last executing test programs:

38.841592625s ago: executing program 0 (id=2490):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10)
sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0)

38.753803182s ago: executing program 0 (id=2493):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000400012800b00010065727370616e0000300002800500130001000000040012000500080003000000080015004f700700060011004e24000006000f"], 0x68}, 0x1, 0xd}, 0x0)

38.653902416s ago: executing program 0 (id=2494):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)

38.539926185s ago: executing program 0 (id=2497):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0)

38.463012168s ago: executing program 0 (id=2500):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0xf}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0)

38.289945771s ago: executing program 0 (id=2502):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r4 = socket(0x40000000015, 0x5, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3f096d47}, 0x1c)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000))

38.120327236s ago: executing program 32 (id=2502):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r4 = socket(0x40000000015, 0x5, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3f096d47}, 0x1c)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000))

1.196954s ago: executing program 1 (id=3318):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1000001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000003d40)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4120, 0x1018}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0)

1.139541731s ago: executing program 2 (id=3321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

1.13903249s ago: executing program 2 (id=3323):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)

1.080154805s ago: executing program 1 (id=3324):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.079531458s ago: executing program 2 (id=3325):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x18, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}]}, 0x18}], 0x1}, 0x0)

1.026006891s ago: executing program 1 (id=3327):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0xfeffff0700000000, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004", 0x31}], 0x1)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf)

1.025786738s ago: executing program 2 (id=3328):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4851}, 0x40)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000809bffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1e0001000000000000655800189078040000001b00000065f300040000e303"], 0x3e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f6, &(0x7f0000000900)={'nr0\x00', @broadcast})
r6 = socket$l2tp(0x2, 0x2, 0x73)
sendto$inet(r6, 0x0, 0x0, 0x4008000, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)

901.922896ms ago: executing program 2 (id=3331):
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="3ea3764af1449a26b20a3e221608000000000000bcf43b890cb3ee373dabf223638995a4eac8e40773eb83ecc02c3dda33aa8d3a2fd7bc2d63e639b4a9790bada57523d3fdede239ddef5611f929c9e7f9f8b3a5ec15f7755b9737ee16417b9ea3d6acc918592fbd11d0", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x242, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f00000007c0), 0x0, 0x40088d4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(0xffffffffffffffff, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x31, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4e"}}, 0x3f)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x10, 0x1000002, @vifc_lcl_ifindex, @rand_addr=0x64010101}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="32c402ec18f332c5ce2000000002000000000000090000000008000b0000000000100000"], 0x24}}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x101, 0x9}, &(0x7f00000000c0)=0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400))

419.615886ms ago: executing program 3 (id=3335):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0xb4}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff8100"], 0x30}}, 0x0)

348.79024ms ago: executing program 3 (id=3336):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e408000100010000000800010001000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

259.426008ms ago: executing program 3 (id=3337):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c00188008000000000000000800024000000000080001"], 0xa0}}, 0x0)

178.820997ms ago: executing program 3 (id=3338):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)

167.573309ms ago: executing program 1 (id=3339):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
connect$netrom(r0, 0x0, 0x0)

98.193013ms ago: executing program 1 (id=3340):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

46.701201ms ago: executing program 1 (id=3341):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=@getsa={0xd4, 0x12, 0x8, 0x70bd2c, 0x25dfdbfb, {@in=@rand_addr=0x64010102, 0x4d5, 0xa, 0x50}, [@policy={0xac, 0x7, {{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x10, 0x0, 0x0, r4}, {0x4, 0x1, 0x9, 0x4, 0x4, 0x7, 0x8, 0x1}, {0xca, 0x1, 0xfffffffffffffff7}, 0x56, 0x6e6bb2, 0x0, 0x0, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48000}, 0x4000)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000)

46.090801ms ago: executing program 3 (id=3342):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=@setlink={0x44, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5}]}, 0x44}}, 0x0)

508.641µs ago: executing program 2 (id=3343):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)

