last executing test programs:

4m19.979027503s ago: executing program 1 (id=2431):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x25, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4)

4m19.799108708s ago: executing program 1 (id=2434):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x40)

4m19.479176855s ago: executing program 1 (id=2437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m19.362619649s ago: executing program 1 (id=2438):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@dellink={0x38, 0x11, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

4m18.956285711s ago: executing program 1 (id=2444):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000)
r0 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m18.854505091s ago: executing program 2 (id=2445):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}})

4m18.797420895s ago: executing program 0 (id=2446):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0)

4m18.560678409s ago: executing program 2 (id=2447):
unshare(0x20000400)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0)

4m18.560334528s ago: executing program 0 (id=2448):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000200))

4m18.439516492s ago: executing program 0 (id=2449):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000140)="b99cdf", 0x0, 0x800064fd, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000)

4m18.438975002s ago: executing program 2 (id=2450):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='4', @ANYRES16, @ANYRES8, @ANYRESOCT, @ANYRES8], 0x34}, 0x1, 0x0, 0x0, 0x40408d4}, 0x4040000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x8800)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0)
recvmmsg(r0, &(0x7f0000002700)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000200)=[{0x0}], 0xe}, 0x19}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/97, 0x61}, {0x0}, {0x0}], 0x3, &(0x7f0000002640)=""/169, 0xa9}, 0x80}], 0x2, 0x40000060, 0x0)

4m18.358928571s ago: executing program 0 (id=2451):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16125782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000)

4m18.358606151s ago: executing program 2 (id=2452):
r0 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000140)={0xa, 0x2, 0x4f6a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x18}, 0x4)

4m18.257536924s ago: executing program 2 (id=2453):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0)

4m18.257266834s ago: executing program 0 (id=2454):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000400)=0xffffffc5, 0x4)

4m11.314546435s ago: executing program 1 (id=2455):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x50)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@float={0x3, 0x0, 0x0, 0x10, 0x2}, @enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x3c, 0x0, 0x1, 0x5}, 0x28)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x4, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014)
r11 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r12}, 0x50)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_TEST(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x38}}, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r14, &(0x7f0000000400), 0x0, 0x2}, 0x20)

4m11.146863303s ago: executing program 0 (id=2456):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x48002}, 0x4000040)

4m10.412333574s ago: executing program 2 (id=2457):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b40000005908060001080006"], 0x0)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

3m56.525132644s ago: executing program 32 (id=2455):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x50)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@float={0x3, 0x0, 0x0, 0x10, 0x2}, @enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x3c, 0x0, 0x1, 0x5}, 0x28)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x4, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014)
r11 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r12}, 0x50)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_TEST(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x38}}, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r14, &(0x7f0000000400), 0x0, 0x2}, 0x20)

3m48.951452039s ago: executing program 33 (id=2456):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x48002}, 0x4000040)

3m33.887148354s ago: executing program 34 (id=2457):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b40000005908060001080006"], 0x0)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

2m36.542002896s ago: executing program 5 (id=2460):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}], 0x18}, 0x20000000)

