last executing test programs:

1.116064607s ago: executing program 0 (id=2428):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x100000000}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0xff}]}}}]}, 0x48}}, 0x2005044)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10000)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)

1.115863706s ago: executing program 2 (id=2429):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0, 0x12}, 0x20)

999.64202ms ago: executing program 2 (id=2432):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getpid()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a00)={{{@in6=@mcast1, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000300))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002c00)={{{@in6=@initdev, @in=@broadcast}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002d00)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x114, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0)

894.572178ms ago: executing program 2 (id=2434):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

894.011667ms ago: executing program 0 (id=2435):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094)

802.64095ms ago: executing program 0 (id=2436):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"})

802.12337ms ago: executing program 2 (id=2437):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140000006a0015"], 0x14}], 0x1}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x40}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000001c0)="3fdd8580", 0x4)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000001b80))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="180800001600010a28bd7000"], 0x18}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="020afc000700000028bd6600fedbdf2505001a0000000000000000640101000000000000000000000000002c00300032e493aaf0e2266db2"], 0x38}}, 0x40408c0)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x6)

727.228833ms ago: executing program 0 (id=2438):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0xfffffff7}, &(0x7f0000000140)=0x8)

726.663309ms ago: executing program 0 (id=2439):
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140))
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180)=0x5, 0x4)
connect$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0xa, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000003e00010326"], 0x20}}, 0x8004)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e80100002e000305000000000000000017fe018ef5b54effe0d36fbe7dddcf7ef2dde4de3d49cc017c5a55b0828d39fe9e9a6acd6b344e93fc6519e52c2b7453648904a40d8af02ace0f09389ce53cbdb080d8598ab12f9f7bf3f9a55ed5a908dd22f7ea4f2bf2d71b2baac0f2494eb6ef6ab1ba7d7aa97f0701dcf500bf34d3aa4b3e8d6d000050f28efbece0c4e61c523601f22d8a6b69e6a3b39c4b9c1d1fdf9304b826ab58a9cc38d16826d749ffb6c840b144132b9fd33b72745a425fe08f3a0a5bc1a38fd93f91b062c0516aadad566bbe0f45772b18e82ef7fcf23c00000000000000", @ANYRES32=r3, @ANYBLOB="04000080ec005b80ee5c4e21864f48896e1bc8dbcb64793ad778573b950142d933f9c539b46e12f8ff611f1c3d04bee891b9cc77728e28ca3d25defda4ca40b6fadccf6e8fb420f30d9a4692c9c3d9a16b29f0ed6c6d4a2c7ce388cf7b16b6db23c8843da5605ffdc45d5277967ebab2a10176151f46a03e781deb07a86ee3d82420c404869e6f8a924b6d2c67afe25969cc3e492e26a3578a8e83b991494b958bb46744087241410d78f1c54012ea7e517a4fe7c8c6e2bc554abd2b2ed14df1fd44bf4b0e75a44acb9e34be3e504f0f33aeeca3e52c7fe84f2a9ea6d15f5c3eda089d076254a9a808", @ANYRES32, @ANYBLOB='\x00'], 0x1e8}], 0x1}, 0x80)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r5, &(0x7f00000000c0), 0x9)
sendfile(r5, r4, 0x0, 0x10000)
unshare(0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x4c)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0)
preadv(r10, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
write$tun(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x1507)

717.489064ms ago: executing program 1 (id=2440):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="4a9755f127db2e6a6e33e74ac1d01f71b0af372c9084fa0c0f8d2cc8bddb720886b4cee57e929130c8bfb011dfd7dfac4754e4234c0e13eace1dd7112ae49d2b1cd888692a14dfa7dfd2e8d318d48bd853af19f752b8b00fdefd827f375fe8d9646231822076a7933ba6ae8ad38e084c6059fb291a03aeec145381175e615667ddeb80c8454f3461586cfb0eb8e5e79e02f9949cb94a6e6b2d8ee87ffb005a676113ceff17ca36f6f73edc4a0e97653d14912ccccfe65b8f01488e8c7c65b78bfdec75d47a6bfab0186f896502d8f29092140fbab4eaf8c4fcc6cfc1e697b84c5d73118ee2ec85897fa37ff97e29fc602c1f9ac2"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private0, 0x10}}, 0xe07c, 0x3, 0xc, 0x4b, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r9, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x81, 0x2, 0x6, 0x0, 0x5, 0x12, 0x6}}, {0x10, 0x2, [0x2, 0x33c9, 0x200, 0xe, 0xd71, 0x7]}}, {{0x1c, 0x1, {0xaf, 0xfb, 0x9, 0x4, 0x2, 0x1000, 0x0, 0x6}}, {0x10, 0x2, [0x9, 0x6, 0x401, 0x9, 0x5, 0x0]}}, {{0x1c, 0x1, {0x4, 0x2, 0x2, 0x3, 0x2, 0x7ff, 0x7, 0x1}}, {0x6, 0x2, [0xc]}}]}]}, 0xa4}}, 0x0)

577.227548ms ago: executing program 2 (id=2441):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @default, @netrom={'nr', 0x0}, 0x3, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x8, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

576.41406ms ago: executing program 1 (id=2442):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001080)='cdg\x00', 0x4)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad", 0x59}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00})
ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8e", 0x3e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c00178004000100040003"], 0x138}}, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000fcdbdf250f00000020000180080003000700000014000200697036677265300000000000000000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1400018008000300020000000800030001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
shutdown(r0, 0x1)

524.210253ms ago: executing program 2 (id=2443):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000400000000000007000000000300000000"], 0x0, 0x44}, 0x28)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
readv(r5, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1)
connect$unix(r4, &(0x7f0000000140)=@abs={0x1}, 0x6e)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

285.596776ms ago: executing program 1 (id=2444):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x39, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x5f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x0, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x404c840)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffe57, @broadcast}, 0x10)

115.742652ms ago: executing program 1 (id=2445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000030800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0)

26.95826ms ago: executing program 1 (id=2446):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

26.74541ms ago: executing program 1 (id=2447):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
readv(r0, &(0x7f0000000080)=[{0xfffffffffffffffc}], 0x1)