0s ago: executing program 3 (id=3344):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250400000014000180086085353e15cb646ef25a12f6fbdf6a0005000200f0ff0500010078060000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
unshare(0x22020600)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700", 0x12)
recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4)
accept4$ax25(r6, &(0x7f0000000300)={{0x3, @null}, [@remote, @null, @bcast, @null, @rose, @remote, @default, @netrom]}, &(0x7f0000000080)=0x48, 0x80000)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
r7 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
write$cgroup_devices(r0, 0x0, 0x0)
ioctl$sock_rose_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]})
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17627' (ED25519) to the list of known hosts.
syzkaller login: [   56.306171][ T5759] cgroup: Unknown subsys name 'net'
[   56.394545][ T5759] cgroup: Unknown subsys name 'cpuset'
[   56.403453][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.185493][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.362801][ T5843] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.093293][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.095385][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.828747][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.836646][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.842089][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.844122][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.844675][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.847319][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.849425][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.856670][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.856780][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.859564][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.866237][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.866522][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.870405][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.875619][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.875974][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.334040][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   72.416221][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   72.458303][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   72.526980][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.531513][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.534298][ T5866] bridge_slave_0: entered allmulticast mode
[   72.537282][ T5866] bridge_slave_0: entered promiscuous mode
[   72.587679][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.590354][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.592725][ T5866] bridge_slave_1: entered allmulticast mode
[   72.595633][ T5866] bridge_slave_1: entered promiscuous mode
[   72.623835][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.626530][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.629201][ T5859] bridge_slave_0: entered allmulticast mode
[   72.632004][ T5859] bridge_slave_0: entered promiscuous mode
[   72.653068][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.655358][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.657833][ T5859] bridge_slave_1: entered allmulticast mode
[   72.661969][ T5859] bridge_slave_1: entered promiscuous mode
[   72.668699][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.675520][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.744088][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.746414][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.748911][ T5858] bridge_slave_0: entered allmulticast mode
[   72.752942][ T5858] bridge_slave_0: entered promiscuous mode
[   72.757758][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.762409][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.765272][ T5858] bridge_slave_1: entered allmulticast mode
[   72.769034][ T5858] bridge_slave_1: entered promiscuous mode
[   72.785563][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.792718][ T5866] team0: Port device team_slave_0 added
[   72.810189][ T5866] team0: Port device team_slave_1 added
[   72.814910][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.864179][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.878117][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.880884][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.889245][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.897632][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.917483][ T5859] team0: Port device team_slave_0 added
[   72.921193][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.923624][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.933881][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.956117][ T5858] team0: Port device team_slave_0 added
[   72.961904][ T5858] team0: Port device team_slave_1 added
[   72.966394][ T5859] team0: Port device team_slave_1 added
[   73.027364][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.029922][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.037854][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.046970][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.050140][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.060453][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.065839][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.068644][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.079182][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.108388][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.111721][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.121426][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.138442][ T5866] hsr_slave_0: entered promiscuous mode
[   73.143763][ T5866] hsr_slave_1: entered promiscuous mode
[   73.232160][ T5859] hsr_slave_0: entered promiscuous mode
[   73.236236][ T5859] hsr_slave_1: entered promiscuous mode
[   73.238422][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.241660][ T5859] Cannot create hsr debugfs directory
[   73.259478][ T5858] hsr_slave_0: entered promiscuous mode
[   73.263204][ T5858] hsr_slave_1: entered promiscuous mode
[   73.266053][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.269068][ T5858] Cannot create hsr debugfs directory
[   73.601718][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.612447][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.619441][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.635042][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.680678][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.694351][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.704495][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.724435][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.750995][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.757241][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.766455][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.773455][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.890529][ T5864] Bluetooth: hci1: command tx timeout
[   73.938288][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.952532][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.964214][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.970522][ T5864] Bluetooth: hci2: command tx timeout
[   73.970871][   T54] Bluetooth: hci0: command tx timeout
[   74.008319][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   74.013348][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   74.017823][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   74.031380][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.034172][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.039455][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.042637][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.063281][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.066231][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.072698][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.075742][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.092435][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.095303][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.108273][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.111362][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.444418][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.478420][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.507815][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.567929][ T5866] veth0_vlan: entered promiscuous mode
[   74.573971][ T5859] veth0_vlan: entered promiscuous mode
[   74.583873][ T5866] veth1_vlan: entered promiscuous mode
[   74.597550][ T5859] veth1_vlan: entered promiscuous mode
[   74.644908][ T5858] veth0_vlan: entered promiscuous mode
[   74.666645][ T5866] veth0_macvtap: entered promiscuous mode
[   74.676857][ T5858] veth1_vlan: entered promiscuous mode
[   74.680863][ T5859] veth0_macvtap: entered promiscuous mode
[   74.687402][ T5859] veth1_macvtap: entered promiscuous mode
[   74.691985][ T5866] veth1_macvtap: entered promiscuous mode
[   74.721015][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.745472][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.752687][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.763317][ T5866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.766919][ T5866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.774350][ T5866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.777775][ T5866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.789488][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.802943][ T5858] veth0_macvtap: entered promiscuous mode
[   74.813951][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.817574][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.821942][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.825520][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.833396][ T5858] veth1_macvtap: entered promiscuous mode
[   74.882808][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.918239][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.926282][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.936256][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.939573][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.944482][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.998587][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.003489][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.061888][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.064882][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.094642][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.097183][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.130799][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.135539][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.165732][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.168886][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.197601][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   75.264782][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.267874][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.452349][ T5933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.971207][   T54] Bluetooth: hci1: command tx timeout
[   76.050373][   T54] Bluetooth: hci0: command tx timeout
[   76.054498][   T54] Bluetooth: hci2: command tx timeout
[   76.161626][ T5971] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   76.367272][ T5980] netlink: 'syz.2.39': attribute type 10 has an invalid length.
[   76.378450][ T5980] 8021q: adding VLAN 0 to HW filter on device team0
[   76.395043][ T5980] bond0: (slave team0): Enslaving as an active interface with an up link
[   77.026107][ T6012] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   77.074488][    T9] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1
[   77.078588][    T9] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22
[   77.344348][ T6029] warning: `syz.0.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.426851][ T6035] Zero length message leads to an empty skb
[   77.644404][ T6052] openvswitch: netlink: Flow key attribute not present in set flow.
[   77.649280][ T6050] netlink: 'syz.2.69': attribute type 16 has an invalid length.
[   77.664826][ T6050] netlink: 'syz.2.69': attribute type 3 has an invalid length.
[   77.675007][ T6050] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.69'.
[   77.847372][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'.
[   78.028617][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   78.050360][ T5864] Bluetooth: hci1: command tx timeout
[   78.130452][ T5864] Bluetooth: hci2: command tx timeout
[   78.133379][   T54] Bluetooth: hci0: command tx timeout
[   78.192160][   T51] IPVS: starting estimator thread 0...
[   78.252004][ T6077] tipc: Started in network mode
[   78.254154][ T6077] tipc: Node identity 4e0077940442, cluster identity 4711
[   78.257276][ T6077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.270766][ T6077] syzkaller0: entered promiscuous mode
[   78.273751][ T6077] syzkaller0: entered allmulticast mode
[   78.293255][ T6075] IPVS: using max 40 ests per chain, 96000 per kthread
[   78.303340][ T6077] tipc: Resetting bearer <eth:syzkaller0>
[   78.331963][ T6076] tipc: Resetting bearer <eth:syzkaller0>
[   78.354043][ T6076] tipc: Disabling bearer <eth:syzkaller0>
[   78.547286][ T6092] netlink: 'syz.0.87': attribute type 21 has an invalid length.
[   78.555129][ T6092] netlink: 'syz.0.87': attribute type 22 has an invalid length.
[   78.558263][ T6092] netlink: 'syz.0.87': attribute type 23 has an invalid length.
[   78.570113][ T6092] netlink: 'syz.0.87': attribute type 25 has an invalid length.
[   78.573257][ T6092] netlink: 'syz.0.87': attribute type 26 has an invalid length.
[   78.576444][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.87'.
[   78.602114][ T6094] syzkaller1: entered promiscuous mode
[   78.604342][ T6094] syzkaller1: entered allmulticast mode
[   78.771463][ T6102] syzkaller0: entered allmulticast mode
[   79.012564][ T6116] ipvlan2: entered promiscuous mode
[   79.015909][ T6116] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   79.416336][ T6135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.106'.
[   79.421643][ T6135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.106'.
[   79.534748][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'.
[   80.090997][ T6164] netlink: 'syz.0.120': attribute type 21 has an invalid length.
[   80.132495][   T54] Bluetooth: hci1: command tx timeout
[   80.183923][ T6166] netlink: 32 bytes leftover after parsing attributes in process `syz.1.121'.
[   80.209970][   T54] Bluetooth: hci2: command tx timeout
[   80.220457][   T54] Bluetooth: hci0: command tx timeout
[   80.913580][    T9] IPVS: starting estimator thread 0...
[   81.020516][ T6201] IPVS: using max 52 ests per chain, 124800 per kthread
[   81.750880][ T6240] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   82.237019][ T6256] syz.0.156 uses obsolete (PF_INET,SOCK_PACKET)
[   82.455465][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'.
[   82.554609][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'.
[   82.662824][ T6268] syzkaller0: entered promiscuous mode
[   82.665120][ T6268] syzkaller0: entered allmulticast mode
[   82.821702][ T6278] netlink: 'syz.1.167': attribute type 10 has an invalid length.
[   82.847075][ T6278] team0: Device ipvlan1 failed to register rx_handler
[   83.090927][ T6292] netlink: 'syz.0.173': attribute type 29 has an invalid length.
[   83.477393][ T6312] __nla_validate_parse: 1 callbacks suppressed
[   83.477404][ T6312] netlink: 120 bytes leftover after parsing attributes in process `syz.1.184'.
[   83.602222][ T6322] xt_hashlimit: size too large, truncated to 1048576
[   84.969906][ T6367] delete_channel: no stack
[   85.122807][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'.
[   85.128619][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'.
[   85.560725][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.636499][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.995648][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'.
[   86.053741][ T6417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.057463][ T6417] syzkaller0: entered promiscuous mode
[   86.064479][ T6417] syzkaller0: entered allmulticast mode
[   86.073148][ T6417] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   86.116989][ T6417] tipc: Resetting bearer <eth:syzkaller0>
[   86.132332][ T6416] tipc: Resetting bearer <eth:syzkaller0>