0s ago: executing program 5 (id=2460):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}], 0x18}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23751' (ED25519) to the list of known hosts.
syzkaller login: [   57.405019][ T5578] cgroup: Unknown subsys name 'net'
[   57.487333][ T5578] cgroup: Unknown subsys name 'cpuset'
[   57.491246][ T5578] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.315431][ T5578] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.746938][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.987101][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[   71.991324][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[   72.066133][ T4992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.072502][ T4992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.080127][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.089187][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.101478][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.110730][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.116133][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.119361][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.124375][ T5646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.124857][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.127449][ T5646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.135965][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.152284][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.160995][ T5648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.168262][ T5648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.051608][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.054757][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.057626][ T5641] bridge_slave_0: entered allmulticast mode
[   73.060898][ T5641] bridge_slave_0: entered promiscuous mode
[   73.084971][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.087464][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.090110][ T5641] bridge_slave_1: entered allmulticast mode
[   73.092900][ T5641] bridge_slave_1: entered promiscuous mode
[   73.122366][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.125481][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.128405][ T5638] bridge_slave_0: entered allmulticast mode
[   73.132029][ T5638] bridge_slave_0: entered promiscuous mode
[   73.161147][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.164220][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.166423][ T5638] bridge_slave_1: entered allmulticast mode
[   73.169156][ T5638] bridge_slave_1: entered promiscuous mode
[   73.174974][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.180584][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.184248][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.186502][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.189023][ T5645] bridge_slave_0: entered allmulticast mode
[   73.192104][ T5645] bridge_slave_0: entered promiscuous mode
[   73.213782][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.216795][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.219999][ T5645] bridge_slave_1: entered allmulticast mode
[   73.224478][ T5645] bridge_slave_1: entered promiscuous mode
[   73.275649][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.281402][ T5641] team0: Port device team_slave_0 added
[   73.287492][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.292872][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.298173][ T5641] team0: Port device team_slave_1 added
[   73.309761][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.346672][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.349358][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.359655][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.377192][ T5638] team0: Port device team_slave_0 added
[   73.379529][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.382500][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.392926][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.411302][ T5645] team0: Port device team_slave_0 added
[   73.416066][ T5638] team0: Port device team_slave_1 added
[   73.432259][ T5645] team0: Port device team_slave_1 added
[   73.474705][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.478297][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.487096][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.505478][ T5641] hsr_slave_0: entered promiscuous mode
[   73.508548][ T5641] hsr_slave_1: entered promiscuous mode
[   73.513821][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.516644][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.525131][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.529319][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.531774][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.540269][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.557576][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.560269][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.568119][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.650149][ T5638] hsr_slave_0: entered promiscuous mode
[   73.653475][ T5638] hsr_slave_1: entered promiscuous mode
[   73.656910][ T5638] debugfs: 'hsr0' already exists in 'hsr'
[   73.659187][ T5638] Cannot create hsr debugfs directory
[   73.680704][ T5645] hsr_slave_0: entered promiscuous mode
[   73.683556][ T5645] hsr_slave_1: entered promiscuous mode
[   73.686161][ T5645] debugfs: 'hsr0' already exists in 'hsr'
[   73.688324][ T5645] Cannot create hsr debugfs directory
[   73.999917][ T5641] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.012095][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   74.018005][ T5641] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.024736][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.029860][ T5641] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.037717][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.053320][ T5641] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.064510][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   74.111922][ T5645] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.121908][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   74.131891][ T5645] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.139289][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.145031][ T5645] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.151554][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.172577][ T5645] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.178191][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   74.224701][ T5648] Bluetooth: hci0: command tx timeout
[   74.228313][ T5643] Bluetooth: hci1: command tx timeout
[   74.234093][ T5643] Bluetooth: hci2: command tx timeout
[   74.257126][ T5638] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.262177][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   74.266381][ T5638] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.272758][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.280696][ T5638] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.288094][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.299065][ T5638] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.304557][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   74.409110][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.444580][ T5641] 8021q: adding VLAN 0 to HW filter on device team0
[   74.450359][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.477102][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.479976][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.493141][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[   74.498212][ T2192] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.500712][ T2192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.519206][ T2192] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.521485][ T2192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.534487][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.548293][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.550874][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.592367][ T5638] 8021q: adding VLAN 0 to HW filter on device team0
[   74.612586][ T2192] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.615241][ T2192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.629018][ T2192] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.631517][ T2192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.053294][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.059392][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.139449][ T5645] veth0_vlan: entered promiscuous mode
[   75.151011][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.159575][ T5645] veth1_vlan: entered promiscuous mode
[   75.200492][ T5641] veth0_vlan: entered promiscuous mode
[   75.228423][ T5641] veth1_vlan: entered promiscuous mode
[   75.251126][ T5645] veth0_macvtap: entered promiscuous mode
[   75.256245][ T5638] veth0_vlan: entered promiscuous mode
[   75.268498][ T5645] veth1_macvtap: entered promiscuous mode
[   75.281204][ T5638] veth1_vlan: entered promiscuous mode
[   75.306138][ T5641] veth0_macvtap: entered promiscuous mode
[   75.318006][ T5641] veth1_macvtap: entered promiscuous mode
[   75.326038][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.351014][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.374337][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.377944][ T5638] veth0_macvtap: entered promiscuous mode
[   75.390077][ T5638] veth1_macvtap: entered promiscuous mode
[   75.396480][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.434905][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.498401][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.557218][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.564244][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.585175][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.614634][ T5748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.637485][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.649164][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.675239][ T5694] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.691473][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.698830][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.805088][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.817000][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.839631][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.856127][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.898319][ T5694] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.912847][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.925714][ T5748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.926363][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.929247][ T5748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.950442][ T5748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.036384][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.041278][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.095242][ T5748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.102376][ T5748] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.133803][ T5748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.304386][ T5648] Bluetooth: hci1: command tx timeout
[   76.305516][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   76.306985][ T4992] Bluetooth: hci0: command tx timeout
[   76.312512][ T5643] Bluetooth: hci2: command tx timeout
[   76.446358][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'.
[   76.906494][ T5797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.47'.
[   76.916468][ T5797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'.