0s ago: executing program 0 (id=2448):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23194' (ED25519) to the list of known hosts.
syzkaller login: [   56.463745][ T5833] cgroup: Unknown subsys name 'net'
[   56.592155][ T5833] cgroup: Unknown subsys name 'cpuset'
[   56.596545][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.395960][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.492436][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.606029][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   68.744479][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.747430][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.751159][ T5869] bridge_slave_0: entered allmulticast mode
[   68.753920][ T5869] bridge_slave_0: entered promiscuous mode
[   68.758446][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.764890][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.767218][ T5869] bridge_slave_1: entered allmulticast mode
[   68.775969][ T5869] bridge_slave_1: entered promiscuous mode
[   68.803638][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.808238][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.834387][ T5869] team0: Port device team_slave_0 added
[   68.837941][ T5869] team0: Port device team_slave_1 added
[   68.854789][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.857143][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.865721][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.871872][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.874219][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.883238][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.914567][ T5869] hsr_slave_0: entered promiscuous mode
[   68.917204][ T5869] hsr_slave_1: entered promiscuous mode
[   69.022397][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.028463][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.033525][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.038193][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.057764][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.060330][ T5869] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.063071][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.065392][ T5869] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.100740][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.113688][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.117038][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.125637][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   69.133432][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.135702][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.141279][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.143678][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.245976][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.273783][ T5869] veth0_vlan: entered promiscuous mode
[   69.279077][ T5869] veth1_vlan: entered promiscuous mode
[   69.294850][ T5869] veth0_macvtap: entered promiscuous mode
[   69.300289][ T5869] veth1_macvtap: entered promiscuous mode
[   69.314106][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.321433][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.328490][ T5744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.332813][ T5744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.335717][ T5744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.338566][ T5744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.500356][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.538062][ T5905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.544111][ T5905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.547989][ T5905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.553927][ T5910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.557442][ T5905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.560827][ T5910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.564964][ T5910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.565865][ T5905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.568637][ T5910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.575243][ T5905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.577062][ T5910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.581689][ T5905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.582198][ T5910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.588772][ T5905] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.598248][ T5910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.625401][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.988780][ T5901] chnl_net:caif_netlink_parms(): no params data found
[   71.029408][ T5903] chnl_net:caif_netlink_parms(): no params data found
[   71.129384][ T5902] chnl_net:caif_netlink_parms(): no params data found
[   71.186986][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.189011][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.205042][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.207832][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.210873][ T5903] bridge_slave_0: entered allmulticast mode
[   71.213845][ T5903] bridge_slave_0: entered promiscuous mode
[   71.229828][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.232387][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.235200][ T5901] bridge_slave_0: entered allmulticast mode
[   71.238204][ T5901] bridge_slave_0: entered promiscuous mode
[   71.243723][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.246369][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.249182][ T5901] bridge_slave_1: entered allmulticast mode
[   71.252775][ T5901] bridge_slave_1: entered promiscuous mode
[   71.255875][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.258546][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.264740][ T5903] bridge_slave_1: entered allmulticast mode
[   71.268451][ T5903] bridge_slave_1: entered promiscuous mode
[   71.324844][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.333896][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.369451][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.410654][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.413763][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.416573][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.421365][ T5902] bridge_slave_0: entered allmulticast mode
[   71.425142][ T5902] bridge_slave_0: entered promiscuous mode
[   71.429626][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.432459][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.435260][ T5902] bridge_slave_1: entered allmulticast mode
[   71.439054][ T5902] bridge_slave_1: entered promiscuous mode
[   71.444050][ T5903] team0: Port device team_slave_0 added
[   71.448963][ T5903] team0: Port device team_slave_1 added
[   71.520355][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.523256][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.533301][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.538583][ T5901] team0: Port device team_slave_0 added
[   71.545200][ T5902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.548864][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.551275][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.560100][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.565838][ T5901] team0: Port device team_slave_1 added
[   71.571947][ T5902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.617792][ T5902] team0: Port device team_slave_0 added
[   71.633128][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.635963][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.646238][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.663353][ T5902] team0: Port device team_slave_1 added
[   71.686520][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.689233][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.698206][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.718957][ T5903] hsr_slave_0: entered promiscuous mode
[   71.722066][ T5903] hsr_slave_1: entered promiscuous mode
[   71.724409][ T5903] debugfs: 'hsr0' already exists in 'hsr'
[   71.726492][ T5903] Cannot create hsr debugfs directory
[   71.748160][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.751153][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.761954][ T5902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.781383][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.783765][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.792383][ T5902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.809000][ T5901] hsr_slave_0: entered promiscuous mode
[   71.811718][ T5901] hsr_slave_1: entered promiscuous mode
[   71.814023][ T5901] debugfs: 'hsr0' already exists in 'hsr'
[   71.815774][ T5901] Cannot create hsr debugfs directory
[   71.913521][ T5902] hsr_slave_0: entered promiscuous mode
[   71.916376][ T5902] hsr_slave_1: entered promiscuous mode
[   71.918658][ T5902] debugfs: 'hsr0' already exists in 'hsr'
[   71.922507][ T5902] Cannot create hsr debugfs directory
[   72.181298][ T5903] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.186795][ T5903] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.192882][ T5903] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.199219][ T5903] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.260997][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.275545][ T5903] 8021q: adding VLAN 0 to HW filter on device team0
[   72.282291][ T3976] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.284749][ T3976] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.306248][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.318336][ T3976] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.321353][ T3976] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.477739][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.523824][ T5903] veth0_vlan: entered promiscuous mode
[   72.533180][ T5903] veth1_vlan: entered promiscuous mode
[   72.561084][ T5903] veth0_macvtap: entered promiscuous mode
[   72.567530][ T5903] veth1_macvtap: entered promiscuous mode
[   72.584744][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.595048][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.603074][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.609273][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.616378][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.625362][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.691723][   T54] Bluetooth: hci1: command tx timeout
[   72.691730][ T5912] Bluetooth: hci0: command tx timeout
[   72.693795][   T54] Bluetooth: hci2: command tx timeout
[   72.703872][ T2307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.706652][ T2307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.737465][ T2307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.740874][ T2307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.896284][ T5952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'.
[   72.941150][ T5954] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20'.
[   73.048523][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.214205][   T12] bridge_slave_1: left allmulticast mode
[   73.216569][   T12] bridge_slave_1: left promiscuous mode
[   73.219953][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.244333][   T12] bridge_slave_0: left allmulticast mode
[   73.246594][   T12] bridge_slave_0: left promiscuous mode
[   73.248997][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.329174][ T5970] Bluetooth: MGMT ver 1.23
[   73.512728][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.518737][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.523938][   T12] bond0 (unregistering): Released all slaves
[   73.657404][   T12] hsr_slave_0: left promiscuous mode