[   86.158427][ T6416] tipc: Disabling bearer <eth:syzkaller0>
[   86.472409][   T10] cfg80211: failed to load regulatory.db
[   86.806627][ T6467] netlink: 68 bytes leftover after parsing attributes in process `syz.0.255'.
[   87.165568][ T6484] netlink: 68 bytes leftover after parsing attributes in process `syz.1.262'.
[   88.194406][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.281'.
[   88.198120][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.281'.
[   88.314758][ T6534] ieee802154 phy0 wpan0: encryption failed: -22
[   88.318401][ T6534] netlink: 196 bytes leftover after parsing attributes in process `syz.1.284'.
[   88.349034][ T6525] netlink: 'syz.2.280': attribute type 13 has an invalid length.
[   88.364708][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'.
[   88.395674][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.400141][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.479360][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.488264][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.558399][ T6534] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.562244][ T6534] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.565740][ T6534] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.569200][ T6534] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.844896][ T6549] syzkaller1: entered promiscuous mode
[   88.847182][ T6549] syzkaller1: entered allmulticast mode
[   89.313227][ T6572] netlink: 'syz.2.298': attribute type 10 has an invalid length.
[   89.325240][ T6572] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.298'.
[   90.101254][ T6590] netpci0: tun_chr_ioctl cmd 1074025681
[   90.290661][ T5864] Bluetooth: hci2: command 0x0405 tx timeout
[   90.333691][ T6606] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   90.343553][ T6606] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   90.755497][ T6635] netlink: 7 bytes leftover after parsing attributes in process `syz.2.328'.
[   91.099582][ T6664] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.341'.
[   91.206382][ T6667] vxcan2: entered promiscuous mode
[   91.672655][ T6705] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.355'.
[   91.738746][ T6707] netlink: 248 bytes leftover after parsing attributes in process `syz.1.356'.
[   91.942582][ T6714] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.965953][ T6714] team0: Port device bond1 added
[   92.329110][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'.
[   92.483276][ T6752] ip6gretap0: entered promiscuous mode
[   92.485291][ T6752] macsec1: entered allmulticast mode
[   92.487094][ T6752] ip6gretap0: entered allmulticast mode
[   92.510404][ T6752] ip6gretap0: left allmulticast mode
[   92.512975][ T6752] ip6gretap0: left promiscuous mode
[   92.826790][ T6767] bond0: (slave bond_slave_1): Releasing backup interface
[   92.976176][ T6779] syzkaller1: entered promiscuous mode
[   92.978858][ T6779] syzkaller1: entered allmulticast mode
[   93.143103][ T6788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.146423][ T6788] IPv6: NLM_F_CREATE should be set when creating new route
[   93.149921][ T6788] IPv6: NLM_F_CREATE should be set when creating new route
[   93.152586][ T6788] IPv6: NLM_F_CREATE should be set when creating new route
[   93.183884][ T6788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.417487][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'.
[   94.508209][ T6848] netlink: 'syz.2.408': attribute type 1 has an invalid length.
[   94.527532][ T6848] netlink: 228 bytes leftover after parsing attributes in process `syz.2.408'.
[   94.540160][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'.
[   95.304286][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'.
[   95.595756][ T6901] infiniband syz0: set down
[   95.597942][ T6901] infiniband syz0: added ipvlan1
[   95.627338][ T6901] RDS/IB: syz0: added
[   95.629053][ T6901] smc: adding ib device syz0 with port count 1
[   95.631331][ T6901] smc:    ib device syz0 port 1 has pnetid 
[   96.429923][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'.
[   96.433582][ T6946] netlink: 'syz.2.449': attribute type 2 has an invalid length.
[   96.555215][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'.
[   96.994738][ T6989] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   97.205295][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'.
[   97.210265][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'.
[   97.285614][ T7007] netlink: 'syz.2.475': attribute type 16 has an invalid length.
[   97.288886][ T7007] netlink: 'syz.2.475': attribute type 1 has an invalid length.
[   97.293188][ T7007] netlink: 'syz.2.475': attribute type 2 has an invalid length.
[   97.733793][ T7028] netlink: 40 bytes leftover after parsing attributes in process `syz.0.484'.
[   98.872135][ T7072] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   98.875093][ T7072] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   98.899136][ T7074] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   98.934520][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   99.549206][ T7099] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   99.553931][ T7099] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   99.598436][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'.
[  100.360297][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'.
[  100.397529][ T7133] bridge_slave_1: left allmulticast mode
[  100.400349][ T7133] bridge_slave_1: left promiscuous mode
[  100.402889][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.415627][ T7133] bridge_slave_0: left allmulticast mode
[  100.418845][ T7133] bridge_slave_0: left promiscuous mode
[  100.422830][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.659283][ T7197] trusted_key: syz.1.551 sent an empty control message without MSG_MORE.
[  102.016597][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.558'.
[  102.148344][ T7220] ip6gretap1: entered promiscuous mode
[  102.725071][ T7258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.578'.
[  102.874902][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'.
[  102.882404][ T7268] netlink: 26 bytes leftover after parsing attributes in process `syz.2.583'.
[  103.302353][ T7306] xt_policy: neither incoming nor outgoing policy selected
[  103.532113][ T7320] bridge0: entered allmulticast mode
[  103.538935][ T7320] pim6reg: entered allmulticast mode
[  103.541154][ T7323] netlink: 'syz.0.602': attribute type 3 has an invalid length.
[  103.824497][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[  104.132199][ T7352] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  104.135094][ T7352] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  104.446230][ T7372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.625'.
[  104.584643][ T7382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.629'.
[  104.655199][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'.
[  104.928516][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'.
[  104.974918][ T7403] veth1: entered promiscuous mode
[  104.978376][ T7403] bridge2: entered promiscuous mode
[  104.998813][ T7403] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network
[  105.007209][ T7403] hsr1: entered promiscuous mode
[  105.294940][ T7424] siw: device registration error -23
[  105.309518][ T7424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.648'.
[  105.677822][ T7435] netlink: 'syz.1.653': attribute type 2 has an invalid length.
[  105.957147][ T7445] netlink: 'syz.1.658': attribute type 10 has an invalid length.
[  105.963576][ T7445] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  106.010378][ T7447] IPv6: Can't replace route, no match found
[  106.123433][ T7453] netlink: 240 bytes leftover after parsing attributes in process `syz.1.662'.
[  106.538105][ T7481] netlink: 504 bytes leftover after parsing attributes in process `syz.2.674'.
[  106.633639][ T7487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.677'.
[  106.647852][ T7489] netlink: 248 bytes leftover after parsing attributes in process `syz.2.678'.
[  106.653759][ T7489] netlink: 48 bytes leftover after parsing attributes in process `syz.2.678'.
[  106.678874][ T7489] rdma_rxe: rxe_newlink: failed to add lo
[  106.713740][ T7489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.733681][ T7490] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  107.079179][ T7509] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  107.111181][ T7508] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  107.221641][ T7516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.690'.
[  107.396857][ T7529] netlink: 'syz.0.696': attribute type 1 has an invalid length.
[  107.399496][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'.
[  107.601543][ T7547] netlink: 'syz.0.705': attribute type 1 has an invalid length.
[  108.026676][ T7577] syzkaller0: entered promiscuous mode
[  108.028682][ T7577] syzkaller0: entered allmulticast mode
[  108.975646][ T7592] ipt_ECN: cannot use operation on non-tcp rule
[  109.729003][ T7626] __nla_validate_parse: 2 callbacks suppressed
[  109.729015][ T7626] netlink: 786 bytes leftover after parsing attributes in process `syz.1.736'.
[  109.899401][ T7642] nbd: must specify a device to reconfigure
[  109.966919][ T7649] netlink: 'syz.2.744': attribute type 5 has an invalid length.
[  110.057564][ T7644] netlink: 'syz.1.743': attribute type 13 has an invalid length.
[  110.064224][ T7644] netlink: 'syz.1.743': attribute type 17 has an invalid length.
[  110.170190][ T7644] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.174690][ T7644] 8021q: adding VLAN 0 to HW filter on device team0
[  110.182058][ T7644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.243875][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.304517][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.363161][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.517136][ T7683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.756'.
[  110.586537][ T7689] netlink: 124 bytes leftover after parsing attributes in process `syz.2.759'.
[  110.955568][  T792] IPVS: starting estimator thread 0...
[  110.965988][ T7721] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  111.040572][ T7723] IPVS: using max 62 ests per chain, 148800 per kthread
[  111.146417][ T7731] syzkaller1: entered promiscuous mode
[  111.148860][ T7731] syzkaller1: entered allmulticast mode
[  111.591543][ T7753] netlink: 64 bytes leftover after parsing attributes in process `syz.0.787'.
[  111.595042][ T7753] netlink: 64 bytes leftover after parsing attributes in process `syz.0.787'.
[  112.415263][ T7791] vcan0: tx drop: invalid da for name 0x0000000000000003
[  112.637026][ T7808] netlink: 72 bytes leftover after parsing attributes in process `syz.1.815'.
[  112.641742][ T7808] netlink: 'syz.1.815': attribute type 1 has an invalid length.
[  112.831534][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'.
[  113.205149][ T7843] netlink: 'syz.1.831': attribute type 1 has an invalid length.
[  113.209270][ T7843] netlink: 144 bytes leftover after parsing attributes in process `syz.1.831'.
[  113.215305][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.831'.
[  113.394631][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.836'.
[  113.500951][ T7861] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.196352][ T7892] tipc: Started in network mode
[  114.198357][ T7892] tipc: Node identity ee0167e98ca1, cluster identity 4711
[  114.208379][ T7892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.215198][ T7892] syzkaller0: entered promiscuous mode
[  114.217024][ T7892] syzkaller0: entered allmulticast mode
[  114.253248][ T7892] tipc: Resetting bearer <eth:syzkaller0>
[  114.260582][ T7891] tipc: Resetting bearer <eth:syzkaller0>
[  114.279293][ T7891] tipc: Disabling bearer <eth:syzkaller0>
[  115.238296][ T7941] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  115.436788][ T7957] __nla_validate_parse: 2 callbacks suppressed
[  115.436805][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'.
[  115.519842][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  115.672689][ T7972] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  115.676865][ T7972] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  116.391271][ T7985] syzkaller1: entered promiscuous mode
[  116.398257][ T7985] syzkaller1: entered allmulticast mode
[  116.454852][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[  116.458445][ T7988] netlink: 68 bytes leftover after parsing attributes in process `syz.1.895'.
[  116.464961][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[  116.469278][ T7988] netlink: 68 bytes leftover after parsing attributes in process `syz.1.895'.
[  116.710888][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.901'.
[  117.453653][ T8058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 34381 - 0
[  117.457361][ T8058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 34381 - 0
[  117.466566][ T8058] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 34381 - 0
[  117.474862][ T8058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 34381 - 0
[  117.483162][ T8058] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 45956 - 0
[  117.486436][ T8058] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 45956 - 0
[  117.489604][ T8058] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 45956 - 0
[  117.495666][ T8058] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 45956 - 0
[  117.499560][ T8058] geneve2: entered promiscuous mode
[  117.502038][ T8058] geneve2: entered allmulticast mode
[  118.580567][ T8082] syzkaller1: entered promiscuous mode
[  118.582809][ T8082] syzkaller1: entered allmulticast mode
[  118.607650][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.940'.
[  118.611738][ T8084] openvswitch: netlink: Flow key attr not present in new flow.
[  119.108501][ T8099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.684338][ T8133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.958'.
[  121.274117][ T8190] syz.0.980 (8190) used greatest stack depth: 18960 bytes left
[  121.300362][ T8192] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.318089][ T8192] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  121.677325][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.994'.
[  121.728035][ T8226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.762723][ T8226] syzkaller0: entered promiscuous mode
[  121.765253][ T8226] syzkaller0: entered allmulticast mode
[  121.767368][ T8226] tipc: Resetting bearer <eth:syzkaller0>
[  121.783455][ T8225] tipc: Resetting bearer <eth:syzkaller0>
[  122.783702][ T6826] tipc: Node number set to 1654679529
[  123.202879][ T8225] tipc: Disabling bearer <eth:syzkaller0>
[  123.314573][ T8242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1004'.
[  123.462322][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'.
[  123.803202][ T8287] macvlan0: entered allmulticast mode
[  123.805153][ T8287] veth1_vlan: entered allmulticast mode
[  124.352524][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'.
[  124.885052][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'.
[  125.115035][ T8342] netlink: 'syz.1.1051': attribute type 1 has an invalid length.
[  125.542105][ T8358] IPv6: NLM_F_CREATE should be specified when creating new route
[  125.800886][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'.
[  126.706547][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'.
[  126.781788][ T8417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1083'.
[  126.786124][ T8417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1083'.
[  127.006948][ T8433] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  127.012467][ T8433] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  127.628090][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1102'.
[  127.664941][ T8457] netlink: 'syz.1.1102': attribute type 1 has an invalid length.
[  127.824459][ T8463] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1105'.
[  128.438343][ T8494] ieee802154 phy0 wpan0: encryption failed: -90
[  128.628364][ T8502] sctp: [Deprecated]: syz.2.1122 (pid 8502) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.628364][ T8502] Use struct sctp_sack_info instead
[  129.563080][ T8552] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1134'.
[  129.814547][ T8574] smc: net device bond0 applied user defined pnetid SYZ2
[  129.851518][ T8576] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  129.971818][ T5864] Bluetooth: hci2: command 0x0405 tx timeout
[  130.076291][ T8585] syzkaller1: entered promiscuous mode
[  130.079197][ T8585] syzkaller1: entered allmulticast mode