[   77.389147][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'.
[   77.392691][ T5832] netlink: 56 bytes leftover after parsing attributes in process `syz.1.64'.
[   77.407270][ T5832] geneve2: entered promiscuous mode
[   77.411105][ T5832] geneve2: entered allmulticast mode
[   77.422389][ T5832] Zero length message leads to an empty skb
[   77.636123][ T5846] 0: reclassify loop, rule prio 0, protocol 03
[   77.939187][ T5866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'.
[   77.978666][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'.
[   78.072984][ T5878] netlink: 'syz.2.87': attribute type 1 has an invalid length.
[   78.192029][ T5886] ip6erspan0: entered allmulticast mode
[   78.384366][ T5648] Bluetooth: hci1: command tx timeout
[   78.386691][ T5643] Bluetooth: hci2: command tx timeout
[   78.389580][ T4992] Bluetooth: hci0: command tx timeout
[   78.612153][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'.
[   78.616590][ T5914] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   78.620917][ T5914] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   78.629462][ T5914] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   78.636242][ T5914] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   78.640853][ T5914] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   78.643352][ T5914] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   78.645987][ T5914] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   78.648823][ T5914] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   78.650066][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'.
[   78.651865][ T5914] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   79.305200][ T5967] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[   79.671915][ T5990] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   79.687674][ T5990] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   80.467062][ T4992] Bluetooth: hci0: command tx timeout
[   80.467103][ T5643] Bluetooth: hci2: command tx timeout
[   80.469821][ T4992] Bluetooth: hci1: command tx timeout
[   80.772291][ T6044] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[   80.812265][ T6047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.245333][ T6077] syz.0.176 uses obsolete (PF_INET,SOCK_PACKET)
[   81.348851][ T6081] __nla_validate_parse: 5 callbacks suppressed
[   81.348863][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.177'.
[   81.380218][ T6081] syz_tun: entered allmulticast mode
[   81.383342][ T6081] syz_tun: left allmulticast mode
[   82.076095][ T6122] veth3: entered allmulticast mode
[   82.087778][ T6122] bond1: (slave veth3): Enslaving as an active interface with a down link
[   82.118031][ T6132] bond1: (slave veth0_to_bond): making interface the new active one
[   82.135569][ T6132] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   82.363491][ T6147] tun0: tun_chr_ioctl cmd 1074025680
[   82.407504][ T6148] xt_CT: No such helper "netbios-ns"
[   82.631073][ T6163] netlink: 400 bytes leftover after parsing attributes in process `syz.0.214'.
[   85.562220][ T6158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   85.655966][   T33] audit: type=1800 audit(1787561050.399:2): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.221" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=409 res=0 errno=0
[   85.706754][ T6182] warning: `syz.2.222' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.098160][ T6207] netlink: 564 bytes leftover after parsing attributes in process `syz.2.231'.
[   86.166113][ T6207] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   86.210844][ T6211] validate_nla: 46 callbacks suppressed
[   86.210879][ T6211] netlink: 'syz.1.236': attribute type 2 has an invalid length.
[   87.363293][   T24] cfg80211: failed to load regulatory.db
[   87.389414][ T6227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.243'.
[   87.491963][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.244'.
[   87.518910][ T6225] syzkaller0: entered allmulticast mode
[   87.611808][ T6238] netlink: 136 bytes leftover after parsing attributes in process `syz.1.246'.
[   87.700450][ T6242] netlink: 27 bytes leftover after parsing attributes in process `syz.1.250'.
[   88.070235][ T6275] netlink: 'syz.0.266': attribute type 2 has an invalid length.
[   88.112574][ T6279] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   88.356514][ T6301] ip_tables: iptables: counters copy to user failed while replacing table
[   88.395329][ T6303] openvswitch: netlink: Unknown key attributes 1
[   88.578527][ T6318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.695685][ T6326] netlink: 144 bytes leftover after parsing attributes in process `syz.2.291'.
[   88.771843][ T6330] netlink: 'syz.0.293': attribute type 1 has an invalid length.
[   88.830367][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'.
[   88.923200][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[   89.232770][ T6360] netlink: 104 bytes leftover after parsing attributes in process `syz.2.307'.
[   90.511017][ T6381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.520354][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.315'.
[   90.523524][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'.
[   91.013056][ T6397] netlink: 'syz.0.321': attribute type 3 has an invalid length.
[   91.115297][ T6402] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   91.206551][ T2226] IPVS: starting estimator thread 0...
[   91.313814][ T6408] IPVS: using max 66 ests per chain, 158400 per kthread
[   91.502703][ T6415] batman_adv: batadv0: Adding interface: gretap1
[   91.505484][ T6415] batman_adv: batadv0: Interface activated: gretap1
[   91.968929][ T6448] netlink: 'syz.0.340': attribute type 11 has an invalid length.
[   92.138364][ T6456] syzkaller0: entered promiscuous mode
[   92.140944][ T6456] syzkaller0: entered allmulticast mode
[   92.445248][ T6476] __nla_validate_parse: 2 callbacks suppressed
[   92.445264][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'.
[   92.818512][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[   92.949166][ T6495] geneve2: left promiscuous mode
[   92.951362][ T6495] geneve2: left allmulticast mode
[   92.958381][ T6495] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[   92.967496][ T6502] netlink: 1 bytes leftover after parsing attributes in process `syz.0.366'.
[   93.936389][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'.
[   93.947782][ T6513] syzkaller0: entered promiscuous mode
[   93.963868][ T6513] syzkaller0: entered allmulticast mode
[   94.231970][ T6521] syz.1.374 (6521) used greatest stack depth: 20032 bytes left
[   94.367284][ T6537] syzkaller0: entered promiscuous mode
[   94.374046][ T6537] syzkaller0: entered allmulticast mode
[   94.543342][ T6550] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.548929][ T6550] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.771661][ T6567] xt_CT: No such helper "netbios-ns"
[   94.849274][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[   95.167714][ T6584] bridge_slave_0: left allmulticast mode
[   95.170247][ T6584] bridge_slave_0: left promiscuous mode
[   95.173857][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.188996][ T6584] bridge_slave_1: left allmulticast mode
[   95.194520][ T6584] bridge_slave_1: left promiscuous mode
[   95.200329][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.209436][ T6584] bond1: (slave veth0_to_bond): Releasing active interface
[   95.223152][ T6584] bond0: (slave bond_slave_0): Releasing backup interface
[   95.232203][ T6584] bond0: (slave bond_slave_1): Releasing backup interface
[   95.249086][ T6584] team0: Port device team_slave_0 removed
[   95.260998][ T6584] team0: Port device team_slave_1 removed
[   95.268092][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.272732][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.277353][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.279738][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.283303][ T6584] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   95.714735][ T6601] bond1: entered promiscuous mode
[   95.722341][ T6601] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.941972][ T6622] pimreg1: renamed from bridge0 (while UP)
[   95.956265][ T6622] pimreg1: entered allmulticast mode
[   95.959018][ T6622] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check.
[   96.011571][ T6628] ipt_rpfilter: unknown options
[   96.026309][ T6630] tc_dump_action: action bad kind
[   96.102921][ T6637] netlink: 'syz.0.420': attribute type 1 has an invalid length.
[   96.105314][ T6637] netlink: 'syz.0.420': attribute type 1 has an invalid length.
[   96.173412][ T6640] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[   96.636878][ T6668] openvswitch: netlink: IPv6 tunnel dst address is zero
[   96.938875][ T6688] netlink: 'syz.0.444': attribute type 1 has an invalid length.
[   97.030862][ T6688] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.084607][ T6699] bond1: (slave veth3): Enslaving as an active interface with a down link
[   97.181422][ T6702] ip6erspan0: left allmulticast mode
[   97.191998][ T6706] netlink: 132 bytes leftover after parsing attributes in process `syz.2.450'.
[   97.209495][ T6688] 8021q: adding VLAN 0 to HW filter on device batadv1
[   97.226979][ T6688] bond1: (slave batadv1): making interface the new active one
[   97.240997][ T6688] batadv1: entered promiscuous mode
[   97.247651][ T6688] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   97.255986][ T5748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   97.269206][ T5748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   97.285133][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   97.290008][ T5694] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[   97.464241][ T6693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   97.513121][ T5746] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   97.697984][ T6731] bond2: option fail_over_mac: invalid value (127)
[   97.707037][ T6731] bond2 (unregistering): Released all slaves
[   97.754880][  T803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   98.164335][ T6741] ip6t_srh: unknown srh invflags BA61
[   99.020745][ T6763] netlink: 'syz.0.473': attribute type 1 has an invalid length.
[   99.064520][ T6763] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.079091][ T6770] bond2: entered allmulticast mode
[   99.089281][ T6770] netlink: 56 bytes leftover after parsing attributes in process `syz.0.473'.
[   99.095882][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'.
[   99.115748][ T6763] bond2: (slave ip6gretap1): making interface the new active one
[   99.118363][ T6763] ip6gretap1: entered allmulticast mode
[   99.124368][ T6763] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   99.179490][ T6777] netlink: 36 bytes leftover after parsing attributes in process `syz.1.479'.
[   99.197056][ T6778] tipc: Started in network mode
[   99.200240][ T6778] tipc: Node identity 5a61ddaacb11, cluster identity 4711
[   99.204790][ T6778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.215332][ T6778] syzkaller0: entered promiscuous mode
[   99.220405][ T6778] syzkaller0: entered allmulticast mode
[   99.265499][ T6778] tipc: Resetting bearer <eth:syzkaller0>
[   99.288210][ T6776] tipc: Resetting bearer <eth:syzkaller0>
[   99.327970][ T6776] tipc: Disabling bearer <eth:syzkaller0>
[   99.551212][ T6794] netlink: 830 bytes leftover after parsing attributes in process `syz.0.486'.
[   99.562393][ T6794] bond_slave_0: entered promiscuous mode
[   99.565414][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'.
[   99.569197][ T6797] netlink: 40 bytes leftover after parsing attributes in process `syz.2.487'.
[   99.574623][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'.
[  100.413248][ T6841] Bluetooth: MGMT ver 1.23