[   73.674495][   T12] hsr_slave_1: left promiscuous mode
[   73.677209][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.681412][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.685601][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.688573][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.703363][   T12] veth1_macvtap: left promiscuous mode
[   73.705706][   T12] veth0_macvtap: left promiscuous mode
[   73.708002][   T12] veth1_vlan: left promiscuous mode
[   73.711047][   T12] veth0_vlan: left promiscuous mode
[   74.108717][   T12] team0 (unregistering): Port device team_slave_1 removed
[   74.134778][   T12] team0 (unregistering): Port device team_slave_0 removed
[   74.478369][ T5986] unknown channel width for channel at 909000KHz?
[   74.490151][ T5986] unknown channel width for channel at 909000KHz?
[   74.500488][ T5986] unknown channel width for channel at 909000KHz?
[   74.604696][ T5989] netlink: 'syz.1.32': attribute type 2 has an invalid length.
[   74.608489][ T5989] netlink: 'syz.1.32': attribute type 1 has an invalid length.
[   74.629115][ T5989] netlink: 'syz.1.32': attribute type 1 has an invalid length.
[   74.695197][ T5901] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.729698][ T5901] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.746801][ T5901] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.771656][   T54] Bluetooth: hci0: command tx timeout
[   74.773874][   T54] Bluetooth: hci1: command tx timeout
[   74.776372][   T54] Bluetooth: hci2: command tx timeout
[   74.781440][ T5901] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.909339][ T5902] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.922187][ T5902] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.937524][ T5902] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.953316][ T5902] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.974359][ T6008] warning: `syz.1.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.038783][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.080868][ T5901] 8021q: adding VLAN 0 to HW filter on device team0
[   75.099614][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.103319][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.128438][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.131441][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.196009][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.231597][ T5902] 8021q: adding VLAN 0 to HW filter on device team0
[   75.255082][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.258014][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.286773][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.289740][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.337723][ T6018] Illegal XDP return value 6018 on prog  (id 8) dev N/A, expect packet loss!
[   75.437571][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.493038][ T5901] veth0_vlan: entered promiscuous mode
[   75.515041][ T5901] veth1_vlan: entered promiscuous mode
[   75.535908][ T5902] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.567353][ T5901] veth0_macvtap: entered promiscuous mode
[   75.578948][ T5901] veth1_macvtap: entered promiscuous mode
[   75.611210][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.616907][ T5902] veth0_vlan: entered promiscuous mode
[   75.626626][ T5902] veth1_vlan: entered promiscuous mode
[   75.636135][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.659812][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.665200][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.668676][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.682689][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.714106][ T5902] veth0_macvtap: entered promiscuous mode
[   75.738407][ T5902] veth1_macvtap: entered promiscuous mode
[   75.764962][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.768142][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.776045][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.795996][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.817933][ T5932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.829306][ T5932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.834306][ T3976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.837558][ T5932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.841594][ T3976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.851743][ T5932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.945957][  T266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.952885][  T266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.995436][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.998656][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.192754][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'.
[   76.196745][ T6049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.267245][ T6054] netlink: 36 bytes leftover after parsing attributes in process `syz.0.44'.
[   76.639404][ T6076] syz.0.49 uses obsolete (PF_INET,SOCK_PACKET)
[   76.824506][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'.
[   76.850093][ T5908] Bluetooth: hci2: command tx timeout
[   76.851868][ T5908] Bluetooth: hci1: command tx timeout
[   76.854873][   T54] Bluetooth: hci0: command tx timeout
[   76.861547][ T5932] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.864758][ T5932] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.868147][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'.
[   76.872533][ T5932] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.884090][ T5932] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.884097][ T6090] Zero length message leads to an empty skb
[   77.032851][ T6102] netlink: 'syz.0.64': attribute type 1 has an invalid length.
[   77.036105][ T6102] netlink: 'syz.0.64': attribute type 2 has an invalid length.
[   77.043809][ T6102] netlink: 'syz.0.64': attribute type 1 has an invalid length.
[   77.050670][ T6102] netlink: 'syz.0.64': attribute type 2 has an invalid length.
[   77.132933][ T6103] netlink: 'syz.2.62': attribute type 10 has an invalid length.
[   77.146032][ T6103] team0: Port device dummy0 added
[   77.179275][ T6103] netlink: 'syz.2.62': attribute type 10 has an invalid length.
[   77.212434][ T6103] team0: Port device dummy0 removed
[   77.241146][ T6103] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   77.625523][ T6126] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.637895][ T6128] bond_slave_0: entered promiscuous mode
[   77.640400][ T6128] bond_slave_1: entered promiscuous mode
[   77.649339][ T6128] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.655613][ T6128] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   77.697011][ T6126] bridge_slave_0: left allmulticast mode
[   77.699404][ T6126] bridge_slave_0: left promiscuous mode
[   77.703026][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.711936][ T6126] bridge_slave_1: left allmulticast mode
[   77.714334][ T6126] bridge_slave_1: left promiscuous mode
[   77.716800][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.729008][ T6126] bond0: (slave bond_slave_0): Releasing backup interface
[   77.733773][ T6126] bond_slave_0: left promiscuous mode
[   77.743294][ T6126] bond0: (slave bond_slave_1): Releasing backup interface
[   77.752469][ T6126] bond_slave_1: left promiscuous mode
[   77.767304][ T6126] team0: Port device team_slave_0 removed
[   77.774833][ T6126] team0: Port device team_slave_1 removed
[   77.777236][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.782182][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.785699][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.788476][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.808454][ T6126] bond1: (slave macvlan2): Removing an active aggregator
[   77.812188][ T6126] bond1: (slave macvlan2): Releasing backup interface
[   78.474284][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.88'.
[   78.930678][ T5912] Bluetooth: hci0: command tx timeout
[   78.932918][ T5912] Bluetooth: hci2: command tx timeout
[   78.935103][ T5908] Bluetooth: hci1: command tx timeout
[   79.160758][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'.
[   79.258308][ T6208] bridge0: entered promiscuous mode
[   80.054859][ T6214] IPVS: stopping backup sync thread 6215 ...
[   80.221990][ T6225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.226698][ T6223] bond0: Device is already in use.
[   80.390090][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'.
[   80.407871][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'.
[   81.144265][ T6268] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.324860][ T6278] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   81.329210][ T6278] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   81.334410][ T6278] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   81.470921][ T6258] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   82.113198][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.158'.
[   82.662420][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'.
[   82.670573][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'.
[   82.673966][ T6326] netlink: 'syz.2.164': attribute type 13 has an invalid length.
[   82.687705][ T6326] netlink: 'syz.2.164': attribute type 11 has an invalid length.
[   82.694141][ T5908] Bluetooth: hci0: command 0x0401 tx timeout
[   82.900286][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'.
[   82.904631][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'.
[   82.908274][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'.
[   82.930989][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.937819][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.946531][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.957485][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.715401][ T6382] __nla_validate_parse: 2 callbacks suppressed
[   83.715417][ T6382] netlink: 220 bytes leftover after parsing attributes in process `syz.1.192'.
[   83.967657][ T6395] netlink: 'syz.1.198': attribute type 10 has an invalid length.
[   83.976012][ T6395] syz_tun: entered promiscuous mode
[   83.985509][ T6395] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   84.041276][ T6399] tipc: Started in network mode
[   84.042830][ T6399] tipc: Node identity 46dc74cd81af, cluster identity 4711
[   84.045216][ T6399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.048753][ T6399] syzkaller0: entered promiscuous mode
[   84.055466][ T6399] syzkaller0: entered allmulticast mode
[   84.083855][ T6399] tipc: Resetting bearer <eth:syzkaller0>
[   84.091792][ T6398] tipc: Resetting bearer <eth:syzkaller0>
[   84.106548][ T6398] tipc: Disabling bearer <eth:syzkaller0>
[   84.179311][ T6403] tipc: Started in network mode
[   84.182173][ T6403] tipc: Node identity ac14140f, cluster identity 4711
[   84.185481][ T6403] tipc: New replicast peer: 255.255.255.255
[   84.188666][ T6403] tipc: Enabled bearer <udp:syz2>, priority 10
[   84.414019][ T6414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.456498][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'.
[   84.461935][ T6419] netlink: 'syz.2.210': attribute type 1 has an invalid length.
[   84.765685][ T6428] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[   84.874010][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.216'.
[   84.992417][ T6441] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   85.054431][ T6444] netlink: 'syz.0.222': attribute type 21 has an invalid length.
[   85.060449][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'.
[   85.084717][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.088381][ T5932] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.088566][ T6444] netlink: 'syz.0.222': attribute type 21 has an invalid length.
