last executing test programs:

2.959562186s ago: executing program 1 (id=4010):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x82)
close(r7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r8=>0x0})
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x2, 0x0, 0x1, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x32, 0x1, 0x8, 0x6, 0xa35}], &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94)
r13 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0)
ppoll(&(0x7f0000000480)=[{r0, 0x4c0}, {r10, 0x8229}, {r12, 0x200}, {r13, 0x9785}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8)
r14 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r16, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r17, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0)

2.686731751s ago: executing program 1 (id=4016):
syz_80211_inject_frame(&(0x7f0000001f80)=@broadcast, &(0x7f0000001fc0)=@ctrl_frame=@ba={{}, {0xf}, @device_b, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x1}, "89b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"}}, 0x94)

2.161200087s ago: executing program 1 (id=4027):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
close(0x3)

1.777692706s ago: executing program 1 (id=4043):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="020000"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)

1.670703331s ago: executing program 1 (id=4046):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
r4 = socket(0x28, 0x5, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x49, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="e10900c700000000000000000000000071103d00000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0xfffffffe, 0x25dfdbfc, {}, [@RTA_GATEWAY={0x14, 0x5, @private1}]}, 0x30}, 0x1, 0x11}, 0x14)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x22, 0x80008, 0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0xffff, @multicast1}}}, 0x88)
setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x20040400)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1, 0x10}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000180), 0x0}, 0x20)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x6, 0x401}, {0xffffffe5, 0x7}]}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}}, 0x20}, 0x1, 0x0, 0x0, 0x28055}, 0x20008090)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)

1.600997498s ago: executing program 1 (id=4048):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)

700.578354ms ago: executing program 2 (id=4058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c0002800800014000000011080002400000000a0500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)

621.177615ms ago: executing program 2 (id=4061):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000005c0)=0xffffffff, 0x4)

509.633666ms ago: executing program 2 (id=4064):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc)

481.619052ms ago: executing program 2 (id=4065):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)

431.487415ms ago: executing program 0 (id=4066):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g\x00\x00\x00', @ANYBLOB="0c00990008000000000000000800428004"], 0x30}}, 0x0)

278.704699ms ago: executing program 0 (id=4067):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4)

207.480191ms ago: executing program 2 (id=4068):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3", 0x2}], 0x1}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

207.243885ms ago: executing program 0 (id=4069):
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000100))

121.853331ms ago: executing program 0 (id=4070):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8)

61.666824ms ago: executing program 0 (id=4071):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x20}}, 0x0)

419.309µs ago: executing program 0 (id=4072):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)