[  100.550327][ T6845] netlink: 'syz.2.507': attribute type 55 has an invalid length.
[  100.824699][ T6858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.513'.
[  101.183987][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  101.344489][ T4992] Bluetooth: hci2: command tx timeout
[  101.423424][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.527'.
[  101.433575][ T6893] openvswitch: netlink: Missing key (keys=40, expected=100)
[  101.547961][ T6899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.530'.
[  101.762879][ T6914] syzkaller0: entered promiscuous mode
[  101.774101][ T6914] syzkaller0: entered allmulticast mode
[  102.092856][ T6939] netlink: 'syz.1.544': attribute type 1 has an invalid length.
[  102.098691][ T6939] netlink: 'syz.1.544': attribute type 2 has an invalid length.
[  102.173499][ T6945] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.192936][ T6945] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.237339][ T6948] veth5: entered allmulticast mode
[  102.246067][ T6948] bond3: (slave veth5): Enslaving as an active interface with an up link
[  102.428180][ T6962] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  102.430646][ T6962] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  102.439317][ T6962] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  103.207628][ T7045] netlink: 'syz.1.566': attribute type 1 has an invalid length.
[  103.220663][ T7045] netlink: 'syz.1.566': attribute type 1 has an invalid length.
[  103.339955][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.771524][ T7081] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  103.771524][ T7081] Please contact the netfilter-devel mailing list or update your nftables rules.
[  104.149637][ T7106] __nla_validate_parse: 8 callbacks suppressed
[  104.149659][ T7106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.593'.
[  104.162602][ T7107] netlink: 27 bytes leftover after parsing attributes in process `syz.2.592'.
[  105.015041][ T7110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  105.178212][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.607'.
[  105.404277][ T7157] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  106.528017][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'.
[  106.576970][ T7223] syzkaller0: entered promiscuous mode
[  106.586379][ T7223] syzkaller0: entered allmulticast mode
[  107.279253][ T7254] netlink: 'syz.2.647': attribute type 4 has an invalid length.
[  107.525117][ T7273] tipc: Enabled bearer <eth:hsr0>, priority 20
[  107.569869][ T7277] netlink: Only one type of NAT may be specified
[  107.572643][ T7277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.805561][ T7291] netlink: 180 bytes leftover after parsing attributes in process `syz.0.664'.
[  108.122383][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'.
[  108.127325][ T7309] netlink: 36 bytes leftover after parsing attributes in process `syz.2.673'.
[  108.133968][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'.
[  108.144429][ T7309] netlink: 36 bytes leftover after parsing attributes in process `syz.2.673'.
[  108.251042][ T7315] netlink: 'syz.2.676': attribute type 12 has an invalid length.
[  108.256190][ T7315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.676'.
[  108.305614][ T5748] batadv1: left promiscuous mode
[  108.539154][    T9] tipc: Node number set to 2440093098
[  108.657395][ T7338] netlink: 'syz.2.686': attribute type 11 has an invalid length.
[  108.819386][ T7349] netlink: 'syz.2.690': attribute type 1 has an invalid length.
[  109.104167][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  109.722947][ T7372] ip6tnl2: entered allmulticast mode
[  109.732903][ T7368] netlink: 'syz.1.698': attribute type 16 has an invalid length.
[  109.745799][ T7368] netlink: 'syz.1.698': attribute type 17 has an invalid length.
[  109.928518][ T7368] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  109.950278][ T7375] __nla_validate_parse: 2 callbacks suppressed
[  109.950301][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.700'.
[  109.965785][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.700'.
[  110.398135][ T7407] syzkaller0: entered promiscuous mode
[  110.400484][ T7407] syzkaller0: entered allmulticast mode
[  110.406156][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.416754][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.427172][ T7407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.432647][ T7406] tipc: Resetting bearer <eth:syzkaller0>
[  110.466859][ T7406] tipc: Disabling bearer <eth:syzkaller0>
[  110.596603][ T7422] block nbd0: not configured, cannot reconfigure
[  110.889214][ T7444] IPv6: NLM_F_REPLACE set, but no existing node found!
[  110.958215][ T7450] netlink: 'syz.0.736': attribute type 1 has an invalid length.
[  111.261309][ T7465] netlink: 'syz.0.741': attribute type 8 has an invalid length.
[  111.272141][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'.
[  111.297982][ T7465] veth1_to_team: entered promiscuous mode
[  111.305573][ T7465] gretap0: entered promiscuous mode
[  111.309337][ T7465] veth1_to_team: left promiscuous mode
[  111.313497][ T7465] gretap0: left promiscuous mode
[  111.499660][ T7471] netlink: 'syz.0.744': attribute type 3 has an invalid length.
[  111.502806][ T7471] netlink: 'syz.0.744': attribute type 3 has an invalid length.
[  111.634069][ T7477] xt_cgroup: invalid path, errno=-2
[  111.869734][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'.
[  112.019806][ T7488] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.035430][ T7490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.753'.
[  112.299076][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'.
[  112.302812][ T7508] netlink: 312 bytes leftover after parsing attributes in process `syz.0.761'.
[  112.307450][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'.
[  112.771847][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.782'.
[  112.950316][ T7570] openvswitch: netlink: Message has -2 unknown bytes.
[  113.303007][    T9] IPVS: starting estimator thread 0...
[  113.307377][ T7592] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  113.404010][ T7594] IPVS: using max 66 ests per chain, 158400 per kthread
[  113.995927][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'.
[  114.321282][ T7626] validate_nla: 56 callbacks suppressed
[  114.321299][ T7626] netlink: 'syz.0.815': attribute type 1 has an invalid length.
[  115.042528][ T7655] netlink: 'syz.1.827': attribute type 6 has an invalid length.
[  115.440600][ T7677] TC_ACT_REPEAT abuse ?
[  116.746758][ T7750] syzkaller0: entered promiscuous mode
[  116.749077][ T7750] syzkaller0: entered allmulticast mode
[  116.857603][ T7753] __nla_validate_parse: 2 callbacks suppressed
[  116.857621][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'.
[  116.892049][ T7753] bond2: entered promiscuous mode
[  116.894297][ T7753] bond2: entered allmulticast mode
[  117.462438][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.880'.
[  117.466023][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.880'.
[  117.520560][ T7780] geneve0: entered promiscuous mode
[  117.531174][ T7780] geneve0: left promiscuous mode
[  117.750876][ T7785] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  118.664963][ T7691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.079729][ T7828] netlink: 32 bytes leftover after parsing attributes in process `syz.2.903'.
[  119.487909][ T7846] syzkaller1: entered promiscuous mode
[  119.489858][ T7846] syzkaller1: entered allmulticast mode
[  119.736158][ T7857] netlink: 116 bytes leftover after parsing attributes in process `syz.0.916'.
[  119.773187][ T7862] netlink: 'syz.1.918': attribute type 4 has an invalid length.
[  119.792658][ T7862] netlink: 17 bytes leftover after parsing attributes in process `syz.1.918'.
[  119.843145][ T7860] bridge0: entered promiscuous mode
[  119.845286][ T7860] bridge0: entered allmulticast mode
[  119.858717][ T7868] syzkaller1: entered promiscuous mode
[  119.860682][ T7868] syzkaller1: entered allmulticast mode
[  119.963317][ T7874] syzkaller0: entered promiscuous mode
[  119.966108][ T7874] syzkaller0: entered allmulticast mode
[  120.381465][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.938'.
[  120.384638][ T7907] netlink: 'syz.0.938': attribute type 1 has an invalid length.
[  120.417653][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.940'.
[  120.603983][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'.
[  120.622432][ T7925] 8021q: adding VLAN 0 to HW filter on device bond2
[  120.648411][ T7925] macvlan2: entered promiscuous mode
[  120.650374][ T7925] macvlan2: entered allmulticast mode
[  120.653075][ T7925] bond2: entered promiscuous mode
[  120.656039][ T7925] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  120.661661][ T7925] bond2: left promiscuous mode
[  120.800601][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'.
[  120.899674][ T7940] lo: entered allmulticast mode
[  120.910940][ T7939] lo: left allmulticast mode
[  121.173159][ T7951] netlink: 'syz.2.956': attribute type 6 has an invalid length.
[  121.519305][ T7960] netlink: 'syz.2.960': attribute type 4 has an invalid length.
[  121.541435][ T7960] netlink: 'syz.2.960': attribute type 4 has an invalid length.
[  121.798442][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88810c905000: rx timeout, send abort
[  121.817933][ T7970] netlink: 'syz.2.965': attribute type 3 has an invalid length.
[  122.304030][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88810c905000: abort rx timeout. Force session deactivation
[  122.363243][ T8003] __nla_validate_parse: 1 callbacks suppressed
[  122.363253][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'.
[  122.370211][ T8005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.983'.
[  122.373137][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'.
[  122.429019][ T8013] netlink: 2 bytes leftover after parsing attributes in process `syz.1.986'.
[  122.685679][ T8029] ip_tables: iptables: counters copy to user failed while replacing table
[  122.751739][ T8033] openvswitch: netlink: Missing key (keys=c0, expected=10000000)
[  122.917514][ T8041] syzkaller0: entered promiscuous mode
[  122.921575][ T8041] syzkaller0: entered allmulticast mode
[  123.058423][ T8045] syzkaller1: entered promiscuous mode
[  123.063320][ T8045] syzkaller1: entered allmulticast mode
[  123.193741][ T8054] netlink: 'syz.1.1004': attribute type 1 has an invalid length.
[  123.302900][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'.
[  123.537523][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'.
[  123.688371][ T8087] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1019'.
[  123.918217][ T8108] netlink: 'syz.2.1030': attribute type 13 has an invalid length.
[  124.001815][ T8110] netlink: 'syz.2.1031': attribute type 34 has an invalid length.
[  124.008186][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1031'.
[  124.025374][ T8110] bond3: option lacp_strict: invalid value (64)
[  124.030352][ T8110] bond3 (unregistering): Released all slaves
[  124.142817][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1034'.
[  124.336274][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'.
[  124.340409][ T8133] netlink: 'syz.0.1042': attribute type 9 has an invalid length.
[  124.365226][ T5748] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.372775][ T5748] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.380291][ T5748] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.384552][ T5748] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.836429][ T8166] netlink: 'syz.1.1054': attribute type 13 has an invalid length.
[  124.950868][ T8175] ip_tables: iptables: counters copy to user failed while replacing table