[   85.099668][ T5932] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.102929][ T5932] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.111988][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'.
[   85.190606][ T5312] tipc: Node number set to 2886997007
[   85.347795][ T6466] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.231'.
[   85.693895][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'.
[   86.103900][ T6518] macvlan2: entered allmulticast mode
[   86.106114][ T6518] veth1_vlan: entered allmulticast mode
[   86.121776][ T6518] veth1_vlan: left allmulticast mode
[   86.159973][ T6524] netlink: 'syz.0.257': attribute type 2 has an invalid length.
[   86.271101][ T6530] netlink: 96 bytes leftover after parsing attributes in process `syz.2.260'.
[   86.418297][ T6534] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   86.423745][  T792] IPVS: starting estimator thread 0...
[   86.530039][ T6542] IPVS: using max 42 ests per chain, 100800 per kthread
[   86.536858][    T9] cfg80211: failed to load regulatory.db
[   86.768235][ T6570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.275'.
[   86.772086][ T6570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.275'.
[   88.447168][ T6649] netlink: 'syz.0.304': attribute type 1 has an invalid length.
[   88.488950][ T6649] bond2: entered promiscuous mode
[   88.491431][ T6649] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.562648][ T6649] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.565852][ T6649] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   88.571264][ T6649] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[   88.588039][ T6649] bond2: (slave vxcan3): making interface the new active one
[   88.599256][ T6649] vxcan3: entered promiscuous mode
[   88.604153][ T6649] bond2: (slave vxcan3): Enslaving as an active interface with an up link
[   89.649754][ T5908] Bluetooth: hci0: command 0x0401 tx timeout
[   90.392807][ T6717] veth0_to_bond: entered allmulticast mode
[   90.615860][ T6731] __nla_validate_parse: 4 callbacks suppressed
[   90.615871][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'.
[   90.744710][ T6742] netlink: 'syz.0.345': attribute type 4 has an invalid length.
[   90.759992][ T6742] netlink: 'syz.0.345': attribute type 4 has an invalid length.
[   90.931498][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'.
[   90.942552][ T6755] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[   91.685167][ T6813] netlink: 'syz.1.380': attribute type 6 has an invalid length.
[   91.691030][ T6813] netlink: 176 bytes leftover after parsing attributes in process `syz.1.380'.
[   91.817084][ T6826] bond0: (slave dummy0): Releasing backup interface
[   91.841830][ T6826] bridge_slave_0: left allmulticast mode
[   91.844002][ T6826] bridge_slave_0: left promiscuous mode
[   91.846343][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.858446][ T6826] bridge_slave_1: left allmulticast mode
[   91.864828][ T6826] bridge_slave_1: left promiscuous mode
[   91.867294][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.876286][ T6833] netlink: 'syz.2.386': attribute type 10 has an invalid length.
[   91.881747][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.386'.
[   91.894092][ T6826] bond0: (slave bond_slave_0): Releasing backup interface
[   91.903433][ T6826] bond0: (slave bond_slave_1): Releasing backup interface
[   91.917993][ T6826] team0: Port device team_slave_0 removed
[   91.928205][ T6826] team0: Port device team_slave_1 removed
[   91.931098][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.933564][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.936855][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.939375][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.961201][ T6833] batman_adv: batadv0: Adding interface: virt_wifi0
[   91.964239][ T6833] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.973524][ T6833] batman_adv: batadv0: Interface activated: virt_wifi0
[   92.563555][ T5904] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0
[   92.596870][ T5904] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[   92.619815][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'.
[   92.625122][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'.
[   92.738019][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'.
[   92.784962][ T6897] bond1: entered promiscuous mode
[   92.786847][ T6897] bond1: entered allmulticast mode
[   92.788744][ T6897] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.858696][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.420'.
[   93.305279][ T6938] netlink: 56 bytes leftover after parsing attributes in process `syz.1.436'.
[   93.312120][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'.
[   93.426176][ T5932] nci: nci_rx_work: unknown MT 0x1
[   94.027440][ T6963] IPv6: NLM_F_CREATE should be specified when creating new route
[   94.730970][ T7014] openvswitch: netlink: Tunnel attr 226 out of range max 16
[   95.418673][ T7070] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   95.422540][ T7070] tipc: Enabled bearer <udp:syz0>, priority 10
[   96.158458][ T7075] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   96.326929][ T7075] bond1: left promiscuous mode
[   96.328923][ T7075] bond1: left allmulticast mode
[   96.338340][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.346678][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.350574][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.354078][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.366776][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.370476][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.373873][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.378117][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.420535][ T5904] tipc: Node number set to 3346232525
[   96.778111][ T7119] __nla_validate_parse: 8 callbacks suppressed
[   96.778125][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'.
[   96.804471][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'.
[   96.960843][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'.
[   97.363970][ T7152] netlink: 76 bytes leftover after parsing attributes in process `syz.0.536'.
[   97.367558][ T7152] netlink: 76 bytes leftover after parsing attributes in process `syz.0.536'.
[   97.438654][ T7153] syzkaller0: entered promiscuous mode
[   97.440979][ T7153] syzkaller0: entered allmulticast mode
[   98.449773][ T7168] xt_HMARK: spi-set and port-set can't be combined
[   98.942687][ T7178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.544'.
[   99.105799][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'.
[   99.138047][  T792] IPVS: starting estimator thread 0...
[   99.195349][ T7197] netlink: 'syz.1.552': attribute type 21 has an invalid length.
[   99.259737][ T7192] IPVS: using max 64 ests per chain, 153600 per kthread
[   99.464539][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'.
[   99.480832][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[   99.673659][ T7235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.568'.
[  100.270664][ T7277] netlink: 'syz.0.588': attribute type 1 has an invalid length.
[  100.274891][ T7277] netlink: 'syz.0.588': attribute type 1 has an invalid length.
[  100.284094][ T7277] block nbd0: shutting down sockets
[  100.426695][ T7286] bond2: (slave vxcan3): Releasing backup interface
[  100.432728][ T7286] vxcan3: left promiscuous mode
[  100.782479][ T7294] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  100.861389][ T7300] netlink: 'syz.1.598': attribute type 11 has an invalid length.
[  101.163298][ T7326] delete_channel: no stack
[  101.339162][ T7341] netlink: 'syz.1.616': attribute type 1 has an invalid length.
[  101.427620][   T33] audit: type=1804 audit(1757261927.525:2): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.619" name="/newroot/215/cgroup.controllers" dev="tmpfs" ino=1101 res=1 errno=0
[  101.443932][   T33] audit: type=1800 audit(1757261927.545:3): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.619" name="cgroup.controllers" dev="tmpfs" ino=1101 res=0 errno=0
[  101.549027][ T7364] syz_tun: entered allmulticast mode
[  101.573484][ T7364] syz_tun (unregistering): left allmulticast mode
[  101.964223][ T7387] netlink: 'syz.1.637': attribute type 1 has an invalid length.
[  101.987478][ T7387] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.003689][ T7387] bond1: (slave wlan0): Enslaving as an active interface with a down link
[  102.014668][ T7387] vlan2: entered allmulticast mode
[  102.016482][ T7387] veth1: entered allmulticast mode
[  102.019137][ T7387] veth1: entered promiscuous mode
[  102.022504][ T7387] veth1: left promiscuous mode
[  102.026031][ T7387] bond1: (slave vlan2): making interface the new active one
[  102.029325][ T7387] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  102.037454][ T7387] veth1: entered promiscuous mode
[  102.044228][ T7387] vlan2: entered promiscuous mode
[  102.046650][ T7387] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  102.651731][ T7402] tipc: Invalid UDP bearer configuration
[  102.651766][ T7402] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  102.803003][ T7410] netlink: 'syz.0.644': attribute type 9 has an invalid length.
[  102.806414][ T7410] __nla_validate_parse: 9 callbacks suppressed
[  102.806427][ T7410] netlink: 147436 bytes leftover after parsing attributes in process `syz.0.644'.
[  102.938182][ T7420] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  103.084722][ T7435] netlink: 'syz.0.655': attribute type 9 has an invalid length.
[  103.087772][ T7435] netlink: 184 bytes leftover after parsing attributes in process `syz.0.655'.
[  103.247022][ T7448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.661'.
[  103.485021][ T7465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.668'.
[  103.489770][ T7465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.668'.
[  103.951660][ T7499] netlink: 96 bytes leftover after parsing attributes in process `syz.1.679'.
[  104.126283][ T7510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.128951][ T7510] syzkaller0: entered promiscuous mode
[  104.135527][ T7510] syzkaller0: entered allmulticast mode
[  104.162848][ T7510] tipc: Resetting bearer <eth:syzkaller0>
[  104.175776][ T7509] tipc: Resetting bearer <eth:syzkaller0>
[  104.332870][ T7509] tipc: Disabling bearer <eth:syzkaller0>
[  104.567911][ T7528] netlink: 'syz.1.692': attribute type 1 has an invalid length.
[  104.616063][ T7528] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.649439][ T7536] bond2: (slave ip6gretap1): making interface the new active one
[  104.655131][ T7536] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  104.719894][ T7528] veth3: entered promiscuous mode
[  104.733962][ T7528] bond2: (slave veth3): Enslaving as an active interface with a down link
[  104.757118][ T7536] erspan0: entered allmulticast mode
[  104.772119][ T7536] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  104.885683][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'.
[  105.009650][ T5908] Bluetooth: hci0: command tx timeout
[  105.964827][   T33] audit: type=1800 audit(1757261932.065:4): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.733" name="memory.events" dev="tmpfs" ino=1174 res=0 errno=0
[  107.605747][ T7645] netlink: 'syz.1.742': attribute type 4 has an invalid length.
[  107.632823][ T7645] netlink: 'syz.1.742': attribute type 4 has an invalid length.
[  107.717108][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[  107.723043][ T7655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.807307][ T7663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.750'.
[  107.866683][ T7669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.754'.