0s ago: executing program 2 (id=4073):
r0 = socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x400c000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0x10})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23604' (ED25519) to the list of known hosts.
syzkaller login: [   56.035768][ T5813] cgroup: Unknown subsys name 'net'
[   56.125259][ T5813] cgroup: Unknown subsys name 'cpuset'
[   56.131487][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.334521][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.726810][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.739132][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.744478][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.748291][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.761539][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.767641][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.784384][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.788468][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.792431][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.795960][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.801105][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.807329][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.811200][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.826358][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.832174][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.156755][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   63.208523][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   63.262422][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   63.334012][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.338059][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.341969][ T5828] bridge_slave_0: entered allmulticast mode
[   63.344918][ T5828] bridge_slave_0: entered promiscuous mode
[   63.389272][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.391824][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.394131][ T5828] bridge_slave_1: entered allmulticast mode
[   63.397011][ T5828] bridge_slave_1: entered promiscuous mode
[   63.427760][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.430935][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.433819][ T5836] bridge_slave_0: entered allmulticast mode
[   63.437709][ T5836] bridge_slave_0: entered promiscuous mode
[   63.493007][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.495907][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.498911][ T5836] bridge_slave_1: entered allmulticast mode
[   63.503424][ T5836] bridge_slave_1: entered promiscuous mode
[   63.509658][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.524696][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.526998][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.529241][ T5832] bridge_slave_0: entered allmulticast mode
[   63.532888][ T5832] bridge_slave_0: entered promiscuous mode
[   63.566098][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.570133][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.573327][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.576179][ T5832] bridge_slave_1: entered allmulticast mode
[   63.579708][ T5832] bridge_slave_1: entered promiscuous mode
[   63.596103][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.628498][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.652316][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.658738][ T5828] team0: Port device team_slave_0 added
[   63.676267][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.685422][ T5836] team0: Port device team_slave_0 added
[   63.689173][ T5828] team0: Port device team_slave_1 added
[   63.694498][ T5836] team0: Port device team_slave_1 added
[   63.766571][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.769341][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.779639][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.786777][ T5832] team0: Port device team_slave_0 added
[   63.789455][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.793010][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.803934][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.809675][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.812562][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.820924][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.828047][ T5832] team0: Port device team_slave_1 added
[   63.844929][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.847685][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.857932][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.890765][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.893469][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.905199][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.933842][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.936060][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.945146][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.992025][ T5828] hsr_slave_0: entered promiscuous mode
[   63.995450][ T5828] hsr_slave_1: entered promiscuous mode
[   64.004808][ T5836] hsr_slave_0: entered promiscuous mode
[   64.007267][ T5836] hsr_slave_1: entered promiscuous mode
[   64.009512][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.013247][ T5836] Cannot create hsr debugfs directory
[   64.069301][ T5832] hsr_slave_0: entered promiscuous mode
[   64.073849][ T5832] hsr_slave_1: entered promiscuous mode
[   64.076123][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.078598][ T5832] Cannot create hsr debugfs directory
[   64.410024][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.422192][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.429435][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.446340][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.494642][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.513556][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.532216][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.545267][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.602600][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.613403][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.628457][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.641051][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.728525][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.776887][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   64.786761][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.802679][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.805715][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.827163][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.829939][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.833729][ T5834] Bluetooth: hci0: command tx timeout
[   64.847076][ T5834] Bluetooth: hci2: command tx timeout
[   64.847711][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   64.868727][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.871703][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.883167][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.896501][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.898973][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.911049][ T5834] Bluetooth: hci1: command tx timeout
[   64.942764][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   64.974444][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.976795][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.993060][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.995367][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.019450][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.024435][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.225638][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.234843][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.334859][ T5828] veth0_vlan: entered promiscuous mode
[   65.342382][ T5836] veth0_vlan: entered promiscuous mode
[   65.356394][ T5828] veth1_vlan: entered promiscuous mode
[   65.364353][ T5836] veth1_vlan: entered promiscuous mode
[   65.374262][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.437360][ T5836] veth0_macvtap: entered promiscuous mode
[   65.445370][ T5828] veth0_macvtap: entered promiscuous mode
[   65.449731][ T5836] veth1_macvtap: entered promiscuous mode
[   65.463749][ T5828] veth1_macvtap: entered promiscuous mode
[   65.505883][ T5832] veth0_vlan: entered promiscuous mode
[   65.516875][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.524971][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.536353][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.544627][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.547535][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.551520][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.554164][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.568063][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.576734][ T5832] veth1_vlan: entered promiscuous mode
[   65.585689][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.589150][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.594831][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.598144][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.668654][ T5832] veth0_macvtap: entered promiscuous mode
[   65.703896][ T5832] veth1_macvtap: entered promiscuous mode
[   65.745813][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.757126][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.761529][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.774447][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.794086][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.797547][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.804825][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.808402][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.825421][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.827891][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.895063][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.898097][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.908095][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.918839][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.981147][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.984330][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.021817][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.024861][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.057034][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.293905][ T5906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.359646][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   66.726669][ T5922] netlink: 'syz.1.12': attribute type 10 has an invalid length.
[   66.729961][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'.
[   66.738158][ T5922] veth0_vlan: entered allmulticast mode
[   66.742735][ T5922] bridge0: port 3(veth0_vlan) entered blocking state
[   66.745701][ T5922] bridge0: port 3(veth0_vlan) entered disabled state
[   66.762361][ T5922] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   66.861663][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'.
[   66.869843][ T5932] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   66.881530][ T5932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.911613][ T5834] Bluetooth: hci2: command tx timeout
[   66.913444][ T5831] Bluetooth: hci0: command tx timeout
[   66.995197][ T5831] Bluetooth: hci1: command tx timeout
[   67.016207][ T5944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.365637][ T5969] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET)
[   67.412159][ T5969] xt_CT: No such helper "syz0"
[   67.526642][ T5974] netlink: 'syz.0.37': attribute type 21 has an invalid length.
[   67.530163][ T5974] netlink: 156 bytes leftover after parsing attributes in process `syz.0.37'.
[   67.645861][ T5979] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   67.649654][ T5979] macsec1: entered promiscuous mode
[   67.652999][ T5979] macsec1: entered allmulticast mode
[   67.654863][ T5979] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[   67.659337][ T5979] Zero length message leads to an empty skb
[   68.313819][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'.
[   68.991728][ T5831] Bluetooth: hci0: command tx timeout
[   68.991958][ T5834] Bluetooth: hci2: command tx timeout
[   69.071008][ T5834] Bluetooth: hci1: command tx timeout
[   69.256580][ T6055] pimreg3: entered allmulticast mode
[   69.263306][ T6054] pimreg3: left allmulticast mode
[   69.440944][ T6062] veth3: entered promiscuous mode
[   69.452726][ T6062] warning: `syz.0.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.508863][ T6066] Cannot find add_set index 0 as target
[   69.740914][ T6079] netlink: 52 bytes leftover after parsing attributes in process `syz.1.86'.
[   69.750087][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'.
[   70.174875][ T6098] netlink: 'syz.2.93': attribute type 5 has an invalid length.
[   70.183509][ T6098] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.93'.
[   70.521971][ T6118] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   70.545658][ T5824] IPVS: starting estimator thread 0...
[   70.661896][ T6122] IPVS: using max 62 ests per chain, 148800 per kthread
[   70.764920][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[   70.768684][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.110'.
[   70.786450][ T6134] gtp0: entered promiscuous mode
[   70.788542][ T6134] gtp0: entered allmulticast mode
[   71.012007][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.014767][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.073290][ T5834] Bluetooth: hci2: command tx timeout
[   71.074069][ T5831] Bluetooth: hci0: command tx timeout
[   71.113631][ T6154] x_tables: ip_tables: udp match: only valid for protocol 17
[   71.162747][ T5831] Bluetooth: hci1: command tx timeout
[   71.507152][ T6180] netlink: 'syz.2.133': attribute type 4 has an invalid length.
[   71.530682][ T6180] netlink: 'syz.2.133': attribute type 4 has an invalid length.
[   71.668098][ T5860] nci: nci_rsp_packet: unknown rsp opcode 0x204
[   71.677708][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'.
[   72.787548][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.152'.