[  130.243599][ T8589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.681626][ T8613] netlink: 'syz.2.1157': attribute type 1 has an invalid length.
[  130.684806][ T8613] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1157'.
[  131.044432][ T8644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1173'.
[  131.165584][ T8654] netlink: 'syz.1.1178': attribute type 3 has an invalid length.
[  131.245770][ T8662] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  131.337666][ T8668] vlan2: entered promiscuous mode
[  131.343481][ T8668] bond0: entered promiscuous mode
[  131.347515][ T8668] bond_slave_0: entered promiscuous mode
[  131.350809][ T8668] bond_slave_1: entered promiscuous mode
[  131.354811][ T8668] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  131.676516][ T8698] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1199'.
[  131.735942][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1202'.
[  131.757631][ T8704] tipc: Started in network mode
[  131.761583][ T8704] tipc: Node identity a2ce75fc1b53, cluster identity 4711
[  131.764675][ T8704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.770708][ T8704] syzkaller0: entered promiscuous mode
[  131.773053][ T8704] syzkaller0: entered allmulticast mode
[  131.798582][ T8704] tipc: Resetting bearer <eth:syzkaller0>
[  131.802944][ T8703] tipc: Resetting bearer <eth:syzkaller0>
[  131.823071][ T8703] tipc: Disabling bearer <eth:syzkaller0>
[  131.831742][ T8709] veth0_to_bridge: entered promiscuous mode
[  131.834812][ T8708] veth0_to_bridge: left promiscuous mode
[  131.957612][ T8717] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1208'.
[  132.173968][ T8731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1215'.
[  132.242456][ T8738] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  132.533536][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.535992][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  133.890573][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1241'.
[  133.925877][ T8792] syz_tun: entered allmulticast mode
[  133.947810][ T8791] syz_tun: left allmulticast mode
[  133.958285][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'.
[  134.272755][ T8810] netdevsim netdevsim1: Direct firmware load for .
[  134.272755][ T8810]  failed with error -2
[  134.277092][ T8810] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  134.277092][ T8810] 
[  134.762514][ T8843] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1263'.
[  135.066151][ T8852] bridge0: port 3(macsec0) entered blocking state
[  135.068587][ T8852] bridge0: port 3(macsec0) entered disabled state
[  135.071408][ T8852] macsec0: entered allmulticast mode
[  135.073332][ T8852] veth1_macvtap: entered allmulticast mode
[  135.076441][ T8852] macsec0: entered promiscuous mode
[  135.078942][ T8852] bridge0: port 3(macsec0) entered blocking state
[  135.081377][ T8852] bridge0: port 3(macsec0) entered forwarding state
[  135.838229][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'.
[  136.107509][ T8883] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  136.188880][ T8887] batman_adv: batadv0: Adding interface: gretap1
[  136.192065][ T8887] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.204577][ T8887] batman_adv: batadv0: Interface activated: gretap1
[  136.324179][ T8893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.397544][ T8893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.414565][ T8902] syz_tun: entered allmulticast mode
[  136.427944][ T8902] dvmrp1: entered allmulticast mode
[  136.437957][ T8900] syz_tun: left allmulticast mode
[  136.494561][ T8893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.514678][ T8909] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1295'.
[  136.580601][ T8893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.646200][ T8893] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.670574][ T8893] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.679524][ T8893] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.701169][ T8893] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.896677][ T8932] IPVS: Error connecting to the multicast addr
[  137.353419][ T8943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1309'.
[  137.357247][ T8943] netlink: 'syz.1.1309': attribute type 6 has an invalid length.
[  137.360822][ T8943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1309'.
[  137.672264][ T8959] Bluetooth: MGMT ver 1.23
[  137.782815][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'.
[  137.882713][ T8975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.008848][ T8986] netlink: 'syz.2.1329': attribute type 1 has an invalid length.
[  138.343241][ T9012] block nbd0: NBD_DISCONNECT
[  138.407937][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'.
[  138.786128][ T9045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.790454][ T9045] syzkaller0: entered promiscuous mode
[  138.793076][ T9045] syzkaller0: entered allmulticast mode
[  138.815045][ T9045] tipc: Resetting bearer <eth:syzkaller0>
[  138.842917][ T9042] tipc: Resetting bearer <eth:syzkaller0>
[  138.867094][ T9042] tipc: Disabling bearer <eth:syzkaller0>
[  139.023395][ T9060] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1360'.
[  139.995685][ T9119] netlink: 'syz.2.1387': attribute type 28 has an invalid length.
[  140.118505][ T9124] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  140.494718][ T9163] veth1: entered promiscuous mode
[  140.512427][ T9163] netlink: 'syz.2.1408': attribute type 8 has an invalid length.
[  140.522373][ T9163] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  140.709622][ T9179] netlink: 'syz.0.1415': attribute type 2 has an invalid length.
[  141.113670][ T9214] netlink: 'syz.2.1433': attribute type 1 has an invalid length.
[  141.116895][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'.
[  141.216791][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1437'.
[  141.246865][ T5864] Bluetooth: hci2: link tx timeout
[  141.249102][ T5864] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.253209][   T54] Bluetooth: hci2: link tx timeout
[  141.254926][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.258063][   T54] Bluetooth: hci2: link tx timeout
[  141.262797][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.265992][   T54] Bluetooth: hci2: link tx timeout
[  141.268877][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.272967][   T54] Bluetooth: hci2: link tx timeout
[  141.274610][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.277889][   T54] Bluetooth: hci2: link tx timeout
[  141.283449][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.286208][   T54] Bluetooth: hci2: link tx timeout
[  141.287906][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.292453][   T54] Bluetooth: hci2: link tx timeout
[  141.294353][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.297312][   T54] Bluetooth: hci2: link tx timeout
[  141.299318][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.305558][   T54] Bluetooth: hci2: link tx timeout
[  141.307694][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.311483][   T54] Bluetooth: hci2: link tx timeout
[  141.313691][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.317620][   T54] Bluetooth: hci2: link tx timeout
[  141.320105][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.323538][   T54] Bluetooth: hci2: link tx timeout
[  141.325609][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.328663][   T54] Bluetooth: hci2: link tx timeout
[  141.331857][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.572942][ T9236] netlink: 'syz.1.1442': attribute type 1 has an invalid length.
[  141.757813][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'.
[  141.761272][ T9238] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  141.764458][ T9238] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  142.088847][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'.
[  142.398965][ T9262] netlink: 'syz.2.1453': attribute type 1 has an invalid length.
[  142.619236][ T9283] netlink: 'syz.1.1462': attribute type 1 has an invalid length.
[  142.629332][ T9283] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.1462'.
[  142.651288][ T9278] Cannot find add_set index 2 as target
[  142.793811][ T9289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1465'.
[  142.962325][ T9295] netlink: 'syz.1.1467': attribute type 1 has an invalid length.
[  143.252661][ T9311] sctp: [Deprecated]: syz.1.1476 (pid 9311) Use of int in maxseg socket option.
[  143.252661][ T9311] Use struct sctp_assoc_value instead
[  143.330963][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  143.872267][ T9336] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1488'.
[  144.255419][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1498'.
[  144.258690][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'.
[  144.263151][ T9357] netlink: 'syz.0.1498': attribute type 14 has an invalid length.
[  145.253387][ T9392] netlink: 'syz.1.1515': attribute type 2 has an invalid length.
[  145.260547][ T9392] netlink: 'syz.1.1515': attribute type 2 has an invalid length.
[  145.342325][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'.
[  145.346046][ T9400] bridge_slave_1: left allmulticast mode
[  145.348344][ T9400] bridge_slave_1: left promiscuous mode
[  145.360461][ T9400] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.365169][ T9400] bridge_slave_0: left allmulticast mode
[  145.379890][ T9400] bridge_slave_0: left promiscuous mode
[  145.382424][ T9400] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.568395][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1525'.
[  145.721004][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.725301][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.923292][ T9437] netlink: 'syz.2.1535': attribute type 4 has an invalid length.
[  145.952358][ T9437] netlink: 'syz.2.1535': attribute type 4 has an invalid length.
[  146.239179][ T9463] tipc: New replicast peer: 255.255.255.255
[  146.242965][ T9463] tipc: Enabled bearer <udp:syz2>, priority 10
[  146.250581][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1549'.
[  146.254173][ T9463] tipc: Disabling bearer <udp:syz2>
[  146.361441][ T9475] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1555'.
[  146.558441][ T9490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1562'.
[  147.218096][ T9536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.221498][ T9536] syzkaller0: entered promiscuous mode
[  147.223397][ T9536] syzkaller0: entered allmulticast mode
[  147.246362][ T9536] tipc: Resetting bearer <eth:syzkaller0>
[  147.255440][ T9535] tipc: Resetting bearer <eth:syzkaller0>
[  147.287460][ T9535] tipc: Disabling bearer <eth:syzkaller0>
[  148.024083][ T9593] __nla_validate_parse: 1 callbacks suppressed
[  148.024105][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'.
[  148.054809][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'.
[  148.058470][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'.
[  148.062742][ T9593] netlink: 'syz.2.1605': attribute type 5 has an invalid length.
[  148.065971][ T9593] netlink: 'syz.2.1605': attribute type 6 has an invalid length.
[  148.602546][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'.
[  149.401836][ T9618] netlink: 'syz.1.1615': attribute type 6 has an invalid length.
[  149.760808][ T9637] Bluetooth: MGMT ver 1.23
[  149.822422][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1627'.
[  150.096960][ T9665] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  150.122959][ T9667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.132596][ T9659] bridge0: port 3(macsec0) entered disabled state
[  150.136094][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.139488][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.194973][ T9659] veth1: left promiscuous mode
[  150.245935][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.255224][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'.
[  150.263425][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.327076][ T9659] veth1_macvtap: left allmulticast mode
[  150.338521][ T9659] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.352375][ T9659] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.355989][ T9659] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.359358][ T9659] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.388794][ T9659] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  150.413376][ T9659] ip6gretap1: left promiscuous mode
[  150.420972][  T792] syz1: Port: 1 Link DOWN
[  150.522259][ T9676] syzkaller0: entered promiscuous mode
[  150.534650][ T9676] syzkaller0: entered allmulticast mode
[  150.661860][ T9684] block nbd1: server does not support multiple connections per device.
[  150.667119][ T9684] block nbd1: shutting down sockets
[  151.818222][ T5864] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  151.825363][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  151.931683][ T9704] ieee802154 phy0 wpan0: encryption failed: -22
[  152.101412][ T9715] syzkaller1: entered promiscuous mode
[  152.103250][ T9715] syzkaller1: entered allmulticast mode
[  152.389317][ T9734] syzkaller1: entered promiscuous mode
[  152.392128][ T9734] syzkaller1: entered allmulticast mode
[  153.050648][ T9782] rdma_rxe: rxe_newlink: failed to add veth1_vlan
[  153.087609][ T9785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1690'.
[  154.066277][ T9819] netlink: 'syz.1.1703': attribute type 21 has an invalid length.
[  154.072806][ T9819] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1703'.
[  154.076709][ T9819] netlink: 'syz.1.1703': attribute type 5 has an invalid length.
[  154.082386][ T9819] netlink: 'syz.1.1703': attribute type 6 has an invalid length.
[  154.086126][ T9819] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1703'.
[  154.578337][ T9851] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1719'.
[  154.604614][ T9853] netlink: 'syz.0.1717': attribute type 1 has an invalid length.
[  154.607573][ T9853] netlink: 'syz.0.1717': attribute type 3 has an invalid length.
[  154.611577][ T9853] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1717'.
[  154.651865][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'.
[  154.655406][ T9851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  154.941923][ T9860] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1721'.
[  155.093409][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1726'.
[  155.225099][ T9872] pimreg: entered allmulticast mode
[  155.249508][ T9872] pimreg: left allmulticast mode
[  155.661403][ T9888] netlink: 'syz.1.1732': attribute type 1 has an invalid length.
[  155.783405][ T9894] netlink: 'syz.0.1735': attribute type 1 has an invalid length.
[  155.788003][ T9894] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1735'.
[  155.792469][ T9894] netlink: 'syz.0.1735': attribute type 2 has an invalid length.
[  155.795195][ T9894] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1735'.
[  156.306183][ T9908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.415718][ T9908] veth1_vlan: left allmulticast mode
[  156.419483][ T9908] macvlan0: left allmulticast mode
[  156.481553][ T9908] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.485377][ T9908] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.488917][ T9908] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.492922][ T9908] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.695341][ T9924] netlink: 'syz.0.1748': attribute type 1 has an invalid length.
[  156.698495][ T9924] netlink: 'syz.0.1748': attribute type 1 has an invalid length.
[  156.704647][ T9922] syzkaller0: entered promiscuous mode
[  156.706728][ T9922] syzkaller0: entered allmulticast mode
[  156.714277][ T9922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.721529][ T9921] tipc: Resetting bearer <eth:syzkaller0>
[  156.745038][ T9921] tipc: Disabling bearer <eth:syzkaller0>
[  157.373542][ T9955] : renamed from bond0
[  157.865280][ T9986] vlan3: entered allmulticast mode
[  157.867528][ T9986] veth1: entered allmulticast mode
[  157.872647][ T9986] batman_adv: batadv0: Adding interface: vlan3
[  157.875419][ T9986] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.887391][ T9986] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  158.682295][T10025] __nla_validate_parse: 10 callbacks suppressed
[  158.682306][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1795'.
[  158.921967][T10038] tap0: tun_chr_ioctl cmd 1074025678
[  158.923942][T10038] tap0: group set to 0
[  159.158442][T10048] : (slave team0): Releasing backup interface
[  159.168235][T10048] bridge_slave_0: left allmulticast mode