[  107.872370][ T7669] netlink: 35 bytes leftover after parsing attributes in process `syz.2.754'.
[  107.875754][ T7669] netlink: 'syz.2.754': attribute type 5 has an invalid length.
[  107.879461][ T7669] netlink: 'syz.2.754': attribute type 6 has an invalid length.
[  107.886341][ T7669] netlink: 35 bytes leftover after parsing attributes in process `syz.2.754'.
[  107.923334][ T7672] netlink: 360 bytes leftover after parsing attributes in process `syz.1.756'.
[  107.931373][ T7675] netlink: 96 bytes leftover after parsing attributes in process `syz.2.758'.
[  108.044383][ T7684] wg1 speed is unknown, defaulting to 1000
[  108.046879][ T7684] wg1 speed is unknown, defaulting to 1000
[  108.064967][ T7684] wg1 speed is unknown, defaulting to 1000
[  108.091855][ T7684] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  108.110671][ T7684] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  108.137793][ T7684] wg1 speed is unknown, defaulting to 1000
[  108.162197][ T7684] wg1 speed is unknown, defaulting to 1000
[  108.165704][ T7684] wg1 speed is unknown, defaulting to 1000
[  108.253673][ T7695] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  109.636167][ T7746] syzkaller1: entered promiscuous mode
[  109.641695][ T7746] syzkaller1: entered allmulticast mode
[  110.331534][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'.
[  110.547530][ T7799] netlink: 'syz.1.813': attribute type 1 has an invalid length.
[  110.551957][ T7799] netlink: 'syz.1.813': attribute type 3 has an invalid length.
[  110.554980][ T7799] netlink: 224 bytes leftover after parsing attributes in process `syz.1.813'.
[  110.558358][ T7799] NCSI netlink: No device for ifindex 246
[  111.454712][ T7834] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.826'.
[  111.458407][ T7834] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  111.470105][ T7834] openvswitch: netlink: Message has 1 unknown bytes.
[  111.920596][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'.
[  111.924369][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'.
[  111.928631][ T7863] netlink: 'syz.2.838': attribute type 3 has an invalid length.
[  112.398791][ T7882] macvlan2: entered allmulticast mode
[  112.407625][ T7882] bond0: entered allmulticast mode
[  112.409689][ T7882] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  112.413688][ T7882] bond0: left allmulticast mode
[  112.564737][ T7893] syzkaller0: entered promiscuous mode
[  112.566976][ T7893] syzkaller0: entered allmulticast mode
[  112.884692][ T7914] wg1 speed is unknown, defaulting to 1000
[  112.901875][ T7921] netlink: 'syz.0.863': attribute type 32 has an invalid length.
[  112.949100][ T7923] __nla_validate_parse: 5 callbacks suppressed
[  112.949115][ T7923] netlink: 3 bytes leftover after parsing attributes in process `syz.0.864'.
[  112.970579][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'.
[  112.973665][ T7923] netlink: 3 bytes leftover after parsing attributes in process `syz.0.864'.
[  112.977047][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'.
[  112.982370][ T7923] netlink: 3 bytes leftover after parsing attributes in process `syz.0.864'.
[  112.993356][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'.
[  113.233749][   T13] vlan2: left promiscuous mode
[  113.352034][ T7950] netlink: 128 bytes leftover after parsing attributes in process `syz.1.876'.
[  113.355310][ T7950] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  113.456536][ T7960] netlink: 1 bytes leftover after parsing attributes in process `syz.1.880'.
[  113.546679][ T7965] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  114.635952][ T8027] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  114.646392][ T8027] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  114.651975][ T8027] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  115.448646][ T8045] can: request_module (can-proto-5) failed.
[  115.524945][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'.
[  115.592665][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'.
[  115.772600][ T8072] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  115.891628][ T8075] wg1 speed is unknown, defaulting to 1000
[  116.056299][ T8090] netlink: 'syz.2.941': attribute type 28 has an invalid length.
[  116.695623][ T5908] Bluetooth: hci2: command tx timeout
[  118.380442][ T8120] pim6reg1: entered promiscuous mode
[  118.382744][ T8120] pim6reg1: entered allmulticast mode
[  118.553632][ T8128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.558220][ T8128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.627146][ T8128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.632372][ T8128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.634395][ T8139] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  118.723979][ T8128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.727680][ T8128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.748142][ T8143] tap0: tun_chr_ioctl cmd 1074025677
[  118.751623][ T8143] tap0: linktype set to 0
[  118.830132][ T8128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.841396][ T8128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.936528][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.940039][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.955875][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.959170][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.987118][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.993640][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.009747][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.013206][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.516971][ T8189] netlink: 'syz.1.986': attribute type 101 has an invalid length.
[  119.520197][ T8189] netlink: 'syz.1.986': attribute type 7 has an invalid length.
[  119.754034][ T8199] bridge0: entered allmulticast mode
[  119.766772][ T8199] pim6reg: entered allmulticast mode
[  119.771892][ T8199] __nla_validate_parse: 1 callbacks suppressed
[  119.771904][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'.
[  119.777829][ T8199] bridge_slave_1: left allmulticast mode
[  119.782431][ T8199] bridge_slave_1: left promiscuous mode
[  119.784865][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.793278][ T8199] bridge_slave_0: left allmulticast mode
[  119.798536][ T8199] bridge_slave_0: left promiscuous mode
[  119.801330][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.848085][ T8199] bridge0 (unregistering): left allmulticast mode
[  120.106610][ T8213] netlink: 'syz.2.998': attribute type 9 has an invalid length.
[  120.109173][ T8213] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.998'.
[  120.219328][ T8221] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1002'.
[  120.225240][ T8221] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1002'.
[  120.515588][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1007'.
[  121.074539][ T8249] netlink: 'syz.0.1015': attribute type 6 has an invalid length.
[  121.090693][ T8249] netlink: 'syz.0.1015': attribute type 12 has an invalid length.
[  121.093549][ T8249] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1015'.
[  121.269240][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1019'.
[  121.416330][ T8271] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  121.424704][ T8271] Bluetooth: MGMT ver 1.23
[  121.429078][ T8271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1026'.
[  121.433364][ T8271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1026'.
[  121.468061][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'.
[  121.471357][ T8273] netlink: 'syz.2.1027': attribute type 15 has an invalid length.
[  121.474700][ T8273] netlink: 'syz.2.1027': attribute type 15 has an invalid length.
[  121.683823][ T8286] netlink: 'syz.2.1033': attribute type 2 has an invalid length.
[  121.695692][ T8286] k*]: entered promiscuous mode
[  121.718741][ T8286] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.722203][ T8286] 8021q: adding VLAN 0 to HW filter on device team0
[  121.727952][ T8286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.753749][ T8286] veth0_to_team: entered promiscuous mode
[  121.756031][ T8286] veth0_to_team: entered allmulticast mode
[  122.708891][ T5904] IPVS: starting estimator thread 0...
[  122.809623][ T8296] IPVS: using max 49 ests per chain, 117600 per kthread
[  123.085915][ T8314] tipc: Started in network mode
[  123.087451][ T8314] tipc: Node identity 5277866a4a22, cluster identity 4711
[  123.093927][ T8314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.109591][ T8314] syzkaller0: entered promiscuous mode
[  123.111842][ T8314] syzkaller0: entered allmulticast mode
[  123.139168][ T8314] tipc: Resetting bearer <eth:syzkaller0>
[  123.156219][ T8313] tipc: Resetting bearer <eth:syzkaller0>
[  123.167401][ T8313] tipc: Disabling bearer <eth:syzkaller0>
[  123.489921][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  123.490491][ T5908] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  123.921893][ T8333] wg1 speed is unknown, defaulting to 1000
[  124.106420][ T8336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.112205][ T8336] syzkaller0: entered promiscuous mode
[  124.114359][ T8336] syzkaller0: entered allmulticast mode
[  124.174824][ T8336] tipc: Resetting bearer <eth:syzkaller0>
[  124.182187][ T8335] tipc: Resetting bearer <eth:syzkaller0>
[  124.196267][ T8335] tipc: Disabling bearer <eth:syzkaller0>
[  124.770577][ T8377] rdma_op ffff88802b72b1f0 conn xmit_rdma 0000000000000000
[  125.116860][ T8399] __nla_validate_parse: 3 callbacks suppressed
[  125.116877][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'.
[  126.145927][ T8432] netlink: 'syz.1.1095': attribute type 11 has an invalid length.
[  126.545692][ T8454] tipc: Can't bind to reserved service type 1
[  126.724519][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'.
[  126.732399][ T8464] veth1_macvtap: left promiscuous mode
[  126.865667][ T8470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  126.873076][ T8470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.014788][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'.
[  127.018432][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'.
[  127.072830][ T8470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.089790][ T8470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.201852][ T8470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.206407][ T8470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.416102][ T8470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.434895][ T8470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.562415][ T5932] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.572803][ T5932] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.602719][ T5932] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.605860][ T5932] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.634760][ T5932] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.636104][ T8491] netlink: 'syz.2.1121': attribute type 2 has an invalid length.
[  127.638458][ T5932] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.638532][ T5932] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.654147][ T5932] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.668168][ T8491] : entered promiscuous mode
[  127.755421][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'.
[  127.985359][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1133'.
[  128.161266][ T8529] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  128.472029][ T8555] netlink: 'syz.2.1151': attribute type 2 has an invalid length.
[  128.536946][ T8563] tc_dump_action: action bad kind
[  128.743470][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'.