[   72.791408][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.152'.
[   72.794966][ T6224] netlink: 'syz.2.152': attribute type 4 has an invalid length.
[   72.800791][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'.
[   72.882750][ T6228] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.882896][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.903624][ T6231] netlink: 92 bytes leftover after parsing attributes in process `syz.0.156'.
[   72.907457][ T6231] tc_dump_action: action bad kind
[   72.975435][ T6235] netlink: 104 bytes leftover after parsing attributes in process `syz.2.158'.
[   73.020681][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'.
[   73.092740][    C1] Unknown status report in ack skb
[   73.557352][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   73.564164][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.988964][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'.
[   74.002992][ T6303] veth0: entered promiscuous mode
[   74.016157][ T6303] veth0: left promiscuous mode
[   74.040190][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[   74.521742][ T6340] netlink: 'syz.0.208': attribute type 1 has an invalid length.
[   74.538214][ T6340] netlink: 'syz.0.208': attribute type 1 has an invalid length.
[   74.552047][ T6343] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   74.571573][ T6344] syzkaller1: entered promiscuous mode
[   74.574128][ T6344] syzkaller1: entered allmulticast mode
[   74.966430][ T6365] tun0: tun_chr_ioctl cmd 1074025681
[   75.973448][ T6432] openvswitch: netlink: IPv4 tun info is not correct
[   76.257519][ T6451] netlink: 'syz.0.254': attribute type 5 has an invalid length.
[   76.432923][   T10] IPVS: starting estimator thread 0...
[   76.436454][ T6457] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   76.520530][ T6463] IPVS: using max 44 ests per chain, 105600 per kthread
[   76.703766][ T6474] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   77.146794][ T6497] trusted_key: syz.1.272 sent an empty control message without MSG_MORE.
[   77.152924][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[   77.308745][ T6504] __nla_validate_parse: 8 callbacks suppressed
[   77.308765][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'.
[   77.598149][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'.
[   78.722643][ T6555] netlink: 596 bytes leftover after parsing attributes in process `syz.1.298'.
[   78.860747][ T6559] xt_CT: No such helper "syz0"
[   78.962527][ T6564] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[   79.068207][ T6568] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   79.072054][ T6568] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   79.075071][ T6568] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   79.077994][ T6568] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   79.088461][ T6568] bond1: (slave geneve2): making interface the new active one
[   79.093981][ T6568] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   79.139509][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'.
[   79.156961][ T6564] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.490835][ T6586] netlink: 'syz.1.310': attribute type 10 has an invalid length.
[   79.510966][ T6586] team0: Cannot enslave team device to itself
[   79.517488][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'.
[   80.515729][ T6621] ipvlan2: entered promiscuous mode
[   80.566816][ T6625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.329'.
[   81.241778][  T124] cfg80211: failed to load regulatory.db
[   82.187934][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'.
[   83.211442][ T6727] xt_cgroup: invalid path, errno=-2
[   83.223832][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.372'.
[   83.438884][ T6735] Cannot find set identified by id 0 to match
[   83.833643][ T6750] netlink: 248 bytes leftover after parsing attributes in process `syz.0.385'.
[   85.183185][ T6808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.406'.
[   85.186507][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.406'.
[   85.779649][ T6834] openvswitch: netlink: Duplicate or invalid key (type 0).
[   85.786858][ T6834] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.959617][ T6840] block nbd1: not configured, cannot reconfigure
[   85.964083][ T6840] netlink: 64 bytes leftover after parsing attributes in process `syz.1.417'.
[   85.967705][ T6840] netlink: 64 bytes leftover after parsing attributes in process `syz.1.417'.
[   86.017898][ T6842] bond0: option min_links: invalid value (18446744073709551604)
[   86.030608][ T6842] bond0: option min_links: allowed values 0 - 2147483647
[   86.193373][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'.
[   86.215873][ T6844] xt_CT: You must specify a L4 protocol and not use inversions on it
[   86.569879][ T6866] netlink: 'syz.0.428': attribute type 6 has an invalid length.
[   86.733678][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.738374][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.905665][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.916260][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.030456][ T6872] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.033320][ T6872] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.036717][ T6872] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.039469][ T6872] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.101930][ T6872] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[   87.106046][ T6872] macsec1: left promiscuous mode
[   87.112445][ T6872] veth3: left promiscuous mode
[   87.119016][ T6872] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   87.123393][ T6872] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   87.127024][ T6872] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   87.130834][ T6872] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   87.135847][ T6875] netlink: 'syz.2.431': attribute type 5 has an invalid length.
[   87.225081][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[   87.229660][ T6879] IPVS: Error joining to the multicast group
[   87.275469][ T6881] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   87.278594][ T6881] netlink: 228 bytes leftover after parsing attributes in process `syz.2.434'.
[   88.013898][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'.
[   88.032046][ T6936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.065768][ T6936] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.348003][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'.
[   88.758219][ T6981] netlink: 'syz.0.482': attribute type 1 has an invalid length.
[   88.764772][ T6981] netlink: 232 bytes leftover after parsing attributes in process `syz.0.482'.
[   88.767851][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'.
[   88.857097][ T6987] netlink: 'syz.0.485': attribute type 2 has an invalid length.
[   89.197300][ T7014] netlink: 'syz.1.495': attribute type 5 has an invalid length.
[   89.201727][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'.
[   89.270736][ T7018] netlink: 'syz.0.496': attribute type 1 has an invalid length.
[   89.449447][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.505'.
[   89.815826][ T7069] netlink: 'syz.2.515': attribute type 11 has an invalid length.
[   89.824614][ T7069] netlink: 224 bytes leftover after parsing attributes in process `syz.2.515'.
[   89.928693][ T7080] netlink: 'syz.1.520': attribute type 11 has an invalid length.
[   89.931335][ T7080] netlink: 224 bytes leftover after parsing attributes in process `syz.1.520'.
[   90.892928][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'.
[   90.961817][   T33] audit: type=1800 audit(1752653017.156:2): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.533" name="blkio.bfq.time_recursive" dev="tmpfs" ino=990 res=0 errno=0
[   91.271879][ T7142] batman_adv: batadv0: Adding interface: macvlan2
[   91.274476][ T7142] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.288046][ T7142] batman_adv: batadv0: Interface activated: macvlan2
[   91.798132][ T7173] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   91.969586][ T7182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'.
[   93.487060][ T7301] netlink: 'syz.1.613': attribute type 3 has an invalid length.
[   93.707244][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.622'.
[   93.712337][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.622'.
[   93.744694][ T7323] netlink: 52 bytes leftover after parsing attributes in process `syz.0.624'.
[   93.924968][ T7336] tun0: tun_chr_ioctl cmd 1074025677
[   93.927193][ T7336] tun0: linktype set to 768
[   94.017783][ T7346] netlink: 'syz.2.634': attribute type 1 has an invalid length.
[   94.023314][ T7346] netlink: 72 bytes leftover after parsing attributes in process `syz.2.634'.
[   94.118552][ T7350] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[   94.353541][ T7360] syz.2.638 (7360) used greatest stack depth: 19696 bytes left
[   94.516723][ T7368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.642'.
[   95.205436][ T7381] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.208164][ T7381] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.212349][ T7381] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.214944][ T7381] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.662841][ T7399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.656'.
[   95.948713][ T7411] syzkaller0: entered promiscuous mode
[   95.953130][ T7411] syzkaller0: entered allmulticast mode
[   97.504452][ T7374] Set syz1 is full, maxelem 65536 reached
[   97.751624][ T7419] batadv1: entered allmulticast mode
[   97.754972][ T7419] 8021q: adding VLAN 0 to HW filter on device batadv1
[   97.839697][ T7425] netlink: 'syz.1.668': attribute type 2 has an invalid length.
[   97.900125][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'.
[   98.176639][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'.
[   98.245888][ T7454] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   98.253521][ T7454] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   98.293186][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.677'.
[   98.525344][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'.
[   98.829846][ T7498] __nla_validate_parse: 1 callbacks suppressed
[   98.829863][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'.
[   98.836332][ T7498] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   98.978968][ T7510] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   99.628038][ T7550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.721'.
[   99.640447][ T7550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.721'.
[   99.949161][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.730'.
[  100.389964][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'.
[  100.502387][ T7599] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.743'.
[  100.738229][ T7611] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  100.753930][ T7611] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  100.925056][ T7625] netlink: 'syz.2.756': attribute type 11 has an invalid length.
[  100.927727][ T7625] netlink: 'syz.2.756': attribute type 4 has an invalid length.
[  100.930220][ T7625] netlink: 224 bytes leftover after parsing attributes in process `syz.2.756'.
[  101.004156][ T7630] netlink: 'syz.2.758': attribute type 1 has an invalid length.
[  101.678825][ T7666] netlink: 'syz.0.772': attribute type 10 has an invalid length.
[  102.114248][ T7706] netlink: 108 bytes leftover after parsing attributes in process `syz.2.789'.
[  102.259154][ T7718] netlink: 'syz.1.795': attribute type 1 has an invalid length.
[  102.309859][ T7723] netlink: 'syz.2.797': attribute type 6 has an invalid length.
[  102.315432][ T7723] netlink: 'syz.2.797': attribute type 6 has an invalid length.
[  102.355542][ T7728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'.
[  102.358444][ T7728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'.
[  102.578126][ T7743] syz_tun: entered promiscuous mode
[  102.581239][ T7743] vlan2: entered promiscuous mode
[  103.098954][ T7771] sctp: [Deprecated]: syz.2.818 (pid 7771) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.098954][ T7771] Use struct sctp_sack_info instead
[  103.560645][ T7815] netlink: 'syz.1.833': attribute type 1 has an invalid length.
[  103.595984][ T7815] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  103.600438][ T7815] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  103.605962][ T7815] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  103.609236][ T7815] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  103.615619][ T7815] bond1: (slave geneve2): making interface the new active one
[  103.619218][ T7815] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  103.647696][ T7815] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  103.676202][ T7815] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.717291][ T7829] netlink: 'syz.2.838': attribute type 1 has an invalid length.
[  103.763801][ T7837] netlink: 'syz.0.839': attribute type 14 has an invalid length.
[  103.797188][ T7829] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  103.813767][ T7829] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.826201][ T7829] veth3: entered promiscuous mode
[  103.828900][ T5861] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  103.834034][ T7829] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  103.887689][ T7844] netlink: 'syz.1.842': attribute type 1 has an invalid length.
[  103.890026][ T7844] __nla_validate_parse: 9 callbacks suppressed
[  103.890032][ T7844] netlink: 232 bytes leftover after parsing attributes in process `syz.1.842'.
[  103.915867][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'.
[  103.944587][ T5861] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  104.034348][ T7859] syz_tun: entered allmulticast mode
[  104.051186][ T7859] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.847'.
[  104.057965][ T7857] syz_tun: left allmulticast mode
[  104.145290][ T7867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.443660][ T7890] tipc: Started in network mode
[  104.445660][ T7890] tipc: Node identity 76059379cba9, cluster identity 4711