[  159.171415][T10048] bridge_slave_0: left promiscuous mode
[  159.174038][T10048] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.180302][T10048] bridge_slave_1: left allmulticast mode
[  159.183069][T10048] bridge_slave_1: left promiscuous mode
[  159.185493][T10048] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.193586][T10048] : (slave bond_slave_0): Releasing backup interface
[  159.205117][T10048] team0: Port device team_slave_0 removed
[  159.217455][T10048] team0: Port device team_slave_1 removed
[  159.230999][T10048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.234988][T10048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.238982][T10048] macsec0: left allmulticast mode
[  159.244310][T10048] macsec0: left promiscuous mode
[  159.246493][T10048] bridge0: port 3(macsec0) entered disabled state
[  159.264873][T10048] team0: Port device bond1 removed
[  159.398552][T10055] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1805'.
[  159.405848][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'.
[  159.491601][T10059] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  159.861305][T10078] tc_dump_action: action bad kind
[  160.269307][T10089] validate_nla: 5 callbacks suppressed
[  160.269345][T10089] netlink: 'syz.0.1820': attribute type 1 has an invalid length.
[  160.317620][T10089] bond1: entered promiscuous mode
[  160.331236][T10089] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.390583][T10089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  160.393388][T10089] IPv6: NLM_F_CREATE should be set when creating new route
[  160.396046][T10089] IPv6: NLM_F_CREATE should be set when creating new route
[  160.399199][T10089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  160.406369][T10095] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.409123][T10095] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  160.422448][T10095] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  160.444457][T10095] bond1: (slave wireguard0): making interface the new active one
[  160.447783][T10095] wireguard0: entered promiscuous mode
[  160.453127][T10095] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  160.466646][T10089] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[  160.476435][T10089] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[  160.494002][T10100] netlink: 'syz.1.1823': attribute type 4 has an invalid length.
[  160.538978][T10100] netlink: 'syz.1.1823': attribute type 4 has an invalid length.
[  160.957003][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'.
[  161.244135][T10138] tc_dump_action: action bad kind
[  161.306236][T10143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1844'.
[  161.309167][T10143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1844'.
[  161.471890][T10155] sit2: entered promiscuous mode
[  161.833493][T10184] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1862'.
[  162.156901][T10204] openvswitch: netlink: IPv6 tunnel dst address is zero
[  162.372235][T10217] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.1877'.
[  162.963126][T10243] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1888'.
[  162.966186][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'.
[  163.217820][T10259] netlink: 'syz.0.1894': attribute type 1 has an invalid length.
[  163.542685][T10279] xt_CT: No such helper "syz0"
[  163.658048][T10290] syzkaller0: entered promiscuous mode
[  163.660433][T10290] syzkaller0: entered allmulticast mode
[  163.663730][   T12] syzkaller0: tun_net_xmit 70
[  163.667291][T10290] syzkaller0: tun_chr_ioctl cmd 1074025677
[  163.669341][T10290] syzkaller0: Linktype set failed because interface is up
[  163.895191][T10310] __nla_validate_parse: 1 callbacks suppressed
[  163.895206][T10310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1921'.
[  163.921966][T10311] xt_CT: No such helper "pptp"
[  164.656218][T10348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1936'.
[  164.723646][T10349] xt_CT: You must specify a L4 protocol and not use inversions on it
[  165.016512][T10368] nftables ruleset with unbound set
[  165.082061][T10372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1947'.
[  165.128794][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'.
[  165.132904][T10374] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  165.136181][T10374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.546614][T10389] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  165.626161][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'.
[  165.886472][T10411] IPVS: Scheduler module ip_vs_ not found
[  166.215267][T10434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1976'.
[  166.218875][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'.
[  166.251699][T10434] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  166.352994][T10448] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0
[  166.972154][T10482] netlink: 'syz.1.1997': attribute type 13 has an invalid length.
[  167.527974][T10533] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2019'.
[  167.528735][T10535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2018'.
[  167.537192][T10535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2018'.
[  167.627661][T10541] bond0: (slave bond_slave_0): Releasing backup interface
[  167.634533][T10541] bond_slave_0: left promiscuous mode
[  167.639131][T10541] bond0: (slave bond_slave_1): Releasing backup interface
[  167.644082][T10541] bond_slave_1: left promiscuous mode
[  167.662298][T10541] team0: Port device team_slave_0 removed
[  167.667411][T10541] team0: Port device team_slave_1 removed
[  167.672490][T10541] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.677732][T10541] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.690950][T10541] bond0: (slave netdevsim0): Releasing backup interface
[  167.696398][T10541] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  167.707041][T10541] batman_adv: batadv0: Interface deactivated: gretap1
[  167.710737][T10541] batman_adv: batadv0: Removing interface: gretap1
[  167.715585][T10541] batman_adv: batadv0: Removing interface: vlan3
[  167.719504][T10542] team0: Mode changed to "activebackup"
[  167.733107][T10541] vlan0: entered promiscuous mode
[  167.736158][T10541] tipc: Enabled bearer <eth:team0>, priority 0
[  168.127259][T10559] batadv_slave_0: entered promiscuous mode
[  168.162386][T10559] batadv_slave_0 (unregistering): left promiscuous mode
[  168.164690][T10559] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.481683][T10569] dvmrp1: left allmulticast mode
[  168.507477][T10575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.514832][T10575] syzkaller0: entered promiscuous mode
[  168.516603][T10575] syzkaller0: entered allmulticast mode
[  168.535897][T10575] tipc: Resetting bearer <eth:syzkaller0>
[  168.539400][T10573] tipc: Resetting bearer <eth:syzkaller0>
[  168.542704][T10578] unsupported nla_type 52263
[  168.553715][T10573] tipc: Disabling bearer <eth:syzkaller0>
[  168.937349][T10603] netlink: 'syz.0.2050': attribute type 1 has an invalid length.
[  168.987561][T10606] __nla_validate_parse: 4 callbacks suppressed
[  168.987572][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'.
[  168.995141][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2051'.
[  168.997225][T10603] bond2: (slave gretap1): making interface the new active one
[  169.004623][T10603] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  169.329508][T10628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2062'.
[  170.797278][T10722] netlink: 'syz.2.2102': attribute type 1 has an invalid length.
[  171.130291][T10750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2116'.
[  171.235378][T10759] ieee802154 phy0 wpan0: encryption failed: -90
[  171.497258][T10777] netlink: 'syz.2.2129': attribute type 1 has an invalid length.
[  171.500321][T10777] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2129'.
[  171.546976][T10782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2131'.
[  171.553942][T10782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2131'.
[  171.615239][T10785] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  171.627721][T10785] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  171.794588][T10801] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  172.152678][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'.
[  172.155994][T10835] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  172.158772][T10835] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.902334][T10870] pim6reg: left allmulticast mode
[  172.904641][T10870] bridge0: left allmulticast mode
[  172.975632][T10875] nbd: socks must be embedded in a SOCK_ITEM attr
[  173.055481][T10870] raw_sendmsg: syz.2.2174 forgot to set AF_INET. Fix it!
[  173.448171][T10897] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  173.682319][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2192'.
[  174.196057][T10930] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2200'.
[  174.203648][T10930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2200'.
[  174.294308][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2201'.
[  174.378420][T10936] netlink: 'syz.1.2203': attribute type 11 has an invalid length.
[  174.382511][T10936] netlink: 'syz.1.2203': attribute type 11 has an invalid length.
[  174.385867][T10936] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2203'.
[  174.519164][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'.
[  174.558214][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'.
[  174.842982][T10971] vlan2: entered promiscuous mode
[  174.845010][T10971] bond0: entered promiscuous mode
[  174.847013][T10971] bond_slave_0: entered promiscuous mode
[  174.849343][T10971] bond_slave_1: entered promiscuous mode
[  174.862961][T10971] vlan2: entered allmulticast mode
[  174.865098][T10971] bond0: entered allmulticast mode
[  174.867080][T10971] bond_slave_0: entered allmulticast mode
[  174.869213][T10971] bond_slave_1: entered allmulticast mode
[  175.491051][T11016] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2238'.
[  175.494581][T11016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2238'.
[  175.569933][T11018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2239'.
[  175.636351][T11018] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.696137][T11022] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.699220][T11022] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  175.705506][T11022] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  175.930636][T11031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2244'.
[  176.305783][T11049] netlink: zone id is out of range
[  176.307935][T11049] netlink: zone id is out of range
[  176.383013][T11049] netlink: set zone limit has 4 unknown bytes
[  176.584948][T11075] netlink: 'syz.0.2265': attribute type 3 has an invalid length.
[  176.777326][T11087] sock: sock_set_timeout: `syz.2.2271' (pid 11087) tries to set negative timeout
[  176.781715][T11088] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  176.852744][T11094] netlink: 'syz.0.2274': attribute type 2 has an invalid length.
[  176.856038][T11094] netlink: 'syz.0.2274': attribute type 1 has an invalid length.
[  176.915611][T11099] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[  177.049238][T11105] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  177.060034][T11105] lo: entered allmulticast mode
[  177.085759][T11105] dvmrp8: entered allmulticast mode
[  177.121206][T11105] dvmrp1: entered allmulticast mode
[  177.207573][T11104] lo: left allmulticast mode
[  177.209559][T11104] dvmrp1: left allmulticast mode
[  177.733101][T11148] lo speed is unknown, defaulting to 1000
[  177.735361][T11148] lo speed is unknown, defaulting to 1000
[  177.737558][T11148] lo speed is unknown, defaulting to 1000
[  177.763788][T11148] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  177.784798][T11148] lo speed is unknown, defaulting to 1000
[  177.789054][T11148] lo speed is unknown, defaulting to 1000
[  177.809582][T11152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.815321][T11148] lo speed is unknown, defaulting to 1000
[  177.834192][T11152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.835797][T11154] netlink: 'syz.0.2302': attribute type 2 has an invalid length.
[  178.104472][T11174] netlink: 'syz.2.2310': attribute type 2 has an invalid length.
[  178.667096][T11203] tap1: tun_chr_ioctl cmd 35108
[  179.570711][T11256] __nla_validate_parse: 7 callbacks suppressed
[  179.570724][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  179.594800][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2345'.
[  179.681505][T11264] bond0: option packets_per_slave: invalid value (18446744071562067968)
[  179.689992][T11264] bond0: option packets_per_slave: allowed values 0 - 65535
[  179.871998][T11281] netlink: 'syz.0.2357': attribute type 1 has an invalid length.
[  179.875061][T11281] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2357'.
[  179.878545][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2357'.
[  180.028789][T11295] netlink: 'syz.2.2364': attribute type 1 has an invalid length.
[  180.068805][T11295] 8021q: adding VLAN 0 to HW filter on device bond2
[  180.096545][T11295] bond2: (slave gretap1): making interface the new active one
[  180.107708][T11295] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  180.288202][T11312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  180.362876][T11320] netlink: 'syz.1.2373': attribute type 16 has an invalid length.
[  180.366129][T11320] netlink: 'syz.1.2373': attribute type 17 has an invalid length.
[  180.408490][T11320] tipc: Resetting bearer <eth:team0>
[  180.451581][T11320] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 45956 - 0
[  180.454543][T11320] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 45956 - 0
[  180.457465][T11320] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 45956 - 0
[  180.461603][T11320] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 45956 - 0
[  180.465467][T11320] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 34381 - 0
[  180.468802][T11320] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 34381 - 0
[  180.478651][T11320] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 34381 - 0
[  180.480443][T11328] IPv6: NLM_F_REPLACE set, but no existing node found!
[  180.481845][T11320] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 34381 - 0
[  180.522379][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'.
[  180.669639][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2381'.
[  181.930211][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'.
[  182.412267][T11419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  183.229015][T11427] netlink: 'syz.0.2418': attribute type 4 has an invalid length.
[  183.759082][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'.
[  183.771061][T11466] netlink: 'syz.0.2437': attribute type 10 has an invalid length.
[  183.785145][T11466] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  183.788194][T11466] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  183.792400][T11466] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  184.016324][T11487] netlink: 'syz.0.2445': attribute type 16 has an invalid length.
[  184.019136][T11487] netlink: 'syz.0.2445': attribute type 17 has an invalid length.
[  184.075795][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2445'.
[  184.083600][T11487] IPv6: NLM_F_REPLACE set, but no existing node found!
[  184.492016][T11506] netlink: 'syz.2.2454': attribute type 1 has an invalid length.
[  184.501839][T11506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2454'.
[  184.861840][T11515] __nla_validate_parse: 1 callbacks suppressed
[  184.861853][T11515] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2456'.
[  185.412368][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'.
[  185.465037][T11540] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2468'.
[  185.483916][T11540]  (unregistering): Released all slaves
[  185.573226][T11546] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2470'.
[  185.626633][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'.
[  185.798630][T11541] lo speed is unknown, defaulting to 1000
[  185.949613][T11566] can: request_module (can-proto-0) failed.
[  186.356180][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'.
[  187.018844][T11622] tipc: New replicast peer: 0.0.0.0
[  187.028559][T11622] tipc: Enabled bearer <udp:syz2>, priority 10
