][T12025] tipc: Resetting bearer <eth:syzkaller0>
[  240.228858][T12045] __nla_validate_parse: 12 callbacks suppressed
[  240.228869][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'.
[  240.233893][T12045] dummy0: left allmulticast mode
[  240.237700][T12045] dummy0: left promiscuous mode
[  240.239651][T12045] bridge0: port 2(dummy0) entered disabled state
[  240.246145][T12045] team0: left allmulticast mode
[  240.251325][T12051] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1932'.
[  240.256340][T12045] team0: left promiscuous mode
[  240.259040][T12045] bridge0: port 1(team0) entered disabled state
[  240.274145][T12052] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1932'.
[  240.336053][T12054] openvswitch: netlink: Duplicate or invalid key (type 0).
[  240.339109][T12054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.438607][T12062] x_tables: duplicate underflow at hook 2
[  240.771826][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1946'.
[  240.781101][T12097] ip6tnl2: entered promiscuous mode
[  240.851551][T12106] netlink: 'syz.2.1943': attribute type 2 has an invalid length.
[  240.869982][T12108] veth0: entered promiscuous mode
[  241.166822][T12107] veth0: left promiscuous mode
[  241.871647][T12164] netlink: 'syz.2.1962': attribute type 5 has an invalid length.
[  241.874041][T12164] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1962'.
[  242.020992][T12176] netlink: 'syz.1.1967': attribute type 4 has an invalid length.
[  242.082449][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1971'.
[  242.086874][T12187] tipc: Invalid UDP bearer configuration
[  242.086921][T12187] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  242.092374][T12189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1971'.
[  242.097364][T12189] tipc: Invalid UDP bearer configuration
[  242.097411][T12189] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  242.139120][T12190] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1972'.
[  242.189916][T12198] netlink: 'syz.1.1974': attribute type 8 has an invalid length.
[  242.306310][T12213] _Z`Ԁ@: entered promiscuous mode
[  242.455339][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1984'.
[  242.637814][T12240] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1986'.
[  242.693790][T12243] tap0: tun_chr_ioctl cmd 1074025677
[  242.698605][T12243] tap0: linktype set to 0
[  242.803411][T12248] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  243.680308][T12306] netlink: 'syz.1.2009': attribute type 1 has an invalid length.
[  244.367786][T12361] vlan4: entered promiscuous mode
[  244.372356][T12361] vlan4: entered allmulticast mode
[  244.378918][T12361] hsr_slave_1: entered allmulticast mode
[  244.631349][T12385] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  245.290760][T12417] __nla_validate_parse: 12 callbacks suppressed
[  245.290770][T12417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2048'.
[  245.545850][T12432] Unsupported ieee802154 address type: 0
[  246.439645][T12465] x_tables: duplicate underflow at hook 2
[  246.531778][T12469] x_tables: duplicate underflow at hook 4
[  246.667158][T12478] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.670366][T12479] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  246.673461][T12479] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  246.899432][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'.
[  247.057504][T12512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2081'.
[  247.197970][T12510] dvmrp0: entered allmulticast mode
[  247.353995][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2085'.
[  247.509554][ T8200] page_pool_release_retry() stalled pool shutdown: id 22, 1 inflight 60 sec
[  247.630121][T12544] netlink: 'syz.0.2093': attribute type 39 has an invalid length.
[  247.862547][T12558] bond0: Device is already in use.
[  248.598577][T12606] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2114'.
[  248.818097][T12615] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2117'.
[  248.882244][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2119'.
[  248.948147][T12622] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20000
[  249.269480][T12639] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2125'.
[  249.892958][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'.
[  249.952997][T12669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2134'.
[  250.371629][T12696] __nla_validate_parse: 1 callbacks suppressed
[  250.371644][T12696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2146'.
[  250.863670][T12723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2152'.
[  250.918501][T12726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2153'.
[  251.133400][T12739] Bluetooth: MGMT ver 1.23
[  251.279260][T12739] ip6gretap0: entered promiscuous mode
[  251.301065][T12739] ip6gretap0: left promiscuous mode
[  251.389884][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2159'.