[  104.448447][ T7890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.455432][ T7890] syzkaller0: entered promiscuous mode
[  104.457698][ T7890] syzkaller0: entered allmulticast mode
[  104.472531][ T7890] tipc: Resetting bearer <eth:syzkaller0>
[  104.476569][ T7889] tipc: Resetting bearer <eth:syzkaller0>
[  104.493035][ T7889] tipc: Disabling bearer <eth:syzkaller0>
[  104.565046][ T7899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.864'.
[  106.050254][ T7918] macvlan0: entered promiscuous mode
[  106.056374][ T7918] validate_nla: 1 callbacks suppressed
[  106.056409][ T7918] netlink: 'syz.2.870': attribute type 1 has an invalid length.
[  106.066126][ T7918] netlink: 'syz.2.870': attribute type 2 has an invalid length.
[  106.073096][ T7926] netlink: 'syz.1.873': attribute type 39 has an invalid length.
[  106.162267][ T7931] tun0: tun_chr_ioctl cmd 1074025673
[  106.164903][ T7931] netlink: 'syz.0.875': attribute type 9 has an invalid length.
[  106.179552][ T7931] netlink: 272 bytes leftover after parsing attributes in process `syz.0.875'.
[  106.488287][ T7956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.882'.
[  106.667308][ T7974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.894'.
[  106.837392][ T7986] netlink: 'syz.2.900': attribute type 33 has an invalid length.
[  106.839881][ T7986] netlink: 152 bytes leftover after parsing attributes in process `syz.2.900'.
[  106.855629][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.901'.
[  107.109028][ T8008] netlink: 'syz.0.911': attribute type 1 has an invalid length.
[  107.155688][ T8008] bond2: (slave gretap1): making interface the new active one
[  107.159483][ T8008] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  107.288812][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'.
[  107.325089][ T8021] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  107.330693][ T8021] macvtap0: entered allmulticast mode
[  107.332386][ T8021] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  107.336338][ T8021] batman_adv: batadv0: Adding interface: macvtap0
[  107.338496][ T8021] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.347705][ T8021] batman_adv: batadv0: Interface activated: macvtap0
[  107.595232][ T8027] syzkaller0: entered promiscuous mode
[  107.597200][ T8027] syzkaller0: entered allmulticast mode
[  108.709897][ T8037] netlink: 'syz.1.926': attribute type 10 has an invalid length.
[  108.972301][ T8071] netlink: 'syz.1.939': attribute type 1 has an invalid length.
[  109.162854][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'.
[  109.270291][ T8093] netlink: 116 bytes leftover after parsing attributes in process `syz.0.951'.
[  110.365155][ T8137] netlink: 56 bytes leftover after parsing attributes in process `syz.1.971'.
[  110.394261][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811ddd9400: rx timeout, send abort
[  110.687441][ T8162] netlink: 72 bytes leftover after parsing attributes in process `syz.0.983'.
[  110.898201][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811ddd9400: abort rx timeout. Force session deactivation
[  111.680572][ T8246] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1023'.
[  111.906335][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'.
[  111.927649][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'.
[  111.946423][ T8272] xt_CT: You must specify a L4 protocol and not use inversions on it
[  112.255700][ T8295] ieee802154 phy0 wpan0: encryption failed: -22
[  113.004541][ T8330] wg1 speed is unknown, defaulting to 1000
[  113.016668][ T8330] wg1 speed is unknown, defaulting to 1000
[  113.019680][ T8330] wg1 speed is unknown, defaulting to 1000
[  113.040031][ T8330] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  113.077932][ T8330] wg1 speed is unknown, defaulting to 1000
[  113.081730][ T8330] wg1 speed is unknown, defaulting to 1000
[  113.086135][ T8330] wg1 speed is unknown, defaulting to 1000
[  113.245647][ T8343] Set syz1 is full, maxelem 65536 reached
[  113.372760][ T8352] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1065'.
[  113.422741][ T5882] hid-generic 0005:10CF:0007.0001: collection stack underflow
[  113.425389][ T5882] hid-generic 0005:10CF:0007.0001: item 0 0 0 12 parsing failed
[  113.427991][ T5882] hid-generic 0005:10CF:0007.0001: probe with driver hid-generic failed with error -22
[  113.842435][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'.
[  113.871853][ T8395] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  114.112299][ T8410] wg1 speed is unknown, defaulting to 1000
[  114.445960][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'.
[  114.668725][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1097'.
[  114.841640][ T8441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.887226][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1104'.
[  115.034216][ T8453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1109'.
[  115.158627][ T8463] batadv_slave_1: entered promiscuous mode
[  115.188360][ T8462] batadv_slave_1: left promiscuous mode
[  115.311350][ T8470] syzkaller0: entered promiscuous mode
[  115.313771][ T8470] syzkaller0: entered allmulticast mode
[  116.630517][ T8487] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1124'.
[  116.730853][ T8494] xt_addrtype: ipv6 does not support BROADCAST matching
[  116.733950][ T8485] syzkaller0: entered promiscuous mode
[  116.735628][ T8485] syzkaller0: entered allmulticast mode
[  118.581134][ T5831] Bluetooth: hci2: link tx timeout
[  118.583737][ T5831] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.787139][ T8549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.017359][ T8562] xt_TPROXY: Can be used only with -p tcp or -p udp
[  119.502048][ T8590] wg1 speed is unknown, defaulting to 1000
[  119.886122][ T8607] batadv_slave_1: entered promiscuous mode
[  119.919440][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1173'.
[  119.938157][ T8606] batadv_slave_1: left promiscuous mode
[  120.001959][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1174'.
[  120.368205][   T33] audit: type=1800 audit(1752653046.566:3): pid=8617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1177" name=14 dev="tmpfs" ino=1735 res=0 errno=0
[  120.600546][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  120.839102][ T8632] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  120.856046][ T8632] bridge_slave_0: left allmulticast mode
[  120.858639][ T8632] bridge_slave_0: left promiscuous mode
[  120.861915][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.870078][ T8632] bridge_slave_1: left allmulticast mode
[  120.876213][ T8632] bridge_slave_1: left promiscuous mode
[  120.878958][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.901537][ T8632] bond0: (slave bond_slave_0): Releasing backup interface
[  120.915616][ T8632] bond0: (slave bond_slave_1): Releasing backup interface
[  120.936866][ T8632] team0: Port device team_slave_0 removed
[  120.945055][ T8632] team0: Port device team_slave_1 removed
[  120.947702][ T8632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.958680][ T8632] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.962837][ T8636] netlink: 'syz.1.1184': attribute type 10 has an invalid length.
[  120.976073][ T8632] bond1: (slave geneve2): Releasing active interface
[  120.978348][ T8632] bond1: (slave geneve2): the permanent HWaddr of slave - 16:3c:1a:55:76:8a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  120.985253][ T8632] bond1: (slave ip6gretap1): making interface the new active one
[  120.988314][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1186'.
[  120.995054][ T8632] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  121.004232][ T8632] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  121.007694][ T8632] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  121.013801][ T8632] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  121.027842][ T8632] bond1: (slave ip6gretap1): Releasing active interface
[  121.037759][ T5824] wg1 speed is unknown, defaulting to 1000
[  121.057071][ T8636] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  121.066558][ T8636] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.074875][ T8636] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  121.088323][ T8639] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  121.092450][ T8639] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  121.108163][ T8640] bridge4: port 1(veth7) entered blocking state
[  121.115956][ T8640] bridge4: port 1(veth7) entered disabled state
[  121.119701][ T8640] veth7: entered allmulticast mode
[  121.125288][ T8640] veth7: entered promiscuous mode
[  121.133318][ T8638] bridge4: port 2(veth0_to_bond) entered blocking state
[  121.141926][ T8638] bridge4: port 2(veth0_to_bond) entered disabled state
[  121.145032][ T8638] veth0_to_bond: entered allmulticast mode
[  121.149398][ T8638] veth0_to_bond: entered promiscuous mode
[  121.164446][ T8638] vlan2: entered allmulticast mode
[  121.166469][ T8638] veth1: entered allmulticast mode
[  121.169024][ T8638] bridge4: port 3(vlan2) entered blocking state
[  121.172119][ T8638] bridge4: port 3(vlan2) entered disabled state
[  121.176995][ T8638] vlan2: entered promiscuous mode
[  121.178670][ T8638] veth1: entered promiscuous mode
[  121.287798][ T8644] netlink: 'syz.0.1188': attribute type 25 has an invalid length.
[  121.329032][ T8644] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1188'.
[  121.752496][ T8659] 8021q: adding VLAN 0 to HW filter on device bond2
[  121.874800][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'.
[  121.879829][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'.
[  121.885206][ T8671] netlink: 'syz.1.1200': attribute type 18 has an invalid length.
[  121.904281][ T8673] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1201'.
[  122.183609][ T8691] syz.1.1210 uses old SIOCAX25GETINFO
[  122.768915][ T8726] netlink: 'syz.1.1224': attribute type 1 has an invalid length.
[  122.772177][ T8726] netlink: 'syz.1.1224': attribute type 4 has an invalid length.
[  122.775187][ T8726] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1224'.
[  123.139598][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1231'.
[  123.166416][ T8760] netlink: 'syz.2.1232': attribute type 1 has an invalid length.
[  123.197601][ T8760] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  123.204465][ T8760] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  123.258421][ T8767] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[  123.262020][ T8767] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1234'.
[  123.268614][ T8765] gretap2: entered promiscuous mode
[  123.290049][ T8765] bond2: (slave gretap2): making interface the new active one
[  123.307822][ T8765] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  123.343215][ T8760] macvlan2: entered promiscuous mode
[  123.346925][ T8760] macvlan2: entered allmulticast mode
[  123.349410][ T8760] bond2: entered promiscuous mode
[  123.353272][ T8760] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  123.363355][ T8760] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  123.381546][ T8760] bond2: left promiscuous mode
[  123.463794][ T8780] tipc: Started in network mode
[  123.465620][ T8780] tipc: Node identity 069ad42d699, cluster identity 4711
[  123.468479][ T8780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.474702][ T8780] syzkaller0: entered promiscuous mode
[  123.477591][ T8780] syzkaller0: entered allmulticast mode
[  123.540768][ T8780] tipc: Resetting bearer <eth:syzkaller0>
[  123.546945][ T8779] tipc: Resetting bearer <eth:syzkaller0>
[  123.630309][ T8779] tipc: Disabling bearer <eth:syzkaller0>
[  123.917899][ T8826] @: renamed from bond_slave_0 (while UP)
[  124.237887][ T8851] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  125.703625][ T8910] netlink: 'syz.2.1281': attribute type 1 has an invalid length.
[  125.706087][ T8910] __nla_validate_parse: 4 callbacks suppressed
[  125.706096][ T8910] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1281'.
[  125.722918][ T8912] netlink: 'syz.0.1282': attribute type 83 has an invalid length.
[  126.114001][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'.
[  126.122141][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'.
[  126.155896][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'.
[  126.478640][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'.
[  126.593862][ T8985] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1316'.
[  126.598469][ T8985] bridge: RTM_NEWNEIGH with invalid ether address
[  126.897273][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'.
[  127.233640][ T9022] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  127.705323][ T9047] tipc: Started in network mode
[  127.707155][ T9047] tipc: Node identity ce6b6d362ea3, cluster identity 4711
[  127.709433][ T9047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.726071][ T9047] syzkaller0: entered promiscuous mode
[  127.728056][ T9047] syzkaller0: entered allmulticast mode
[  127.758091][ T9047] tipc: Resetting bearer <eth:syzkaller0>
[  127.763302][ T9046] tipc: Resetting bearer <eth:syzkaller0>
[  127.788807][ T9046] tipc: Disabling bearer <eth:syzkaller0>
[  127.951335][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[  127.988769][ T9062] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  128.848615][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'.
[  128.965279][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'.
[  129.037304][ T9096] team0: Port device team_slave_0 removed
[  129.193860][ T9099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.412349][ T9103] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  129.531964][ T9106] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1372'.
[  129.644847][ T9111] xt_CT: You must specify a L4 protocol and not use inversions on it
[  130.052837][ T9124] team0 (unregistering): Port device team_slave_0 removed
[  130.063320][ T9124] team0 (unregistering): Port device team_slave_1 removed
[  130.543160][ T9156] netlink: 'syz.0.1393': attribute type 16 has an invalid length.
[  130.550850][ T9156] netlink: 'syz.0.1393': attribute type 17 has an invalid length.
[  130.565301][ T9156] batman_adv: batadv0: Interface deactivated: macvlan2