[  187.032008][T11622] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  187.303184][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  187.308470][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  187.313080][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  187.316653][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  187.328278][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  187.513115][T11646] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2518'.
[  187.566212][T11637] lo speed is unknown, defaulting to 1000
[  187.623424][T11648] netlink: 'syz.1.2519': attribute type 10 has an invalid length.
[  187.649631][T11648] team0: Port device dummy0 added
[  187.778113][T11637] chnl_net:caif_netlink_parms(): no params data found
[  188.021154][   T24] tipc: Node number set to 1245869972
[  188.313254][T11637] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.316767][T11637] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.320233][T11637] bridge_slave_0: entered allmulticast mode
[  188.324802][T11637] bridge_slave_0: entered promiscuous mode
[  188.340867][T11637] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.343649][T11637] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.346565][T11637] bridge_slave_1: entered allmulticast mode
[  188.351836][T11637] bridge_slave_1: entered promiscuous mode
[  188.392702][T11637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.399122][T11637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.439573][T11637] team0: Port device team_slave_0 added
[  188.445320][T11637] team0: Port device team_slave_1 added
[  188.511098][T11637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.513378][T11637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.523336][T11637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.529569][T11637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.533024][T11637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.543849][T11637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.615451][T11637] hsr_slave_0: entered promiscuous mode
[  188.626169][T11637] hsr_slave_1: entered promiscuous mode
[  188.629098][T11637] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.640842][T11637] Cannot create hsr debugfs directory
[  188.815533][T11683] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2533'.
[  188.923174][T11637] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  188.932523][T11637] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  188.973858][T11637] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  188.982615][T11637] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  189.101767][T11637] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.127863][T11637] 8021q: adding VLAN 0 to HW filter on device team0
[  189.135823][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.138319][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.156550][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.159520][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.410340][   T54] Bluetooth: hci0: command tx timeout
[  189.415718][T11637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.466794][T11637] veth0_vlan: entered promiscuous mode
[  189.481167][T11637] veth1_vlan: entered promiscuous mode
[  189.518015][T11637] veth0_macvtap: entered promiscuous mode
[  189.526292][T11637] veth1_macvtap: entered promiscuous mode
[  189.546833][T11637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.560670][T11637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.569056][T11637] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.577656][T11637] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.584860][T11637] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.588415][T11637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.706654][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.711739][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.756870][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.761853][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.969028][   T24] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  189.973158][   T24] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  189.981515][   T24] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  190.582276][T11758] netlink: 'syz.2.2561': attribute type 1 has an invalid length.
[  190.618815][T11758] bond3 (unregistering): Released all slaves
[  191.406779][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'.
[  191.444487][T11782] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  191.490503][   T54] Bluetooth: hci0: command tx timeout
[  191.784307][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'.
[  191.787056][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2580'.
[  191.804599][T11804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2582'.
[  191.807531][T11804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.867179][T11809] veth1_to_bond: entered allmulticast mode
[  191.876342][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2583'.
[  191.914951][T11809] bond0: (slave bond_slave_1): Releasing backup interface
[  191.946961][T11809] veth1_to_bond (unregistering): left allmulticast mode
[  192.013885][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2588'.
[  192.062930][T11822] netlink: 'syz.2.2589': attribute type 4 has an invalid length.
[  192.076182][T11822] syz.2.2589 (11822) used obsolete PPPIOCDETACH ioctl
[  192.115603][T11825] openvswitch: netlink: Key type 251 is out of range max 32
[  192.183755][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'.
[  192.344528][T11841] ip6gre1: entered allmulticast mode
[  192.674395][T11860] netlink: 'syz.2.2607': attribute type 1 has an invalid length.
[  193.305696][T11901] netlink: 516 bytes leftover after parsing attributes in process `syz.3.2620'.
[  193.343145][T11902] syzkaller0: entered promiscuous mode
[  193.346240][T11902] syzkaller0: entered allmulticast mode
[  193.582864][   T54] Bluetooth: hci0: command tx timeout
[  193.983051][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  195.498822][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2632'.
[  195.503737][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2632'.
[  195.655568][   T54] Bluetooth: hci0: command tx timeout
[  195.704102][T11963] tipc: Started in network mode
[  195.706207][T11963] tipc: Node identity e67305a63174, cluster identity 4711
[  195.709186][T11963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.720072][T11963] syzkaller0: entered promiscuous mode
[  195.722340][T11963] syzkaller0: entered allmulticast mode
[  195.758542][T11967] netlink: 'syz.1.2645': attribute type 3 has an invalid length.
[  195.768285][T11963] tipc: Resetting bearer <eth:syzkaller0>
[  195.774407][T11962] tipc: Resetting bearer <eth:syzkaller0>
[  195.788760][T11962] tipc: Disabling bearer <eth:syzkaller0>
[  195.809020][T11969] netlink: 'syz.1.2646': attribute type 15 has an invalid length.
[  196.051746][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  196.217402][T11950] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  196.612449][T12005] rdma_rxe: rxe_newlink: failed to add lo
[  196.735160][T12013] __nla_validate_parse: 2 callbacks suppressed
[  196.735171][T12013] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2666'.
[  196.954221][T12024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2671'.
[  197.334230][T12050] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2684'.
[  197.447364][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'.
[  197.451430][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'.
[  197.646229][T12063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.681825][T12063] syzkaller0: entered promiscuous mode
[  197.683811][T12063] syzkaller0: entered allmulticast mode
[  197.686397][T12063] tipc: Resetting bearer <eth:syzkaller0>
[  197.703219][T12062] tipc: Resetting bearer <eth:syzkaller0>
[  197.730276][ T5864] Bluetooth: hci0: command 0x0c20 tx timeout
[  199.077692][T12062] tipc: Disabling bearer <eth:syzkaller0>
[  199.191299][T12084] netlink: 'syz.3.2697': attribute type 5 has an invalid length.
[  199.266370][T12090] netlink: 'syz.1.2700': attribute type 10 has an invalid length.
[  199.273207][T12090] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  199.282301][T12090] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  199.337055][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2705'.
[  199.345320][T12100] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  199.916512][T12129] rdma_rxe: rxe_newlink: failed to add lo
[  199.936479][T12128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.630357][T12147] netlink: del zone limit has 4 unknown bytes
[  200.703560][T12155] pim6reg: entered allmulticast mode
[  200.750351][T12155] pim6reg: left allmulticast mode
[  200.884020][T12164] veth0_to_bridge: entered promiscuous mode
[  200.916384][T12163] veth0_to_bridge: left promiscuous mode
[  201.299628][T12202] tipc: MTU too low for tipc bearer
[  202.303828][T12237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2764'.
[  202.477284][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2766'.
[  202.596044][T12246] bridge0: entered allmulticast mode
[  202.599237][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'.
[  202.629561][T12246] bridge0 (unregistering): left allmulticast mode
[  203.275308][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2780'.
[  203.328001][T12254] lo speed is unknown, defaulting to 1000
[  203.591023][T12287] netlink: 'syz.2.2781': attribute type 3 has an invalid length.
[  203.965240][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2788'.
[  204.547381][T12310] netlink: 'syz.3.2796': attribute type 1 has an invalid length.
[  204.565063][T12310] 8021q: adding VLAN 0 to HW filter on device bond1
[  204.585816][T12310] vlan2: entered allmulticast mode
[  204.587543][T12310] veth1: entered allmulticast mode
[  204.593355][T12310] bond1: (slave vlan2): making interface the new active one
[  204.597168][T12310] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  204.858323][T12328] netlink: 'syz.3.2802': attribute type 1 has an invalid length.
[  204.860385][T12330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.897426][T12333] netlink: 'syz.1.2804': attribute type 3 has an invalid length.
[  204.908398][T12333] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2804'.
[  204.916279][T12328] 8021q: adding VLAN 0 to HW filter on device bond2
[  204.976350][T12334] 8021q: adding VLAN 0 to HW filter on device bond2
[  204.984537][T12334] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  205.000241][T12334] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  205.047266][T12328] gretap1: entered promiscuous mode
[  205.066677][T12328] bond2: (slave gretap1): making interface the new active one
[  205.070857][T12328] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  205.096765][T12341] macvlan2: entered promiscuous mode
[  205.099027][T12341] macvlan2: entered allmulticast mode
[  205.103899][T12341] bond2: entered promiscuous mode
[  205.106996][T12341] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  205.118356][T12341] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  205.125585][T12341] bond2: left promiscuous mode
[  205.669357][T12383] bridge0: the hash_elasticity option has been deprecated and is always 16
[  205.673167][T12383] bridge0: entered allmulticast mode
[  205.810926][T12401] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  205.825795][T12402] netlink: zone id is out of range
[  205.833838][T12402] netlink: zone id is out of range
[  205.835967][T12402] netlink: zone id is out of range
[  205.838197][T12402] netlink: zone id is out of range
[  205.844900][T12402] netlink: zone id is out of range
[  205.847142][T12402] netlink: zone id is out of range
[  205.849312][T12402] netlink: zone id is out of range
[  205.852730][T12402] netlink: zone id is out of range
[  205.857413][T12402] netlink: zone id is out of range
[  206.331480][T12440] netlink: 'syz.3.2851': attribute type 32 has an invalid length.
[  206.796040][T12464] delete_channel: no stack
[  206.934535][T12473] Bluetooth: MGMT ver 1.23
[  206.965174][T12475] ip6gre2: entered allmulticast mode
[  207.078619][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'.
[  207.455065][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'.
[  207.492843][T12500] siw: device registration error -23
[  207.780055][T12532] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  207.873091][T12536] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  208.335011][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'.
[  208.337962][T12561] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  208.351906][T12563] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2906'.
[  208.684333][T12581] syzkaller1: entered promiscuous mode
[  208.688445][T12581] syzkaller1: entered allmulticast mode
[  208.863412][T12589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2919'.
[  209.869268][T12659] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2951'.
[  210.465669][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'.
[  210.597753][T12730] netlink: 'syz.2.2986': attribute type 26 has an invalid length.
[  210.663105][T12735] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2988'.
[  212.115181][T12785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.120810][T12785] syzkaller0: entered promiscuous mode
[  212.123190][T12785] syzkaller0: entered allmulticast mode
[  212.173906][T12785] tipc: Resetting bearer <eth:syzkaller0>
[  212.181595][T12784] tipc: Resetting bearer <eth:syzkaller0>
[  212.204027][T12784] tipc: Disabling bearer <eth:syzkaller0>
[  212.312295][T12787] netlink: 'syz.1.3011': attribute type 2 has an invalid length.
[  212.322865][T12787] netlink: 'syz.1.3011': attribute type 1 has an invalid length.
[  212.332129][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3011'.
[  212.426836][T12793] rdma_op ffff888123ba99f0 conn xmit_rdma 0000000000000000
[  212.567047][T12805] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3020'.
[  212.747590][T12821] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3026'.
[  212.893888][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'.
[  212.905222][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'.
[  212.908106][T12838] netlink: 'syz.1.3034': attribute type 5 has an invalid length.
[  212.920944][T12838] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  212.923896][T12838] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  212.926526][T12838] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  212.929415][T12838] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  213.113341][T12839] lo speed is unknown, defaulting to 1000
[  213.645757][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3058'.
[  213.694386][T12893] netlink: 'syz.1.3060': attribute type 3 has an invalid length.
[  213.935995][T12915] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3071'.
[  214.099108][T12924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3074'.
[  214.102253][T12926] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3075'.
[  214.258899][T12936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.271453][T12936] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  214.274003][T12936] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  214.287665][T12936] tipc: Resetting bearer <eth:syzkaller0>
[  214.346830][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3081'.
[  214.886885][T12961] netlink: 'syz.3.3091': attribute type 13 has an invalid length.
[  214.993135][T12961] net_ratelimit: 8 callbacks suppressed
[  214.993141][T12961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.156851][T12967] netlink: 'syz.3.3092': attribute type 3 has an invalid length.
[  215.159289][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3092'.
[  215.278756][  T792] tipc: Node number set to 3607561638
[  215.540584][T12983] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  215.752944][T13005] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  215.757396][T13005] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  215.986264][T13022] vlan4: entered promiscuous mode
[  216.034043][T13033] unsupported nlmsg_type 40
[  216.064240][T13035] netlink: 'syz.2.3125': attribute type 10 has an invalid length.
[  216.073939][T13035] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.080329][T13035] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.083669][T13035] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.086859][T13035] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.113550][T13035] team0: Port device geneve0 added
[  216.149300][T13037] syz_tun: entered promiscuous mode