[  251.810067][T12753] tipc: Resetting bearer <eth:macvtap0>
[  251.833811][T12753] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.837511][T12753] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.840454][T12753] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.843043][T12753] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.857226][T12753] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  251.861588][T12753] tipc: Resetting bearer <eth:syzkaller0>
[  251.863893][T12753] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  251.874254][T12753] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  251.944135][T12753] vlan4: left promiscuous mode
[  251.946542][T12753] vlan4: left allmulticast mode
[  251.948260][T12753] hsr_slave_1: left allmulticast mode
[  251.964769][T12769] netlink: 'syz.1.2163': attribute type 4 has an invalid length.
[  252.303229][T12802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2174'.
[  252.357442][T12812] xt_TPROXY: Can be used only with -p tcp or -p udp
[  252.437637][T12819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2178'.
[  252.750010][T12834] netlink: 'syz.1.2183': attribute type 10 has an invalid length.
[  252.753134][T12834] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  252.978014][T12849] netlink: 'syz.0.2187': attribute type 3 has an invalid length.
[  252.994927][T12849] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2187'.
[  253.295586][T12877] netlink: 'syz.2.2196': attribute type 12 has an invalid length.
[  253.469751][T12898] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2202'.
[  253.594134][T12908] netlink: 'syz.0.2206': attribute type 6 has an invalid length.
[  253.599043][T12910] openvswitch: netlink: IP tunnel dst address not specified
[  253.668185][T12916] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  253.794078][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'.
[  253.857444][T12931] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2215'.
[  253.892425][T12933] netlink: 'syz.2.2216': attribute type 6 has an invalid length.
[  253.951330][T12935] tc_dump_action: action bad kind
[  255.060981][T12959] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  255.094819][T12960] xt_policy: too many policy elements
[  255.445637][T12998] netlink: 'syz.2.2236': attribute type 4 has an invalid length.
[  255.627479][T13010] __nla_validate_parse: 5 callbacks suppressed
[  255.627502][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2240'.
[  255.999890][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  256.006388][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  256.012034][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  256.018660][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  256.022387][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  256.355441][T13024] x_tables: duplicate underflow at hook 1
[  256.388017][T13012] chnl_net:caif_netlink_parms(): no params data found
[  256.463243][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'.
[  256.538894][T13012] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.541989][T13012] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.553718][T13012] bridge_slave_0: entered allmulticast mode
[  256.560869][T13012] bridge_slave_0: entered promiscuous mode
[  256.566792][T13012] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.575607][T13012] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.578644][T13012] bridge_slave_1: entered allmulticast mode
[  256.593039][T13012] bridge_slave_1: entered promiscuous mode
[  256.617101][T13036] can: request_module (can-proto-0) failed.
[  256.794037][T13038] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2250'.
[  256.800549][T13012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.815852][T13012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.823381][T13047] netlink: 'syz.1.2252': attribute type 1 has an invalid length.
[  256.826978][T13047] netlink: 'syz.1.2252': attribute type 4 has an invalid length.
[  256.832960][T13047] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2252'.
[  256.867848][T13012] team0: Port device team_slave_0 added
[  256.873062][T13012] team0: Port device team_slave_1 added
[  256.915182][T13047] block nbd0: server does not support multiple connections per device.
[  256.921994][T13012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.928689][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.929402][T13047] block nbd0: shutting down sockets
[  256.942615][T13012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.959128][T13012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.961900][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.973530][T13012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.042749][T13012] hsr_slave_0: entered promiscuous mode
[  257.055635][T13012] hsr_slave_1: entered promiscuous mode
[  257.058452][T13012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.061422][T13012] Cannot create hsr debugfs directory
[  257.358515][T13012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.442066][T13012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.527459][T13012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.609128][T13012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.748549][T13063] IPVS: persistence engine module ip_vs_pe_ not found
[  257.767611][T13012] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  257.778953][T13012] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  257.783637][T13012] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  257.791871][T13012] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  257.847687][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'.
[  257.850951][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'.