[  128.954482][ T8590] tipc: Enabled bearer <udp:syz>, priority 10
[  129.269673][    T9] tipc: Node number set to 408258154
[  129.547085][ T8615] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  129.725386][ T8627] wg1 speed is unknown, defaulting to 1000
[  129.764973][ T8635] netlink: 'syz.2.1186': attribute type 4 has an invalid length.
[  129.797581][ T8635] netlink: 'syz.2.1186': attribute type 4 has an invalid length.
[  129.860533][ T8639] netlink: 'syz.1.1190': attribute type 8 has an invalid length.
[  130.047219][   T33] audit: type=1800 audit(1757261956.145:5): pid=8657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1197" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1887 res=0 errno=0
[  130.069292][   T33] audit: type=1800 audit(1757261956.145:6): pid=8657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1197" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1887 res=0 errno=0
[  130.140959][ T8663] syz_tun: entered promiscuous mode
[  130.144516][ T8663] syz_tun: left promiscuous mode
[  130.172677][ T8659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.182945][ T8659] syzkaller0: entered promiscuous mode
[  130.185075][ T8659] syzkaller0: entered allmulticast mode
[  130.195600][ T8659] tipc: Resetting bearer <eth:syzkaller0>
[  130.215437][ T8658] tipc: Resetting bearer <eth:syzkaller0>
[  130.231521][ T8658] tipc: Disabling bearer <eth:syzkaller0>
[  130.315691][ T8671] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1205'.
[  130.479054][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'.
[  130.496090][ T8675] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  130.546253][ T8685] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.550018][ T8685] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.562401][ T8691] netlink: 'syz.1.1213': attribute type 1 has an invalid length.
[  130.565476][ T8691] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1213'.
[  130.606967][ T8685] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.614244][ T8685] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.668299][ T8685] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.672577][ T8685] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.726092][ T8685] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.730233][ T8685] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.788538][ T8697] 8021q: adding VLAN 0 to HW filter on device bond3
[  130.805945][ T8697] bond_slave_0: entered promiscuous mode
[  130.807876][ T8697] bond_slave_1: entered promiscuous mode
[  130.810841][ T8697] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  130.813450][ T8697] bond3: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0)
[  130.816934][ T8697] bond3: (slave macvlan2): speed changed to 0 on port 1
[  130.821721][ T8697] bond3: (slave macvlan2): Enslaving as a backup interface with an up link
[  130.831692][ T8697] bond2: (slave erspan0): Releasing active interface
[  130.834517][ T8697] ip6gretap1: entered promiscuous mode
[  130.843177][ T8697] bond0: (slave syz_tun): Releasing backup interface
[  130.857340][ T8697] bond0: (slave bond_slave_0): Releasing backup interface
[  130.862003][ T8697] bond_slave_0: left promiscuous mode
[  130.866501][ T8697] bond0: (slave bond_slave_1): Releasing backup interface
[  130.870732][ T8697] bond_slave_1: left promiscuous mode
[  130.880026][ T8697] team0: Port device team_slave_0 removed
[  130.887349][ T8697] team0: Port device team_slave_1 removed
[  130.892815][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.895796][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.899170][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.902365][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.911020][ T8697] bond1: (slave wlan0): Releasing active interface
[  130.913122][ T8697] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  130.919047][ T8697] vlan2: entered promiscuous mode
[  130.930682][ T8697] bond1: (slave vlan2): Releasing active interface
[  130.933506][ T8697] vlan2: left promiscuous mode
[  130.936555][ T8697] veth1: left promiscuous mode
[  130.946375][ T8697] bond2: (slave ip6gretap1): Releasing active interface
[  130.949202][ T8697] bond2: (slave ip6gretap1): the permanent HWaddr of slave - c2:da:12:af:a1:ed - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  130.956318][ T8697] ip6gretap1: left promiscuous mode
[  130.961125][ T8697] bond2: (slave veth3): Releasing active interface
[  130.966672][ T8697] bond3: (slave macvlan2): Removing an active aggregator
[  130.972788][ T8697] bond3: (slave macvlan2): Releasing backup interface
[  131.318628][ T8712] netlink: 'syz.2.1222': attribute type 9 has an invalid length.
[  131.482568][ T8720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'.
[  131.567290][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.572790][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.592643][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.596830][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.613608][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.616864][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.628973][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.637586][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.861991][ T8740] syzkaller1: entered promiscuous mode
[  131.866675][ T8740] syzkaller1: entered allmulticast mode
[  131.993558][ T8748] netlink: 'syz.1.1240': attribute type 1 has an invalid length.
[  132.016561][ T8748] 8021q: adding VLAN 0 to HW filter on device bond4
[  132.028659][ T8748] bond4: (slave ip6erspan0): making interface the new active one
[  132.033853][ T8748] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[  132.102481][ T8754] wg1 speed is unknown, defaulting to 1000
[  132.120324][ T8744] block nbd0: server does not support multiple connections per device.
[  132.124278][ T8744] block nbd0: shutting down sockets
[  132.417695][ T8771] macsec2: entered promiscuous mode
[  132.426874][ T8771] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  132.433067][ T8771] macsec2: entered allmulticast mode
[  132.435591][ T8771] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  132.617833][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.623109][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.655455][ T8784] wg1 speed is unknown, defaulting to 1000
[  132.794208][ T8796] netlink: 'syz.0.1258': attribute type 32 has an invalid length.
[  132.977223][ T8812] vlan3: entered allmulticast mode
[  132.982669][ T8812] dummy0: entered allmulticast mode
[  133.038737][ T8814] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1262'.
[  133.096986][ T8816] sctp: [Deprecated]: syz.0.1263 (pid 8816) Use of int in maxseg socket option.
[  133.096986][ T8816] Use struct sctp_assoc_value instead
[  133.158416][ T8822] netlink: 'syz.1.1266': attribute type 30 has an invalid length.
[  133.447203][ T8839] smc: net device bond0 applied user defined pnetid SYZ0
[  133.451064][ T8839] smc: net device bond0 erased user defined pnetid SYZ0
[  133.799768][ T8867] trusted_key: syz.1.1288 sent an empty control message without MSG_MORE.
[  133.848096][ T8871] netlink: 'syz.1.1291': attribute type 1 has an invalid length.
[  134.173570][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'.
[  134.474170][ T8897] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  134.477413][ T8897] netdevsim netdevsim2 netdevsim2: left allmulticast mode
[  134.510098][ T8899] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1302'.
[  135.036801][ T8927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.044503][ T8927] syzkaller0: entered promiscuous mode
[  135.046677][ T8927] syzkaller0: entered allmulticast mode
[  135.064022][ T8927] tipc: Resetting bearer <eth:syzkaller0>
[  135.066626][ T8927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.071797][ T8926] tipc: Resetting bearer <eth:syzkaller0>
[  135.085194][ T8926] tipc: Disabling bearer <eth:syzkaller0>
[  135.231951][ T8935] netlink: 'syz.1.1320': attribute type 1 has an invalid length.
[  135.234570][ T8935] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1320'.
[  135.519397][ T8961] wg1 speed is unknown, defaulting to 1000
[  135.940369][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'.
[  136.373513][ T9002] nbd: socks must be embedded in a SOCK_ITEM attr
[  136.732909][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'.
[  136.792697][ T9014] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1355'.
[  136.890567][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'.
[  136.994049][ T9022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  137.057754][ T9026] bond0: entered promiscuous mode
[  137.060126][ T9026] bond0: left promiscuous mode
[  137.428825][ T9047] netlink: 'syz.1.1371': attribute type 15 has an invalid length.
[  138.116986][ T9099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.124647][ T9099] netlink: 'syz.0.1393': attribute type 1 has an invalid length.
[  138.127848][ T9099] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1393'.
[  138.577576][ T9118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1401'.
[  138.628276][ T9122] netlink: 'syz.0.1402': attribute type 29 has an invalid length.
[  138.810397][ T9137] netlink: 'syz.1.1410': attribute type 12 has an invalid length.
[  139.205078][ T9160] nbd: must specify a size in bytes for the device
[  139.856132][ T9209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.921132][ T9209] syzkaller0: entered promiscuous mode
[  139.923534][ T9209] syzkaller0: entered allmulticast mode
[  139.932062][ T9209] tipc: Resetting bearer <eth:syzkaller0>
[  139.952838][ T9208] tipc: Resetting bearer <eth:syzkaller0>
[  139.978668][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'.
[  141.077324][ T9208] tipc: Disabling bearer <eth:syzkaller0>
[  141.093530][ T9216] team0: entered promiscuous mode
[  141.096639][ T9216] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  141.102452][ T9216] team0: left promiscuous mode
[  141.531669][ T9237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1456'.
[  141.567248][ T9239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1457'.
[  141.578169][ T9239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1457'.
[  142.278900][ T9275] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1469'.
[  142.707617][ T9304] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.711729][ T9304] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.755554][ T9304] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.770843][ T9304] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.798626][ T9304] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.809933][ T9304] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.878679][ T9304] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.883264][ T9304] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.067322][ T5913] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  143.071868][ T5913] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.098427][ T5913] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  143.102350][ T5913] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.116222][ T5913] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  143.141275][ T5913] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.149420][ T5913] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  143.155287][ T5913] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.654732][ T9343] netlink: 'syz.2.1492': attribute type 24 has an invalid length.
[  143.657870][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1492'.
[  143.663515][ T9343] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  143.666657][ T9343] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  143.671598][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1493'.