[  125.032408][ T8179] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  125.103981][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  125.784897][ T8227] SET target dimension over the limit!
[  125.789818][ T8227] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  125.889776][ T8231] syzkaller0: entered promiscuous mode
[  125.906277][ T8231] syzkaller0: entered allmulticast mode
[  125.936176][ T8239] xt_hashlimit: size too large, truncated to 1048576
[  126.000077][ T8242] @0: renamed from bond_slave_1
[  126.041974][ T8246] syzkaller0: entered promiscuous mode
[  126.048059][ T8246] syzkaller0: entered allmulticast mode
[  126.131199][ T8250] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  126.515639][ T8274] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  128.810633][ T8308] __nla_validate_parse: 10 callbacks suppressed
[  128.810645][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  128.821711][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  128.833434][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  128.838293][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  128.845497][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  128.886432][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  128.901085][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  128.951698][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  128.957331][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  128.969499][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  129.037065][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.039882][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.354290][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.380588][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.935175][ T5694] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.942879][ T5694] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.954274][ T5694] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.972957][ T5694] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.436909][ T8362] netlink: 'syz.0.1133': attribute type 30 has an invalid length.
[  130.557933][ T8369] syzkaller0: entered promiscuous mode
[  130.572991][ T8369] syzkaller0: entered allmulticast mode
[  130.655597][ T8371] iwpm_parse_nlmsg: Invalid attribute (msg type Remote Mapping info ret = -34)
[  130.697283][ T8378] netlink: 'syz.1.1139': attribute type 11 has an invalid length.
[  131.191041][ T8407] netlink: 'syz.2.1151': attribute type 1 has an invalid length.
[  131.218210][ T8407] netlink: 'syz.2.1151': attribute type 10 has an invalid length.
[  131.241491][ T8407] team0: Port device vxcan0 added
[  132.069156][ T8435] netlink: 'syz.0.1160': attribute type 1 has an invalid length.
[  132.172418][ T8438] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  132.196195][ T8438] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.200787][ T8438] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  132.206580][ T8438] bridge0: left promiscuous mode
[  132.300684][ T5748] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  132.317310][ T5748] bond1: (slave veth3): making interface the new active one
[  132.332950][ T5748] bond1: active interface up!
[  132.695974][ T8469] tipc: Trying to set illegal importance in message
[  133.435290][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  133.437620][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  133.804966][ T8524] lo: Caught tx_queue_len zero misconfig
[  133.807308][ T8522] netlink: Unknown nat attribute (0)
[  133.815367][ T8522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.881526][ T8530] __nla_validate_parse: 162 callbacks suppressed
[  133.881537][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'.
[  133.895954][ T5748] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.897492][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'.
[  133.899223][ T5748] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.909931][ T5748] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.921106][ T8533] lo: entered allmulticast mode
[  133.946457][ T8536] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1208'.
[  133.963923][ T7941] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.562937][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'.
[  134.757279][ T8531] lo: left allmulticast mode
[  134.819264][ T8587] netlink: 'syz.0.1232': attribute type 11 has an invalid length.
[  134.822624][ T8587] netlink: 'syz.0.1232': attribute type 11 has an invalid length.
[  134.834213][ T8587] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1232'.
[  134.960307][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'.
[  134.992236][ T8603] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  135.003469][ T8603] macvlan2: entered promiscuous mode
[  135.005864][ T8603] macvlan2: entered allmulticast mode
[  135.008451][ T8603] bond3: (slave macvlan2): Error -98 calling set_mac_address
[  135.141854][ T8617] syzkaller0: entered promiscuous mode
[  135.144302][ T8617] syzkaller0: entered allmulticast mode
[  135.477771][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'.
[  135.738350][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'.
[  136.672655][ T8708] syzkaller0: entered promiscuous mode
[  136.675782][ T8708] syzkaller0: entered allmulticast mode
[  136.762429][ T8712] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1282'.
[  136.927520][ T8723] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1287'.
[  136.940961][ T8723] netlink: 'syz.1.1287': attribute type 4 has an invalid length.
[  137.211522][ T8736] syzkaller0: entered promiscuous mode
[  137.213540][ T8736] syzkaller0: entered allmulticast mode
[  137.739506][ T8781] netlink: 'syz.1.1316': attribute type 11 has an invalid length.
[  138.004363][ T8803] can: request_module (can-proto-5) failed.
[  138.845016][ T8807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  140.458575][ T8945] __nla_validate_parse: 5 callbacks suppressed
[  140.458589][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1382'.
[  140.485523][ T8945] vlan2: entered allmulticast mode
[  140.487669][ T8945] bridge2: entered allmulticast mode
[  140.779205][ T8957] syzkaller1: entered promiscuous mode
[  140.783028][ T8957] syzkaller1: entered allmulticast mode
[  141.112197][ T8988] xt_limit: Overflow, try lower: 0/0
[  141.136861][ T8990] netlink: 'syz.0.1404': attribute type 3 has an invalid length.
[  141.243733][ T8981] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  141.254668][ T5746] IPVS: starting estimator thread 0...
[  141.354074][ T9008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.376503][ T9000] IPVS: using max 66 ests per chain, 158400 per kthread
[  141.409637][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'.
[  141.477201][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'.
[  141.482552][ T9020] netlink: 'syz.2.1419': attribute type 30 has an invalid length.
[  141.485835][ T9020] netlink: 'syz.2.1419': attribute type 29 has an invalid length.
[  141.491296][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'.
[  141.656136][ T9038] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1426'.
[  141.791271][ T9044] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  141.793440][ T9044] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  142.175607][ T9061] sctp: [Deprecated]: syz.1.1437 (pid 9061) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.175607][ T9061] Use struct sctp_sack_info instead
[  142.185092][ T9061] sctp: [Deprecated]: syz.1.1437 (pid 9061) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.185092][ T9061] Use struct sctp_sack_info instead
[  142.269478][ T9065] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  142.874598][ T9102] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1457'.
[  142.896530][ T9105] netlink: 'syz.1.1458': attribute type 2 has an invalid length.
[  142.921000][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1459'.
[  143.101853][ T9120] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1465'.
[  143.267739][ T9131] Cannot find add_set index 34 as target
[  143.572669][ T9153] sctp: [Deprecated]: syz.1.1480 (pid 9153) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.572669][ T9153] Use struct sctp_sack_info instead
[  143.652885][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1482'.
[  144.148034][ T9179] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1493'.
[  144.243199][ T9187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.252232][ T9189] syzkaller1: entered promiscuous mode
[  144.255648][ T9189] syzkaller1: entered allmulticast mode
[  144.359359][ T9196] netlink: 'syz.1.1501': attribute type 1 has an invalid length.
[  144.375491][ T9197] netlink: 'syz.2.1500': attribute type 1 has an invalid length.
[  144.391673][ T9200] netlink: 'syz.0.1502': attribute type 1 has an invalid length.
[  144.401777][ T9200] netlink: 'syz.0.1502': attribute type 1 has an invalid length.
[  144.413558][ T9197] 8021q: adding VLAN 0 to HW filter on device bond5
[  144.451755][ T9197] bond5: (slave veth5): Enslaving as an active interface with a down link
[  144.475782][ T9197] pimreg1: left allmulticast mode
[  144.546826][ T9197] veth3: left allmulticast mode
[  144.551625][ T9197] bridge0: left allmulticast mode
[  144.565772][ T9197] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.571353][ T9197] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.610537][ T9212] 8021q: adding VLAN 0 to HW filter on device batadv1
[  144.631301][ T9212] bond5: (slave batadv1): making interface the new active one
[  144.644988][ T9212] batadv1: entered promiscuous mode
[  144.647634][ T9212] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  144.675274][ T5748] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.683097][ T5748] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.697004][ T5748] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.705241][ T5748] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.757722][ T9222] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0)
[  144.761887][ T5694] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  144.767602][ T9222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.890312][ T9231] syzkaller0: entered promiscuous mode
[  144.892882][ T9231] syzkaller0: entered allmulticast mode
[  145.779368][ T9235] __nla_validate_parse: 10 callbacks suppressed
[  145.779391][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1514'.
[  145.889420][ T9240] nbd: socks must be embedded in a SOCK_ITEM attr
[  145.933375][ T9243] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  146.166066][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'.
[  146.272436][   T57] block nbd0: Receive control failed (result -107)
[  148.024183][ T9266] bridge0: port 3(veth1_to_bridge) entered blocking state
[  148.030628][ T9266] bridge0: port 3(veth1_to_bridge) entered disabled state
[  148.036348][ T9266] veth1_to_bridge: entered allmulticast mode
[  148.040638][ T9266] veth1_to_bridge: entered promiscuous mode
[  148.147230][ T9278] netlink: 'syz.0.1531': attribute type 4 has an invalid length.
[  148.153201][ T9274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1530'.
[  148.800291][ T9319] syzkaller0: entered promiscuous mode
[  148.803386][ T9319] syzkaller0: entered allmulticast mode
[  149.570340][ T9337] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1554'.
[  149.978606][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'.
[  150.493288][ T9389] Bluetooth: hci0: unsupported parameter 5135
[  150.495933][ T9389] Bluetooth: hci0: unsupported parameter 8192
[  150.499934][ T9389] Bluetooth: hci0: unsupported parameter 5135
[  150.502226][ T9389] Bluetooth: hci0: unsupported parameter 8192
[  150.926245][ T9411] tunl0: entered promiscuous mode
[  150.934353][ T9411] netlink: 'syz.0.1589': attribute type 4 has an invalid length.