[  257.868565][T13069] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.871258][T13069] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.873929][T13069] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.876874][T13069] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.929513][T13012] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.941987][T13012] 8021q: adding VLAN 0 to HW filter on device team0
[  257.963193][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.965503][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.972014][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.974769][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.058209][ T5838] Bluetooth: hci1: command tx timeout
[  258.194556][T13012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.253376][T13012] veth0_vlan: entered promiscuous mode
[  258.263233][T13012] veth1_vlan: entered promiscuous mode
[  258.286290][T13012] veth0_macvtap: entered promiscuous mode
[  258.292912][T13012] veth1_macvtap: entered promiscuous mode
[  258.307334][T13012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.316239][T13012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.321745][T13012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.325348][T13012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.328457][T13012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.331514][T13012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.428320][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.432004][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.481316][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.484907][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.621416][T13100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.999768][T13104] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2265'.
[  260.088716][T13177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.266757][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.636686][T13211] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.2298'.
[  260.711255][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  260.718457][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  260.723038][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  260.727339][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  260.730220][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  260.898109][T13232] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2303'.
[  260.935849][T13232] openvswitch: netlink: Flow key attr not present in new flow.
[  261.000503][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'.
[  261.005533][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'.
[  261.009231][T13237] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2304'.
[  261.193179][T13212] chnl_net:caif_netlink_parms(): no params data found
[  261.226493][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'.
[  261.320718][T13212] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.324022][T13212] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.328362][T13212] bridge_slave_0: entered allmulticast mode
[  261.335995][T13212] bridge_slave_0: entered promiscuous mode
[  261.342214][T13212] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.345543][T13212] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.348455][T13212] bridge_slave_1: entered allmulticast mode
[  261.352958][T13212] bridge_slave_1: entered promiscuous mode
[  261.397933][T13212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.407443][T13212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.458697][T13212] team0: Port device team_slave_0 added
[  261.465682][T13212] team0: Port device team_slave_1 added
[  261.500080][T13212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.502709][T13212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.517156][T13212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.523761][T13212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.527173][T13212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.539015][T13212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.589198][T13212] hsr_slave_0: entered promiscuous mode
[  261.592439][T13212] hsr_slave_1: entered promiscuous mode
[  261.596119][T13212] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.598969][T13212] Cannot create hsr debugfs directory
[  261.690474][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.772341][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.851408][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.032996][   T12] bridge_slave_1: left allmulticast mode
[  262.036761][   T12] bridge_slave_1: left promiscuous mode
[  262.040478][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.052331][   T12] bridge_slave_0: left allmulticast mode
[  262.055393][   T12] bridge_slave_0: left promiscuous mode
[  262.063609][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.456928][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.461798][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.467154][   T12] bond0 (unregistering): Released all slaves
[  262.690334][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2324'.
[  262.774418][ T5843] Bluetooth: hci1: command tx timeout
[  262.987752][T13313] No such timeout policy "syz0"
[  263.017280][T13316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.023181][T13212] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  263.058741][T13212] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  263.061159][T13316] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2325'.
[  263.070540][T13212] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  263.082408][T13212] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  263.086368][T13319] netlink: 'syz.2.2327': attribute type 2 has an invalid length.
[  263.089247][T13319] netlink: 'syz.2.2327': attribute type 1 has an invalid length.
[  263.093407][T13319] netlink: 'syz.2.2327': attribute type 1 has an invalid length.
[  263.101685][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'.
[  263.211784][T13329] atomic_op ffff88810a7ad998 conn xmit_atomic 0000000000000000
[  263.220363][T13329] netlink: 'syz.1.2328': attribute type 13 has an invalid length.