[  130.580991][ T9156] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.584345][ T9156] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.596271][ T9156] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.601466][ T9161] IPv6: NLM_F_REPLACE set, but no existing node found!
[  130.604821][ T9156] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.726390][ T9165] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1399'.
[  130.826090][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1403'.
[  130.829184][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'.
[  130.837605][ T9173] netlink: 'syz.2.1403': attribute type 10 has an invalid length.
[  130.938559][ T9177] netlink: 'syz.2.1405': attribute type 10 has an invalid length.
[  130.944024][ T9177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1405'.
[  130.950627][ T9177] batman_adv: batadv0: Adding interface: virt_wifi0
[  130.953204][ T9177] batman_adv: batadv0: Interface activated: virt_wifi0
[  131.289142][ T9205] 8021q: VLANs not supported on bond0
[  131.606364][ T9235] ipt_REJECT: TCP_RESET invalid for non-tcp
[  131.724825][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1436'.
[  131.826752][ T9247] wg1 speed is unknown, defaulting to 1000
[  131.857097][ T9255] netlink: 'syz.1.1441': attribute type 1 has an invalid length.
[  132.385078][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1461'.
[  132.401288][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1461'.
[  132.439161][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.445407][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.556486][ T9307] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1467'.
[  132.672386][ T9316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1471'.
[  132.676818][ T9316] netlink: 'syz.0.1471': attribute type 7 has an invalid length.
[  132.680104][ T9316] netlink: 'syz.0.1471': attribute type 8 has an invalid length.
[  132.684583][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1471'.
[  132.695543][ T9316] ip6gretap0: entered promiscuous mode
[  132.698128][ T9316] syz_tun: entered promiscuous mode
[  132.748060][ T9316] ip6gretap0: left promiscuous mode
[  132.756374][ T9316] syz_tun: left promiscuous mode
[  133.047074][ T9332] netlink: 'syz.1.1475': attribute type 16 has an invalid length.
[  133.052221][ T9332] netlink: 'syz.1.1475': attribute type 17 has an invalid length.
[  133.069588][ T9332] 8021q: adding VLAN 0 to HW filter on device team0
[  133.082842][ T9332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.667251][ T9360] xt_CT: No such helper "snmp"
[  134.103995][ T9396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.146951][ T9396] syzkaller0: entered promiscuous mode
[  134.159382][ T9396] syzkaller0: entered allmulticast mode
[  134.162557][ T9396] tipc: Resetting bearer <eth:syzkaller0>
[  134.176105][ T9394] tipc: Resetting bearer <eth:syzkaller0>
[  135.154095][ T5882] tipc: Node number set to 3771231542
[  135.724167][ T9394] tipc: Disabling bearer <eth:syzkaller0>
[  135.791107][ T9419] __nla_validate_parse: 20 callbacks suppressed
[  135.791120][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'.
[  135.812194][ T9419] geneve2: entered promiscuous mode
[  135.814408][ T9419] geneve2: entered allmulticast mode
[  136.270799][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'.
[  136.457771][ T9466] ip6t_srh: unknown srh invflags 4449
[  136.972746][ T9487] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.976353][ T9487] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.979739][ T9487] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.985747][ T9487] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.027076][ T5882] wg1 speed is unknown, defaulting to 1000
[  137.039298][ T5882] syz0: Port: 1 Link DOWN
[  137.302836][ T9505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1549'.
[  137.522178][   T33] audit: type=1800 audit(1752653063.716:4): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1549" name="cgroup.controllers" dev="tmpfs" ino=2703 res=0 errno=0
[  137.633796][ T9522] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  138.013744][ T9551] only policy match revision 0 supported
[  138.013760][ T9551] unable to load match
[  138.084278][ T9558] netlink: 'syz.0.1577': attribute type 11 has an invalid length.
[  138.087433][ T9558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1577'.
[  138.336300][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'.
[  138.448157][ T9589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.452928][ T9589] syzkaller0: entered promiscuous mode
[  138.454603][ T9589] syzkaller0: entered allmulticast mode
[  138.476383][ T9589] tipc: Resetting bearer <eth:syzkaller0>
[  138.479498][ T9588] tipc: Resetting bearer <eth:syzkaller0>
[  138.494969][ T9588] tipc: Disabling bearer <eth:syzkaller0>
[  138.531869][ T9595] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1594'.
[  138.534624][ T9595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1594'.
[  138.537342][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1594'.
[  138.540105][ T9595] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1594'.
[  138.798327][ T9608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1599'.
[  139.625196][ T9635] wg1 speed is unknown, defaulting to 1000
[  139.726240][ T9642] delete_channel: no stack
[  140.184646][ T9683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.195697][ T9683] syzkaller0: entered promiscuous mode
[  140.202639][ T9683] syzkaller0: entered allmulticast mode
[  140.245968][ T9683] tipc: Resetting bearer <eth:syzkaller0>
[  140.257792][ T9682] tipc: Resetting bearer <eth:syzkaller0>
[  140.279345][ T9682] tipc: Disabling bearer <eth:syzkaller0>
[  141.293683][ T9759] __nla_validate_parse: 2 callbacks suppressed
[  141.293699][ T9759] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1669'.
[  141.298608][ T9759] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1669'.
[  141.526308][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'.
[  141.530221][ T9774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1677'.
[  141.758438][ T9788] wg1 speed is unknown, defaulting to 1000
[  141.900059][ T9796] wg1 speed is unknown, defaulting to 1000
[  142.049989][ T9788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1681'.
[  142.403604][ T9818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1694'.
[  143.124117][ T9845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1703'.
[  143.673448][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1713'.
[  143.709698][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'.
[  143.718382][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'.
[  143.978314][ T9894] netlink: 'syz.2.1724': attribute type 1 has an invalid length.
[  143.990465][ T9894] netlink: 'syz.2.1724': attribute type 2 has an invalid length.
[  143.994426][ T9894] netlink: 'syz.2.1724': attribute type 1 has an invalid length.
[  143.996770][ T9894] netlink: 'syz.2.1724': attribute type 2 has an invalid length.
[  144.071502][ T9900] netlink: 'syz.0.1727': attribute type 1 has an invalid length.
[  144.102133][ T9899] xt_hashlimit: size too large, truncated to 1048576
[  144.259025][ T9913] netlink: 'syz.2.1731': attribute type 2 has an invalid length.
[  144.262705][ T9913] netlink: 'syz.2.1731': attribute type 1 has an invalid length.
[  144.351514][ T9920] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  144.354900][ T9920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.703622][ T9939] xt_ecn: cannot match TCP bits for non-tcp packets
[  144.809702][ T9943] wg1 speed is unknown, defaulting to 1000
[  144.829001][  T124] hid-generic 0005:16BF:5505.0002: item fetching failed at offset 0/3
[  144.835255][  T124] hid-generic 0005:16BF:5505.0002: probe with driver hid-generic failed with error -22
[  146.540848][T10021] __nla_validate_parse: 3 callbacks suppressed
[  146.540861][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1779'.
[  146.679312][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'.
[  146.683812][T10023] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  146.823567][T10043] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1788'.
[  147.015761][T10064] netlink: 'syz.0.1796': attribute type 1 has an invalid length.
[  147.020244][T10064] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1796'.
[  147.210914][T10079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1805'.
[  147.741709][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'.
[  148.004601][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1818'.
[  148.309148][T10162] tipc: Enabled bearer <eth:gre0>, priority 10
[  148.362622][T10167] netlink: 'syz.0.1828': attribute type 11 has an invalid length.
[  148.616946][T10175] IPVS: Scheduler module ip_vs_ not found
[  149.169466][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'.
[  149.285987][T10214] openvswitch: netlink: IP tunnel dst address not specified
[  150.004433][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'.
[  150.197966][T10269] atomic_op ffff888032377198 conn xmit_atomic 0000000000000000
[  150.285361][T10278] openvswitch: netlink: Message has 4784 unknown bytes.
[  150.288857][T10278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.461472][T10289] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  150.509081][T10295] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  150.518835][T10295] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  150.538262][T10299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1885'.
[  150.572911][T10295] wg1 speed is unknown, defaulting to 1000
[  150.619378][T10305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.978026][T10330] openvswitch: netlink: Message has 4 unknown bytes.
[  151.049865][T10337] netlink: 'syz.0.1905': attribute type 1 has an invalid length.
[  151.100280][   T33] audit: type=1800 audit(1752653077.306:5): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1906" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=3162 res=0 errno=0
[  151.520649][T10370] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.575389][T10377] __nla_validate_parse: 4 callbacks suppressed
[  151.575409][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1923'.
[  151.644577][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'.
[  151.650233][T10379] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1922'.
[  151.874299][T10392] wg1 speed is unknown, defaulting to 1000
[  152.048533][T10398] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1931'.
[  152.383464][T10421] wg1 speed is unknown, defaulting to 1000
[  152.849354][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'.
[  152.984676][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'.
[  153.093537][T10472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.096967][T10472] syzkaller0: entered promiscuous mode
[  153.099225][T10472] syzkaller0: entered allmulticast mode
[  153.100520][T10473] netlink: 'syz.2.1964': attribute type 2 has an invalid length.
[  153.125524][T10472] tipc: Resetting bearer <eth:syzkaller0>
[  153.135782][T10471] tipc: Resetting bearer <eth:syzkaller0>
[  153.177083][T10471] tipc: Disabling bearer <eth:syzkaller0>
[  153.334472][T10488] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  153.587525][T10510] netlink: 'syz.0.1983': attribute type 1 has an invalid length.
[  153.908766][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'.
[  153.917352][T10532] syz_tun: entered allmulticast mode
[  153.924218][T10534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1995'.
[  154.099940][T10544] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  154.174282][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'.
[  154.280685][T10558] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  154.445979][T10572] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  154.538167][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2016'.
[  154.665934][T10589] wg1 speed is unknown, defaulting to 1000
[  154.988717][T10616] IPv6: Can't replace route, no match found
[  156.879459][T10735] __nla_validate_parse: 3 callbacks suppressed
[  156.879474][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'.
[  156.999690][T10745] netlink: 'syz.2.2094': attribute type 1 has an invalid length.
[  157.051398][T10749] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2094'.
[  157.057436][T10745] bond3: entered promiscuous mode
[  157.063694][T10745] 8021q: adding VLAN 0 to HW filter on device bond3
[  157.075052][T10749] batadv1: entered promiscuous mode
[  157.077117][T10749] batadv1: entered allmulticast mode
[  157.084893][T10749] 8021q: adding VLAN 0 to HW filter on device batadv1
[  157.089117][T10749] bond3: (slave batadv1): making interface the new active one
[  157.098656][T10749] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  157.244449][T10749] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2094'.
[  157.312063][T10767] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2102'.
[  157.378813][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2102'.
[  157.382609][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2102'.
[  157.386164][T10772] netlink: 'syz.1.2102': attribute type 3 has an invalid length.
[  157.405184][T10772] xt_CT: You must specify a L4 protocol and not use inversions on it
[  158.168764][T10828] batadv2: entered promiscuous mode
[  159.403485][T10912] wg1 speed is unknown, defaulting to 1000
[  159.432205][T10914] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2161'.
[  159.435316][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2161'.
[  159.491528][T10912] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2160'.
[  160.008643][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2182'.
[  160.074915][T10966] syzkaller0: entered allmulticast mode
[  160.089527][T10970] netlink: 'syz.2.2186': attribute type 39 has an invalid length.
[  160.263228][T10984] siw: device registration error -23
[  160.704012][T11010] wg1 speed is unknown, defaulting to 1000
[  160.918258][T11021] netlink: 'syz.1.2210': attribute type 8 has an invalid length.
[  161.013685][T11028] vlan3: entered promiscuous mode
[  161.015820][T11028] gretap0: entered promiscuous mode
[  161.318379][T11039] wg1 speed is unknown, defaulting to 1000
[  161.349736][T11043] netlink: 'syz.0.2219': attribute type 29 has an invalid length.