[  143.714450][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'.
[  143.867126][ T9357] wg1 speed is unknown, defaulting to 1000
[  143.977786][ T9369] netlink: 'syz.0.1504': attribute type 13 has an invalid length.
[  144.144295][ T9377] syzkaller1: entered promiscuous mode
[  144.146258][ T9377] syzkaller1: entered allmulticast mode
[  144.453052][ T9397] netlink: 'syz.0.1516': attribute type 10 has an invalid length.
[  144.537902][ T9397] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  145.340316][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'.
[  145.641880][ T9449] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1541'.
[  145.645485][ T9449] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1541'.
[  145.738530][ T9457] TCP: TCP_TX_DELAY enabled
[  145.781659][ T9461] netlink: zone id is out of range
[  145.785894][ T9461] netlink: zone id is out of range
[  145.840947][ T9466] netlink: 'syz.0.1549': attribute type 1 has an invalid length.
[  145.886178][ T9467] netlink: del zone limit has 4 unknown bytes
[  145.895164][ T9461] netlink: set zone limit has 4 unknown bytes
[  146.267159][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.272210][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.719453][ T9526] gtp0: entered promiscuous mode
[  146.727312][ T9526] __nla_validate_parse: 3 callbacks suppressed
[  146.727329][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'.
[  146.864626][ T9530] netlink: 'syz.1.1576': attribute type 1 has an invalid length.
[  147.134011][ T9542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1587'.
[  147.162397][ T9544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1582'.
[  147.224071][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1585'.
[  147.293001][ T9551] nbd: socks must be embedded in a SOCK_ITEM attr
[  147.635245][ T9573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1594'.
[  147.639135][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1594'.
[  147.838886][ T9578] netlink: 'syz.0.1593': attribute type 1 has an invalid length.
[  147.843411][ T9578] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1593'.
[  147.847360][ T9578] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1593'.
[  147.848004][ T9581] tc_dump_action: action bad kind
[  148.626743][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'.
[  148.627612][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'.
[  148.787153][ T9612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.042257][ T9624] netlink: 'syz.1.1615': attribute type 1 has an invalid length.
[  149.070329][ T9624] 8021q: adding VLAN 0 to HW filter on device bond5
[  149.075960][ T9628] ip6_vti0: entered allmulticast mode
[  149.092711][ T9624] bond5: (slave geneve2): making interface the new active one
[  149.097136][ T9624] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  149.427675][ T9628] ip6_vti0: left allmulticast mode
[  149.821126][ T9661] pim6reg1: entered promiscuous mode
[  149.823371][ T9661] pim6reg1: entered allmulticast mode
[  150.488362][ T9683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.545354][ T9687] netlink: 'syz.1.1643': attribute type 4 has an invalid length.
[  150.747699][ T9703] bond4: (slave ip6erspan0): Releasing active interface
[  150.757052][ T9703] bond5: (slave geneve2): Releasing active interface
[  150.838056][ T9707] netlink: 'syz.1.1649': attribute type 10 has an invalid length.
[  150.858590][ T9707] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  151.712054][ T9752] netlink: 'syz.2.1673': attribute type 13 has an invalid length.
[  151.832202][ T9752] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  151.886170][ T9759] __nla_validate_parse: 6 callbacks suppressed
[  151.886188][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'.
[  151.892653][ T9759] chnl_net:caif_netlink_parms(): no params data found
[  152.008002][ T9765] netlink: 'syz.2.1678': attribute type 12 has an invalid length.
[  152.014425][ T9765] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1678'.
[  152.303225][ T9786] netlink: 'syz.2.1686': attribute type 1 has an invalid length.
[  152.305868][ T9786] netlink: 'syz.2.1686': attribute type 1 has an invalid length.
[  152.421855][ T9790] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1688'.
[  152.611071][ T9811] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  152.736183][ T9817] netlink: 'syz.0.1700': attribute type 1 has an invalid length.
[  152.739931][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1700'.
[  152.895922][ T9825] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  153.228192][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1713'.
[  153.268412][ T9849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1716'.
[  153.272194][ T9849] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1716'.
[  153.380032][ T9861] netlink: 'syz.0.1722': attribute type 1 has an invalid length.
[  153.382597][ T9861] netlink: 'syz.0.1722': attribute type 2 has an invalid length.
[  153.419126][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'.
[  153.847598][ T9908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1745'.
[  153.949693][ T9920] ieee802154 phy1 wpan1: encryption failed: -22
[  154.088903][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1753'.
[  154.537106][ T9960] netlink: 'syz.0.1767': attribute type 11 has an invalid length.
[  155.038243][T10006] validate_nla: 1 callbacks suppressed
[  155.038272][T10006] netlink: 'syz.0.1788': attribute type 37 has an invalid length.
[  155.120079][T10010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.123787][T10010] syzkaller0: entered promiscuous mode
[  155.126007][T10010] syzkaller0: entered allmulticast mode
[  155.184400][T10010] tipc: Resetting bearer <eth:syzkaller0>
[  155.190147][T10009] tipc: Resetting bearer <eth:syzkaller0>
[  155.217280][T10009] tipc: Disabling bearer <eth:syzkaller0>
[  155.351959][T10026] tipc: Enabled bearer <udp:syz0>, priority 26
[  155.677933][T10055] netlink: 'syz.0.1809': attribute type 20 has an invalid length.
[  155.682719][T10055] netlink: 'syz.0.1809': attribute type 20 has an invalid length.
[  155.826377][T10065] netlink: 'syz.0.1816': attribute type 6 has an invalid length.
[  156.134980][T10083] netlink: 'syz.1.1824': attribute type 2 has an invalid length.
[  156.252494][T10091] lo speed is unknown, defaulting to 1000
[  156.255728][T10091] lo speed is unknown, defaulting to 1000
[  156.258503][T10091] lo speed is unknown, defaulting to 1000
[  156.276611][T10091] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  156.313927][T10091] lo speed is unknown, defaulting to 1000
[  156.317457][T10091] lo speed is unknown, defaulting to 1000
[  156.328795][T10091] lo speed is unknown, defaulting to 1000
[  156.370022][T10091] netlink: 'syz.1.1829': attribute type 4 has an invalid length.
[  157.120431][T10142] __nla_validate_parse: 11 callbacks suppressed
[  157.120451][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1851'.
[  157.134543][ T5312] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  157.139694][ T5312] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  157.175391][ T5312] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  157.348757][T10157] tap0: tun_chr_ioctl cmd 35108
[  157.488293][T10166] lo speed is unknown, defaulting to 1000
[  157.928658][T10183] lo speed is unknown, defaulting to 1000
[  157.972423][T10186] lo speed is unknown, defaulting to 1000
[  158.055239][T10183] netlink: 'syz.2.1860': attribute type 1 has an invalid length.
[  158.058456][T10183] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1860'.
[  158.086823][T10183] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.292743][T10204] netlink: 'syz.0.1865': attribute type 1 has an invalid length.
[  158.376071][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'.
[  158.517787][T10218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1872'.
[  159.089032][T10261] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  159.243632][T10274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.247365][T10274] syzkaller0: entered promiscuous mode
[  159.253020][T10274] syzkaller0: entered allmulticast mode
[  159.280446][T10274] tipc: Resetting bearer <eth:syzkaller0>
[  159.286264][T10273] tipc: Resetting bearer <eth:syzkaller0>
[  159.298001][T10273] tipc: Disabling bearer <eth:syzkaller0>
[  159.426224][T10287] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  159.429805][T10287] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  159.914148][T10326] bond0: option arp_validate: invalid value (18446744073491447809)
[  159.917682][ T5932] bond0: (slave dummy0): interface is now down
[  159.929386][T10321] lo speed is unknown, defaulting to 1000
[  159.940508][ T5894] bond0: (slave dummy0): interface is now down
[  159.959730][ T5894] bond0: (slave dummy0): interface is now down
[  159.984669][ T5894] bond0: (slave dummy0): interface is now down
[  160.003271][T10329] netlink: 'syz.1.1925': attribute type 12 has an invalid length.
[  160.009957][ T5894] bond0: (slave dummy0): interface is now down
[  160.030262][ T5894] bond0: (slave dummy0): interface is now down
[  160.035011][ T5894] bond0: now running without any active interface!
[  160.592604][T10365] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  160.845181][T10371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  160.991169][T10384] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1947'.
[  160.995009][T10384] nbd: illegal input index 65508
[  161.643114][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'.
[  161.697962][T10416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1960'.
[  161.732499][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1961'.
[  161.854873][T10428] ieee802154 phy1 wpan1: encryption failed: -22
[  161.857438][T10428] ieee802154 phy1 wpan1: encryption failed: -22
[  161.922757][T10434] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  161.965376][T10436] netlink: 'syz.2.1970': attribute type 1 has an invalid length.
[  162.097593][T10450] netlink: 'syz.2.1977': attribute type 6 has an invalid length.
[  162.104144][T10450] netlink: 'syz.2.1977': attribute type 6 has an invalid length.
[  162.469270][T10487] tipc: Resetting bearer <ib:ip6gre0>
[  162.500510][T10487] bridge0: left promiscuous mode
[  162.573357][T10487] veth0_to_bond: left allmulticast mode
[  162.670374][T10504] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  162.673856][T10504] netlink: 'syz.1.1996': attribute type 2 has an invalid length.
[  162.737309][T10487] bond2: left promiscuous mode
[  162.782111][T10489] bond0: (slave wlan1): Releasing backup interface
[  162.804661][T10493] team0: Mode changed to "broadcast"
[  162.823956][T10498] vlan0: entered promiscuous mode
[  162.872781][T10498] team0: Port device vlan0 added
[  162.879899][ T5932] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.883427][ T5932] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.887742][ T5932] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.893788][ T5932] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.898229][T10501] tipc: Enabled bearer <eth:team0>, priority 0
[  162.914717][ T5932] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.920924][ T5932] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.923510][ T5932] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.930520][ T5932] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.124040][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2008'.
[  163.250998][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'.
[  163.526097][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'.
[  163.747062][T10585] lo speed is unknown, defaulting to 1000
[  163.951950][T10596] sock: sock_timestamping_bind_phc: sock not bind to device