[  150.941088][ T9411] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1589'.
[  151.759788][ T9423] IPVS: persistence engine module ip_vs_pe_  not found
[  151.778479][ T9429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1596'.
[  151.820710][ T9431] netlink: 'syz.0.1598': attribute type 1 has an invalid length.
[  151.826118][ T9431] netlink: 'syz.0.1598': attribute type 4 has an invalid length.
[  151.829845][ T9431] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1598'.
[  151.928926][ T9442] bond6: option mode: invalid value (254)
[  151.938807][ T9442] bond6 (unregistering): Released all slaves
[  152.900246][   T33] audit: type=1804 audit(1787561117.649:3): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1625" name="/newroot/604/cgroup.controllers" dev="tmpfs" ino=3067 res=1 errno=0
[  152.912235][   T33] audit: type=1800 audit(1787561117.649:4): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1625" name="cgroup.controllers" dev="tmpfs" ino=3067 res=0 errno=0
[  153.047559][ T9502] netlink: 'syz.1.1629': attribute type 1 has an invalid length.
[  153.115867][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'.
[  153.125759][ T9508] openvswitch: netlink: Unknown key attributes 20
[  153.781104][ T9543] netlink: 'syz.2.1648': attribute type 13 has an invalid length.
[  153.943429][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'.
[  153.947334][ T9547] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1650'.
[  154.021811][ T9551] netlink: zone id is out of range
[  154.024910][ T9551] netlink: zone id is out of range
[  154.027166][ T9551] netlink: zone id is out of range
[  154.029368][ T9551] netlink: zone id is out of range
[  154.031468][ T9551] netlink: zone id is out of range
[  154.037569][ T9551] netlink: zone id is out of range
[  154.040028][ T9551] netlink: zone id is out of range
[  154.042071][ T9551] netlink: zone id is out of range
[  154.044631][ T9551] netlink: zone id is out of range
[  154.412915][ T9559] netlink: 'syz.0.1656': attribute type 3 has an invalid length.
[  154.415869][ T9559] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1656'.
[  154.440290][ T9561] netlink: 'syz.1.1657': attribute type 3 has an invalid length.
[  154.536591][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'.
[  154.869780][ T9582] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1664'.
[  155.061440][ T9599] netlink: 'syz.1.1674': attribute type 1 has an invalid length.
[  155.162428][ T9599] 8021q: adding VLAN 0 to HW filter on device bond3
[  155.232133][ T9599] bond3: (slave geneve4): making interface the new active one
[  155.238647][ T9599] bond3: (slave geneve4): Enslaving as an active interface with an up link
[  155.275954][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.284244][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.294126][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.298758][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.823873][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  155.875392][ T5694] batadv1: left promiscuous mode
[  155.969868][ T9648] syzkaller0: entered promiscuous mode
[  155.972324][ T9648] syzkaller0: entered allmulticast mode
[  159.164511][ T9681] syzkaller0: entered promiscuous mode
[  159.166458][ T9681] syzkaller0: entered allmulticast mode
[  160.216517][ T9731] gtp0: entered promiscuous mode
[  160.219599][ T9731] gtp0: entered allmulticast mode
[  160.232794][ T9731] team0: Device gtp0 is of different type
[  160.778708][ T9765] bond4 (unregistering): Released all slaves
[  161.136660][ T9794] SET target dimension over the limit!
[  161.170670][ T9796] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1754'.
[  161.183759][ T9796] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1754'.
[  161.614364][ T9822] netlink: 'syz.1.1766': attribute type 10 has an invalid length.
[  161.622436][ T9822] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1766'.
[  161.638237][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1768'.
[  161.658757][ T9822] team0: Device wg2 is of different type
[  161.669718][ T9824] netlink: 'syz.0.1768': attribute type 9 has an invalid length.
[  161.677788][ T9824] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1768'.
[  161.701459][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'.
[  161.799285][ T9835] bridge4: entered promiscuous mode
[  161.813355][ T9835] bridge4: entered allmulticast mode
[  161.820330][ T9835] team0: Device bridge4 is of different type
[  161.838012][ T9843] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1772'.
[  162.539920][ T9885] netlink: 'syz.2.1793': attribute type 1 has an invalid length.
[  162.580185][ T9889] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1795'.
[  162.656449][ T9891] Bluetooth: MGMT ver 1.23
[  162.711517][ T9897] net_ratelimit: 500 callbacks suppressed
[  162.711540][ T9897] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  162.790968][ T9901] syzkaller0: entered promiscuous mode
[  162.793506][ T9901] syzkaller0: entered allmulticast mode
[  162.929435][ T9910] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[  163.216415][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'.
[  164.289521][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'.
[  164.439882][T10012] netlink: 'syz.0.1841': attribute type 1 has an invalid length.
[  164.925295][T10048] netlink: 'syz.2.1853': attribute type 1 has an invalid length.
[  164.974474][T10048] 8021q: adding VLAN 0 to HW filter on device bond6
[  165.005401][T10054] syzkaller0: entered promiscuous mode
[  165.007719][T10054] syzkaller0: entered allmulticast mode
[  166.121189][T10094] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  166.183505][T10097] __nla_validate_parse: 6 callbacks suppressed
[  166.183523][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'.
[  166.184355][T10099] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1874'.
[  166.502518][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'.
[  166.565950][T10133] openvswitch: netlink: IPv4 tunnel dst address is zero
[  166.837940][T10158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1901'.
[  166.956064][T10167] netlink: zone id is out of range
[  166.958295][T10167] netlink: zone id is out of range
[  166.960356][T10167] netlink: zone id is out of range
[  166.962294][T10167] netlink: zone id is out of range
[  166.967593][T10167] netlink: zone id is out of range
[  166.969512][T10167] netlink: zone id is out of range
[  167.161601][T10185] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1915'.
[  167.971091][T10208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1924'.
[  167.985266][T10210] netlink: 'syz.2.1925': attribute type 1 has an invalid length.
[  168.093361][T10210] 8021q: adding VLAN 0 to HW filter on device bond7
[  168.574489][    C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16
[  168.609703][T10224] bond1: left promiscuous mode
[  168.611608][T10224] bond2: left promiscuous mode
[  168.613331][T10224] bond2: left allmulticast mode
[  168.757037][T10230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1930'.
[  168.762954][T10229] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  168.764184][ T5748] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  168.781463][ T5748] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.792544][ T5748] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  168.804231][ T5748] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.810999][ T5748] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  168.822298][ T5748] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.837743][ T5748] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  168.844274][ T5748] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.887703][T10233] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1933'.
[  169.119482][T10244] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1938'.
[  170.690698][T10278] syz_tun: entered promiscuous mode
[  170.700273][T10278] vlan3: entered promiscuous mode
[  171.131234][T10302] netlink: 712 bytes leftover after parsing attributes in process `syz.1.1963'.
[  171.242664][T10308] netlink: 'syz.2.1967': attribute type 29 has an invalid length.
[  171.479510][T10320] ip6tnl0: Caught tx_queue_len zero misconfig
[  171.584694][ T5643] Bluetooth: hci2: command 0x0405 tx timeout
[  171.961730][T10328] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  171.975564][T10328] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.158030][T10351] __nla_validate_parse: 2 callbacks suppressed
[  172.158046][T10351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1978'.
[  172.186273][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'.
[  172.222941][T10355] netlink: 'syz.0.1987': attribute type 83 has an invalid length.
[  172.680473][T10376] tunl0: left promiscuous mode
[  172.816796][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1997'.
[  173.098344][T10376] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.519329][T10376] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.640043][T10376] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.073325][T10376] batman_adv: batadv0: Interface deactivated: gretap1
[  174.160984][T10376] bond2: left allmulticast mode
[  174.163233][T10376] ip6gretap1: left allmulticast mode
[  174.174404][T10376] veth5: left allmulticast mode
[  174.179207][T10376] ip6tnl2: left allmulticast mode
[  174.296526][T10376] vlan2: left allmulticast mode
[  174.298443][T10376] bridge2: left allmulticast mode
[  174.343974][T10391] veth1_to_batadv: Caught tx_queue_len zero misconfig
[  174.494584][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.503107][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.518486][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.553822][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.560651][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.578407][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.256395][ T7941] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.261874][ T7941] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.646444][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2023'.
[  175.698626][T10460] netlink: 'syz.1.2025': attribute type 3 has an invalid length.
[  175.701455][T10460] netlink: 'syz.1.2025': attribute type 3 has an invalid length.
[  175.821221][T10466] Bluetooth: hci0: unsupported parameter 5135
[  175.823402][T10466] Bluetooth: hci0: unsupported parameter 8192
[  175.827661][T10466] Bluetooth: hci0: unsupported parameter 5135
[  175.829726][T10466] Bluetooth: hci0: unsupported parameter 8192
[  175.941478][T10474] syzkaller1: entered promiscuous mode
[  175.943539][T10474] syzkaller1: entered allmulticast mode
[  176.138831][T10483] netlink: 'syz.1.2035': attribute type 5 has an invalid length.
[  177.390551][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2047'.
[  177.427194][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2047'.
[  177.618237][T10517] netlink: 4416 bytes leftover after parsing attributes in process `syz.0.2049'.
[  177.623353][T10515] syzkaller0: entered promiscuous mode
[  177.636690][T10515] syzkaller0: entered allmulticast mode
[  177.701168][T10519] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2050'.
[  177.722372][T10519] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2050'.
[  178.656059][T10560] x_tables: duplicate underflow at hook 3
[  178.986785][T10568] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2072'.
[  180.152136][T10591] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96
[  180.193214][T10595] IPVS: set_ctl: invalid protocol: 148 224.0.0.2:20004
[  180.736884][T10623] netlink: 'syz.1.2096': attribute type 10 has an invalid length.
[  180.740259][T10623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2096'.