[  216.162250][T13037] batadv_slave_0: entered promiscuous mode
[  216.165235][T13037] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  216.168231][T13037] Cannot create hsr debugfs directory
[  216.179152][T13037] hsr1: entered allmulticast mode
[  216.184087][T13037] syz_tun: entered allmulticast mode
[  216.186223][T13037] batadv_slave_0: entered allmulticast mode
[  216.213324][T13039] gre1: entered promiscuous mode
[  216.262174][T13043] netlink: 'syz.3.3129': attribute type 21 has an invalid length.
[  216.847025][T13085] netlink: 'syz.3.3144': attribute type 9 has an invalid length.
[  216.962170][T13089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.821721][T13132] netlink: 'syz.2.3167': attribute type 1 has an invalid length.
[  217.825112][T13132] __nla_validate_parse: 10 callbacks suppressed
[  217.825126][T13132] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3167'.
[  217.897684][T13136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3169'.
[  217.904784][T13136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3169'.
[  217.908156][T13136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3169'.
[  217.993357][T13143] team0: Port device dummy0 removed
[  217.997003][T13143] bond0: (slave netdevsim0): Releasing backup interface
[  218.001915][T13143] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  218.257427][T13164] delete_channel: no stack
[  218.487671][T13187] netlink: 'syz.3.3192': attribute type 21 has an invalid length.
[  218.497941][T13187] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3192'.
[  218.510966][T13187] netlink: 'syz.3.3192': attribute type 4 has an invalid length.
[  218.514600][T13187] netlink: 'syz.3.3192': attribute type 3 has an invalid length.
[  218.517662][T13187] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3192'.
[  218.552721][T13189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.563286][T13189] syzkaller0: entered promiscuous mode
[  218.565521][T13189] syzkaller0: entered allmulticast mode
[  218.568836][T13193] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3194'.
[  218.588171][T13189] tipc: Resetting bearer <eth:syzkaller0>
[  218.636032][T13192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.648895][T13188] tipc: Resetting bearer <eth:syzkaller0>
[  218.673735][T13188] tipc: Disabling bearer <eth:syzkaller0>
[  218.712850][T13192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.798768][T13192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.848464][T13204] netlink: 'syz.2.3198': attribute type 13 has an invalid length.
[  218.858719][T13204] netlink: 'syz.2.3198': attribute type 17 has an invalid length.
[  218.871195][T13192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.927212][T13204] 8021q: adding VLAN 0 to HW filter on device team0
[  218.937281][T13204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.948939][ T5911] lo speed is unknown, defaulting to 1000
[  218.953633][ T5911] syz2: Port: 1 Link ACTIVE
[  218.984552][T13204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.009220][T13192] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.026431][T13192] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.041492][T13205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.048149][T13192] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.063996][T13192] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.100678][T13205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.351670][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3214'.
[  219.546271][T13246] netlink: 'syz.1.3220': attribute type 5 has an invalid length.
[  219.549517][T13246] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3220'.
[  219.708409][T13254] macsec1: entered promiscuous mode
[  219.710941][T13254] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  219.714025][T13254] macsec1: entered allmulticast mode
[  219.716812][T13254] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  219.821868][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3227'.
[  219.991990][T13268] tun0: tun_chr_ioctl cmd 1074025675
[  219.994185][T13268] tun0: persist enabled
[  220.000444][T13268] tun0: tun_chr_ioctl cmd 1074025675
[  220.002652][T13268] tun0: persist enabled
[  221.294139][T13337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.297075][T13337] syzkaller0: entered promiscuous mode
[  221.299065][T13337] syzkaller0: entered allmulticast mode
[  221.327556][T13337] tipc: Resetting bearer <eth:syzkaller0>
[  221.340753][T13336] tipc: Resetting bearer <eth:syzkaller0>
[  221.360927][T13336] tipc: Disabling bearer <eth:syzkaller0>
[  221.714133][T13360] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  221.746797][T13362] validate_nla: 2 callbacks suppressed
[  221.746811][T13362] netlink: 'syz.1.3272': attribute type 4 has an invalid length.
[  222.248012][T13401] netlink: 'syz.1.3288': attribute type 72 has an invalid length.
[  222.584245][T13415] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  224.125363][T13541] netlink: 'syz.1.3327': attribute type 4 has an invalid length.
[  224.137895][T13541] netlink: 'syz.1.3327': attribute type 4 has an invalid length.
[  224.173711][T13545] bridge_slave_0: left allmulticast mode
[  224.175623][T13545] bridge_slave_0: left promiscuous mode
[  224.187831][T13545] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.204679][T13545] bridge_slave_1: left allmulticast mode
[  224.206870][T13545] bridge_slave_1: left promiscuous mode
[  224.208714][T13545] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.215242][T13545] bond0: (slave bond_slave_0): Releasing backup interface
[  224.236729][T13545] team0: Port device team_slave_0 removed
[  224.252633][T13545] team0: Port device team_slave_1 removed
[  224.255303][T13545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.257642][T13545] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.262128][T13545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.264541][T13545] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.273377][T13545] bond1: (slave vlan2): Releasing active interface
[  224.283774][T13545] bond2: (slave gretap1): Releasing active interface
[  224.410549][T13546] team0: Mode changed to "activebackup"
[  224.606736][T13548] lo speed is unknown, defaulting to 1000
[  224.862151][T13569] __nla_validate_parse: 8 callbacks suppressed
[  224.862169][T13569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3337'.
[  225.064177][T13579] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  225.135919][T13577] 
[  225.137000][T13577] ======================================================
[  225.139769][T13577] WARNING: possible circular locking dependency detected
[  225.142548][T13577] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[  225.146594][T13577] ------------------------------------------------------
[  225.149328][T13577] syz.1.3341/13577 is trying to acquire lock:
[  225.151681][T13577] ffff88802085d988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  225.155996][T13577] 
[  225.155996][T13577] but task is already holding lock:
[  225.158898][T13577] ffff88802085da30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  225.162723][T13577] 
[  225.162723][T13577] which lock already depends on the new lock.
[  225.162723][T13577] 
[  225.166793][T13577] 
[  225.166793][T13577] the existing dependency chain (in reverse order) is:
[  225.170370][T13577] 
[  225.170370][T13577] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  225.173471][T13577]        lock_acquire+0x120/0x360
[  225.175545][T13577]        __mutex_lock+0x182/0xe80
[  225.177580][T13577]        refcount_dec_and_mutex_lock+0x30/0xa0
[  225.180104][T13577]        nbd_config_put+0x2c/0x790
[  225.182203][T13577]        nbd_release+0xfe/0x140
[  225.184153][T13577]        bdev_release+0x536/0x650
[  225.186183][T13577]        blkdev_release+0x15/0x20
[  225.188152][T13577]        __fput+0x44c/0xa70
[  225.190008][T13577]        fput_close_sync+0x119/0x200
[  225.192135][T13577]        __x64_sys_close+0x7f/0x110
[  225.194221][T13577]        do_syscall_64+0xfa/0x3b0
[  225.196271][T13577]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.198842][T13577] 
[  225.198842][T13577] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  225.201998][T13577]        lock_acquire+0x120/0x360
[  225.204051][T13577]        __mutex_lock+0x182/0xe80
[  225.206066][T13577]        __del_gendisk+0x129/0x9e0
[  225.208128][T13577]        del_gendisk+0xe8/0x160
[  225.210097][T13577]        nbd_dev_remove_work+0x47/0xe0
[  225.212313][T13577]        process_scheduled_works+0xae1/0x17b0
[  225.214689][T13577]        worker_thread+0x8a0/0xda0
[  225.216757][T13577]        kthread+0x711/0x8a0
[  225.218593][T13577]        ret_from_fork+0x3fc/0x770
[  225.220652][T13577]        ret_from_fork_asm+0x1a/0x30
[  225.222762][T13577] 
[  225.222762][T13577] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  225.226100][T13577]        validate_chain+0xb9b/0x2140
[  225.228254][T13577]        __lock_acquire+0xab9/0xd20
[  225.230327][T13577]        lock_acquire+0x120/0x360
[  225.232313][T13577]        down_write+0x96/0x1f0
[  225.234208][T13577]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  225.236771][T13577]        nbd_start_device+0x16c/0xac0
[  225.238917][T13577]        nbd_genl_connect+0x135b/0x18f0
[  225.241152][T13577]        genl_family_rcv_msg_doit+0x215/0x300
[  225.243529][T13577]        genl_rcv_msg+0x60e/0x790
[  225.245559][T13577]        netlink_rcv_skb+0x208/0x470
[  225.247683][T13577]        genl_rcv+0x28/0x40
[  225.249524][T13577]        netlink_unicast+0x75c/0x8e0
[  225.251675][T13577]        netlink_sendmsg+0x805/0xb30
[  225.253824][T13577]        __sock_sendmsg+0x21c/0x270
[  225.255917][T13577]        ____sys_sendmsg+0x505/0x830
[  225.258027][T13577]        ___sys_sendmsg+0x21f/0x2a0
[  225.260086][T13577]        __x64_sys_sendmsg+0x19b/0x260
[  225.262279][T13577]        do_syscall_64+0xfa/0x3b0
[  225.264264][T13577]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.266762][T13577] 
[  225.266762][T13577] other info that might help us debug this:
[  225.266762][T13577] 
[  225.270779][T13577] Chain exists of:
[  225.270779][T13577]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  225.270779][T13577] 
[  225.276389][T13577]  Possible unsafe locking scenario:
[  225.276389][T13577] 
[  225.279296][T13577]        CPU0                    CPU1
[  225.281356][T13577]        ----                    ----
[  225.283509][T13577]   lock(&nbd->config_lock);
[  225.285410][T13577]                                lock(&disk->open_mutex);
[  225.288195][T13577]                                lock(&nbd->config_lock);
[  225.290938][T13577]   lock(&set->update_nr_hwq_lock);
[  225.293024][T13577] 
[  225.293024][T13577]  *** DEADLOCK ***
[  225.293024][T13577] 
[  225.296268][T13577] 3 locks held by syz.1.3341/13577:
[  225.298357][T13577]  #0: ffffffff8f581f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  225.301633][T13577]  #1: ffffffff8f581d48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  225.305120][T13577]  #2: ffff88802085da30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  225.309058][T13577] 
[  225.309058][T13577] stack backtrace:
[  225.311375][T13577] CPU: 1 UID: 0 PID: 13577 Comm: syz.1.3341 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  225.311395][T13577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.311405][T13577] Call Trace:
[  225.311414][T13577]  <TASK>
[  225.311427][T13577]  dump_stack_lvl+0x189/0x250
[  225.311452][T13577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.311469][T13577]  ? __pfx__printk+0x10/0x10
[  225.311492][T13577]  ? print_lock_name+0xde/0x100
[  225.311513][T13577]  print_circular_bug+0x2ee/0x310
[  225.311533][T13577]  check_noncircular+0x134/0x160
[  225.311554][T13577]  validate_chain+0xb9b/0x2140
[  225.311583][T13577]  __lock_acquire+0xab9/0xd20
[  225.311601][T13577]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  225.311620][T13577]  lock_acquire+0x120/0x360
[  225.311634][T13577]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  225.311656][T13577]  ? kernfs_add_one+0xf0/0x520
[  225.311673][T13577]  down_write+0x96/0x1f0
[  225.311692][T13577]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  225.311712][T13577]  ? __pfx_down_write+0x10/0x10
[  225.311730][T13577]  ? kernfs_add_one+0xf0/0x520
[  225.311746][T13577]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  225.311768][T13577]  ? sysfs_add_file_mode_ns+0x238/0x300
[  225.311786][T13577]  ? sysfs_add_file_mode_ns+0x259/0x300
[  225.311808][T13577]  nbd_start_device+0x16c/0xac0
[  225.311827][T13577]  ? __nla_parse+0x40/0x60
[  225.311843][T13577]  ? device_create_file+0xf4/0x1c0
[  225.311863][T13577]  nbd_genl_connect+0x135b/0x18f0
[  225.311883][T13577]  ? __pfx_nbd_genl_connect+0x10/0x10
[  225.311902][T13577]  ? __nla_parse+0x40/0x60
[  225.311919][T13577]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  225.311976][T13577]  genl_family_rcv_msg_doit+0x215/0x300
[  225.311995][T13577]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  225.312018][T13577]  genl_rcv_msg+0x60e/0x790
[  225.312033][T13577]  ? __pfx_genl_rcv_msg+0x10/0x10
[  225.312046][T13577]  ? __pfx_nbd_genl_connect+0x10/0x10
[  225.312067][T13577]  netlink_rcv_skb+0x208/0x470
[  225.312084][T13577]  ? __pfx_genl_rcv_msg+0x10/0x10
[  225.312099][T13577]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  225.312121][T13577]  ? down_read+0x1ad/0x2e0
[  225.312138][T13577]  genl_rcv+0x28/0x40
[  225.312148][T13577]  netlink_unicast+0x75c/0x8e0
[  225.312167][T13577]  netlink_sendmsg+0x805/0xb30
[  225.312193][T13577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.312215][T13577]  ? aa_sock_msg_perm+0x94/0x160
[  225.312231][T13577]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  225.312248][T13577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.312267][T13577]  __sock_sendmsg+0x21c/0x270
[  225.312283][T13577]  ____sys_sendmsg+0x505/0x830
[  225.312305][T13577]  ? __pfx_____sys_sendmsg+0x10/0x10
[  225.312322][T13577]  ? import_iovec+0x74/0xa0
[  225.312343][T13577]  ___sys_sendmsg+0x21f/0x2a0
[  225.312359][T13577]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.312389][T13577]  ? __fget_files+0x2a/0x420
[  225.312404][T13577]  ? __fget_files+0x3a0/0x420
[  225.312417][T13577]  __x64_sys_sendmsg+0x19b/0x260
[  225.312447][T13577]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  225.312472][T13577]  ? __sys_socketpair+0x4a9/0x560
[  225.312492][T13577]  ? do_syscall_64+0xbe/0x3b0
[  225.312511][T13577]  do_syscall_64+0xfa/0x3b0
[  225.312528][T13577]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.312543][T13577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.312560][T13577]  ? exc_page_fault+0x9f/0xf0
[  225.312572][T13577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.312587][T13577] RIP: 0033:0x7f410fd8e9a9
[  225.312600][T13577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.312614][T13577] RSP: 002b:00007f4110bb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.312629][T13577] RAX: ffffffffffffffda RBX: 00007f410ffb5fa0 RCX: 00007f410fd8e9a9
[  225.312640][T13577] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006
[  225.312650][T13577] RBP: 00007f410fe10d69 R08: 0000000000000000 R09: 0000000000000000
[  225.312660][T13577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.312669][T13577] R13: 0000000000000000 R14: 00007f410ffb5fa0 R15: 00007fff73d78998
[  225.312684][T13577]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  225.580886][T13577] nbd2: detected capacity change from 0 to 127
[  225.822346][  T902] block nbd2: Receive control failed (result -104)
[  225.839244][T13582] syz_tun (unregistering): left promiscuous mode
[  226.064273][   T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.103945][   T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.143032][   T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.192455][   T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.581735][   T13] bond0 (unregistering): Released all slaves
[  226.670989][   T13] bond1 (unregistering): Released all slaves
[  226.756923][   T13] bond2 (unregistering): Released all slaves
[  226.837004][   T13] tipc: Disabling bearer <eth:syzkaller0>
[  226.839615][   T13] tipc: Left network mode
[  227.046792][   T13] batadv_slave_0: left promiscuous mode
[  227.059988][   T13] hsr_slave_0: left promiscuous mode
[  227.062105][   T13] hsr_slave_1: left promiscuous mode
[  227.067232][   T13] veth1_macvtap: left promiscuous mode
[  227.069288][   T13] veth0_macvtap: left promiscuous mode
[  227.071931][   T13] veth1_vlan: left promiscuous mode
[  227.074165][   T13] veth0_vlan: left promiscuous mode