[  164.489424][T10619] netlink: 'syz.1.2050': attribute type 2 has an invalid length.
[  164.737848][T10625] dummy0: entered allmulticast mode
[  164.862779][T10638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2059'.
[  164.923593][T10639] lo speed is unknown, defaulting to 1000
[  165.881492][T10662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.884739][T10662] syzkaller0: entered promiscuous mode
[  165.886690][T10662] syzkaller0: entered allmulticast mode
[  165.911649][T10662] tipc: Resetting bearer <eth:syzkaller0>
[  165.918608][T10661] tipc: Resetting bearer <eth:syzkaller0>
[  165.943311][T10661] tipc: Disabling bearer <eth:syzkaller0>
[  166.037480][T10670] bond0: (slave dummy0): Releasing backup interface
[  166.043429][T10670] batman_adv: batadv0: Adding interface: dummy0
[  166.045947][T10670] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.055959][T10670] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  166.146491][T10674] netlink: 'syz.0.2073': attribute type 10 has an invalid length.
[  166.497432][T10693] siw: device registration error -23
[  166.722924][T10699] lo speed is unknown, defaulting to 1000
[  167.028353][T10702] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  167.427136][T10733] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  167.498928][T10740] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2101'.
[  167.538851][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2102'.
[  167.621822][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'.
[  167.643873][T10748] netlink: 'syz.1.2105': attribute type 23 has an invalid length.
[  167.831996][T10759] syzkaller1: entered promiscuous mode
[  167.834454][T10759] syzkaller1: entered allmulticast mode
[  168.100767][T10779] netlink: 'syz.1.2118': attribute type 1 has an invalid length.
[  168.203202][T10789] netlink: 'syz.0.2122': attribute type 10 has an invalid length.
[  168.208429][T10789] 8021q: adding VLAN 0 to HW filter on device team0
[  168.212976][T10789] bond0: (slave team0): Enslaving as an active interface with a down link
[  168.262482][T10793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2124'.
[  168.271012][T10793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2124'.
[  168.334833][T10799] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  168.396519][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'.
[  168.785435][T10835] batadv1: entered promiscuous mode
[  168.787435][T10835] batadv1: entered allmulticast mode
[  169.178631][T10861] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2154'.
[  169.449968][T10892] lo speed is unknown, defaulting to 1000
[  170.195942][T10942] bond6: entered promiscuous mode
[  170.198324][T10942] 8021q: adding VLAN 0 to HW filter on device bond6
[  170.213386][T10947] netlink: 'syz.0.2193': attribute type 8 has an invalid length.
[  170.406651][T10966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2201'.
[  170.427903][T10968] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  170.471007][T10961] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  170.544353][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2205'.
[  170.577380][T10977] netlink: 'syz.1.2206': attribute type 4 has an invalid length.
[  170.588376][T10977] netlink: 'syz.1.2206': attribute type 4 has an invalid length.
[  170.597946][ T5908] Bluetooth: hci2: link tx timeout
[  170.600779][ T5908] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  170.613750][ T5312] lo speed is unknown, defaulting to 1000
[  170.616267][ T5312] syz2: Port: 1 Link ACTIVE
[  170.730936][T10991] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.2212'.
[  170.769757][T10994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2213'.
[  170.773673][T10994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2213'.
[  171.011965][   T54] Bluetooth: hci2: link tx timeout
[  171.013914][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  171.021118][   T54] Bluetooth: hci2: link tx timeout
[  171.023337][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  171.073693][   T54] Bluetooth: hci2: link tx timeout
[  171.075856][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  171.112098][   T54] Bluetooth: hci2: link tx timeout
[  171.113771][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  171.387331][   T54] Bluetooth: hci2: link tx timeout
[  171.389441][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  171.527675][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2229'.
[  171.549873][T11045] netlink: 'syz.2.2229': attribute type 6 has an invalid length.
[  171.891650][   T54] Bluetooth: hci2: link tx timeout
[  171.893797][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  171.904915][T11088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.004552][T11096] netlink: 'syz.1.2254': attribute type 1 has an invalid length.
[  172.054543][T11096] bond7: (slave gretap1): making interface the new active one
[  172.058195][T11096] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  172.063264][   T54] Bluetooth: hci2: link tx timeout
[  172.065564][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.073067][T11096] vlan3: entered allmulticast mode
[  172.074657][T11096] bond7: entered allmulticast mode
[  172.076164][T11096] gretap1: entered allmulticast mode
[  172.082069][T11096] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  172.417879][T11126] IPVS: stopping backup sync thread 11127 ...
[  172.420061][T11127] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  172.609992][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  172.842748][T11157] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  173.001779][T11169] netlink: 'syz.1.2286': attribute type 1 has an invalid length.
[  173.026308][T11169] 8021q: adding VLAN 0 to HW filter on device bond8
[  173.308801][T11193] __nla_validate_parse: 11 callbacks suppressed
[  173.308816][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2297'.
[  173.328453][T11195] netlink: 'syz.2.2298': attribute type 1 has an invalid length.
[  173.337978][T11195] netlink: 'syz.2.2298': attribute type 1 has an invalid length.
[  173.341050][T11195] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2298'.
[  173.569896][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  173.698165][T11217] lo speed is unknown, defaulting to 1000
[  174.206790][T11251] vxcan4: entered allmulticast mode
[  174.505117][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2331'.
[  174.619649][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  174.850480][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'.
[  174.990501][T11291] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2338'.
[  175.070624][T11295] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2340'.
[  175.073859][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'.
[  175.076826][T11295] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2340'.
[  175.368496][T11317] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2350'.
[  175.657230][T11336] openvswitch: netlink: IPv4 tun info is not correct
[  175.660249][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  175.718058][T11340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2362'.
[  175.750222][T11341] sctp: [Deprecated]: syz.2.2361 (pid 11341) Use of int in max_burst socket option deprecated.
[  175.750222][T11341] Use struct sctp_assoc_value instead
[  176.103668][T11367] netlink: 'syz.0.2375': attribute type 16 has an invalid length.
[  176.582311][T11387] lo speed is unknown, defaulting to 1000
[  176.689706][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  177.237962][T11418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.729719][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  177.740775][T11452] netlink: 'syz.0.2412': attribute type 23 has an invalid length.
[  177.838704][T11458] netlink: 'syz.2.2414': attribute type 4 has an invalid length.
[  177.841372][T11457] netlink: 'syz.0.2415': attribute type 1 has an invalid length.
[  177.996846][T11472] netlink: 'syz.0.2422': attribute type 5 has an invalid length.
[  178.233290][T11485] lo speed is unknown, defaulting to 1000
[  178.295155][T11496] netlink: 'syz.2.2432': attribute type 1 has an invalid length.
[  178.344912][T11495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.348435][T11495] syzkaller0: entered promiscuous mode
[  178.353969][T11495] syzkaller0: entered allmulticast mode
[  178.393826][T11501] tipc: MTU too low for tipc bearer
[  178.426846][T11495] tipc: Resetting bearer <eth:syzkaller0>
[  178.434433][T11493] tipc: Resetting bearer <eth:syzkaller0>
[  178.468958][T11493] tipc: Disabling bearer <eth:syzkaller0>
[  178.492255][T11506] netlink: zone id is out of range
[  178.496438][T11506] netlink: zone id is out of range
[  178.511727][T11506] netlink: zone id is out of range
[  178.514119][T11506] netlink: zone id is out of range
[  178.570190][T11511] __nla_validate_parse: 20 callbacks suppressed
[  178.570204][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2440'.
[  178.578672][T11513] netlink: del zone limit has 4 unknown bytes
[  178.605041][T11506] netlink: set zone limit has 4 unknown bytes
[  178.625990][T11512] netlink: 452 bytes leftover after parsing attributes in process `syz.0.2439'.
[  178.769750][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  178.815705][T11522] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2442'.
[  178.819143][T11522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2442'.
[  179.015624][T11528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.019367][T11528] syzkaller0: entered promiscuous mode
[  179.022125][T11528] syzkaller0: entered allmulticast mode
[  179.046912][T11528] tipc: Resetting bearer <eth:syzkaller0>
[  179.055307][T11527] tipc: Resetting bearer <eth:syzkaller0>
[  179.074889][T11527] tipc: Disabling bearer <eth:syzkaller0>
Connection to localhost closed by remote host.
[  179.819598][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  180.958961][ T5744] bond0 (unregistering): Released all slaves
[  181.067462][ T5744] bond1 (unregistering): Released all slaves
[  181.144661][ T5744] k*]: left promiscuous mode
[  181.213650][ T5744] : left promiscuous mode
[  181.267689][ T5744] tipc: Disabling bearer <udp:syz2>
[  181.269849][ T5744] tipc: Disabling bearer <udp:syz>
[  181.272111][ T5744] tipc: Left network mode
[  181.517915][ T5744] hsr_slave_0: left promiscuous mode
[  181.521042][ T5744] hsr_slave_1: left promiscuous mode
[  181.524667][ T5744] batman_adv: batadv0: Removing interface: virt_wifi0
[  182.050361][ T5744] dummy0 (unregistering): left allmulticast mode
[  182.434135][ T5744] IPVS: stop unused estimator thread 0...
[  194.063109][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
16:20:15  Registers:
info registers vcpu 0

CPU#0
RAX=66b956e7846d5f00 RBX=ffffffff819683f8 RCX=66b956e7846d5f00 RDX=0000000000000001
RSI=ffffffff8d9b9d08 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdf7e5fb58 CR3=0000000109af2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=000000000000013a 000030682f32622f
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 00000000000000ff
XMM08=ffffffffffff0000 ffff000000000000 XMM09=74656e2f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=768db520d9663c00 RBX=ffffffff819683f8 RCX=768db520d9663c00 RDX=0000000000000001
RSI=ffffffff8d9b9d08 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb8be3986c0 CR3=00000000293f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000500000071 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=000000000000013a 000030682f32622f
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 00000000000000ff
XMM08=ffffffffffff0000 ffff000000000000 XMM09=74656e2f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