[  180.748074][T10623] dummy0: entered promiscuous mode
[  180.753138][T10623] bridge0: port 4(dummy0) entered blocking state
[  180.757166][T10623] bridge0: port 4(dummy0) entered disabled state
[  180.760296][T10623] dummy0: entered allmulticast mode
[  180.848382][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2097'.
[  181.162076][T10632] bond8: entered promiscuous mode
[  181.176837][T10632] bond8: entered allmulticast mode
[  181.189322][T10632] 8021q: adding VLAN 0 to HW filter on device bond8
[  181.353452][T10639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2103'.
[  181.749574][T10653] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  181.762675][T10653] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  181.776495][T10656] netlink: 'syz.2.2110': attribute type 29 has an invalid length.
[  183.450078][T10690] netlink: get zone limit has 4 unknown bytes
[  183.687231][T10677] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  183.868317][T10700] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  183.960300][T10702] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2130'.
[  184.163656][T10704] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  184.338022][T10704] block nbd0: reconnected socket
[  184.366196][  T907] block nbd0: Receive control failed (result -32)
[  184.621263][T10723] netlink: 'syz.2.2139': attribute type 1 has an invalid length.
[  184.664898][T10723] lo: entered promiscuous mode
[  184.694332][T10723] tunl0: entered promiscuous mode
[  184.725194][T10723] gre0: entered promiscuous mode
[  184.747180][T10723] gretap0: entered promiscuous mode
[  184.790963][T10723] erspan0: entered promiscuous mode
[  184.842955][T10723] ip_vti0: entered promiscuous mode
[  184.891583][T10723] ip6_vti0: entered promiscuous mode
[  184.938696][T10728] netlink: zone id is out of range
[  184.950191][T10723] sit0: entered promiscuous mode
[  184.958835][T10728] netlink: zone id is out of range
[  184.969646][T10728] netlink: zone id is out of range
[  184.975793][T10728] netlink: zone id is out of range
[  184.982831][T10728] netlink: set zone limit has 8 unknown bytes
[  184.995987][T10723] ip6tnl0: entered promiscuous mode
[  185.031129][T10723] ip6gre0: entered promiscuous mode
[  185.089911][T10723] ip6gretap0: entered promiscuous mode
[  185.133021][T10723] pimreg1: entered promiscuous mode
[  185.500473][T10746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2149'.
[  185.501017][T10740] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.690060][T10751] netlink: 'syz.2.2151': attribute type 1 has an invalid length.
[  185.930333][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'.
[  185.942122][T10760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2156'.
[  185.995538][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'.
[  186.009275][T10763] tunl0: Caught tx_queue_len zero misconfig
[  186.854292][T10801] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  187.694168][T10829] ieee802154 phy0 wpan0: encryption failed: -126
[  187.734547][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'.
[  187.834133][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2191'.
[  187.855981][T10842] vlan3: entered allmulticast mode
[  187.857817][T10842] bridge4: entered allmulticast mode
[  187.861048][T10842] bridge4: port 1(erspan0) entered blocking state
[  187.863422][T10842] bridge4: port 1(erspan0) entered disabled state
[  187.868454][T10842] erspan0: entered allmulticast mode
[  187.910556][T10842] tipc: Resetting bearer <eth:hsr0>
[  187.919167][T10842] tipc: Resetting bearer <eth:hsr0>
[  187.988223][T10811] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  188.869412][   T32] tipc: Resetting bearer <eth:hsr0>
[  188.885425][   T32] tipc: Resetting bearer <eth:hsr0>
[  189.700007][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'.
[  189.772377][T10897] bridge5: entered promiscuous mode
[  189.775114][T10897] bridge5: entered allmulticast mode
[  189.778733][T10897] team0: Device bridge5 is of different type
[  190.296595][T10912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2222'.
[  190.773517][T10914] ovs-s!: entered promiscuous mode
[  190.974417][T10922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.001844][T10922] syzkaller0: entered promiscuous mode
[  191.004180][T10922] syzkaller0: entered allmulticast mode
[  191.006614][T10922] tipc: Resetting bearer <eth:syzkaller0>
[  191.059474][T10921] tipc: Resetting bearer <eth:syzkaller0>
[  191.117870][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2229'.
[  194.020761][T10921] tipc: Disabling bearer <eth:syzkaller0>
[  194.081624][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'.
[  194.093268][T10931] netlink: 'syz.0.2229': attribute type 1 has an invalid length.
[  194.138340][T10933] netlink: 'syz.1.2230': attribute type 6 has an invalid length.
[  194.141554][T10933] netlink: 'syz.1.2230': attribute type 7 has an invalid length.
[  194.146296][T10933] netlink: 'syz.1.2230': attribute type 8 has an invalid length.
[  194.401288][T10943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2234'.
[  194.668650][   T33] audit: type=1804 audit(1787561159.419:5): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2238" name="/newroot/700/cgroup.controllers" dev="tmpfs" ino=3545 res=1 errno=0
[  194.710398][   T33] audit: type=1800 audit(1787561159.439:6): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2238" name="cgroup.controllers" dev="tmpfs" ino=3545 res=0 errno=0
[  194.747167][   T33] audit: type=1800 audit(1787561159.449:7): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2238" name="cgroup.controllers" dev="tmpfs" ino=3545 res=0 errno=0
[  194.887363][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  194.890254][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  195.070112][T10959] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2243'.
[  195.080406][T10959] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2243'.
[  195.090700][T10959] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2243'.
[  196.244382][T10969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2245'.
[  196.551802][T10967] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.567090][T10967] 8021q: adding VLAN 0 to HW filter on device team0
[  196.607529][T10967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.869223][T10967] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.888401][T10967] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.920836][T10967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  196.934537][T10967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.954832][ T4992] Bluetooth: hci1: command 0x0406 tx timeout
[  196.988523][T10967] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  197.029825][T10975] ip6tnl2: entered allmulticast mode
[  197.035974][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.038833][   T83] bridge0: port 1(bridge_slave_0) entered listening state
[  197.048361][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.051342][   T83] bridge0: port 2(bridge_slave_1) entered listening state
[  197.501239][T10993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2257'.
[  197.756804][T11005] netlink: 'syz.1.2262': attribute type 32 has an invalid length.
[  197.761766][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'.
[  197.768310][T11005] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  198.633601][    C1] sched: DL replenish lagged too much
[  198.677185][T11026] bridge0: port 3(syz_tun) entered blocking state
[  198.690688][T11026] bridge0: port 3(syz_tun) entered disabled state
[  198.697903][T11026] syz_tun: entered allmulticast mode
[  198.712256][T11026] syz_tun: entered promiscuous mode
[  198.729589][T11026] bridge0: port 3(syz_tun) entered blocking state
[  198.731740][T11026] bridge0: port 3(syz_tun) entered listening state
[  199.261819][T11060] netlink: 'syz.2.2286': attribute type 83 has an invalid length.
[  199.917216][T11079] ip6_vti0: left promiscuous mode
[  200.692897][T11109] openvswitch: netlink: Actions may not be safe on all matching packets
[  201.604199][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'.
[  201.679665][T11152] netlink: Invalid conntrack timeout
[  201.682110][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.509707][T11176] syzkaller0: entered promiscuous mode
[  202.514037][T11176] syzkaller0: entered allmulticast mode
[  203.160400][T11195] syz.2.2348 (11195) used greatest stack depth: 19704 bytes left
[  203.359719][T11209] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2353'.
[  203.790949][ T5339] veth0_vlan: left promiscuous mode
[  203.832443][ T8321] veth0_vlan: entered promiscuous mode
[  204.923241][T11292] netlink: 'syz.0.2384': attribute type 1 has an invalid length.
[  204.933208][T11292] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2384'.
[  204.967225][T11294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2385'.
[  205.856541][T11335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2393'.
[  205.899332][T11335] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2393'.
[  206.143496][T11335] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2393'.
[  206.389278][T11335] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2393'.
[  207.270939][T11393] netlink: 'syz.0.2408': attribute type 23 has an invalid length.
[  207.309631][T11397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.986659][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'.
[  208.021896][T11421] ip6tnl3: entered allmulticast mode
[  208.029207][T10503] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  208.409023][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'.
[  208.461147][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2422'.
[  208.470293][T11423] nbd1: detected capacity change from 0 to 63
[  208.497838][T10713] block nbd1: Receive control failed (result -104)
[  209.148711][T11455] gre0: left promiscuous mode
[  209.152456][T11456] TCP: TCP_TX_DELAY enabled
[  209.155255][T11455] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2433'.
[  209.159164][T11455] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  209.831269][T11475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2441'.
[  209.845096][T11468] bridge_slave_1 (unregistering): left allmulticast mode
[  209.853555][T11468] bridge_slave_1 (unregistering): left promiscuous mode
[  209.868104][T11468] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.891899][T11468] veth1_to_bridge (unregistering): left allmulticast mode
[  209.896298][T11468] veth1_to_bridge (unregistering): left promiscuous mode
[  209.898922][T11468] bridge0: port 3(veth1_to_bridge) entered disabled state
[  210.131609][T11484] ieee802154 phy0 wpan0: encryption failed: -126
[  210.300186][T11487] bond4: option ad_user_port_key: invalid value (65535)
[  210.305114][T11487] bond4: option ad_user_port_key: allowed values 0 - 1023
[  210.310647][T11487] bond4 (unregistering): Released all slaves
[  210.580646][T11497] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  212.148434][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  212.152426][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  212.303922][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  214.063850][    C0] bridge0: port 3(syz_tun) entered learning state
[  220.244021][   T30] rcu_tasks_wait_gp: rcu_tasks grace period number 21 (since boot) is 1012 jiffies old.
[  220.463884][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  227.503702][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.505947][    C0] bridge0: topology change detected, propagating
[  227.509894][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.512290][    C0] bridge0: topology change detected, propagating
[  229.425614][    C0] bridge0: port 3(syz_tun) entered forwarding state