[  161.357257][T11043] netlink: 'syz.0.2219': attribute type 29 has an invalid length.
[  162.028494][T11070] __nla_validate_parse: 7 callbacks suppressed
[  162.028511][T11070] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2232'.
[  163.005453][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'.
[  163.238259][T11104] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2248'.
[  163.263530][T11106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2249'.
[  163.719414][T11128] wg1 speed is unknown, defaulting to 1000
[  164.389495][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2271'.
[  164.392767][T11159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2271'.
[  164.396290][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2271'.
[  164.713092][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2276'.
[  165.652944][T11194] Bluetooth: MGMT ver 1.23
[  165.766617][T11202] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 54769 - 0
[  165.769694][T11202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 54769 - 0
[  165.776449][T11202] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 54769 - 0
[  165.779293][T11202] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 54769 - 0
[  165.784943][T11202] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 35907 - 0
[  165.791005][T11202] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 35907 - 0
[  165.794163][T11202] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 35907 - 0
[  165.797346][T11202] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 35907 - 0
[  165.800563][T11202] geneve3: entered promiscuous mode
[  165.802348][T11202] geneve3: entered allmulticast mode
[  166.019811][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'.
[  166.114141][T11222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2300'.
[  166.157807][T11231] netlink: 'syz.1.2304': attribute type 39 has an invalid length.
[  166.537255][T11261] syzkaller0: entered promiscuous mode
[  166.538920][T11261] syzkaller0: entered allmulticast mode
[  167.794439][T11285] __nla_validate_parse: 1 callbacks suppressed
[  167.794451][T11285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2329'.
[  168.760144][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'.
[  168.877808][T11341] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2354'.
[  168.886222][T11343] netlink: 'syz.2.2356': attribute type 1 has an invalid length.
[  168.935587][T11347] ipt_REJECT: TCP_RESET invalid for non-tcp
[  169.080129][T11356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.386051][T11373] 8021q: adding VLAN 0 to HW filter on device bond4
[  169.537628][T11383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.614464][T11387] xt_CT: You must specify a L4 protocol and not use inversions on it
[  169.756628][T11394] xt_CT: You must specify a L4 protocol and not use inversions on it
[  169.868586][T11398] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  169.874501][   T10] IPVS: starting estimator thread 0...
[  169.960665][T11402] IPVS: using max 62 ests per chain, 148800 per kthread
[  170.001520][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2380'.
[  170.007905][T11407] ip6erspan0: entered allmulticast mode
[  170.511462][T11441] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2396'.
[  170.538120][T11443] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2395'.
[  170.542166][T11438] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2395'.
[  170.939990][T11466] wg1 speed is unknown, defaulting to 1000
[  170.977375][T11475] netlink: 'syz.2.2408': attribute type 13 has an invalid length.
[  170.986608][T11475] netlink: 'syz.2.2408': attribute type 17 has an invalid length.
[  171.020947][T11475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.934369][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2441'.
[  172.241272][T11569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2453'.
[  172.547110][T11594] bond0: (slave wlan1): Releasing backup interface
[  173.365477][ T5861] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  173.702360][T11664] wg1 speed is unknown, defaulting to 1000
[  174.265420][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2482'.
[  174.614340][T11702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2494'.
[  175.118696][T11727] netlink: 'syz.1.2505': attribute type 4 has an invalid length.
[  175.129517][T11727] netlink: 'syz.1.2505': attribute type 4 has an invalid length.
[  175.455691][T11748] tipc: Enabled bearer <eth:gre0>, priority 10
[  175.578336][T11756] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2519'.
[  175.757405][T11774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2525'.
[  175.761138][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2525'.
[  175.764592][T11774] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2525'.
[  175.775404][T11774] netlink: 'syz.0.2525': attribute type 3 has an invalid length.
[  175.778460][T11774] netlink: 'syz.0.2525': attribute type 2 has an invalid length.
[  175.782127][T11774] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2525'.
[  175.785706][T11774] netlink: 'syz.0.2525': attribute type 2 has an invalid length.
[  176.430761][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  176.571553][ T5824] tipc: Node number set to 1862980653
[  176.725498][T11813] netlink: 'syz.1.2543': attribute type 1 has an invalid length.
[  176.728939][T11813] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2543'.
[  176.733336][T11813] netlink: 'syz.1.2543': attribute type 1 has an invalid length.
[  177.244827][T11826] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2547'.
[  177.313182][T11829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2549'.
[  177.784455][T11855] syzkaller1: entered promiscuous mode
[  177.786690][T11855] syzkaller1: entered allmulticast mode
[  178.075009][T11878] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  178.259176][T11885] netlink: 'syz.0.2575': attribute type 3 has an invalid length.
[  178.286986][T11885] netlink: 'syz.0.2575': attribute type 3 has an invalid length.
[  179.486838][T11965] __nla_validate_parse: 7 callbacks suppressed
[  179.486856][T11965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2611'.
[  179.588093][T11973] xt_policy: neither incoming nor outgoing policy selected
[  179.796278][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2621'.
[  180.029278][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2631'.
[  180.396049][T12038] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2647'.
[  180.620073][T12046] vlan3: entered promiscuous mode
[  180.622613][T12046] vlan3: entered allmulticast mode
[  180.624256][T12046] hsr_slave_1: entered allmulticast mode
[  180.738079][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'.
[  180.929778][T12058] netlink: 'syz.1.2655': attribute type 1 has an invalid length.
[  180.966190][T12060] netlink: 'syz.2.2656': attribute type 1 has an invalid length.
[  180.969343][T12060] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2656'.
[  181.354831][T12090] tap0: tun_chr_ioctl cmd 1074025680
[  181.441926][T12092] netlink: 'syz.1.2671': attribute type 32 has an invalid length.
[  181.800192][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2677'.
[  181.881722][T12112] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2680'.
[  182.094158][T12123] syzkaller0: tun_chr_ioctl cmd 1074812118
[  182.167421][T12129] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  182.307740][T12141] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2689'.
[  182.313844][T12141] netem: unknown loss type 0
[  182.315612][T12141] netem: change failed
[  182.381885][T12145] tipc: New replicast peer: 0.0.0.0
[  182.384581][T12146] sctp: [Deprecated]: syz.2.2690 (pid 12146) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.384581][T12146] Use struct sctp_sack_info instead
[  182.389666][T12145] tipc: Enabled bearer <udp:syz2>, priority 6
[  182.395900][T12145] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  182.448491][T12152] netlink: 'syz.0.2693': attribute type 1 has an invalid length.
[  182.456696][T12152] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2693'.
[  182.577822][T12165] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.838130][   T33] audit: type=1800 audit(1752653109.036:6): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2700" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=4335 res=0 errno=0
[  182.857519][   T33] audit: type=1804 audit(1752653109.046:7): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2700" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=4335 res=1 errno=0
[  184.152619][T12253] wg1 speed is unknown, defaulting to 1000
[  184.364434][T12262] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  184.367398][T12262] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  184.863587][T12295] __nla_validate_parse: 4 callbacks suppressed
[  184.863602][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'.
[  184.928125][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'.
[  185.407717][T12331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.429979][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2762'.
[  185.674784][   T33] audit: type=1800 audit(1752653111.876:8): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2772" name="memory.events" dev="tmpfs" ino=4877 res=0 errno=0
[  185.683401][   T33] audit: type=1804 audit(1752653111.876:9): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2772" name="/newroot/964/memory.events" dev="tmpfs" ino=4877 res=1 errno=0
[  185.710562][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  186.160767][T12395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.458006][T12408] syzkaller1: entered promiscuous mode
[  186.460193][T12408] syzkaller1: entered allmulticast mode
[  186.778826][T12423] wg1 speed is unknown, defaulting to 1000
[  186.814731][T12426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2805'.
[  187.166442][T12446] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2814'.
[  187.443493][T12460] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001
[  187.856658][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2831'.
[  188.079054][T12504] netlink: 'syz.0.2837': attribute type 1 has an invalid length.
[  188.414124][T12539] netlink: 'syz.0.2851': attribute type 1 has an invalid length.
[  188.416511][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2851'.
[  188.424956][T12532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2851'.
[  188.472762][T12545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2856'.
[  188.594723][T12557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2862'.
[  189.823481][T12635] netlink: 'syz.1.2898': attribute type 1 has an invalid length.
[  190.335772][T12649] __nla_validate_parse: 2 callbacks suppressed
[  190.335784][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'.
[  190.814106][T12678] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  191.127819][T12708] netlink: 'syz.2.2932': attribute type 20 has an invalid length.
[  191.138389][T12708] netlink: 'syz.2.2932': attribute type 21 has an invalid length.
[  191.140966][T12708] netlink: 'syz.2.2932': attribute type 23 has an invalid length.
[  191.143277][T12708] netlink: 'syz.2.2932': attribute type 25 has an invalid length.
[  191.145645][T12708] netlink: 'syz.2.2932': attribute type 27 has an invalid length.
[  191.148132][T12708] netlink: 'syz.2.2932': attribute type 28 has an invalid length.
[  191.150786][T12708] netlink: 'syz.2.2932': attribute type 29 has an invalid length.
[  191.297575][T12727] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2941'.
[  192.087598][T12772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2962'.
[  192.348839][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'.
[  192.474882][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'.
[  192.760907][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2984'.
[  192.785342][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2985'.
[  192.833651][T12823] wg1 speed is unknown, defaulting to 1000
[  192.844898][   T33] audit: type=1800 audit(1752653119.046:10): pid=12829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2985" name="memory.events" dev="tmpfs" ino=5075 res=0 errno=0
[  193.030030][T12841] ieee802154 phy0 wpan0: encryption failed: -22
[  193.555121][T12876] vlan3: entered promiscuous mode
[  193.557104][T12876] dummy0: entered promiscuous mode
[  193.875741][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.878212][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  193.899005][T12898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3017'.
[  194.425431][T12940] validate_nla: 1 callbacks suppressed
[  194.425447][T12940] netlink: 'syz.1.3034': attribute type 5 has an invalid length.
[  194.431037][T12940] netlink: 'syz.1.3034': attribute type 7 has an invalid length.
[  194.466501][T12940] : entered promiscuous mode
[  194.585654][T12953] bond0: option resend_igmp: invalid value (18446744073709551482)
[  194.588778][T12953] bond0: option resend_igmp: allowed values 0 - 255
[  195.061360][T12988] vlan3: entered promiscuous mode
[  195.064963][T12988] bridge0: entered promiscuous mode
[  195.145034][T12995] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3058'.
[  195.193014][T12998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.297610][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'.
[  195.479555][T13024] dvmrp1: entered allmulticast mode
[  195.483051][T13024] dvmrp1: left allmulticast mode
[  195.668218][T13036] netlink: 'syz.2.3078': attribute type 1 has an invalid length.
[  195.670773][T13036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.779104][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3081'.
[  195.898652][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'.
[  196.752593][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3090'.
[  196.755505][T13062] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3090'.
[  197.058385][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3098'.
[  197.243175][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'.
[  197.299278][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3105'.
[  197.336279][T13102] tap0: tun_chr_ioctl cmd 1074025677
[  197.338007][T13102] tap0: linktype set to 0