[  263.277281][   T12] hsr_slave_0: left promiscuous mode
[  263.279674][   T12] hsr_slave_1: left promiscuous mode
[  263.281993][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.284959][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.289122][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.291417][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.308766][   T12] veth1_macvtap: left promiscuous mode
[  263.311754][   T12] veth0_macvtap: left promiscuous mode
[  263.313456][   T12] veth1_vlan: left promiscuous mode
[  263.317926][   T12] veth0_vlan: left promiscuous mode
[  263.748295][   T12] team0 (unregistering): Port device team_slave_1 removed
[  263.778380][   T12] team0 (unregistering): Port device team_slave_0 removed
[  264.168974][T13345] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  264.172057][T13345] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  264.300820][T13212] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.319410][T13352] netlink: 'syz.1.2331': attribute type 39 has an invalid length.
[  264.337772][T13352] netlink: 'syz.1.2331': attribute type 1 has an invalid length.
[  264.343682][T13212] 8021q: adding VLAN 0 to HW filter on device team0
[  264.371454][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.373742][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.400824][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.403151][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.448485][T13357] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2333'.
[  264.580338][T13367] can: request_module (can-proto-0) failed.
[  264.668083][T13212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.727612][T13212] veth0_vlan: entered promiscuous mode
[  264.749138][T13212] veth1_vlan: entered promiscuous mode
[  264.798808][T13212] veth0_macvtap: entered promiscuous mode
[  264.817730][T13212] veth1_macvtap: entered promiscuous mode
[  264.854388][ T5843] Bluetooth: hci1: command tx timeout
[  264.864819][T13212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.871956][T13212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.881500][T13212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.885259][T13212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.888023][T13212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.890841][T13212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.969575][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.985049][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.003329][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.007664][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.808816][T13450] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  265.814759][T13450] __nla_validate_parse: 8 callbacks suppressed
[  265.814769][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'.
[  265.865540][T13454] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2363'.
[  265.907553][T13456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2364'.
[  266.151229][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.229112][T13466] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2366'.
[  266.410246][T13473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2369'.
[  266.502733][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  266.508277][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  266.511818][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  266.517929][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  266.521086][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  266.576472][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.611583][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2372'.
[  266.772539][T13487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2375'.
[  266.925019][T13476] chnl_net:caif_netlink_parms(): no params data found
[  267.029219][T13476] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.032045][T13476] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.035509][T13476] bridge_slave_0: entered allmulticast mode
[  267.039257][T13476] bridge_slave_0: entered promiscuous mode
[  267.045852][T13476] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.048221][T13476] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.050890][T13476] bridge_slave_1: entered allmulticast mode
[  267.055977][T13476] bridge_slave_1: entered promiscuous mode
[  267.090467][T13476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.098209][T13476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.132810][T13476] team0: Port device team_slave_0 added
[  267.141350][T13476] team0: Port device team_slave_1 added
[  267.164939][T13476] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.167822][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.179087][T13476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.184720][T13476] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.187997][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.198179][T13476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.239149][T13476] hsr_slave_0: entered promiscuous mode
[  267.242867][T13476] hsr_slave_1: entered promiscuous mode
[  267.245939][T13476] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.249322][T13476] Cannot create hsr debugfs directory
[  267.663080][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.787855][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.856443][T13528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2385'.
[  267.943180][   T12] bridge_slave_1: left allmulticast mode
[  267.948549][   T12] bridge_slave_1: left promiscuous mode
[  267.953243][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.958837][   T12] bridge_slave_0: left allmulticast mode
[  267.960715][   T12] bridge_slave_0: left promiscuous mode
[  267.963722][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.335042][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.340676][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.346950][   T12] bond0 (unregistering): Released all slaves
[  268.535578][ T5838] Bluetooth: hci1: command tx timeout
[  268.575965][T13550] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2392'.
[  268.591030][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'.