[  229.428289][    C0] bridge0: topology change detected, propagating
[  237.103888][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  239.027705][   T11] block nbd1: Possible stuck request ffff88810b0e0000: control (read@0,1024B). Runtime 30 seconds
[  239.032100][   T11] block nbd1: Possible stuck request ffff88810b0e0200: control (read@1024,3072B). Runtime 30 seconds
[  256.312505][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  256.773844][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  259.017712][ T4992] Bluetooth: hci2: command 0x0405 tx timeout
[  262.076634][ T5648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  262.395170][ T5648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  262.423079][ T5648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  262.636951][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  262.665022][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  262.671285][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  263.136461][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  263.167511][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  263.173663][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  263.193818][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  265.445060][ T5643] Bluetooth: hci4: command tx timeout
[  265.449280][ T5643] Bluetooth: hci3: command tx timeout
[  267.825474][ T5643] Bluetooth: hci4: command tx timeout
[  267.827869][ T5643] Bluetooth: hci3: command tx timeout
[  270.133899][ T5643] Bluetooth: hci4: command tx timeout
[  270.134022][ T4992] Bluetooth: hci3: command tx timeout
[  271.023979][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  272.703697][ T4992] Bluetooth: hci3: command tx timeout
[  272.705497][ T4992] Bluetooth: hci4: command tx timeout
[  277.313842][ T5042] udevd[5042]: worker [11396] /devices/virtual/block/nbd1 is taking a long time
[  285.474432][   T11] block nbd1: Possible stuck request ffff88810b0e0000: control (read@0,1024B). Runtime 60 seconds
[  285.478757][   T11] block nbd1: Possible stuck request ffff88810b0e0200: control (read@1024,3072B). Runtime 60 seconds
[  292.045647][ T4992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  292.155007][ T4992] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  293.674716][ T4992] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  293.683716][ T4992] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  293.963884][ T4992] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  295.983818][ T5643] Bluetooth: hci5: Opcode 0x0c39 failed: -110
[  296.054618][ T4992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.273849][T11542] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  316.655620][ T5638] bridge0: port 3(syz_tun) entered disabled state
[  317.944776][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  317.948157][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  324.959528][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.989313][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.995618][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  325.355069][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  325.491980][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  326.864288][   T11] block nbd1: Possible stuck request ffff88810b0e0000: control (read@0,1024B). Runtime 90 seconds
[  326.868777][   T11] block nbd1: Possible stuck request ffff88810b0e0200: control (read@1024,3072B). Runtime 90 seconds
[  328.814031][ T4992] Bluetooth: hci0: command tx timeout
[  330.937757][ T4992] Bluetooth: hci0: command tx timeout
[  332.983937][ T4992] Bluetooth: hci0: command tx timeout
[  333.105749][ T5638] syz_tun (unregistering): left allmulticast mode
[  333.109470][ T5638] syz_tun (unregistering): left promiscuous mode
[  333.112639][ T5638] bridge0: port 3(syz_tun) entered disabled state
[  335.035099][ T4992] Bluetooth: hci0: command tx timeout
[  338.223843][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  339.836080][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  340.394003][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  340.402564][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  340.413174][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  340.420286][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  343.183854][ T5643] Bluetooth: hci1: command tx timeout
[  345.550940][ T5643] Bluetooth: hci1: command tx timeout
[  347.584071][ T5643] Bluetooth: hci1: command tx timeout
[  349.663783][ T5643] Bluetooth: hci1: command tx timeout
[  362.052835][   T11] block nbd1: Possible stuck request ffff88810b0e0000: control (read@0,1024B). Runtime 120 seconds
[  362.057899][   T11] block nbd1: Possible stuck request ffff88810b0e0200: control (read@1024,3072B). Runtime 120 seconds
[  379.229040][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  379.231460][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  389.437317][ T5042] udevd[5042]: worker [11396] /devices/virtual/block/nbd1 timeout; kill it
[  389.441752][ T5042] udevd[5042]: seq 13321 '/devices/virtual/block/nbd1' killed
[  396.048021][ T4992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  396.108495][ T4992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  396.117942][ T4992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  397.313738][ T4992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  397.854205][   T11] block nbd1: Possible stuck request ffff88810b0e0000: control (read@0,1024B). Runtime 150 seconds
[  397.857812][   T11] block nbd1: Possible stuck request ffff88810b0e0200: control (read@1024,3072B). Runtime 150 seconds
[  397.863087][ T4992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  399.135661][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  399.175186][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  399.234988][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  399.994039][ T5643] Bluetooth: hci2: command tx timeout
[  401.063955][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  401.127398][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  402.083710][ T5643] Bluetooth: hci2: command tx timeout
[  404.167038][ T5643] Bluetooth: hci2: command tx timeout
[  406.063814][ T5643] Bluetooth: hci3: command tx timeout
[  406.225356][ T5643] Bluetooth: hci2: command tx timeout
[  408.263696][ T5643] Bluetooth: hci3: command tx timeout
[  410.303787][ T5643] Bluetooth: hci3: command tx timeout
[  412.859467][ T4992] Bluetooth: hci3: command tx timeout
[  413.896018][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  414.107539][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  414.324739][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  414.629217][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  414.640493][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  417.304145][ T4992] Bluetooth: hci5: command 0x0c16 tx timeout
[  417.307784][ T5643] Bluetooth: hci5: Opcode 0x0c16 failed: -110
[  419.111159][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  419.348417][T11575] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  431.816204][   T11] block nbd1: Possible stuck request ffff88810b0e0000: control (read@0,1024B). Runtime 180 seconds
[  431.820573][   T11] block nbd1: Possible stuck request ffff88810b0e0200: control (read@1024,3072B). Runtime 180 seconds
[  440.920154][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  440.923777][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  449.417030][ T5648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  450.039288][ T5648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  450.739445][ T5648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  451.523717][ T5643] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  451.734517][ T5648] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  452.479135][ T5648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  454.713714][ T4992] Bluetooth: hci6: Opcode 0x0c38 failed: -110
[  454.994761][ T5648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  455.605354][ T5648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  457.090543][T11589] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  459.554147][T11590] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  465.385986][   T11] block nbd1: Possible stuck request ffff88810b0e0000: control (read@0,1024B). Runtime 210 seconds
[  465.389965][   T11] block nbd1: Possible stuck request ffff88810b0e0200: control (read@1024,3072B). Runtime 210 seconds
[  465.469107][ T4992] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  465.579694][ T4992] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  465.696054][ T4992] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  466.223896][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  466.255254][ T4992] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  467.243782][ T4992] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  469.744060][ T5648] Bluetooth: hci7: command tx timeout
[  471.944688][ T5648] Bluetooth: hci7: command tx timeout
[  474.053688][ T5648] Bluetooth: hci7: command tx timeout
[  476.144966][ T5648] Bluetooth: hci7: command tx timeout
[  502.082956][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  502.085599][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  504.559356][   T11] block nbd1: Possible stuck request ffff88810b0e0000: control (read@0,1024B). Runtime 240 seconds
[  504.562826][   T11] block nbd1: Possible stuck request ffff88810b0e0200: control (read@1024,3072B). Runtime 240 seconds
[  541.276558][   T11] block nbd1: Possible stuck request ffff88810b0e0000: control (read@0,1024B). Runtime 270 seconds
[  541.279940][   T11] block nbd1: Possible stuck request ffff88810b0e0200: control (read@1024,3072B). Runtime 270 seconds
[  542.036060][ T4992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  543.417456][ T4992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  543.426561][ T4992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  545.066320][ T4992] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  545.070833][ T4992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  552.249524][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  552.930989][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  552.937457][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  555.075410][ T5648] Bluetooth: hci1: command 0x1005 tx timeout
[  555.293697][ T5643] Bluetooth: hci1: Opcode 0x1005 failed: -110
[  555.663818][ T5643] Bluetooth: hci0: command tx timeout
[  556.895756][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  557.743948][ T5643] Bluetooth: hci0: command tx timeout
[  558.584670][   T34] INFO: task udevd:11396 blocked in I/O wait for more than 146 seconds.
[  558.587927][   T34]       Not tainted syzkaller #0
[  558.830666][T11609] Bluetooth: hci1: Opcode 0x0c03 failed: -110
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  559.964094][ T5643] Bluetooth: hci0: command tx timeout
[  562.163782][ T5648] Bluetooth: hci0: command tx timeout
[  562.815625][ T5643] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  562.820335][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  562.823159][   T34] task:udevd           state:D stack:26376 pid:11396 tgid:11396 ppid:5042   task_flags:0x400140 flags:0x00080802
[  563.598932][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  563.601500][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  565.754033][   T34] Call Trace:
[  565.755138][   T34]  <TASK>
[  565.756056][   T34]  __schedule+0x17d4/0x5630
[  565.758005][   T34]  ? __pfx___schedule+0x10/0x10
[  565.759618][   T34]  ? schedule+0x90/0x2b0
[  565.760912][   T34]  schedule+0x164/0x2b0
[  565.762197][   T34]  io_schedule+0x7f/0xd0
[  565.763529][   T34]  folio_wait_bit_common+0x836/0xbc0