[  197.744369][T13131] bridge_slave_0: invalid flags given to default FDB implementation
[  197.862856][T13143] xt_hashlimit: size too large, truncated to 1048576
[  197.872417][T13145] netlink: 'syz.2.3127': attribute type 4 has an invalid length.
[  199.494031][T13218] bridge4: entered promiscuous mode
[  199.625288][T13228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3166'.
[  199.629553][T13228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3166'.
[  199.701711][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3164'.
[  200.525271][T13303] netlink: 'syz.2.3202': attribute type 1 has an invalid length.
[  200.528301][T13303] netlink: 'syz.2.3202': attribute type 11 has an invalid length.
[  200.642578][T13316] netlink: 'syz.0.3207': attribute type 2 has an invalid length.
[  200.879822][T13328] netlink: 'syz.0.3213': attribute type 10 has an invalid length.
[  200.887231][T13328] __nla_validate_parse: 3 callbacks suppressed
[  200.887243][T13328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3213'.
[  200.911773][T13328] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.914490][T13328] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.917066][T13328] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.919508][T13328] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.935453][T13329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3213'.
[  200.939151][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3213'.
[  200.954564][T13328] team0: Port device geneve0 added
[  200.971760][T13329] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  201.655369][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3218'.
[  201.679664][T13339] bridge0: entered promiscuous mode
[  201.688026][T13339] macvtap1: entered promiscuous mode
[  201.689988][T13339] macvtap1: entered allmulticast mode
[  201.702164][T13339] bridge0: entered allmulticast mode
[  201.716970][T13348] bridge0: left allmulticast mode
[  201.725243][T13348] bridge0: left promiscuous mode
[  201.843182][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3225'.
[  202.296589][T13384] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3237'.
[  202.521754][T13402] netlink: 'syz.0.3246': attribute type 2 has an invalid length.
[  202.588922][T13406] netlink: 'syz.0.3248': attribute type 4 has an invalid length.
[  202.593154][T13406] netlink: 'syz.0.3248': attribute type 4 has an invalid length.
[  202.803375][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3253'.
[  202.902895][T13424] netlink: 'syz.0.3256': attribute type 1 has an invalid length.
[  202.905393][T13424] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3256'.
[  202.908128][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'.
[  202.991075][T13428] netlink: 'syz.0.3257': attribute type 27 has an invalid length.
[  203.264947][T13445] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3265'.
[  203.267930][T13445] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  203.416520][T13456] netlink: 'syz.0.3270': attribute type 21 has an invalid length.
[  203.950697][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[  203.985504][T13487] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.989045][T13487] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.995105][T13487] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.997769][T13487] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.934207][T13571] tc_dump_action: action bad kind
[  204.958475][T13575] xt_cgroup: invalid path, errno=-2
[  205.068563][T13586] ieee802154 phy0 wpan0: encryption failed: -22
[  205.549568][T13645] validate_nla: 4 callbacks suppressed
[  205.549579][T13645] netlink: 'syz.1.3358': attribute type 2 has an invalid length.
[  205.555901][T13645] netlink: 'syz.1.3358': attribute type 1 has an invalid length.
[  205.558821][T13645] netlink: 'syz.1.3358': attribute type 1 has an invalid length.
[  205.614985][T13641] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.750172][T13641] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.833524][T13641] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.953269][T13641] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.073545][T13641] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.091128][T13641] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.103604][T13641] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.122581][T13641] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.535707][T13707] __nla_validate_parse: 14 callbacks suppressed
[  206.535726][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3387'.
[  206.718622][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'.
[  206.966331][T13729] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  207.028108][T13733] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  207.237905][T13754] bridge3: entered allmulticast mode
[  207.358439][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'.
[  207.372738][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'.
[  207.375566][T13764] netlink: 'syz.0.3411': attribute type 5 has an invalid length.
[  207.725950][T13794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  207.728986][T13794] IPv6: NLM_F_CREATE should be set when creating new route
[  207.731974][T13794] IPv6: NLM_F_CREATE should be set when creating new route
[  207.734979][T13794] IPv6: NLM_F_CREATE should be set when creating new route
[  207.742866][T13794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  207.997683][T13808] netlink: 'syz.0.3435': attribute type 3 has an invalid length.
[  208.466591][T13850] x_tables: duplicate underflow at hook 4
[  208.728888][T13876] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0
[  208.732630][T13876] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0
[  208.738565][T13876] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0
[  208.744545][T13876] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0
[  209.158912][T13908] syzkaller0: entered promiscuous mode
[  209.167307][T13908] syzkaller0: entered allmulticast mode
[  209.262278][T13915] sctp: [Deprecated]: syz.0.3484 (pid 13915) Use of struct sctp_assoc_value in delayed_ack socket option.
[  209.262278][T13915] Use struct sctp_sack_info instead
[  210.867941][T13944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  210.870894][T13944] IPv6: NLM_F_CREATE should be set when creating new route
[  210.873656][T13944] IPv6: NLM_F_CREATE should be set when creating new route
[  211.120082][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3502'.
[  211.316941][T13978] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  211.633490][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'.
[  211.656027][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3516'.
[  211.669800][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3516'.
[  211.675640][T13996] netlink: 'syz.0.3516': attribute type 19 has an invalid length.
[  211.953003][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'.
[  211.956522][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'.
[  212.112993][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3525'.
[  212.826505][T14048] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3540'.
[  214.978719][T14123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3572'.
[  215.376331][T14154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3585'.
[  215.497524][T14160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3588'.
[  215.771770][T14184] : entered promiscuous mode
[  216.363988][T14229] IPv6: sit2: Disabled Multicast RS
[  216.718747][T14261] netlink: 'syz.1.3628': attribute type 6 has an invalid length.
[  216.953553][T14283] xt_ecn: cannot match TCP bits for non-tcp packets
[  217.063628][T14289] xt_CT: No such helper "pptp"
[  217.069173][T14289] --map-set only usable from mangle table
[  217.367079][T14322] __nla_validate_parse: 4 callbacks suppressed
[  217.367095][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3658'.
[  217.390291][T14324] nbd: device at index 0 is going down
[  217.562771][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  217.693789][T14344] set match dimension is over the limit!
[  217.897463][T14354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.901817][T14354] syzkaller0: entered promiscuous mode
[  217.904099][T14354] syzkaller0: entered allmulticast mode
[  217.933805][T14354] tipc: Resetting bearer <eth:syzkaller0>
[  217.943592][T14353] tipc: Resetting bearer <eth:syzkaller0>
[  217.957761][T14353] tipc: Disabling bearer <eth:syzkaller0>
[  218.667714][T14421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3701'.
[  220.224741][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'.
[  220.233784][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'.
[  220.708693][T14521] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3742'.
[  220.799458][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3747'.
[  220.806578][T14532] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 56231 - 0
[  220.809499][T14532] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 56231 - 0
[  220.813129][T14532] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 56231 - 0
[  220.816007][T14532] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 56231 - 0
[  220.818837][T14532] geneve3: entered promiscuous mode
[  220.821269][T14532] geneve3: entered allmulticast mode
[  221.143455][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3755'.
[  221.432721][T14565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3761'.
[  221.514270][T14569] netlink: 'syz.2.3763': attribute type 10 has an invalid length.
[  221.517523][T14569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3763'.
[  221.547164][T14571] netlink: 'syz.0.3764': attribute type 6 has an invalid length.
[  221.561731][T14573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3765'.
[  222.270904][T14628] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  222.511146][T14644] x_tables: unsorted entry at hook 3
[  222.919935][T14669] netlink: 'syz.1.3801': attribute type 2 has an invalid length.
[  222.926603][T14669] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3801'.
[  223.458802][T14705] raw_sendmsg: syz.0.3819 forgot to set AF_INET. Fix it!
[  223.569156][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3822'.
[  223.639023][T14715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.473713][T14743] vlan5: entered promiscuous mode
[  224.840040][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3841'.
[  224.843962][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3841'.
[  225.842702][T14812] vti0: entered promiscuous mode
[  225.844713][T14812] vti0: entered allmulticast mode
[  226.122084][T14822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3866'.
[  226.125855][T14822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  226.128720][T14822] IPv6: NLM_F_CREATE should be set when creating new route
[  226.446734][T14835] netlink: 'syz.2.3872': attribute type 13 has an invalid length.
[  226.449385][T14835] netlink: 'syz.2.3872': attribute type 17 has an invalid length.
[  226.457269][T14835] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  226.465971][  T124] IPVS: starting estimator thread 0...
[  226.560489][T14839] IPVS: using max 62 ests per chain, 148800 per kthread
[  227.402954][T14857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3877'.
[  227.406628][T14857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3877'.
[  227.422565][T14857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3877'.
[  227.530015][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3879'.
[  227.594172][T14864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3880'.
[  227.625589][   T13] IPVS: stop unused estimator thread 0...
[  227.668555][T14868] nbd: must specify a size in bytes for the device
[  227.675558][T14870] netlink: 'syz.2.3883': attribute type 29 has an invalid length.
[  227.678487][T14870] netlink: 'syz.2.3883': attribute type 29 has an invalid length.
[  227.682608][T14870] unsupported nla_type 58
[  227.747195][T14876] netlink: 'syz.0.3886': attribute type 1 has an invalid length.
[  227.749856][T14876] netlink: 'syz.0.3886': attribute type 1 has an invalid length.
[  227.885952][T14888] netlink: 'syz.2.3892': attribute type 4 has an invalid length.
[  228.259240][T14922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.263553][T14922] syzkaller0: entered promiscuous mode
[  228.265797][T14922] syzkaller0: entered allmulticast mode
[  228.295763][T14922] tipc: Resetting bearer <eth:syzkaller0>
[  228.299481][T14921] tipc: Resetting bearer <eth:syzkaller0>
[  228.307911][T14921] tipc: Disabling bearer <eth:syzkaller0>
[  228.549689][T14935] __nla_validate_parse: 4 callbacks suppressed
[  228.549698][T14935] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3915'.
[  229.219473][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3927'.
[  230.536996][T15041] netlink: 'syz.2.3963': attribute type 21 has an invalid length.
[  230.539613][T15041] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3963'.
[  230.577457][T15041] netlink: 'syz.2.3963': attribute type 4 has an invalid length.
[  230.582733][T15041] netlink: 'syz.2.3963': attribute type 5 has an invalid length.
[  230.589698][T15041] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3963'.
[  231.331667][T15093] netlink: 'syz.0.3982': attribute type 1 has an invalid length.
[  231.339291][T15093] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3982'.
[  232.198335][T15158] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  232.315194][T15166] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4013'.
[  232.340043][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4010'.
[  232.353101][T15158] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4010'.
[  232.356751][T15158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4010'.
[  232.446360][T15174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.014616][T15211] bond0: entered promiscuous mode
[  233.016615][T15211] bond_slave_0: entered promiscuous mode
[  233.019040][T15211] bond_slave_1: entered promiscuous mode
[  233.027226][T15211] bond0: left promiscuous mode
[  233.029114][T15211] bond_slave_0: left promiscuous mode
[  233.035621][T15211] bond_slave_1: left promiscuous mode
[  233.233987][T15228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4036'.