VM DIAGNOSIS:
06:36:05  Registers:
info registers vcpu 0

CPU#0
RAX=0ff90406ff80de00 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff8be28be0 RDI=ffffffff8be28ba0 RBP=ffffffff8172aae5 RSP=ffffc900034df000
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900034df218 R11=ffffffff81ad0050
R12=0000000000000002 R13=ffffffff8e13f0e0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8b6da232 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff920974a00 CR3=0000000027704000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00000000fff81a7b 2020200000000000 XMM03=fffffff800000107 000000000000a1bf
XMM04=9500000031000000 8500000000000003 XMM05=b700000008000002 b7fffffff8000001
XMM06=07000000000000a1 bf00000000fff81a XMM07=7b20202000000000 0025702020000001
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f410fe11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bec60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000014c4 RDI=00000000000014c5 RBP=ffffffff99df6590 RSP=ffffc9000644e6b0
R8 =ffff888107a38237 R9 =1ffff11020f47046 R10=dffffc0000000000 R11=ffffffff85461c50
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461cc7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4110bb86c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f227a9b7bac CR3=0000000027704000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f227a986478 00007f227a986450 XMM03=00007f227a986488 00007f227a986480
XMM04=00007f227b4ed100 00007f227a986440 XMM05=00007f227a986458 00007f227a9864a0
XMM06=00007f227a986498 00007f227a986490 XMM07=00007f227a986488 00007f227a986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f227a811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