[  268.881969][T13476] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  268.907674][T13476] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  268.963609][T13476] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  268.968809][T13476] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  268.997081][   T12] hsr_slave_0: left promiscuous mode
[  269.007110][   T12] hsr_slave_1: left promiscuous mode
[  269.009473][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.012074][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.024862][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.027453][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.054005][   T12] veth1_macvtap: left promiscuous mode
[  269.057267][   T12] veth0_macvtap: left promiscuous mode
[  269.060292][   T12] veth1_vlan: left promiscuous mode
[  269.062008][   T12] veth0_vlan: left promiscuous mode
[  269.491260][   T12] team0 (unregistering): Port device team_slave_1 removed
[  269.530246][   T12] team0 (unregistering): Port device team_slave_0 removed
[  269.918658][T13576] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  269.931146][T13576] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  270.105235][T13476] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.127094][T13476] 8021q: adding VLAN 0 to HW filter on device team0
[  270.614350][ T5838] Bluetooth: hci1: command tx timeout
[  270.731906][T13476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  270.736432][T13476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  270.741502][ T9388] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.743799][ T9388] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.748017][ T9388] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.750244][ T9388] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.969086][T13476] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.002543][T13614] __nla_validate_parse: 1 callbacks suppressed
[  271.002554][T13614] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2405'.
[  271.009618][T13611] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2405'.
[  271.020247][T13615] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2405'.
[  271.065788][T13476] veth0_vlan: entered promiscuous mode
[  271.075606][T13476] veth1_vlan: entered promiscuous mode
[  271.096506][T13476] veth0_macvtap: entered promiscuous mode
[  271.100550][T13476] veth1_macvtap: entered promiscuous mode
[  271.110551][T13476] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.120255][T13476] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.138737][T13476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.142121][T13476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.155260][T13476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.158602][T13476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.283599][T13631] 
[  271.284466][T13631] ======================================================
[  271.286923][T13631] WARNING: possible circular locking dependency detected
[  271.288993][T13631] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  271.291853][T13631] ------------------------------------------------------
[  271.294254][T13631] syz.1.2411/13631 is trying to acquire lock:
[  271.296489][T13631] ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  271.299944][T13631] 
[  271.299944][T13631] but task is already holding lock:
[  271.302703][T13631] ffff888023098d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  271.306157][T13631] 
[  271.306157][T13631] which lock already depends on the new lock.
[  271.306157][T13631] 
[  271.310050][T13631] 
[  271.310050][T13631] the existing dependency chain (in reverse order) is:
[  271.312779][T13631] 
[  271.312779][T13631] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  271.315199][T13631]        lock_acquire+0x120/0x360
[  271.316808][T13631]        _raw_spin_lock_bh+0x36/0x50
[  271.318536][T13631]        nr_rt_ioctl+0x193/0xd50
[  271.320077][T13631]        sock_do_ioctl+0xdc/0x300
[  271.321618][T13631]        sock_ioctl+0x576/0x790
[  271.323127][T13631]        __se_sys_ioctl+0xfc/0x170
[  271.324722][T13631]        do_syscall_64+0xfa/0x3b0
[  271.326319][T13631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.328698][T13631] 
[  271.328698][T13631] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  271.331706][T13631]        lock_acquire+0x120/0x360
[  271.333629][T13631]        _raw_spin_lock_bh+0x36/0x50
[  271.335249][T13631]        nr_rt_device_down+0xa9/0x720
[  271.336895][T13631]        nr_device_event+0x137/0x150
[  271.338864][T13631]        notifier_call_chain+0x1b6/0x3e0