[  233.604742][T15238] __nla_validate_parse: 2 callbacks suppressed
[  233.604753][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4041'.
[  234.011096][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4051'.
[  234.015218][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4051'.
[  234.038999][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  234.050812][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  234.056089][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  234.063455][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  234.068605][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  234.244922][T15265] chnl_net:caif_netlink_parms(): no params data found
[  234.374774][T15282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4056'.
[  234.378289][T15282] netem: unknown loss type 13
[  234.386566][T15282] netem: change failed
[  234.458308][T15265] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.466787][T15265] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.469712][T15265] bridge_slave_0: entered allmulticast mode
[  234.481966][T15265] bridge_slave_0: entered promiscuous mode
[  234.490186][T15265] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.500699][T15265] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.503773][T15265] bridge_slave_1: entered allmulticast mode
[  234.520562][T15265] bridge_slave_1: entered promiscuous mode
[  234.568386][T15265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.583647][T15265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.634068][T15265] team0: Port device team_slave_0 added
[  234.643579][T15265] team0: Port device team_slave_1 added
[  234.778083][T15265] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.780284][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.794280][T15265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.820980][T15265] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.823706][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.840660][T15265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.897834][T15265] hsr_slave_0: entered promiscuous mode
[  234.913014][T15265] hsr_slave_1: entered promiscuous mode
[  234.915564][T15265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.918218][T15265] Cannot create hsr debugfs directory
[  235.138159][T15265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 54769 - 0
[  235.142295][T15265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35907 - 0
[  235.146632][T15265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  235.162737][T15322] 
[  235.163785][T15322] ======================================================
[  235.166517][T15322] WARNING: possible circular locking dependency detected
[  235.169188][T15322] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  235.173202][T15322] ------------------------------------------------------
[  235.175979][T15322] syz.2.4073/15322 is trying to acquire lock:
[  235.178424][T15322] ffff88801f316188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  235.182618][T15322] 
[  235.182618][T15322] but task is already holding lock:
[  235.185529][T15322] ffff88801f316230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  235.189278][T15322] 
[  235.189278][T15322] which lock already depends on the new lock.
[  235.189278][T15322] 
[  235.193254][T15322] 
[  235.193254][T15322] the existing dependency chain (in reverse order) is:
[  235.196746][T15322] 
[  235.196746][T15322] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  235.199810][T15322]        lock_acquire+0x120/0x360
[  235.201723][T15322]        __mutex_lock+0x182/0xe80
[  235.203672][T15322]        refcount_dec_and_mutex_lock+0x30/0xa0
[  235.205845][T15322]        nbd_config_put+0x2c/0x790
[  235.207601][T15322]        nbd_release+0xfe/0x140
[  235.209388][T15322]        bdev_release+0x536/0x650
[  235.211377][T15322]        blkdev_release+0x15/0x20
[  235.213372][T15322]        __fput+0x44c/0xa70
[  235.215136][T15322]        fput_close_sync+0x119/0x200
[  235.217233][T15322]        __x64_sys_close+0x7f/0x110
[  235.219258][T15322]        do_syscall_64+0xfa/0x3b0
[  235.221280][T15322]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.223824][T15322] 
[  235.223824][T15322] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  235.226896][T15322]        lock_acquire+0x120/0x360
[  235.228864][T15322]        __mutex_lock+0x182/0xe80
[  235.230847][T15322]        __del_gendisk+0x129/0x9e0
[  235.232888][T15322]        del_gendisk+0xe8/0x160
[  235.234853][T15322]        nbd_dev_remove_work+0x47/0xe0
[  235.237033][T15322]        process_scheduled_works+0xae1/0x17b0
[  235.239408][T15322]        worker_thread+0x8a0/0xda0
[  235.241427][T15322]        kthread+0x711/0x8a0
[  235.243249][T15322]        ret_from_fork+0x3fc/0x770
[  235.245304][T15322]        ret_from_fork_asm+0x1a/0x30
[  235.247443][T15322] 
[  235.247443][T15322] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  235.250790][T15322]        validate_chain+0xb9b/0x2140
[  235.252892][T15322]        __lock_acquire+0xab9/0xd20
[  235.254833][T15322]        lock_acquire+0x120/0x360
[  235.256710][T15322]        down_write+0x96/0x1f0
[  235.258225][T15322]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  235.260408][T15322]        nbd_start_device+0x16c/0xac0
[  235.262568][T15322]        nbd_genl_connect+0x1250/0x1930
[  235.264859][T15322]        genl_family_rcv_msg_doit+0x215/0x300
[  235.267277][T15322]        genl_rcv_msg+0x60e/0x790
[  235.269310][T15322]        netlink_rcv_skb+0x208/0x470
[  235.271138][T15322]        genl_rcv+0x28/0x40
[  235.272675][T15322]        netlink_unicast+0x75c/0x8e0
[  235.274515][T15322]        netlink_sendmsg+0x805/0xb30
[  235.276414][T15322]        __sock_sendmsg+0x21c/0x270
[  235.278228][T15322]        ____sys_sendmsg+0x505/0x830
[  235.280323][T15322]        ___sys_sendmsg+0x21f/0x2a0
[  235.282336][T15322]        __x64_sys_sendmsg+0x19b/0x260
[  235.284486][T15322]        do_syscall_64+0xfa/0x3b0
[  235.286399][T15322]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.288883][T15322] 
[  235.288883][T15322] other info that might help us debug this:
[  235.288883][T15322] 
[  235.292826][T15322] Chain exists of:
[  235.292826][T15322]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  235.292826][T15322] 
[  235.298382][T15322]  Possible unsafe locking scenario:
[  235.298382][T15322] 
[  235.301300][T15322]        CPU0                    CPU1
[  235.303429][T15322]        ----                    ----
[  235.305584][T15322]   lock(&nbd->config_lock);
[  235.307454][T15322]                                lock(&disk->open_mutex);
[  235.310110][T15322]                                lock(&nbd->config_lock);
[  235.312890][T15322]   lock(&set->update_nr_hwq_lock);
[  235.315013][T15322] 
[  235.315013][T15322]  *** DEADLOCK ***
[  235.315013][T15322] 
[  235.318218][T15322] 3 locks held by syz.2.4073/15322:
[  235.320232][T15322]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  235.323421][T15322]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  235.327026][T15322]  #2: ffff88801f316230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  235.330871][T15322] 
[  235.330871][T15322] stack backtrace:
[  235.333236][T15322] CPU: 0 UID: 0 PID: 15322 Comm: syz.2.4073 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  235.333254][T15322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  235.333263][T15322] Call Trace:
[  235.333271][T15322]  <TASK>
[  235.333280][T15322]  dump_stack_lvl+0x189/0x250
[  235.333302][T15322]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.333319][T15322]  ? __pfx__printk+0x10/0x10
[  235.333338][T15322]  ? print_lock_name+0xde/0x100
[  235.333356][T15322]  print_circular_bug+0x2ee/0x310
[  235.333384][T15322]  check_noncircular+0x134/0x160
[  235.333408][T15322]  validate_chain+0xb9b/0x2140
[  235.333434][T15322]  __lock_acquire+0xab9/0xd20
[  235.333450][T15322]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  235.333465][T15322]  lock_acquire+0x120/0x360
[  235.333479][T15322]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  235.333495][T15322]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  235.333510][T15322]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  235.333532][T15322]  down_write+0x96/0x1f0
[  235.333545][T15322]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  235.333560][T15322]  ? __pfx_down_write+0x10/0x10
[  235.333577][T15322]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  235.333594][T15322]  ? nbd_add_socket+0x688/0x9a0
[  235.333611][T15322]  ? nbd_add_socket+0x688/0x9a0
[  235.333628][T15322]  nbd_start_device+0x16c/0xac0
[  235.333680][T15322]  ? __nla_parse+0x40/0x60
[  235.333696][T15322]  nbd_genl_connect+0x1250/0x1930
[  235.333713][T15322]  ? __pfx_nbd_genl_connect+0x10/0x10
[  235.333735][T15322]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  235.333760][T15322]  genl_family_rcv_msg_doit+0x215/0x300
[  235.333781][T15322]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  235.333809][T15322]  genl_rcv_msg+0x60e/0x790
[  235.333828][T15322]  ? __pfx_genl_rcv_msg+0x10/0x10
[  235.333845][T15322]  ? __pfx_nbd_genl_connect+0x10/0x10
[  235.333861][T15322]  netlink_rcv_skb+0x208/0x470
[  235.333875][T15322]  ? __pfx_genl_rcv_msg+0x10/0x10
[  235.333892][T15322]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  235.333911][T15322]  ? down_read+0x1ad/0x2e0
[  235.333926][T15322]  genl_rcv+0x28/0x40
[  235.333943][T15322]  netlink_unicast+0x75c/0x8e0
[  235.333961][T15322]  netlink_sendmsg+0x805/0xb30
[  235.333981][T15322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.333998][T15322]  ? aa_sock_msg_perm+0x94/0x160
[  235.334017][T15322]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  235.334037][T15322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.334054][T15322]  __sock_sendmsg+0x21c/0x270
[  235.334067][T15322]  ____sys_sendmsg+0x505/0x830
[  235.334085][T15322]  ? __pfx_____sys_sendmsg+0x10/0x10
[  235.334105][T15322]  ? import_iovec+0x74/0xa0
[  235.334123][T15322]  ___sys_sendmsg+0x21f/0x2a0
[  235.334141][T15322]  ? __pfx____sys_sendmsg+0x10/0x10
[  235.334173][T15322]  ? __fget_files+0x2a/0x420
[  235.334192][T15322]  ? __fget_files+0x3a0/0x420
[  235.334213][T15322]  __x64_sys_sendmsg+0x19b/0x260
[  235.334231][T15322]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  235.334251][T15322]  ? rcu_is_watching+0x15/0xb0
[  235.334269][T15322]  ? do_syscall_64+0xbe/0x3b0
[  235.334285][T15322]  do_syscall_64+0xfa/0x3b0
[  235.334298][T15322]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.334318][T15322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.334331][T15322]  ? exc_page_fault+0x9f/0xf0
[  235.334351][T15322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.334366][T15322] RIP: 0033:0x7f9034b8e929
[  235.334388][T15322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.334401][T15322] RSP: 002b:00007f90329f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  235.334416][T15322] RAX: ffffffffffffffda RBX: 00007f9034db5fa0 RCX: 00007f9034b8e929
[  235.334427][T15322] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007
[  235.334437][T15322] RBP: 00007f9034c10b39 R08: 0000000000000000 R09: 0000000000000000
[  235.334446][T15322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.334454][T15322] R13: 0000000000000000 R14: 00007f9034db5fa0 R15: 00007ffed34d13b8
[  235.334470][T15322]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  235.542240][T15322] nbd2: detected capacity change from 0 to 63
[  235.547119][   T55] block nbd2: Receive control failed (result -104)
[  235.566425][T15265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 54769 - 0
[  235.570599][T15265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35907 - 0
[  235.573978][T15265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  235.682681][T15265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 54769 - 0
[  235.686187][T15265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35907 - 0
[  235.689480][T15265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  235.747380][T15265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 54769 - 0
[  235.751199][T15265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35907 - 0
[  235.754467][T15265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  236.011521][ T5657] bridge_slave_1: left allmulticast mode
[  236.013378][ T5657] bridge_slave_1: left promiscuous mode
[  236.015565][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.019158][ T5657] bridge_slave_0: left allmulticast mode
[  236.021080][ T5657] bridge_slave_0: left promiscuous mode
[  236.023145][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.077316][ T5657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.081899][ T5657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.085884][ T5657] bond0 (unregistering): Released all slaves
[  236.183273][ T5657] hsr_slave_0: left promiscuous mode
[  236.185228][ T5657] hsr_slave_1: left promiscuous mode
[  236.187126][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.189610][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.255396][ T5657] team0 (unregistering): Port device team_slave_1 removed
[  236.273384][ T5657] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
08:06:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001599 RDI=000000000000159a RBP=00000000000003f8 RSP=ffffc90008af6710
R8 =ffff888106fb8237 R9 =1ffff11020df7046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98b8 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f90329f66c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001ac0 CR3=000000010f490000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f9034c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88813663b1c0 RCX=ffff8881000f0000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900001c7978 RSP=ffffc900001c7820
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c202 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f790e37f2d8 CR3=0000000021e56000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000d000000000 ffffffffffffffff XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000035800000004 ffffffff000001a0 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f790e211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