[  271.340601][T13631]        __dev_notify_flags+0x18d/0x2e0
[  271.342275][T13631]        netif_change_flags+0xe8/0x1a0
[  271.343954][T13631]        dev_change_flags+0x130/0x260
[  271.345580][T13631]        dev_ioctl+0x7b4/0x1150
[  271.347391][T13631]        sock_do_ioctl+0x22c/0x300
[  271.349408][T13631]        sock_ioctl+0x576/0x790
[  271.351275][T13631]        __se_sys_ioctl+0xfc/0x170
[  271.353294][T13631]        do_syscall_64+0xfa/0x3b0
[  271.355256][T13631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.357291][T13631] 
[  271.357291][T13631] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  271.359736][T13631]        validate_chain+0xb9b/0x2140
[  271.361505][T13631]        __lock_acquire+0xab9/0xd20
[  271.363193][T13631]        lock_acquire+0x120/0x360
[  271.364684][T13631]        _raw_spin_lock_bh+0x36/0x50
[  271.366237][T13631]        nr_rt_ioctl+0x390/0xd50
[  271.368058][T13631]        sock_do_ioctl+0xdc/0x300
[  271.370024][T13631]        sock_ioctl+0x576/0x790
[  271.371918][T13631]        __se_sys_ioctl+0xfc/0x170
[  271.373734][T13631]        do_syscall_64+0xfa/0x3b0
[  271.375299][T13631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.377334][T13631] 
[  271.377334][T13631] other info that might help us debug this:
[  271.377334][T13631] 
[  271.380840][T13631] Chain exists of:
[  271.380840][T13631]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  271.380840][T13631] 
[  271.385585][T13631]  Possible unsafe locking scenario:
[  271.385585][T13631] 
[  271.388275][T13631]        CPU0                    CPU1
[  271.390389][T13631]        ----                    ----
[  271.392477][T13631]   lock(&nr_node->node_lock);
[  271.393965][T13631]                                lock(nr_node_list_lock);
[  271.396094][T13631]                                lock(&nr_node->node_lock);
[  271.398577][T13631]   lock(nr_neigh_list_lock);
[  271.400053][T13631] 
[  271.400053][T13631]  *** DEADLOCK ***
[  271.400053][T13631] 
[  271.402414][T13631] 2 locks held by syz.1.2411/13631:
[  271.404087][T13631]  #0: ffffffff8f6763f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  271.407125][T13631]  #1: ffff888023098d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  271.410846][T13631] 
[  271.410846][T13631] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  271.412622][T13631] CPU: 0 UID: 0 PID: 13631 Comm: syz.1.2411 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  271.412637][T13631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.412644][T13631] Call Trace:
[  271.412651][T13631]  <TASK>
[  271.412658][T13631]  dump_stack_lvl+0x189/0x250
[  271.412674][T13631]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.412685][T13631]  ? __pfx__printk+0x10/0x10
[  271.412696][T13631]  ? stack_trace_save+0x9c/0xe0
[  271.412711][T13631]  print_circular_bug+0x2ee/0x310
[  271.412724][T13631]  check_noncircular+0x134/0x160
[  271.412735][T13631]  validate_chain+0xb9b/0x2140
[  271.412750][T13631]  __lock_acquire+0xab9/0xd20
[  271.412759][T13631]  ? nr_rt_ioctl+0x390/0xd50
[  271.412767][T13631]  lock_acquire+0x120/0x360
[  271.412774][T13631]  ? nr_rt_ioctl+0x390/0xd50
[  271.412782][T13631]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  271.412793][T13631]  ? nr_rt_ioctl+0x390/0xd50
[  271.412800][T13631]  _raw_spin_lock_bh+0x36/0x50
[  271.412812][T13631]  ? nr_rt_ioctl+0x390/0xd50
[  271.412819][T13631]  nr_rt_ioctl+0x390/0xd50
[  271.412826][T13631]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  271.412837][T13631]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  271.412846][T13631]  ? apparmor_capable+0x137/0x1b0
[  271.412857][T13631]  ? capable+0x89/0xe0
[  271.412867][T13631]  ? nr_ioctl+0x1b1/0x3b0
[  271.412879][T13631]  sock_do_ioctl+0xdc/0x300
[  271.412893][T13631]  ? __pfx_sock_do_ioctl+0x10/0x10
[  271.412905][T13631]  ? __lock_acquire+0xab9/0xd20
[  271.412916][T13631]  sock_ioctl+0x576/0x790
[  271.412928][T13631]  ? __pfx_sock_ioctl+0x10/0x10
[  271.412939][T13631]  ? __fget_files+0x2a/0x420
[  271.412950][T13631]  ? __fget_files+0x3a0/0x420
[  271.412959][T13631]  ? __fget_files+0x2a/0x420
[  271.412970][T13631]  ? bpf_lsm_file_ioctl+0x9/0x20
[  271.412979][T13631]  ? __pfx_sock_ioctl+0x10/0x10
[  271.413014][T13631]  __se_sys_ioctl+0xfc/0x170
[  271.413023][T13631]  do_syscall_64+0xfa/0x3b0
[  271.413033][T13631]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.413045][T13631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.413053][T13631]  ? exc_page_fault+0x9f/0xf0
[  271.413064][T13631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.413073][T13631] RIP: 0033:0x7fa2b3b8e929
[  271.413083][T13631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.413092][T13631] RSP: 002b:00007fa2b494e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  271.413102][T13631] RAX: ffffffffffffffda RBX: 00007fa2b3db5fa0 RCX: 00007fa2b3b8e929
[  271.413109][T13631] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000007
[  271.413114][T13631] RBP: 00007fa2b3c10b39 R08: 0000000000000000 R09: 0000000000000000
[  271.413119][T13631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.413124][T13631] R13: 0000000000000000 R14: 00007fa2b3db5fa0 R15: 00007ffcef1c6a28
[  271.413134][T13631]  </TASK>
[  271.419348][T13476] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'
[  271.438469][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.512555][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.553401][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.560602][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.476338][   T12] bond2 (unregistering): (slave bridge3): Releasing active interface
[  272.693831][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  272.697078][   T12] bond0 (unregistering): Released all slaves
[  272.701159][   T12] bond1 (unregistering): Released all slaves
[  272.772074][   T12] bond2 (unregistering): Released all slaves
[  272.776760][   T12] bond3 (unregistering): Released all slaves
[  272.842671][   T12] _Z`Ԁ@: left promiscuous mode
[  272.919704][   T12] tipc: Disabling bearer <eth:veth0_macvtap>
[  272.923409][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  272.926773][   T12] tipc: Left network mode
[  272.930316][   T12] IPVS: stopping backup sync thread 8034 ...
[  273.239527][   T12] hsr_slave_0: left promiscuous mode
[  273.241534][   T12] hsr_slave_1: left promiscuous mode
[  273.305144][   T26] smc: removing ib device syz0
[  273.963951][   T12] IPVS: stop unused estimator thread 0...
[  274.039704][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.766995][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.808845][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.883093][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.978887][   T12] bridge_slave_1: left allmulticast mode
[  274.981048][   T12] bridge_slave_1: left promiscuous mode
[  274.983079][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.987058][   T12] bridge_slave_0: left allmulticast mode
[  274.989020][   T12] bridge_slave_0: left promiscuous mode
[  274.991052][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.089405][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.094017][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.097731][   T12] bond0 (unregistering): Released all slaves
[  275.282762][   T12] hsr_slave_0: left promiscuous mode
[  275.285080][   T12] hsr_slave_1: left promiscuous mode
[  275.286946][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.289344][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.294798][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.297053][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.301915][   T12] veth1_macvtap: left promiscuous mode
[  275.303923][   T12] veth0_macvtap: left promiscuous mode
[  275.306091][   T12] veth1_vlan: left promiscuous mode
[  275.307881][   T12] veth0_vlan: left promiscuous mode
[  275.422516][   T12] team0 (unregistering): Port device team_slave_1 removed
[  275.440512][   T12] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
07:48:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001465 RDI=0000000000001466 RBP=00000000000003f8 RSP=ffffc90001d1f150
R8 =ffff888108270237 R9 =1ffff1102104e046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c8 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa2b494e6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c251032 CR3=0000000035002000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa2b3d85478 00007fa2b3d85450 XMM03=00007fa2b3d85488 00007fa2b3d85480
XMM04=00007fa2b48ed100 00007fa2b3d85440 XMM05=00007fa2b3d85458 00007fa2b3d854a0
XMM06=00007fa2b3d85498 00007fa2b3d85490 XMM07=00007fa2b3d85488 00007fa2b3d85480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fa2b3c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c210 RBX=ffff88813663b1c0 RCX=ffff888021b05640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900032ef700 RSP=ffffc900032ef5a0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3a812e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f3a807856a3 00007f3a807856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055555ec0b60e 000055555ec0b4e0
XMM06=0000000000000000 0000000000000000 XMM07=0300100009c00302 100009b003601000
XMM08=1e900308080002d8 030c040002d40310 XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
